last executing test programs: 12.269584427s ago: executing program 1 (id=476): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresuid(0xee01, 0xee01, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f0000000200)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) 11.402865619s ago: executing program 2 (id=477): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r1, 0xffffffffffffffff, 0x33, 0x0, @void}, 0x10) r2 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x14b000) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000300)=@ipv6_getaddr={0x18, 0x16, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20}}, 0x18}}, 0x800) r4 = epoll_create1(0x0) r5 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000002c0)={0xa002a014}) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000104010200000000000000000100000108000440000000070500010001"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4c000) 10.661839317s ago: executing program 1 (id=478): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0300000002"], 0x48) 10.622066848s ago: executing program 2 (id=479): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="20000000160007c3999dbf00fedbdf251f7c00000c00018008000100", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x8010) socketpair$unix(0x1, 0x2, 0x0, 0x0) 9.066943076s ago: executing program 1 (id=480): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), 0xffffffffffffffff) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 8.082830401s ago: executing program 2 (id=483): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x801fffff, 0x8, 0xfffbfffc}, 0x10) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0xe8001, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x325) write(r0, &(0x7f0000000300)="1c0000001a005f4214f9f407000904ff81000000fe00000000000000", 0x1c) syz_emit_ethernet(0x9a, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) unshare(0x20040600) socket(0x24, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x2000c000) 7.978787043s ago: executing program 2 (id=485): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x40044160, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x11) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r0, 0x40, 0x41d9fda7) setpriority(0x0, r0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) r2 = syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) exit(0x8) wait4(r2, 0x0, 0x8, 0x0) 7.27827516s ago: executing program 0 (id=491): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 6.394654002s ago: executing program 2 (id=493): syz_extract_tcp_res(&(0x7f0000000180), 0x6cc9, 0x203) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg(r2, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000480)=""/4088, 0xff8}], 0x1}, 0x1}], 0x1, 0x40000001, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000500000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.382524233s ago: executing program 1 (id=494): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5ce000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x1, 0x0) mlock(&(0x7f000051e000/0x4000)=nil, 0x4000) munlockall() 6.280756155s ago: executing program 0 (id=495): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x6}, 0x28) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/51, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 4.781680762s ago: executing program 1 (id=496): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0xfffffef0) 4.733296053s ago: executing program 3 (id=497): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8cdf40c050023eb3dec9c37865c6c1b4640ce2400bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c487b257ffb3baf7709f49f6dcfd54f11ed2c41d078b9c6153c97ffdc11f30ea6b16b694bb4a6e4606c3fb19d1d2bcd6850d00ca7df0355808390666e827d61dcc3a633bb0b1250b5a293e3877add5a1b44b99c9febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40168e528329d97afc3612e325c1eb49bab2e156a9744480000000000000000001b00", "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"}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(r0, 0x0, &(0x7f0000000000)={0x2, 0x3, 0xfffffffffffffffb, 0xd97}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.485177629s ago: executing program 2 (id=498): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) unshare(0x62020600) unshare(0x42040400) 4.371013322s ago: executing program 3 (id=499): prlimit64(0x0, 0x8, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r0, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000040)=0x40, 0x4) recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000200000000020000000900020073797a3100000000080004"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1e8}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 3.779483647s ago: executing program 0 (id=500): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x40000000015, 0x805, 0x0) getsockopt(r3, 0x114, 0x271d, 0x0, 0x0) 2.103631818s ago: executing program 0 (id=501): r0 = socket$inet6(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00'}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x400, &(0x7f0000000280)={[{@nogrpid}, {@noload}]}, 0x2, 0x786, &(0x7f0000000f80)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x2cf2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) sendfile(r3, r3, 0x0, 0x7a680000) mount(0x0, &(0x7f00000009c0)='.\x00', 0x0, 0x22be836, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) write$char_usb(0xffffffffffffffff, 0x0, 0x0) 1.818995435s ago: executing program 3 (id=502): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socket$kcm(0x10, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x98, 0x30, 0x9, 0x0, 0x0, {}, [{0x84, 0x1, [@m_bpf={0x80, 0x1, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{0x60}, {}, {0x3}, {}, {}, {}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) pipe2(&(0x7f0000000040), 0x800) r1 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd, 0xf8, 0x0, 0x0, 0x11, 0x1}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) 1.472655173s ago: executing program 3 (id=503): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x240000, 0xf9) pipe2$9p(&(0x7f00000001c0), 0x0) socket(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet(0x2, 0x802, 0x1) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x36f, 0x9) 1.361090186s ago: executing program 0 (id=504): socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_freeze_timeout', 0x800, 0x4) read$char_usb(r1, &(0x7f0000000040)=""/236, 0xec) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) 110.992427ms ago: executing program 0 (id=505): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@broadcast, 0x4e21, 0x4, 0x0, 0x0, 0xa, 0x60, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x4001, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x8}, 0x9, 0x0, 0x0, 0x1, 0x2, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 110.652807ms ago: executing program 3 (id=506): r0 = syz_open_dev$vbi(&(0x7f0000000100), 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x358, 0xffff8881f5c0a000) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000000c0)={0x0, 0x1, 0x40000000, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x98f905, 0xffffbffd, '\x00', @p_u16=0x0}}) 21.692509ms ago: executing program 3 (id=507): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) remap_file_pages(&(0x7f00003e3000/0x7000)=nil, 0x7000, 0x0, 0x4, 0x1000) r0 = io_uring_setup(0x5594, &(0x7f0000000100)={0x0, 0x10000000, 0x1, 0x1, 0x21e}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0369e269b7, 0x8031, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB], 0x0}, 0x94) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./file2\x00', 0x1000000, &(0x7f00000000c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socket(0x10, 0x803, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 0s ago: executing program 1 (id=508): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x6}, 0x28) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x4e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/51, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 0s ago: executing program 0 (id=509): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x4fbee}, 0x13, 0x0, 0x3, 0x7, 0x10, 0x4, 0x17, 0x18, 0x5, 0x2, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.115' (ED25519) to the list of known hosts. [ 73.709231][ T5766] cgroup: Unknown subsys name 'net' [ 73.846126][ T5766] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.200599][ T5766] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.655173][ T5790] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.663737][ T5790] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.688050][ T5789] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.696484][ T5788] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.705699][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.711913][ T5791] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.713802][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.721082][ T5791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.730088][ T5789] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.735066][ T5791] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.742454][ T5788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.751012][ T5791] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.756283][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.764072][ T5791] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.771825][ T5789] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.777558][ T5791] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.785342][ T5788] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.801122][ T5791] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.801801][ T5789] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.816694][ T5791] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.818219][ T5789] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.824727][ T5788] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.834813][ T5789] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.849239][ T5789] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.350706][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 77.393034][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 77.421426][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 77.438526][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 77.565873][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.573777][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.581407][ T5779] bridge_slave_0: entered allmulticast mode [ 77.588230][ T5779] bridge_slave_0: entered promiscuous mode [ 77.623932][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.631803][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.640013][ T5779] bridge_slave_1: entered allmulticast mode [ 77.646693][ T5779] bridge_slave_1: entered promiscuous mode [ 77.706131][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.715224][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.722757][ T5781] bridge_slave_0: entered allmulticast mode [ 77.730385][ T5781] bridge_slave_0: entered promiscuous mode [ 77.738113][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.746158][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.753725][ T5781] bridge_slave_1: entered allmulticast mode [ 77.761150][ T5781] bridge_slave_1: entered promiscuous mode [ 77.768122][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.776408][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.786453][ T5780] bridge_slave_0: entered allmulticast mode [ 77.794210][ T5780] bridge_slave_0: entered promiscuous mode [ 77.803128][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.811251][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.819154][ T5780] bridge_slave_1: entered allmulticast mode [ 77.826372][ T5780] bridge_slave_1: entered promiscuous mode [ 77.845020][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.854692][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.862307][ T5778] bridge_slave_0: entered allmulticast mode [ 77.869219][ T5778] bridge_slave_0: entered promiscuous mode [ 77.901228][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.915229][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.925037][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.932930][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.940397][ T5778] bridge_slave_1: entered allmulticast mode [ 77.947170][ T5778] bridge_slave_1: entered promiscuous mode [ 78.014366][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.029284][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.044289][ T5779] team0: Port device team_slave_0 added [ 78.056246][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.068000][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.088102][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.107650][ T5779] team0: Port device team_slave_1 added [ 78.116199][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.176319][ T5781] team0: Port device team_slave_0 added [ 78.187847][ T5780] team0: Port device team_slave_0 added [ 78.196680][ T5778] team0: Port device team_slave_0 added [ 78.207322][ T5778] team0: Port device team_slave_1 added [ 78.223614][ T5781] team0: Port device team_slave_1 added [ 78.233715][ T5780] team0: Port device team_slave_1 added [ 78.251746][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.258757][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.286413][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.301007][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.308001][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.334564][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.424944][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.432219][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.466172][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.480747][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.488180][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.516576][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.528548][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.538646][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.568464][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.587573][ T5779] hsr_slave_0: entered promiscuous mode [ 78.594804][ T5779] hsr_slave_1: entered promiscuous mode [ 78.604467][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.612042][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.639123][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.656673][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.664199][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.690813][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.703293][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.710456][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.737064][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.828326][ T5781] hsr_slave_0: entered promiscuous mode [ 78.835302][ T5781] hsr_slave_1: entered promiscuous mode [ 78.841950][ T5789] Bluetooth: hci3: command tx timeout [ 78.848196][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.856231][ T5781] Cannot create hsr debugfs directory [ 78.876178][ T5778] hsr_slave_0: entered promiscuous mode [ 78.883604][ T5778] hsr_slave_1: entered promiscuous mode [ 78.890063][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.898959][ T5778] Cannot create hsr debugfs directory [ 78.920176][ T5787] Bluetooth: hci2: command tx timeout [ 78.928118][ T5785] Bluetooth: hci0: command tx timeout [ 78.935990][ T5789] Bluetooth: hci1: command tx timeout [ 78.977745][ T5780] hsr_slave_0: entered promiscuous mode [ 78.987049][ T5780] hsr_slave_1: entered promiscuous mode [ 78.994324][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.002659][ T5780] Cannot create hsr debugfs directory [ 79.364479][ T5779] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.378089][ T5779] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.391725][ T5779] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.404175][ T5779] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.472333][ T5781] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.497462][ T5781] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.527310][ T5781] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.550903][ T5781] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.605361][ T5780] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.615480][ T5780] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.628487][ T5780] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.639453][ T5780] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.776202][ T5778] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.786615][ T5778] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.810275][ T5778] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.824707][ T5778] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.846710][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.867677][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.886726][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.923917][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.932111][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.962047][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.969299][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.996242][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.009456][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.044494][ T3562] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.052225][ T3562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.072064][ T3562] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.079455][ T3562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.114489][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.144699][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.153138][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.186685][ T5779] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.208319][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.216228][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.348813][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.428953][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.494420][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.503294][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.533709][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.541022][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.662705][ T5778] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.758040][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.786465][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.839209][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.917414][ T5779] veth0_vlan: entered promiscuous mode [ 80.924809][ T5789] Bluetooth: hci3: command tx timeout [ 80.935101][ T5780] veth0_vlan: entered promiscuous mode [ 80.962650][ T5780] veth1_vlan: entered promiscuous mode [ 80.983870][ T5779] veth1_vlan: entered promiscuous mode [ 81.000590][ T5789] Bluetooth: hci1: command tx timeout [ 81.006048][ T5789] Bluetooth: hci0: command tx timeout [ 81.012222][ T5785] Bluetooth: hci2: command tx timeout [ 81.096645][ T5779] veth0_macvtap: entered promiscuous mode [ 81.115473][ T5780] veth0_macvtap: entered promiscuous mode [ 81.122787][ T5781] veth0_vlan: entered promiscuous mode [ 81.134250][ T5780] veth1_macvtap: entered promiscuous mode [ 81.158575][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.173378][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.186520][ T5779] veth1_macvtap: entered promiscuous mode [ 81.214644][ T5781] veth1_vlan: entered promiscuous mode [ 81.225712][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.248628][ T5780] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.258815][ T5780] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.268023][ T5780] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.276855][ T5780] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.297798][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.313234][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.326429][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.351405][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.364731][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.381518][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.423190][ T5779] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.434560][ T5779] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.444854][ T5779] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.453968][ T5779] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.513696][ T5781] veth0_macvtap: entered promiscuous mode [ 81.535882][ T5781] veth1_macvtap: entered promiscuous mode [ 81.589091][ T3432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.603468][ T3432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.648968][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.664220][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.675866][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.686456][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.698659][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.729567][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.746716][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.758843][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.772714][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.784034][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.794278][ T5778] veth0_vlan: entered promiscuous mode [ 81.840157][ T3562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.843356][ T5781] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.849712][ T3562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.862169][ T5781] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.873827][ T5781] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.885259][ T5781] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.926967][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.942339][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.964118][ T5778] veth1_vlan: entered promiscuous mode [ 82.050884][ T3432] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.058776][ T3432] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.091931][ T2912] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.110654][ T2912] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.202645][ T3432] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.221661][ T5778] veth0_macvtap: entered promiscuous mode [ 82.231495][ T3432] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.253628][ T5778] veth1_macvtap: entered promiscuous mode [ 82.304024][ T5838] syzkaller0: entered promiscuous mode [ 82.312619][ T5838] syzkaller0: entered allmulticast mode [ 82.413121][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.426578][ T5842] capability: warning: `syz.3.5' uses 32-bit capabilities (legacy support in use) [ 82.452607][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.462742][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.473871][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.484357][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.504879][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.518236][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.588420][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.616732][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.633485][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.666763][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.719750][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.741638][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.756598][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.808450][ T5778] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.826677][ T5778] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.837646][ T5778] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.855976][ T5778] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.871368][ T5846] syzkaller0: entered promiscuous mode [ 82.877267][ T5846] syzkaller0: entered allmulticast mode [ 83.040020][ T5789] Bluetooth: hci3: command tx timeout [ 83.120283][ T5789] Bluetooth: hci0: command tx timeout [ 83.120301][ T5787] Bluetooth: hci2: command tx timeout [ 83.125869][ T5789] Bluetooth: hci1: command tx timeout [ 84.385131][ T5869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11'. [ 84.399174][ T5869] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.408731][ T5869] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.418241][ T5869] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.427633][ T5869] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.493792][ T5873] xt_SECMARK: invalid mode: 2 [ 84.768409][ T5869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11'. [ 85.030647][ T5869] Zero length message leads to an empty skb [ 85.084031][ T5787] Bluetooth: hci3: command tx timeout [ 85.167262][ T5785] Bluetooth: hci0: command tx timeout [ 85.173718][ T5789] Bluetooth: hci2: command tx timeout [ 85.181486][ T5787] Bluetooth: hci1: command tx timeout [ 85.302439][ T3562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.344099][ T3562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.461810][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.496969][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.536827][ T5885] veth3: entered promiscuous mode [ 85.548210][ T5885] veth3: entered allmulticast mode [ 85.593550][ T5881] netlink: 'syz.2.15': attribute type 1 has an invalid length. [ 85.692886][ T5888] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 86.048556][ T5889] syzkaller0: entered promiscuous mode [ 86.239871][ T5889] syzkaller0: entered allmulticast mode [ 86.643830][ T5897] vlan2: entered allmulticast mode [ 86.649033][ T5897] veth0_to_bond: entered allmulticast mode [ 86.738038][ T5901] netlink: 24 bytes leftover after parsing attributes in process `syz.2.20'. [ 86.757534][ T5902] syz.3.19[5902]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 86.807697][ T5902] loop3: detected capacity change from 0 to 512 [ 86.828678][ T5902] ======================================================= [ 86.828678][ T5902] WARNING: The mand mount option has been deprecated and [ 86.828678][ T5902] and is ignored by this kernel. Remove the mand [ 86.828678][ T5902] option from the mount to silence this warning. [ 86.828678][ T5902] ======================================================= [ 86.893992][ T5905] syzkaller0: entered promiscuous mode [ 86.900828][ T5905] syzkaller0: entered allmulticast mode [ 87.005219][ T5902] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.021106][ T5902] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.314574][ T5920] loop1: detected capacity change from 0 to 8 [ 88.507102][ T5920] SQUASHFS error: zstd decompression failed, data probably corrupt [ 88.559415][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.714393][ T5920] SQUASHFS error: Failed to read block 0x4ec: -5 [ 88.800618][ T5920] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 88.902934][ T5920] SQUASHFS error: Unable to read inode 0x2011f [ 89.869612][ C0] sched: RT throttling activated [ 90.661257][ T5934] loop3: detected capacity change from 0 to 128 [ 90.857868][ T5934] syz.3.29: attempt to access beyond end of device [ 90.857868][ T5934] loop3: rw=2049, sector=145, nr_sectors = 79 limit=128 [ 91.030734][ T5934] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.137977][ T5933] syz.3.29: attempt to access beyond end of device [ 91.137977][ T5933] loop3: rw=524288, sector=145, nr_sectors = 79 limit=128 [ 91.212999][ T5935] syz.3.29: attempt to access beyond end of device [ 91.212999][ T5935] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 91.229547][ T5935] syz.3.29: attempt to access beyond end of device [ 91.229547][ T5935] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 91.257092][ T5935] syz.3.29: attempt to access beyond end of device [ 91.257092][ T5935] loop3: rw=0, sector=151, nr_sectors = 1 limit=128 [ 91.991370][ T5953] loop1: detected capacity change from 0 to 1024 [ 92.524227][ T789] cfg80211: failed to load regulatory.db [ 92.657891][ T5956] netlink: 'syz.0.35': attribute type 1 has an invalid length. [ 92.895985][ T5956] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 92.913790][ T5958] macvlan2: entered promiscuous mode [ 92.936605][ T5958] macvlan2: entered allmulticast mode [ 92.943891][ T5958] bond0: entered promiscuous mode [ 92.948970][ T5958] bond_slave_0: entered promiscuous mode [ 92.955529][ T5958] bond_slave_1: entered promiscuous mode [ 92.961823][ T5958] veth0_to_bond: entered promiscuous mode [ 92.968665][ T5958] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 93.107648][ T5958] bond0: left promiscuous mode [ 93.303822][ T5958] bond_slave_0: left promiscuous mode [ 93.463940][ T5958] bond_slave_1: left promiscuous mode [ 93.697755][ T5958] veth0_to_bond: left promiscuous mode [ 93.722035][ T5969] fuse: Bad value for 'fd' [ 93.758262][ T5956] syz.0.35 (5956) used greatest stack depth: 19880 bytes left [ 97.030076][ T6005] netlink: 'syz.1.49': attribute type 1 has an invalid length. [ 97.196619][ T6005] macvlan2: entered promiscuous mode [ 97.202144][ T6005] macvlan2: entered allmulticast mode [ 98.007398][ T6012] netlink: 24 bytes leftover after parsing attributes in process `syz.3.51'. [ 98.045086][ T6014] loop1: detected capacity change from 0 to 128 [ 98.116651][ T6014] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 98.159432][ T6014] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.254502][ T28] audit: type=1804 audit(1785425308.821:2): pid=6014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.52" name="/newroot/13/file1/bus" dev="loop1" ino=12 res=1 errno=0 [ 98.793167][ T6032] netlink: 4 bytes leftover after parsing attributes in process `syz.3.56'. [ 98.868312][ T6032] netlink: 4 bytes leftover after parsing attributes in process `syz.3.56'. [ 98.930797][ T6032] netlink: 4 bytes leftover after parsing attributes in process `syz.3.56'. [ 99.094275][ T6038] loop3: detected capacity change from 0 to 2048 [ 99.137494][ T6038] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 99.293596][ T28] audit: type=1800 audit(1785425309.861:3): pid=6038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.58" name="bus" dev="loop3" ino=1367 res=0 errno=0 [ 100.064203][ T6045] loop2: detected capacity change from 0 to 128 [ 100.161474][ T5780] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 100.496953][ T6049] loop1: detected capacity change from 0 to 512 [ 100.555555][ T6049] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.60: bg 0: block 5: invalid block bitmap [ 100.587439][ T6045] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 100.607002][ T6049] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 100.620190][ T6045] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 100.688996][ T6049] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.60: invalid indirect mapped block 3 (level 2) [ 100.761979][ T6049] EXT4-fs (loop1): 1 orphan inode deleted [ 100.780352][ T6049] EXT4-fs (loop1): 1 truncate cleaned up [ 100.825417][ T6049] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.798495][ T5781] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 101.879501][ T6049] netlink: 'syz.1.60': attribute type 12 has an invalid length. [ 103.457406][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.990531][ T6077] syzkaller0: entered promiscuous mode [ 104.005976][ T6077] syzkaller0: entered allmulticast mode [ 104.364512][ T6092] loop3: detected capacity change from 0 to 512 [ 104.378941][ T6092] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 104.403968][ T6085] bridge_slave_0: left allmulticast mode [ 104.416780][ T6085] bridge_slave_0: left promiscuous mode [ 104.417297][ T6092] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.72: iget: bad i_size value: 38620345925642 [ 104.426279][ T6085] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.454850][ T6085] bridge_slave_1: left allmulticast mode [ 104.460807][ T6085] bridge_slave_1: left promiscuous mode [ 104.466634][ T6085] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.498968][ T6092] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.72: couldn't read orphan inode 15 (err -117) [ 104.515658][ T6085] bond0: (slave bond_slave_0): Releasing backup interface [ 104.584095][ T6092] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.618667][ T6085] bond0: (slave bond_slave_1): Releasing backup interface [ 104.716309][ T6085] team0: Port device team_slave_0 removed [ 104.724887][ T28] audit: type=1800 audit(1785425315.291:4): pid=6101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.72" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 104.757681][ T6085] team0: Port device team_slave_1 removed [ 104.770786][ T6085] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.776608][ T6104] loop1: detected capacity change from 0 to 512 [ 104.778691][ T6085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.806081][ T6085] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.816577][ T6104] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 104.826673][ T6085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.828969][ T6104] System zones: 0-2, 18-18, 34-35 [ 104.850081][ T6104] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.877295][ T6104] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.878143][ T6088] team0: Mode changed to "activebackup" [ 104.961035][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.016011][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.240801][ T6116] netlink: 'syz.3.79': attribute type 1 has an invalid length. [ 105.281003][ T6116] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.291981][ T6119] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 105.338511][ T6116] bond1: (slave gretap1): making interface the new active one [ 105.349374][ T6116] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 105.413112][ T6116] syz.3.79 (6116) used greatest stack depth: 19528 bytes left [ 105.469392][ T6122] loop3: detected capacity change from 0 to 512 [ 105.530861][ T6122] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.572647][ T6122] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.749672][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.951766][ T6152] loop2: detected capacity change from 0 to 2048 [ 108.025230][ T6152] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 108.291372][ T28] audit: type=1800 audit(1785425318.771:5): pid=6152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.90" name="bus" dev="loop2" ino=1367 res=0 errno=0 [ 111.509659][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 114.750842][ T6206] loop0: detected capacity change from 0 to 128 [ 114.836427][ T6206] syz.0.100: attempt to access beyond end of device [ 114.836427][ T6206] loop0: rw=2049, sector=145, nr_sectors = 79 limit=128 [ 114.949256][ T6206] syz.0.100: attempt to access beyond end of device [ 114.949256][ T6206] loop0: rw=524288, sector=153, nr_sectors = 8 limit=128 [ 114.966479][ T6206] syz.0.100: attempt to access beyond end of device [ 114.966479][ T6206] loop0: rw=524288, sector=169, nr_sectors = 55 limit=128 [ 114.982381][ T6206] syz.0.100: attempt to access beyond end of device [ 114.982381][ T6206] loop0: rw=0, sector=153, nr_sectors = 8 limit=128 [ 115.004203][ T6206] syz.0.100: attempt to access beyond end of device [ 115.004203][ T6206] loop0: rw=0, sector=153, nr_sectors = 8 limit=128 [ 115.024791][ T6206] syz.0.100: attempt to access beyond end of device [ 115.024791][ T6206] loop0: rw=0, sector=159, nr_sectors = 1 limit=128 [ 115.043652][ T6206] syz.0.100: attempt to access beyond end of device [ 115.043652][ T6206] loop0: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 115.186493][ T2941] kworker/u4:9: attempt to access beyond end of device [ 115.186493][ T2941] loop0: rw=1, sector=161, nr_sectors = 8 limit=128 [ 115.404152][ T6216] bridge_slave_0: left allmulticast mode [ 115.439727][ T6216] bridge_slave_0: left promiscuous mode [ 115.449713][ T6216] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.485985][ T6216] bridge_slave_1: left allmulticast mode [ 115.499150][ T6216] bridge_slave_1: left promiscuous mode [ 115.519886][ T6216] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.539935][ T6216] bond0: (slave bond_slave_0): Releasing backup interface [ 115.564717][ T6216] bond0: (slave bond_slave_1): Releasing backup interface [ 115.620486][ T6216] team0: Port device team_slave_0 removed [ 115.647567][ T6216] team0: Port device team_slave_1 removed [ 115.659091][ T6216] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.667246][ T6216] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.675800][ T6216] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.684062][ T6216] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.704646][ T6216] bond1: (slave gretap1): Releasing active interface [ 115.734461][ T6219] team0: Mode changed to "activebackup" [ 116.629714][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 119.668876][ T6253] loop0: detected capacity change from 0 to 512 [ 119.747044][ T6255] loop3: detected capacity change from 0 to 16 [ 119.782987][ T6253] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.854357][ T6255] erofs: (device loop3): mounted with root inode @ nid 36. [ 119.966741][ T6255] syz.3.118: attempt to access beyond end of device [ 119.966741][ T6255] loop3: rw=0, sector=8, nr_sectors = 32 limit=16 [ 120.100922][ T6262] bridge_slave_0: left allmulticast mode [ 120.108304][ T6262] bridge_slave_0: left promiscuous mode [ 120.122762][ T6262] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.138187][ T6262] bridge_slave_1: left allmulticast mode [ 120.149365][ T6262] bridge_slave_1: left promiscuous mode [ 120.158657][ T6262] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.177030][ T6262] bond0: (slave bond_slave_0): Releasing backup interface [ 120.215172][ T6262] bond0: (slave bond_slave_1): Releasing backup interface [ 120.292492][ T6262] team0: Port device team_slave_0 removed [ 120.320789][ T6262] team0: Port device team_slave_1 removed [ 120.339331][ T6262] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.347802][ T6262] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.357998][ T6262] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.366889][ T6262] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.390744][ T6267] team0: Mode changed to "activebackup" [ 120.751896][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.593815][ T6283] netlink: 36 bytes leftover after parsing attributes in process `syz.1.127'. [ 122.224923][ T6296] smc: net device lo applied user defined pnetid SYZ0 [ 123.882879][ T172] IPVS: starting estimator thread 0... [ 124.067007][ T6320] IPVS: using max 19 ests per chain, 45600 per kthread [ 125.057357][ T6331] loop0: detected capacity change from 0 to 256 [ 125.137804][ T6331] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 125.247417][ T6331] netlink: 12 bytes leftover after parsing attributes in process `syz.0.139'. [ 125.273913][ T6331] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 125.533173][ T6352] loop0: detected capacity change from 0 to 128 [ 125.555798][ T6352] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 125.589417][ T6352] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.655401][ T28] audit: type=1804 audit(1785425336.221:6): pid=6352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.145" name="/newroot/29/file1/bus" dev="loop0" ino=12 res=1 errno=0 [ 126.648251][ T5778] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 127.659068][ T6385] netlink: 24 bytes leftover after parsing attributes in process `syz.3.153'. [ 127.748850][ T6386] netlink: 28 bytes leftover after parsing attributes in process `syz.3.153'. [ 127.759108][ T6386] veth3: entered promiscuous mode [ 127.764673][ T6386] veth3: entered allmulticast mode [ 127.815711][ T6389] loop0: detected capacity change from 0 to 512 [ 127.854098][ T6389] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.873462][ T6389] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 128.012809][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.083034][ T6396] netlink: 44 bytes leftover after parsing attributes in process `syz.2.156'. [ 128.092281][ T6396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.156'. [ 128.120725][ T6396] netlink: 16 bytes leftover after parsing attributes in process `syz.2.156'. [ 128.174617][ T6400] bridge_slave_0: left allmulticast mode [ 128.180878][ T6400] bridge_slave_0: left promiscuous mode [ 128.186707][ T6400] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.197764][ T6400] bridge_slave_1: left allmulticast mode [ 128.209059][ T6400] bridge_slave_1: left promiscuous mode [ 128.223688][ T6400] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.237840][ T6400] bond0: (slave veth0_to_bond): Releasing backup interface [ 128.272145][ T6400] bond0: (slave bond_slave_0): Releasing backup interface [ 128.295518][ T6400] bond0: (slave bond_slave_1): Releasing backup interface [ 128.459901][ T6400] team0: Port device team_slave_0 removed [ 128.487215][ T6400] team0: Port device team_slave_1 removed [ 128.499407][ T6400] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.509359][ T6400] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.518302][ T6400] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.526457][ T6400] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.541795][ T6402] team0: Mode changed to "activebackup" [ 129.400187][ T6416] loop0: detected capacity change from 0 to 256 [ 129.437507][ T6416] exFAT-fs (loop0): bogus data start sector [ 129.454885][ T6416] exFAT-fs (loop0): failed to read boot sector [ 129.474969][ T6416] exFAT-fs (loop0): failed to recognize exfat type [ 129.861922][ T6424] loop0: detected capacity change from 0 to 1024 [ 129.890271][ T6424] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.636206][ T6424] usb usb8: usbfs: process 6424 (syz.0.168) did not claim interface 0 before use [ 130.777280][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.923163][ T6431] loop1: detected capacity change from 0 to 512 [ 130.964203][ T6431] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.980473][ T6431] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.176901][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.040492][ T6458] loop1: detected capacity change from 0 to 512 [ 133.068291][ T6458] EXT4-fs: Ignoring removed i_version option [ 133.089260][ T6458] EXT4-fs: Ignoring removed oldalloc option [ 133.144564][ T6458] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.245496][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.254294][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.277516][ T6466] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 133.519572][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.870026][ T6492] bridge0: entered promiscuous mode [ 135.885261][ T6492] bridge0: entered allmulticast mode [ 137.552445][ T6522] netlink: 'syz.0.195': attribute type 1 has an invalid length. [ 137.601321][ T6522] netlink: 'syz.0.195': attribute type 1 has an invalid length. [ 137.615984][ T6524] syzkaller0: entered promiscuous mode [ 137.624734][ T6524] syzkaller0: entered allmulticast mode [ 137.727555][ T6528] netlink: 'syz.2.198': attribute type 4 has an invalid length. [ 137.948313][ T6538] netlink: 'syz.2.202': attribute type 1 has an invalid length. [ 139.236490][ T6555] loop2: detected capacity change from 0 to 2048 [ 139.968759][ T6555] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.361661][ T6565] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 141.107292][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.125519][ T6569] loop0: detected capacity change from 0 to 128 [ 141.164440][ T6569] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 141.224528][ T6569] sysv_free_block: trying to free block not in datazone [ 141.324702][ T5778] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 142.836633][ T6578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.213'. [ 147.714448][ T6614] loop2: detected capacity change from 0 to 256 [ 147.763888][ T6611] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org. [ 148.755583][ T6624] loop2: detected capacity change from 0 to 128 [ 148.933848][ T6624] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 148.977427][ T6624] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.617340][ T28] audit: type=1804 audit(1785425361.171:7): pid=6624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.227" name="/newroot/52/file1/bus" dev="loop2" ino=12 res=1 errno=0 [ 151.271602][ T6643] process 'syz.0.232' launched '/dev/fd/3' with NULL argv: empty string added [ 151.793108][ T5781] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 151.825056][ T974] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 151.852928][ T6653] netlink: 'syz.3.234': attribute type 1 has an invalid length. [ 151.931629][ T6656] loop2: detected capacity change from 0 to 512 [ 151.952513][ T6656] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 152.014061][ T6653] veth5: entered allmulticast mode [ 152.017036][ T6656] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.235: iget: bad i_size value: 38620345925642 [ 152.024677][ T6653] bond2: (slave veth5): Enslaving as an active interface with a down link [ 152.045334][ T6656] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.235: couldn't read orphan inode 15 (err -117) [ 152.050712][ T974] usb 1-1: config 4 has an invalid interface number: 122 but max is 0 [ 152.070773][ T974] usb 1-1: config 4 has no interface number 0 [ 152.077806][ T974] usb 1-1: config 4 interface 122 has no altsetting 0 [ 152.110763][ T6657] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 152.123284][ T974] usb 1-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice= 2.6d [ 152.134741][ T6656] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.168696][ T974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.198472][ T974] usb 1-1: Product: syz [ 152.203043][ T974] usb 1-1: Manufacturer: syz [ 152.207683][ T974] usb 1-1: SerialNumber: syz [ 152.844908][ T6659] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 153.005121][ T974] gspca_main: mars-2.14.0 probing 093a:050f [ 153.037684][ T2926] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 3 with max blocks 65 with error 28 [ 153.054557][ T2926] EXT4-fs (loop2): This should not happen!! Data will be lost [ 153.054557][ T2926] [ 153.065485][ T2926] EXT4-fs (loop2): Total free blocks count 0 [ 153.076379][ T2926] EXT4-fs (loop2): Free/Dirty block details [ 153.084655][ T2926] EXT4-fs (loop2): free_blocks=0 [ 153.089889][ T2926] EXT4-fs (loop2): dirty_blocks=65 [ 153.095403][ T2926] EXT4-fs (loop2): Block reservation details [ 153.104426][ T2926] EXT4-fs (loop2): i_reserved_data_blocks=65 [ 153.120503][ T974] usb 1-1: USB disconnect, device number 2 [ 153.135136][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.693511][ T6713] loop2: detected capacity change from 0 to 128 [ 158.732447][ T6713] hpfs: Bad magic ... probably not HPFS [ 158.751109][ T6704] netlink: 'syz.3.248': attribute type 4 has an invalid length. [ 158.806246][ T5769] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 160.260833][ T6735] netlink: 24 bytes leftover after parsing attributes in process `syz.0.257'. [ 160.336513][ T6737] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 160.391646][ T6735] netlink: 28 bytes leftover after parsing attributes in process `syz.0.257'. [ 160.415570][ T6735] veth3: entered promiscuous mode [ 160.427926][ T6735] veth3: entered allmulticast mode [ 160.805914][ T6742] loop0: detected capacity change from 0 to 2048 [ 160.849121][ T6742] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.801476][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.034019][ T6753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.263'. [ 162.716723][ T6769] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 162.718128][ T6770] netlink: 24 bytes leftover after parsing attributes in process `syz.1.268'. [ 162.830802][ T6770] netlink: 28 bytes leftover after parsing attributes in process `syz.1.268'. [ 162.844485][ T6770] veth3: entered promiscuous mode [ 162.850188][ T6770] veth3: entered allmulticast mode [ 163.170473][ T6776] loop2: detected capacity change from 0 to 8192 [ 163.182916][ T6776] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 165.891337][ T6810] netlink: 24 bytes leftover after parsing attributes in process `syz.2.279'. [ 166.749251][ T6816] netlink: 28 bytes leftover after parsing attributes in process `syz.2.279'. [ 166.787390][ T6816] veth3: entered promiscuous mode [ 166.799031][ T6816] veth3: entered allmulticast mode [ 166.974634][ T6825] ip6erspan0: entered allmulticast mode [ 168.077279][ T6844] netlink: 'syz.2.293': attribute type 1 has an invalid length. [ 168.176840][ T6850] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 168.207983][ T6850] bond2 (unregistering): Released all slaves [ 168.262270][ T6856] hub 2-0:1.0: USB hub found [ 168.281101][ T6856] hub 2-0:1.0: 1 port detected [ 168.407611][ T6861] netlink: 24 bytes leftover after parsing attributes in process `syz.1.296'. [ 168.470322][ T6844] bridge1: entered promiscuous mode [ 168.489997][ T6844] bond1: (slave bridge1): making interface the new active one [ 168.505108][ T6844] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 168.517541][ T6861] netlink: 28 bytes leftover after parsing attributes in process `syz.1.296'. [ 168.528369][ T6861] veth5: entered promiscuous mode [ 168.539639][ T6861] veth5: entered allmulticast mode [ 168.589412][ T6863] loop0: detected capacity change from 0 to 512 [ 168.608545][ T6863] EXT4-fs: Ignoring removed i_version option [ 168.647473][ T6863] EXT4-fs: Ignoring removed oldalloc option [ 169.570488][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 169.980056][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 170.295471][ T6863] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.724037][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.514744][ T6921] netlink: 12 bytes leftover after parsing attributes in process `syz.2.308'. [ 176.569143][ T6921] netlink: 'syz.2.308': attribute type 5 has an invalid length. [ 176.583535][ T6921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.308'. [ 176.719217][ T6929] loop2: detected capacity change from 0 to 128 [ 176.744188][ T6929] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 176.775339][ T6929] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.833203][ T28] audit: type=1804 audit(1785425387.401:8): pid=6929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.311" name="/newroot/74/file1/bus" dev="loop2" ino=12 res=1 errno=0 [ 177.101650][ T6938] netlink: 'syz.3.315': attribute type 9 has an invalid length. [ 178.229800][ T789] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 178.237526][ T5781] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 179.045183][ T6943] loop1: detected capacity change from 0 to 512 [ 179.070829][ T6943] EXT4-fs: Ignoring removed mblk_io_submit option [ 179.129184][ T6943] EXT4-fs: Ignoring removed mblk_io_submit option [ 179.182132][ T6943] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 179.280354][ T6943] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 179.314030][ T6943] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 179.336921][ T6960] netlink: 'syz.3.321': attribute type 5 has an invalid length. [ 179.348229][ T6943] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.318: Failed to acquire dquot type 0 [ 179.373496][ T6943] EXT4-fs (loop1): Remounting filesystem read-only [ 179.395413][ T6943] EXT4-fs (loop1): 1 orphan inode deleted [ 179.412908][ T6943] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.470229][ T6943] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.575806][ T789] usb 2-1: unable to get BOS descriptor or descriptor too short [ 179.630042][ T789] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 179.637689][ T789] usb 2-1: can't read configurations, error -71 [ 180.595868][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.043742][ T28] audit: type=1326 audit(1785425391.611:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6978 comm="syz.1.326" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd5619df99 code=0x7ffc0000 [ 181.083464][ T28] audit: type=1326 audit(1785425391.611:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6978 comm="syz.1.326" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd5619df99 code=0x7ffc0000 [ 181.109830][ T28] audit: type=1326 audit(1785425391.611:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6978 comm="syz.1.326" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd5619df99 code=0x7ffc0000 [ 181.142115][ T28] audit: type=1326 audit(1785425391.611:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6978 comm="syz.1.326" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd5619df99 code=0x7ffc0000 [ 181.171913][ T28] audit: type=1326 audit(1785425391.611:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6978 comm="syz.1.326" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fdd5619df99 code=0x7ffc0000 [ 181.203710][ T28] audit: type=1326 audit(1785425391.671:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6978 comm="syz.1.326" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdd5615e7ce code=0x7ffc0000 [ 181.228592][ T28] audit: type=1326 audit(1785425391.681:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6978 comm="syz.1.326" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdd5615e7ce code=0x7ffc0000 [ 182.938683][ T7004] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 182.971489][ T7004] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 183.043091][ T7004] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 183.051244][ T7004] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 183.068297][ T7008] warning: `syz.1.336' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 185.277449][ T7029] netlink: 24 bytes leftover after parsing attributes in process `syz.1.341'. [ 190.895531][ T7071] netlink: 24 bytes leftover after parsing attributes in process `syz.3.352'. [ 192.028487][ T7081] netlink: 16 bytes leftover after parsing attributes in process `syz.0.354'. [ 193.030302][ T7092] overlayfs: failed to clone upperpath [ 194.909745][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.931820][ T7115] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7116] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7115] [ 195.573093][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.665130][ T7118] netlink: 24 bytes leftover after parsing attributes in process `syz.0.367'. [ 198.255472][ T7139] loop1: detected capacity change from 0 to 512 [ 198.271591][ T7139] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 198.457703][ T7139] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.705216][ T7139] ext4 filesystem being mounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 199.329445][ T7154] tipc: Started in network mode [ 199.357240][ T7154] tipc: Node identity 2007ff, cluster identity 4711 [ 199.372562][ T7154] tipc: Node number set to 2099199 [ 199.583808][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.430250][ T7168] netlink: 24 bytes leftover after parsing attributes in process `syz.2.376'. [ 200.536994][ T7165] loop0: detected capacity change from 0 to 128 [ 200.663115][ T7165] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 200.705267][ T7165] ext4 filesystem being mounted at /85/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 201.446001][ T5778] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 201.879673][ T5787] Bluetooth: hci1: command 0x0406 tx timeout [ 201.886573][ T5787] Bluetooth: hci2: command 0x0406 tx timeout [ 201.900112][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 201.913465][ T5791] Bluetooth: hci0: command 0x0406 tx timeout [ 203.984457][ T7211] syzkaller0: entered promiscuous mode [ 203.998164][ T7211] syzkaller0: entered allmulticast mode [ 204.330895][ T7217] syzkaller0: entered promiscuous mode [ 204.336559][ T7217] syzkaller0: entered allmulticast mode [ 204.474061][ T7223] netlink: 'syz.3.395': attribute type 14 has an invalid length. [ 207.907373][ T7259] netlink: 'syz.0.404': attribute type 11 has an invalid length. [ 208.054079][ T7259] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 208.068383][ T7259] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 208.244935][ T7269] netlink: 12 bytes leftover after parsing attributes in process `syz.0.410'. [ 208.248432][ T7267] loop1: detected capacity change from 0 to 2048 [ 208.286048][ T7267] EXT4-fs error (device loop1): ext4_ext_check_inode:532: inode #2: comm syz.1.407: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 2727(2727) [ 208.324423][ T7267] EXT4-fs (loop1): get root inode failed [ 208.336698][ T7267] EXT4-fs (loop1): mount failed [ 208.517997][ T7267] syzkaller0: entered promiscuous mode [ 208.535108][ T7267] syzkaller0: entered allmulticast mode [ 208.803415][ T7283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.620270][ T7295] syzkaller0: entered promiscuous mode [ 209.625810][ T7295] syzkaller0: entered allmulticast mode [ 211.437757][ T7315] loop2: detected capacity change from 0 to 2048 [ 211.447981][ T7318] netlink: 24 bytes leftover after parsing attributes in process `syz.1.423'. [ 211.545924][ T7315] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 211.954730][ T974] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 212.125877][ T7324] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 212.452490][ T974] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 212.570615][ T974] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 212.703979][ T974] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 212.756414][ T974] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 212.768726][ T974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 212.784436][ T974] usb 3-1: SerialNumber: syz [ 213.006891][ T974] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 213.045092][ T974] usb 3-1: USB disconnect, device number 2 [ 215.005570][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 215.680156][ T7360] configfs-gadget.g1 gadget.0: HOST MAC 6e:20:de:06:e8:04 [ 215.699018][ T7360] configfs-gadget.g1 gadget.0: MAC c2:1d:b5:d8:0f:53 [ 216.009837][ T974] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 216.223469][ T974] usb 1-1: Dual-Role OTG device on HNP port [ 216.251783][ T974] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.06 [ 216.261254][ T974] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.291352][ T974] usb 1-1: bad CDC descriptors [ 216.297439][ T974] gspca_main: spca501-2.14.0 probing 0000:0000 [ 216.411895][ T974] gspca_spca501: reg write: error -32 [ 216.440156][ T974] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 216.516024][ T974] spca501: probe of 1-1:1.0 failed with error -22 [ 216.676539][ T7379] loop2: detected capacity change from 0 to 128 [ 216.874427][ T7379] bond1: (slave bridge1): Releasing backup interface [ 220.733050][ T7453] loop2: detected capacity change from 0 to 512 [ 220.747561][ T7453] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 220.761395][ T7453] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 220.785064][ T7453] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.453: bad orphan inode 131083 [ 220.826933][ T7453] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.042612][ T7457] syz.2.453 (pid 7457) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 221.199829][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.594145][ T7468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.457'. [ 226.265163][ T7515] overlayfs: unescaped trailing colons in lowerdir mount option. [ 226.315439][ T7520] netlink: 12 bytes leftover after parsing attributes in process `syz.0.470'. [ 226.451732][ T7520] bond2: entered