last executing test programs: 1m36.63277987s ago: executing program 1 (id=1177): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000001040)='/proc/meminfo\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f0000000040)="29000000140005d8ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d125957bea5", 0x29) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m28.66900549s ago: executing program 1 (id=1183): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f00000022c0)=ANY=[], 0x9, 0x6d8, &(0x7f0000000680)="$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") write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0xab0b, 0x1) getdents64(r0, 0x0, 0x0) 1m28.304328168s ago: executing program 1 (id=1188): socket$key(0xf, 0x3, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@delchain={0x54, 0x64, 0xf31, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) 1m26.100771518s ago: executing program 1 (id=1193): r0 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r1, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r2, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x1, 0x14f5, &(0x7f0000001580)="$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") lsetxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400), &(0x7f0000000440)=@v3={0x3000000, [{0x1a0000, 0x1}, {0x4, 0x4}], r1}, 0x18, 0x1) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x40, 0x0) 1m25.639751198s ago: executing program 1 (id=1197): openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x41, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) unshare(0x64000400) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r4, 0x0) socket(0x11, 0x2, 0x20000000) msync(&(0x7f000000c000/0x3000)=nil, 0x3000, 0x8) 1m25.316786336s ago: executing program 1 (id=1199): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) modify_ldt$read(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) 1m25.1370161s ago: executing program 32 (id=1199): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) modify_ldt$read(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) 5.044705046s ago: executing program 3 (id=1547): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) fcntl$lock(r1, 0x25, &(0x7f00000010c0)={0x988eb5d390b17dc0, 0x1}) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x5453, 0x0) 4.924256319s ago: executing program 4 (id=1549): ptrace(0x10, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001840), 0x3b, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r4, @ANYRES32, @ANYBLOB="180008"], 0x40}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x8, &(0x7f0000005a40)=ANY=[@ANYBLOB='nodiscard,nocheckpoint_merge,alloc_mode=default,active_logs=6,background_gc=on,fault_injection=00000000000000000016,discard,noacl,noinline_dentry,alloc_mode=default,noextent_cache,active_logs=2,fault_type=00000000000000003444,smackfsdef=fault_injection,audit,fsuuid=f362c\x0047-7ce8-eaab-0ae6-21\x0015a33,uid<', @ANYRESDEC=0x0, @ANYBLOB="2c7375626a5f726f6c653d5e617461647630002c6f626a5f747970653d6e6f643be1d2491fb1d1f0696e6c696e655f64656e7472792c7063723d3030303030307f003030303030303030303032392c00"], 0x1, 0x5505, &(0x7f0000000340)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103643, 0x32) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x6) 3.619076648s ago: executing program 3 (id=1553): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x4}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, 0x0, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.601008101s ago: executing program 4 (id=1556): r0 = syz_io_uring_setup(0x141c, &(0x7f0000000200)={0x0, 0x2af2, 0x1, 0x1, 0x139}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x10000) r3 = eventfd2(0xbd49, 0x800) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r3, 0x1) syz_io_uring_modify_offsets$flags(r1, r2, 0x68, 0x1) io_uring_enter(r0, 0x20, 0x20, 0x1, 0x0, 0x0) 2.428334145s ago: executing program 3 (id=1560): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0x1d, 0x4) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) msgget$private(0x0, 0x60) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r2, &(0x7f0000000240)=""/112, 0x349b7f55) 2.293786978s ago: executing program 2 (id=1562): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000002c0)="e4", 0x1, 0x40, &(0x7f0000000000)={0xa, 0x4e20, 0x8000, @private1, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000200)={0xa, 0x0, 0x80, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000000a00)=[{&(0x7f0000000280)=':', 0x1}], 0x1}}], 0x1, 0x40088d5) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000540)={0x0, @in={{0x2, 0xe24, @rand_addr=0x64010101}}}, &(0x7f0000000600)=0x84) 2.178715101s ago: executing program 5 (id=1564): r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0x3, &(0x7f0000000000)=0x2, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x296) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}]}}}]}, 0x60}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4000000) 1.938394956s ago: executing program 2 (id=1565): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a240, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r1, 0xc08c5114, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg$unix(r2, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x1c, 0x2d, 0x107, 0x70bd2b, 0x25dfdbfe, {0x7, 0x7c}, [@nested={0x4, 0x1}, @nested={0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_flowlabel\x00') lseek(r4, 0xffffffff, 0x8) r5 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r5, 0x0, 0x20000011) socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) unshare(0x26020480) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) 1.937125917s ago: executing program 3 (id=1566): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x4, 0x0, 0x80}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) 1.836647379s ago: executing program 3 (id=1567): ptrace(0x10, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001840), 0x3b, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r4, @ANYRES32, @ANYBLOB="180008"], 