promiscuous mode [ 226.456925][ T7520] bond2: entered allmulticast mode [ 226.594944][ T7527] netlink: 'syz.3.474': attribute type 1 has an invalid length. [ 227.546856][ T7543] netlink: 20 bytes leftover after parsing attributes in process `syz.2.477'. [ 227.878406][ T7538] bridge1: entered promiscuous mode [ 228.087774][ T7538] bond3: (slave bridge1): making interface the new active one [ 228.233779][ T7538] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 230.893742][ T7560] xfrm0: entered allmulticast mode [ 231.457298][ T7581] capability: warning: `syz.3.488' uses deprecated v2 capabilities in a way that may be insecure [ 233.570006][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 233.979597][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 234.666188][ T7621] netlink: 16 bytes leftover after parsing attributes in process `syz.3.499'. [ 234.716023][ T7621] netlink: 16 bytes leftover after parsing attributes in process `syz.3.499'. [ 237.030550][ T7641] loop0: detected capacity change from 0 to 2048 [ 237.175669][ T7641] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.321815][ T7639] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 237.348491][ T7639] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 237.362036][ T7639] EXT4-fs (loop0): This should not happen!! Data will be lost [ 237.362036][ T7639] [ 237.379379][ T7639] EXT4-fs (loop0): Total free blocks count 0 [ 237.385894][ T7639] EXT4-fs (loop0): Free/Dirty block details [ 237.394625][ T7639] EXT4-fs (loop0): free_blocks=4096 [ 237.402309][ T7639] EXT4-fs (loop0): dirty_blocks=16 [ 237.413976][ T7639] EXT4-fs (loop0): Block reservation details [ 237.420394][ T7639] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 237.448501][ T7641] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 28 [ 238.978668][ T7672] BUG: unable to handle page fault for address: fffffffffffffbc8 [ 238.986441][ T7672] #PF: supervisor read access in kernel mode [ 238.992433][ T7672] #PF: error_code(0x0000) - not-present page [ 238.998437][ T7672] PGD cf35067 P4D cf35067 PUD cf37067 PMD 0 [ 239.004435][ T7672] Oops: 0000 [#1] PREEMPT SMP KASAN [ 239.009655][ T7672] CPU: 1 PID: 7672 Comm: syz.0.509 Not tainted syzkaller #0 [ 239.016963][ T7672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 239.027132][ T7672] RIP: 0010:strlen+0x39/0x70 [ 239.031744][ T7672] Code: ff ff ff 49 be 00 00 00 00 00 fc ff df 48 89 fb 49 89 c7 48 89 d8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 11 48 ff c3 49 8d 47 01 <42> 80 7c 3f 01 00 75 de eb 19 89 d9 80 e1 07 38 c1 7c e6 49 89 fc [ 239.051347][ T7672] RSP: 0018:ffffc9000cf7eb38 EFLAGS: 00010286 [ 239.058597][ T7672] RAX: 0000000000000000 RBX: fffffffffffffbc9 RCX: 0000000000080000 [ 239.066920][ T7672] RDX: ffffc9000d3c2000 RSI: 00000000000010a4 RDI: fffffffffffffbc8 [ 239.075343][ T7672] RBP: ffffc9000cf7ec68 R08: ffffffff8e8c7caf R09: 1ffffffff1d18f95 [ 239.083771][ T7672] R10: dffffc0000000000 R11: fffffbfff1d18f96 R12: dffffc0000000000 [ 239.092229][ T7672] R13: ffff888018666680 R14: dffffc0000000000 R15: ffffffffffffffff [ 239.100785][ T7672] FS: 00007f767bc276c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 239.109852][ T7672] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 239.116549][ T7672] CR2: fffffffffffffbc8 CR3: 0000000026bc3000 CR4: 00000000003506e0 [ 239.125167][ T7672] Call Trace: [ 239.128461][ T7672] [ 239.131386][ T7672] trace_event_raw_event_drv_net_setup_tc+0x109/0x4d0 [ 239.138498][ T7672] ? perf_trace_drv_twt_teardown_request+0x480/0x480 [ 239.145198][ T7672] ieee80211_netdev_setup_tc+0x2c2/0x320 [ 239.150938][ T7672] tcf_block_offload_cmd+0x235/0x3a0 [ 239.156221][ T7672] ? read_lock_is_recursive+0x20/0x20 [ 239.161607][ T7672] ? net_generic+0x240/0x240 [ 239.166799][ T7672] ? down_write+0x16e/0x200 [ 239.171318][ T7672] ? down_read_killable+0x340/0x340 [ 239.176511][ T7672] tcf_block_get_ext+0xdf2/0x13d0 [ 239.181539][ T7672] tcf_block_get+0x68/0xa0 [ 239.185969][ T7672] ? tcf_block_get+0xa0/0xa0 [ 239.190577][ T7672] sfq_init+0x9e/0x23e0 [ 239.194751][ T7672] ? qdisc_alloc+0x77d/0xa40 [ 239.199348][ T7672] ? qdisc_peek_dequeued+0x1f0/0x1f0 [ 239.204652][ T7672] qdisc_create+0x90f/0x1060 [ 239.209242][ T7672] ? qdisc_notify+0x370/0x370 [ 239.213924][ T7672] ? lockdep_rtnl_is_held+0x26/0x30 [ 239.219117][ T7672] ? qdisc_lookup+0x361/0x6c0 [ 239.223798][ T7672] tc_modify_qdisc+0xb47/0x1de0 [ 239.228652][ T7672] ? qdisc_offload_query_caps+0x150/0x150 [ 239.234372][ T7672] ? qdisc_offload_query_caps+0x150/0x150 [ 239.240083][ T7672] rtnetlink_rcv_msg+0x843/0xf90 [ 239.245542][ T7672] ? rtnetlink_rcv_msg+0x220/0xf90 [ 239.250664][ T7672] ? rtnetlink_bind+0x80/0x80 [ 239.255708][ T7672] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 239.262231][ T7672] ? lock_chain_count+0x20/0x20 [ 239.267281][ T7672] ? __local_bh_enable_ip+0x13a/0x1c0 [ 239.273455][ T7672] ? lockdep_hardirqs_on+0x98/0x150 [ 239.279227][ T7672] ? __local_bh_enable_ip+0x13a/0x1c0 [ 239.284693][ T7672] ? _local_bh_enable+0xa0/0xa0 [ 239.289545][ T7672] ? __dev_queue_xmit+0x275/0x3630 [ 239.294674][ T7672] ? __dev_queue_xmit+0x1bc2/0x3630 [ 239.300066][ T7672] ? __dev_queue_xmit+0x275/0x3630 [ 239.305277][ T7672] ? ref_tracker_free+0x686/0x830 [ 239.310737][ T7672] netlink_rcv_skb+0x235/0x4c0 [ 239.315508][ T7672] ? rtnetlink_bind+0x80/0x80 [ 239.320304][ T7672] ? netlink_ack+0x1160/0x1160 [ 239.325069][ T7672] ? __lock_acquire+0x7d80/0x7d80 [ 239.330137][ T7672] ? netlink_deliver_tap+0x2e/0x1b0 [ 239.335525][ T7672] netlink_unicast+0x7b1/0x930 [ 239.340494][ T7672] netlink_sendmsg+0x8d0/0xbf0 [ 239.345391][ T7672] ? netlink_getsockopt+0x590/0x590 [ 239.350969][ T7672] ? apparmor_socket_sendmsg+0x8e/0x330 [ 239.356611][ T7672] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 239.362012][ T7672] ? security_socket_sendmsg+0x80/0xa0 [ 239.367475][ T7672] ? netlink_getsockopt+0x590/0x590 [ 239.372675][ T7672] ____sys_sendmsg+0x61b/0x980 [ 239.377530][ T7672] ? __asan_memset+0x22/0x40 [ 239.382511][ T7672] ? __sys_sendmsg_sock+0x30/0x30 [ 239.387717][ T7672] ? __import_iovec+0x5f2/0x850 [ 239.392579][ T7672] ? import_iovec+0x73/0xa0 [ 239.397076][ T7672] ___sys_sendmsg+0x2a6/0x360 [ 239.401751][ T7672] ? __sys_sendmsg+0x2b0/0x2b0 [ 239.406534][ T7672] __se_sys_sendmsg+0x1d0/0x2c0 [ 239.411378][ T7672] ? __x64_sys_sendmsg+0x80/0x80 [ 239.416311][ T7672] ? lockdep_hardirqs_on+0x98/0x150 [ 239.421546][ T7672] do_syscall_64+0x55/0xb0 [ 239.425957][ T7672] ? clear_bhb_loop+0x40/0x90 [ 239.430622][ T7672] ? clear_bhb_loop+0x40/0x90 [ 239.435290][ T7672] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 239.441173][ T7672] RIP: 0033:0x7f767ad9df99 [ 239.445592][ T7672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.465192][ T7672] RSP: 002b:00007f767bc27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.473700][ T7672] RAX: ffffffffffffffda RBX: 00007f767b025fa0 RCX: 00007f767ad9df99 [ 239.481788][ T7672] RDX: 0000000000004890 RSI: 00002000000003c0 RDI: 0000000000000005 [ 239.489771][ T7672] RBP: 00007f767ae34ec4 R08: 0000000000000000 R09: 0000000000000000 [ 239.497918][ T7672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.505881][ T7672] R13: 00007f767b026038 R14: 00007f767b025fa0 R15: 00007ffcdfdcc258 [ 239.513890][ T7672] [ 239.516912][ T7672] Modules linked in: [ 239.520816][ T7672] CR2: fffffffffffffbc8 [ 239.524968][ T7672] ---[ end trace 0000000000000000 ]--- [ 239.530404][ T7672] RIP: 0010:strlen+0x39/0x70 [ 239.534991][ T7672] Code: ff ff ff 49 be 00 00 00 00 00 fc ff df 48 89 fb 49 89 c7 48 89 d8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 11 48 ff c3 49 8d 47 01 <42> 80 7c 3f 01 00 75 de eb 19 89 d9 80 e1 07 38 c1 7c e6 49 89 fc [ 239.555047][ T7672] RSP: 0018:ffffc9000cf7eb38 EFLAGS: 00010286 [ 239.561107][ T7672] RAX: 0000000000000000 RBX: fffffffffffffbc9 RCX: 0000000000080000 [ 239.569072][ T7672] RDX: ffffc9000d3c2000 RSI: 00000000000010a4 RDI: fffffffffffffbc8 [ 239.577035][ T7672] RBP: ffffc9000cf7ec68 R08: ffffffff8e8c7caf R09: 1ffffffff1d18f95 [ 239.585090][ T7672] R10: dffffc0000000000 R11: fffffbfff1d18f96 R12: dffffc0000000000 [ 239.593534][ T7672] R13: ffff888018666680 R14: dffffc0000000000 R15: ffffffffffffffff [ 239.601808][ T7672] FS: 00007f767bc276c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 239.610744][ T7672] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 239.617330][ T7672] CR2: fffffffffffffbc8 CR3: 0000000026bc3000 CR4: 00000000003506e0 [ 239.625403][ T7672] Kernel panic - not syncing: Fatal exception [ 239.631864][ T7672] Kernel Offset: disabled [ 239.636187][ T7672] Rebooting in 86400 seconds..