0x40}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x8, &(0x7f0000005a40)=ANY=[@ANYBLOB='nodiscard,nocheckpoint_merge,alloc_mode=default,active_logs=6,background_gc=on,fault_injection=00000000000000000016,discard,noacl,noinline_dentry,alloc_mode=default,noextent_cache,active_logs=2,fault_type=00000000000000003444,smackfsdef=fault_injection,audit,fsuuid=f362c\x0047-7ce8-eaab-0ae6-21\x0015a33,uid<', @ANYRESDEC=0x0, @ANYBLOB="2c7375626a5f726f6c653d5e617461647630002c6f626a5f747970653d6e6f643be1d2491fb1d1f0696e6c696e655f64656e7472792c7063723d3030303030307f003030303030303030303032392c00"], 0x1, 0x5505, &(0x7f0000000340)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103643, 0x32) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x6) 1.836438308s ago: executing program 2 (id=1568): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x1}]}}]}, 0x3c}}, 0x0) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendto$packet(r4, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.828527399s ago: executing program 0 (id=1569): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x4}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x85c}, 0x0) 1.720160401s ago: executing program 4 (id=1570): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xec2fa4b81eaeea5e}, {0x6, 0xb}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x10000, 0xb, 0x4}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x54015}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.672595303s ago: executing program 5 (id=1571): r0 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r1 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c0001"], 0x3c}}, 0x40000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="5800000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00030000057e010008000a00", @ANYRES32=r5, @ANYBLOB="28001280090001007665746800000000180002800600a379fc9d4bd9b6eb29e683ff36d3753476c42b1a6a9a673514c74e83d4377e373dea1cc753ca8c2150e041448e73e1cf46e1f5cc6b335f5023968579251c35849f33cbc3f2fe43bd2c11a819626895c6bc55e2abf4235f3deaf8f1931fb23ad18f34179e79e51c768cb0688b8f9ef668e7dfec6b6547c477a548857dd7495e5855237e6afa420a967af04b198effa1"], 0x58}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000002540)="0b040700e0ff030002004788aa96a13bb100000000004305400f", 0xfcb6, 0x0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x11, 0x6, @broadcast}, 0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) 1.134681025s ago: executing program 2 (id=1572): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 989.995908ms ago: executing program 0 (id=1573): r0 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000000640)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000280)}, {&(0x7f0000000300)="cd360934d66c7e20677ebbdfd7423d8f5e1b079bd68f4244dd9b2bba3f7660f7074e4217dec818bb5d8fba45a6572c85e8de82d4f370c7227ece4fc51b9001ca0c5c84cb059dfdaae2d97292cf37f28afb5c8b156f9929a2bd3b8e2c02244819f7", 0x61}, {0x0}], 0x3}, 0x20040801) 987.868718ms ago: executing program 2 (id=1574): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x6, 0xfb, 0x0, 0x3}, {0x9, 0xf, 0x3, 0x3d7}]}) socket$inet_tcp(0x2, 0x1, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0xfffffffd, 0x51}, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x6) fchdir(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1c1281, 0x15) write$FUSE_NOTIFY_INVAL_ENTRY(r6, &(0x7f0000000340)=ANY=[], 0x21) sendfile(r6, r5, 0x0, 0x3fffd) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r7, 0xc004ae02, &(0x7f00000000c0)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 954.394079ms ago: executing program 5 (id=1575): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ed56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10", 0x48}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x14) 786.951212ms ago: executing program 5 (id=1576): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x0, 0x6, r2, 0x1}, 0xc) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x4b, r2, 0x2}, 0xc) 785.348132ms ago: executing program 3 (id=1577): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0x1d, 0x4) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) msgget$private(0x0, 0x60) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r2, &(0x7f0000000240)=""/112, 0x349b7f55) 785.058332ms ago: executing program 4 (id=1578): socket$key(0xf, 0x3, 0x2) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x61000, 0x0) unshare(0x28000600) newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000) r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000240)=0x1, 0x4) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha1\x00'}, 0x58) r1 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r1, 0x0, 0x40000d6) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 683.519414ms ago: executing program 5 (id=1579): r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000600)={&(0x7f0000000180)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x20000000}, 0x40) 683.298765ms ago: executing program 0 (id=1580): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e", 0x27}, {&(0x7f0000000e80)="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", 0xfe}, {&(0x7f0000001340)="641a6a2b8647e6b5208cf9599b1d890aa834ebb75a925a", 0x17}], 0x3}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f00000014c0)="fa98151f51a5cd01a13cca732ada71da23eb1dbc1760afa900e0a7e5bd78d1aae07a60bfa40ae396026e0e2659a1e1332ac789341255aedc3223c16d66ce458c85f3c4372aa7f0ba420f8f046adc689289630718809a", 0x56}, {0x0}, {&(0x7f0000001640)="22c042cdf9bd9c9359e29aca901441bdb830df717384916ecdcc1d0484ed77459f0c", 0x22}], 0x3}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000180)="9ed900f8a0d57b7656fa291a92dc9f58d067b2f1f69c6459442d67fb9436fd2078b14a2f", 0x24}, {&(0x7f00000002c0)="1a88f556665b77544a4f49495e71b694fb12eed4456b2ee14a4b13db92ebb7c2218e99c782d0b6a4bdeb49b9fc1638681e1b9d3264936a5602931030d6d53f6b979b85b0fedb3308b25785b1460fa910931a49d5107106e4e748a8679ded0e7b6fd03f2739a7ebb6399eabcd10bbaca33fa48116bc41b10eab20e805e435f5c7a75325387052bf0d4fefc4d414aed4ce8f82b0c627471a7fa0a789bbf6b5632a048ec0f3e391965bf6c6a64065b36c8c01cc6cfbbaba2316e3a8c34704a0de866867ff8af9f6f2227f7e9686fa75c310943d8ef74921e792ea7d378c237bb817", 0xe0}, {&(0x7f00000003c0)="7131821ef34992a7c3b4a30c7b10ab67375b1bdb027a5e1bdf1bff0a522c00e69535b60e7a4de35915f5f45a8f035f024d1a2ebd2ca1851fde44ef6ea33b34a5f71eb9c5db3573f871121fd352bffebb0535c4fa382bb7b35858425c0574055585dfc9236c0b008a04e2", 0x6a}, {&(0x7f0000000640)="2fa964bc6a347f3a58f8008d86c2b4a5625b59e154d7e4ee0f881289882e78808fef081bcbc323b0fef970094e925254d7543cf89f6ac674ea7f30b7b2c1313d0da8b70f5da8598ac90150ae4061ef4314a97d91c6d601f9e959b21911424486799078a2f4e7bc5508bf40", 0x6b}], 0x4}}], 0x3, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000000c0)="f43945ca864918caf5375823337eb7c72fc5b6b5161a2c0ca175ff29e6e88a7cc3f70000000000", 0xffffffffffffff73, 0x340080d1, 0x0, 0x0) 309.317953ms ago: executing program 4 (id=1581): r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0x3, &(0x7f0000000000)=0x2, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x296) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}]}}}]}, 0x60}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4000000) 261.736594ms ago: executing program 5 (id=1582): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x1}]}}]}, 0x3c}}, 0x0) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendto$packet(r4, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 178.336456ms ago: executing program 2 (id=1583): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x4}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x85c}, 0x0) 176.939406ms ago: executing program 0 (id=1584): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 66.758508ms ago: executing program 4 (id=1585): r0 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r1 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c0001"], 0x3c}}, 0x40000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="5800000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00030000057e010008000a00", @ANYRES32=r5, @ANYBLOB="28001280090001007665746800000000180002800600a379fc9d4bd9b6eb29e683ff36d3753476c42b1a6a9a673514c74e83d4377e373dea1cc753ca8c2150e041448e73e1cf46e1f5cc6b335f5023968579251c35849f33cbc3f2fe43bd2c11a819626895c6bc55e2abf4235f3deaf8f1931fb23ad18f34179e79e51c768cb0688b8f9ef668e7dfec6b6547c477a548857dd7495e5855237e6afa420a967af04b198effa1"], 0x58}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000002540)="0b040700e0ff030002004788aa96a13bb100000000004305400f", 0xfcb6, 0x0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x11, 0x6, @broadcast}, 0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) 65.765899ms ago: executing program 0 (id=1586): mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) request_key(&(0x7f0000000000)='asymmetric\x00', 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=1587): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) writev(r0, &(0x7f0000000a80)=[{&(0x7f0000000740)="ef", 0x1}], 0x1) kernel console output (not intermixed with test programs): a:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.485648][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.497567][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.514129][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.525547][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.535544][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.545004][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.556728][ T4186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.566102][ T4186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.575173][ T4186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.584139][ T4186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.596682][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.607569][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.617679][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.628650][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.638694][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.649194][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.659919][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.677129][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.685960][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.690169][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.695360][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.714991][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.724850][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.733689][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.743483][ T4188] device veth0_macvtap entered promiscuous mode [ 59.759993][ T4189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.769084][ T4189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.777855][ T4189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.787315][ T4189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.806319][ T4188] device veth1_macvtap entered promiscuous mode [ 59.838683][ T1231] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.853451][ T1231] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.858770][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.871580][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.886877][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.897748][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.907666][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.918367][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.928504][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.939029][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.953138][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.972183][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.980428][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.993296][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.001128][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.010214][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.033700][ T4263] Bluetooth: hci2: command 0x040f tx timeout [ 60.036973][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.039955][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.053309][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.058441][ T4263] Bluetooth: hci1: command 0x040f tx timeout [ 60.071443][ T4263] Bluetooth: hci0: command 0x040f tx timeout [ 60.071678][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.077919][ T4263] Bluetooth: hci4: command 0x040f tx timeout [ 60.093002][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.105160][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.112475][ T4263] Bluetooth: hci3: command 0x040f tx timeout [ 60.116607][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.131595][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.141462][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.152298][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.163212][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.180470][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.191459][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.200709][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.212945][ T4188] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.221656][ T4188] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.230674][ T4188] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.239650][ T4188] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.282198][ T1576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.295718][ T1576] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.338404][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.374517][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.385414][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.418412][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.465788][ T4247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.479938][ T4247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.493885][ T4266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 60.527165][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.535110][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.545491][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.559300][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.613045][ T4247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.631319][ T4247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.654444][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.666413][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.678519][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.701394][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.751838][ T1231] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.759731][ T1231] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.874738][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.910459][ T4278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6'. [ 60.968445][ T4282] device syzkaller0 entered promiscuous mode [ 60.987448][ T4285] syz.1.7 uses obsolete (PF_INET,SOCK_PACKET) [ 61.027138][ T4282] tipc: Started in network mode [ 61.045121][ T4282] tipc: Node identity , cluster identity 4711 [ 61.071295][ T4282] tipc: Failed to obtain node identity [ 61.087043][ T4282] tipc: Enabling of bearer rejected, failed to enable media [ 61.268179][ T4297] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12'. [ 61.284140][ T4297] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12'. [ 61.318711][ T4300] netlink: 'syz.2.13': attribute type 1 has an invalid length. [ 61.423144][ T4309] device syzkaller0 entered promiscuous mode [ 62.105537][ T4234] Bluetooth: hci4: command 0x0419 tx timeout [ 62.134850][ T4234] Bluetooth: hci0: command 0x0419 tx timeout [ 62.149289][ T4234] Bluetooth: hci1: command 0x0419 tx timeout [ 62.164163][ T4234] Bluetooth: hci2: command 0x0419 tx timeout [ 62.183052][ T4232] Bluetooth: hci3: command 0x0419 tx timeout [ 62.524693][ T4329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23'. [ 62.534263][ T4327] Zero length message leads to an empty skb [ 62.796131][ T4345] netlink: 24 bytes leftover after parsing attributes in process `syz.3.29'. [ 62.845230][ T4341] device syzkaller0 entered promiscuous mode [ 64.292128][ T4194] Bluetooth: hci4: command 0x0405 tx timeout [ 64.348761][ T4378] netlink: 4 bytes leftover after parsing attributes in process `syz.0.35'. [ 64.498107][ T4378] bond0: (slave bond_slave_1): Releasing backup interface [ 64.650255][ T4387] device syzkaller0 entered promiscuous mode [ 64.760750][ T4399] netlink: 'syz.4.40': attribute type 1 has an invalid length. [ 65.368925][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 65.394139][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.422719][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.492617][ T4436] futex_wake_op: syz.3.52 tries to shift op by 144; fix this program [ 65.589725][ T4402] device bridge1 entered promiscuous mode [ 65.618905][ T4402] team0: Port device bridge1 added [ 65.704196][ T4444] netlink: 4 bytes leftover after parsing attributes in process `syz.1.54'. [ 65.857835][ T4436] loop3: detected capacity change from 0 to 2048 [ 66.051533][ T4436] loop3: p3 < > p4 < > [ 66.125230][ T4436] loop3: partition table partially beyond EOD, truncated [ 66.199135][ T4436] loop3: p3 start 4284289 is beyond EOD, truncated [ 66.264655][ T4470] netlink: 84 bytes leftover after parsing attributes in process `syz.4.64'. [ 66.417490][ T4479] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 66.513131][ T4482] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 66.744018][ T4489] netlink: 32 bytes leftover after parsing attributes in process `syz.1.70'. [ 66.851664][ T4491] device wlan0 entered promiscuous mode [ 66.887020][ T4489] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.916576][ T4491] syz.2.71 (4491) used greatest stack depth: 20272 bytes left [ 66.954370][ T4489] device bridge_slave_1 left promiscuous mode [ 67.014602][ T4489] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.098096][ T4499] device syzkaller0 entered promiscuous mode [ 67.304256][ T4516] sctp: [Deprecated]: syz.4.75 (pid 4516) Use of struct sctp_assoc_value in delayed_ack socket option. [ 67.304256][ T4516] Use struct sctp_sack_info instead [ 67.349436][ T4514] device syzkaller1 entered promiscuous mode [ 67.601681][ T4527] netlink: 'syz.1.80': attribute type 1 has an invalid length. [ 67.622721][ T4530] device syzkaller0 entered promiscuous mode [ 67.952626][ T4551] device syzkaller0 entered promiscuous mode [ 67.965040][ T4550] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1514) ! [ 67.973234][ T4542] futex_wake_op: syz.0.87 tries to shift op by 144; fix this program [ 67.999293][ T4550] device syzkaller0 entered promiscuous mode [ 68.065099][ T4542] loop0: detected capacity change from 0 to 2048 [ 68.169659][ T4542] loop0: p3 < > p4 < > [ 68.204614][ T4542] loop0: partition table partially beyond EOD, truncated [ 68.245216][ T4542] loop0: p3 start 4284289 is beyond EOD, truncated [ 68.326689][ T4562] netlink: 'syz.1.94': attribute type 1 has an invalid length. [ 71.265764][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.283376][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.080870][ T4642] loop0: detected capacity change from 0 to 2048 [ 72.378451][ T4654] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 72.817370][ T4658] device syzkaller0 entered promiscuous mode [ 72.915037][ T4669] xt_hashlimit: size too large, truncated to 1048576 [ 73.131074][ T4679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.125'. [ 73.179362][ T4679] netlink: 20 bytes leftover after parsing attributes in process `syz.0.125'. [ 73.223786][ T4680] futex_wake_op: syz.2.126 tries to shift op by 144; fix this program [ 73.377421][ T4680] loop2: detected capacity change from 0 to 2048 [ 73.495725][ T4680] loop2: p3 < > p4 < > [ 73.504233][ T4680] loop2: partition table partially beyond EOD, truncated [ 73.586605][ T4680] loop2: p3 start 4284289 is beyond EOD, truncated [ 73.596887][ T4686] netlink: 84 bytes leftover after parsing attributes in process `syz.0.127'. [ 74.247818][ T4707] loop0: detected capacity change from 0 to 2048 [ 74.383259][ T4707] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 76.212542][ T4728] netlink: 'syz.2.143': attribute type 1 has an invalid length. [ 76.430770][ T4733] netlink: 36 bytes leftover after parsing attributes in process `syz.2.146'. [ 77.631158][ T4745] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 78.135585][ T4782] netlink: 272 bytes leftover after parsing attributes in process `syz.1.154'. [ 78.259808][ T4778] netlink: 'syz.4.156': attribute type 1 has an invalid length. [ 79.384818][ T4770] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 79.456828][ T4770] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 482 with error 28 [ 79.509711][ T4770] EXT4-fs (loop0): This should not happen!! Data will be lost [ 79.509711][ T4770] [ 79.595083][ T4770] EXT4-fs (loop0): Total free blocks count 0 [ 79.601191][ T4770] EXT4-fs (loop0): Free/Dirty block details [ 79.607692][ T4770] EXT4-fs (loop0): free_blocks=4096 [ 79.616256][ T4770] EXT4-fs (loop0): dirty_blocks=512 [ 79.622169][ T4770] EXT4-fs (loop0): Block reservation details [ 79.628158][ T4770] EXT4-fs (loop0): i_reserved_data_blocks=32 [ 79.646466][ T4770] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 79.736051][ T4770] EXT4-fs (loop0): This should not happen!! Data will be lost [ 79.736051][ T4770] [ 80.638704][ T4824] netlink: 272 bytes leftover after parsing attributes in process `syz.2.168'. [ 82.146555][ T7] cfg80211: failed to load regulatory.db [ 82.240771][ T4833] loop3: detected capacity change from 0 to 40427 [ 82.302800][ T4833] F2FS-fs (loop3): build fault injection attr: rate: 14, type: 0x1ffff [ 82.311317][ T4833] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0xe4 [ 82.323065][ T4833] F2FS-fs (loop3): invalid crc value [ 82.365354][ T4833] F2FS-fs (loop3): Found nat_bits in checkpoint [ 82.395998][ T4833] F2FS-fs (loop3) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x44e/0xaa0 [ 82.442174][ T4833] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 82.466961][ T4828] F2FS-fs (loop3) : inject no more block in inc_valid_node_count of f2fs_new_node_page+0x180/0x8e0 [ 82.679847][ T4186] attempt to access beyond end of device [ 82.679847][ T4186] loop3: rw=2049, want=45104, limit=40427 [ 84.064850][ T4877] netlink: 272 bytes leftover after parsing attributes in process `syz.2.183'. [ 85.917782][ T4897] loop4: detected capacity change from 0 to 40427 [ 85.996647][ T4897] F2FS-fs (loop4): build fault injection attr: rate: 14, type: 0x1ffff [ 86.005145][ T4897] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0xe4 [ 86.015030][ T4897] F2FS-fs (loop4): invalid crc value [ 86.053169][ T4897] F2FS-fs (loop4): Found nat_bits in checkpoint [ 86.082057][ T4897] F2FS-fs (loop4) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x44e/0xaa0 [ 86.122943][ T4897] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 86.144520][ T4893] F2FS-fs (loop4) : inject no more block in inc_valid_node_count of f2fs_new_node_page+0x180/0x8e0 [ 86.443224][ T4189] attempt to access beyond end of device [ 86.443224][ T4189] loop4: rw=2049, want=45104, limit=40427 [ 86.724837][ T4928] netlink: 272 bytes leftover after parsing attributes in process `syz.3.200'. [ 87.517969][ T4934] loop3: detected capacity change from 0 to 2048 [ 87.793485][ T4934] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 88.041044][ T9] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 88.570159][ T9] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 482 with error 28 [ 88.617369][ T9] EXT4-fs (loop3): This should not happen!! Data will be lost [ 88.617369][ T9] [ 88.681919][ T9] EXT4-fs (loop3): Total free blocks count 0 [ 88.692118][ T9] EXT4-fs (loop3): Free/Dirty block details [ 88.698026][ T9] EXT4-fs (loop3): free_blocks=4096 [ 88.715657][ T9] EXT4-fs (loop3): dirty_blocks=512 [ 88.720966][ T9] EXT4-fs (loop3): Block reservation details [ 88.731889][ C1] sched: RT throttling activated [ 88.734884][ T9] EXT4-fs (loop3): i_reserved_data_blocks=32 [ 88.762463][ T9] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 88.776630][ T9] EXT4-fs (loop3): This should not happen!! Data will be lost [ 88.776630][ T9] [ 88.778953][ T4952] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 89.129597][ T4960] netlink: 16 bytes leftover after parsing attributes in process `syz.4.212'. [ 89.163164][ T4960] netlink: 164 bytes leftover after parsing attributes in process `syz.4.212'. [ 89.691550][ T4968] loop3: detected capacity change from 0 to 40427 [ 89.775490][ T4968] F2FS-fs (loop3): build fault injection attr: rate: 14, type: 0x1ffff [ 89.786422][ T4968] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0xe4 [ 89.795888][ T4968] F2FS-fs (loop3): invalid crc value [ 89.827205][ T4968] F2FS-fs (loop3): Found nat_bits in checkpoint [ 89.856059][ T4968] F2FS-fs (loop3) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x44e/0xaa0 [ 89.934067][ T4968] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 89.957190][ T4967] F2FS-fs (loop3) : inject no more block in inc_valid_node_count of f2fs_new_node_page+0x180/0x8e0 [ 90.169903][ T4186] attempt to access beyond end of device [ 90.169903][ T4186] loop3: rw=2049, want=45104, limit=40427 [ 90.289175][ T4996] loop4: detected capacity change from 0 to 2048 [ 90.390839][ T4996] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 91.473568][ T1231] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 91.517860][ T1231] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 482 with error 28 [ 91.538213][ T1231] EXT4-fs (loop4): This should not happen!! Data will be lost [ 91.538213][ T1231] [ 91.558572][ T1231] EXT4-fs (loop4): Total free blocks count 0 [ 91.570859][ T1231] EXT4-fs (loop4): Free/Dirty block details [ 91.615977][ T1231] EXT4-fs (loop4): free_blocks=4096 [ 91.624889][ T1231] EXT4-fs (loop4): dirty_blocks=512 [ 91.630989][ T1231] EXT4-fs (loop4): Block reservation details [ 91.644798][ T1231] EXT4-fs (loop4): i_reserved_data_blocks=32 [ 91.666091][ T1231] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 91.753177][ T1231] EXT4-fs (loop4): This should not happen!! Data will be lost [ 91.753177][ T1231] [ 91.804919][ T5011] loop1: detected capacity change from 0 to 2048 [ 91.925046][ T5013] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 92.722651][ T5028] device syzkaller1 entered promiscuous mode [ 92.731861][ T5032] netlink: 12 bytes leftover after parsing attributes in process `syz.2.227'. [ 93.333465][ T5046] loop3: detected capacity change from 0 to 40427 [ 93.422319][ T5046] F2FS-fs (loop3): build fault injection attr: rate: 14, type: 0x1ffff [ 93.430743][ T5046] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0xe4 [ 93.453012][ T5036] bond1 (unregistering): Released all slaves [ 93.462584][ T5046] F2FS-fs (loop3): invalid crc value [ 93.530382][ T5046] F2FS-fs (loop3): Found nat_bits in checkpoint [ 93.559719][ T5046] F2FS-fs (loop3) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x44e/0xaa0 [ 93.590789][ T5046] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 93.613836][ T5039] F2FS-fs (loop3) : inject no more block in inc_valid_node_count of f2fs_new_node_page+0x180/0x8e0 [ 93.807839][ T4186] attempt to access beyond end of device [ 93.807839][ T4186] loop3: rw=2049, want=45104, limit=40427 [ 94.538172][ T5096] device syzkaller0 entered promiscuous mode [ 94.666418][ T5098] device syzkaller0 entered promiscuous mode [ 95.395408][ T5115] loop1: detected capacity change from 0 to 40427 [ 95.527867][ T5115] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x1ffff [ 95.536930][ T5115] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0xe4 [ 95.555920][ T5115] F2FS-fs (loop1): invalid crc value [ 95.647552][ T5112] tipc: Started in network mode [ 95.664848][ T5115] F2FS-fs (loop1): Found nat_bits in checkpoint [ 95.694370][ T5115] F2FS-fs (loop1) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x44e/0xaa0 [ 95.764123][ T5112] tipc: Node identity 1e01a80c3da8, cluster identity 4711 [ 95.771473][ T5112] tipc: Enabled bearer , priority 0 [ 95.783674][ T5115] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 95.804723][ T5111] F2FS-fs (loop1) : inject no more block in inc_valid_node_count of f2fs_new_node_page+0x180/0x8e0 [ 95.822908][ T5112] device syzkaller0 entered promiscuous mode [ 95.918929][ T5112] tipc: Resetting bearer [ 96.003185][ T4187] attempt to access beyond end of device [ 96.003185][ T4187] loop1: rw=2049, want=45104, limit=40427 [ 96.107705][ T5108] tipc: Resetting bearer [ 96.124801][ T5108] tipc: Disabling bearer [ 96.744476][ T5141] netlink: 272 bytes leftover after parsing attributes in process `syz.2.256'. [ 97.686089][ T5154] netlink: 84 bytes leftover after parsing attributes in process `syz.2.263'. [ 98.570677][ T5174] IPv6: NLM_F_CREATE should be specified when creating new route [ 98.579043][ T5180] netlink: 12 bytes leftover after parsing attributes in process `syz.1.267'. [ 98.647274][ T5182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.267'. [ 98.656246][ T5182] netlink: 12 bytes leftover after parsing attributes in process `syz.1.267'. [ 99.511008][ T5182] bond1: (slave veth3): Enslaving as an active interface with an up link [ 99.521007][ T5185] netlink: 28 bytes leftover after parsing attributes in process `syz.0.269'. [ 99.567479][ T5189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.271'. [ 99.608494][ T5190] bond1 (unregistering): (slave veth3): Releasing backup interface [ 99.664977][ T5190] bond1 (unregistering): Released all slaves [ 99.938817][ T5205] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.278'. [ 99.991572][ T5205] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.278'. [ 100.371763][ T5210] device ipip0 entered promiscuous mode [ 100.774255][ T5216] netlink: 84 bytes leftover after parsing attributes in process `syz.2.280'. [ 101.267992][ T5235] netlink: 'syz.2.290': attribute type 1 has an invalid length. [ 101.352537][ T5235] netlink: 'syz.2.290': attribute type 2 has an invalid length. [ 101.530160][ T5237] loop3: detected capacity change from 0 to 40427 [ 101.686274][ T5237] F2FS-fs (loop3): build fault injection attr: rate: 14, type: 0x1ffff [ 101.695873][ T5237] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0xe4 [ 101.705575][ T5237] F2FS-fs (loop3): invalid crc value [ 102.409075][ T5237] F2FS-fs (loop3): Found nat_bits in checkpoint [ 102.438434][ T5237] F2FS-fs (loop3) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x44e/0xaa0 [ 102.482083][ T5237] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 102.497522][ T5237] F2FS-fs (loop3) : inject no more block in inc_valid_node_count of f2fs_new_node_page+0x180/0x8e0 [ 102.777566][ T4186] attempt to access beyond end of device [ 102.777566][ T4186] loop3: rw=2049, want=45104, limit=40427 [ 102.849104][ T5262] device syzkaller0 entered promiscuous mode [ 102.884080][ T5262] tipc: Started in network mode [ 102.902576][ T5262] tipc: Node identity , cluster identity 4711 [ 102.934356][ T5262] tipc: Failed to obtain node identity [ 102.945301][ T5262] tipc: Enabling of bearer rejected, failed to enable media [ 103.236424][ T5266] netlink: 84 bytes leftover after parsing attributes in process `syz.4.298'. [ 103.426062][ T5272] device syzkaller0 entered promiscuous mode [ 103.526143][ T5276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.302'. [ 103.722814][ T5276] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 103.753772][ T5276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 103.788194][ T5276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 103.918756][ T5280] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 103.950806][ T5280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 103.978675][ T5280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 105.513692][ T5343] device syzkaller0 entered promiscuous mode [ 105.567944][ T5343] tipc: Started in network mode [ 105.588068][ T5343] tipc: Node identity , cluster identity 4711 [ 105.600689][ T5343] tipc: Failed to obtain node identity [ 105.613495][ T5343] tipc: Enabling of bearer rejected, failed to enable media [ 105.649944][ T5347] netlink: 84 bytes leftover after parsing attributes in process `syz.4.311'. [ 105.968392][ T5363] netlink: 272 bytes leftover after parsing attributes in process `syz.0.313'. [ 106.665826][ T5374] netlink: 12 bytes leftover after parsing attributes in process `syz.0.317'. [ 107.767775][ T5411] netlink: 272 bytes leftover after parsing attributes in process `syz.2.324'. [ 108.619443][ T5401] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.627038][ T5401] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.191118][ T5401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.245642][ T5401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.284272][ T5429] netlink: 272 bytes leftover after parsing attributes in process `syz.3.327'. [ 110.158639][ T5401] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.168283][ T5401] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.178047][ T5401] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.187204][ T5401] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.278346][ T5431] netlink: 12 bytes leftover after parsing attributes in process `syz.3.328'. [ 110.323237][ T5432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.328'. [ 110.365907][ T5432] netlink: 12 bytes leftover after parsing attributes in process `syz.3.328'. [ 110.732490][ T5459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.335'. [ 112.016674][ T5483] netlink: 272 bytes leftover after parsing attributes in process `syz.1.338'. [ 112.670811][ T5490] netlink: 12 bytes leftover after parsing attributes in process `syz.3.341'. [ 112.803195][ T5499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.341'. [ 112.879934][ T5499] netlink: 12 bytes leftover after parsing attributes in process `syz.3.341'. [ 113.006678][ T5499] bond1: (slave veth3): Enslaving as an active interface with an up link [ 113.120680][ T5513] device syzkaller0 entered promiscuous mode [ 113.459139][ T5531] device syzkaller1 entered promiscuous mode [ 113.480335][ T5528] raw_sendmsg: syz.3.351 forgot to set AF_INET. Fix it! [ 113.825966][ T5541] netlink: 272 bytes leftover after parsing attributes in process `syz.1.353'. [ 114.496575][ T5554] netlink: 12 bytes leftover after parsing attributes in process `syz.1.360'. [ 114.525318][ T5554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.360'. [ 114.534437][ T5554] netlink: 12 bytes leftover after parsing attributes in process `syz.1.360'. [ 114.565957][ T5554] bond1: (slave veth5): Enslaving as an active interface with an up link [ 114.597868][ T5548] netlink: 'syz.0.357': attribute type 1 has an invalid length. [ 114.610366][ T5554] bond1 (unregistering): (slave veth5): Releasing backup interface [ 114.625767][ T5554] bond1 (unregistering): Released all slaves [ 114.690465][ T5564] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1514) ! [ 114.709472][ T5564] device syzkaller0 entered promiscuous mode [ 114.835782][ T5566] netlink: 84 bytes leftover after parsing attributes in process `syz.1.363'. [ 115.415670][ T5593] netlink: 272 bytes leftover after parsing attributes in process `syz.0.370'. [ 115.906937][ T5594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.373'. [ 116.032886][ T5597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.373'. [ 116.099988][ T5597] netlink: 12 bytes leftover after parsing attributes in process `syz.1.373'. [ 116.136506][ T5597] bond1: (slave veth7): Enslaving as an active interface with an up link [ 116.177842][ T5598] bond1 (unregistering): (slave veth7): Releasing backup interface [ 116.197904][ T5598] bond1 (unregistering): Released all slaves [ 116.242499][ T5605] netlink: 84 bytes leftover after parsing attributes in process `syz.0.377'. [ 116.458258][ T5617] netlink: 12 bytes leftover after parsing attributes in process `syz.1.380'. [ 116.609757][ T5617] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.923397][ T5632] loop4: detected capacity change from 0 to 40427 [ 116.977571][ T5632] F2FS-fs (loop4): build fault injection attr: rate: 14, type: 0x1ffff [ 116.986211][ T5632] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0xe4 [ 117.012388][ T5632] F2FS-fs (loop4): invalid crc value [ 117.030148][ T5632] F2FS-fs (loop4): Found nat_bits in checkpoint [ 117.059894][ T5632] F2FS-fs (loop4) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x44e/0xaa0 [ 117.113408][ T5632] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 117.134746][ T5627] F2FS-fs (loop4) : inject no more block in inc_valid_node_count of f2fs_new_node_page+0x180/0x8e0 [ 117.343876][ T4189] attempt to access beyond end of device [ 117.343876][ T4189] loop4: rw=2049, want=45104, limit=40427 [ 117.634259][ T5655] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 117.638438][ T5645] lo speed is unknown, defaulting to 1000 [ 118.384432][ T5645] lo speed is unknown, defaulting to 1000 [ 118.395639][ T5645] lo speed is unknown, defaulting to 1000 [ 118.536255][ T5666] device syzkaller0 entered promiscuous mode [ 118.579437][ T5666] tipc: Started in network mode [ 118.606641][ T5666] tipc: Node identity , cluster identity 4711 [ 118.613130][ T5666] tipc: Failed to obtain node identity [ 118.629505][ T5666] tipc: Enabling of bearer rejected, failed to enable media [ 118.649816][ T5670] device ipip0 entered promiscuous mode [ 118.683810][ T4264] lo speed is unknown, defaulting to 1000 [ 118.691064][ T5645] infiniband s: set active [ 118.700960][ T5645] infiniband s: added lo [ 118.744400][ T5645] infiniband s: Couldn't open port 1 [ 118.809575][ T5645] RDS/IB: s: added [ 118.822694][ T5645] smc: adding ib device s with port count 1 [ 118.828813][ T5645] smc: ib device s port 1 has pnetid [ 118.829947][ T5668] device syzkaller0 entered promiscuous mode [ 118.896521][ T4264] lo speed is unknown, defaulting to 1000 [ 118.918684][ T5645] lo speed is unknown, defaulting to 1000 [ 118.965817][ T5679] netlink: 'syz.4.394': attribute type 1 has an invalid length. [ 119.149917][ T5675] lo speed is unknown, defaulting to 1000 [ 119.266711][ T5645] lo speed is unknown, defaulting to 1000 [ 119.606228][ T5691] loop1: detected capacity change from 0 to 40427 [ 119.645671][ T5691] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x1ffff [ 119.654185][ T5691] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0xe4 [ 119.665956][ T5691] F2FS-fs (loop1): invalid crc value [ 119.710211][ T5691] F2FS-fs (loop1): Found nat_bits in checkpoint [ 119.739362][ T5691] F2FS-fs (loop1) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x44e/0xaa0 [ 119.896019][ T5691] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 119.917623][ T5689] F2FS-fs (loop1) : inject no more block in inc_valid_node_count of f2fs_new_node_page+0x180/0x8e0 [ 120.001232][ T5705] device syzkaller0 entered promiscuous mode [ 120.122369][ T4187] attempt to access beyond end of device [ 120.122369][ T4187] loop1: rw=2049, want=45104, limit=40427 [ 120.151418][ T5645] lo speed is unknown, defaulting to 1000 [ 120.496397][ T5645] lo speed is unknown, defaulting to 1000 [ 120.651260][ T5713] __nla_validate_parse: 2 callbacks suppressed [ 120.651273][ T5713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.403'. [ 120.761403][ T5645] lo speed is unknown, defaulting to 1000 [ 120.980704][ T5719] netlink: 272 bytes leftover after parsing attributes in process `syz.1.400'. [ 122.305879][ T5733] device syzkaller0 entered promiscuous mode [ 122.337772][ T5733] tipc: Started in network mode [ 122.364058][ T5733] tipc: Node identity , cluster identity 4711 [ 122.381705][ T5733] tipc: Failed to obtain node identity [ 122.395636][ T5733] tipc: Enabling of bearer rejected, failed to enable media [ 122.532746][ T5738] device syzkaller0 entered promiscuous mode [ 122.740854][ T5750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.414'. [ 123.013841][ T5758] netlink: 272 bytes leftover after parsing attributes in process `syz.1.415'. [ 124.327587][ T5771] device syzkaller0 entered promiscuous mode [ 124.373254][ T5771] tipc: Started in network mode [ 124.378151][ T5771] tipc: Node identity , cluster identity 4711 [ 124.452828][ T5771] tipc: Failed to obtain node identity [ 124.559040][ T5777] loop1: detected capacity change from 0 to 2048 [ 124.594134][ T5771] tipc: Enabling of bearer rejected, failed to enable media [ 124.892918][ T5783] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 125.301199][ T5792] netlink: 272 bytes leftover after parsing attributes in process `syz.4.429'. [ 125.906741][ T5794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.431'. [ 127.045433][ T5808] netlink: 84 bytes leftover after parsing attributes in process `syz.3.434'. [ 127.093928][ T5813] tipc: Started in network mode [ 127.102749][ T5813] tipc: Node identity 62683722afb2, cluster identity 4711 [ 127.109986][ T5813] tipc: Enabled bearer , priority 0 [ 127.164006][ T5816] device syzkaller0 entered promiscuous mode [ 127.266060][ T5816] tipc: Resetting bearer [ 127.321300][ T5810] tipc: Resetting bearer [ 127.393977][ T5810] tipc: Disabling bearer [ 127.420008][ T5822] device syzkaller0 entered promiscuous mode [ 127.463114][ T5822] tipc: Started in network mode [ 127.468003][ T5822] tipc: Node identity , cluster identity 4711 [ 127.494851][ T5822] tipc: Failed to obtain node identity [ 127.512096][ T5822] tipc: Enabling of bearer rejected, failed to enable media [ 127.539451][ T4198] Bluetooth: hci4: link tx timeout [ 127.547419][ T4198] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 127.556648][ T4198] Bluetooth: hci4: link tx timeout [ 127.561783][ T4198] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 127.759967][ T5827] device syzkaller0 entered promiscuous mode [ 127.805114][ T5833] netlink: 12 bytes leftover after parsing attributes in process `syz.2.443'. [ 127.820730][ T5834] netlink: 272 bytes leftover after parsing attributes in process `syz.1.442'. [ 128.448073][ T5837] bond1 (unregistering): Released all slaves [ 128.665364][ T5844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.444'. [ 129.514525][ T5859] netlink: 84 bytes leftover after parsing attributes in process `syz.2.450'. [ 129.580411][ T5864] device ipip0 entered promiscuous mode [ 129.622101][ T7] Bluetooth: hci4: command 0x0406 tx timeout [ 129.654934][ T5870] device syzkaller0 entered promiscuous mode [ 129.666773][ T5870] tipc: Started in network mode [ 129.671748][ T5870] tipc: Node identity , cluster identity 4711 [ 129.680431][ T5870] tipc: Failed to obtain node identity [ 129.699381][ T5870] tipc: Enabling of bearer rejected, failed to enable media [ 129.895752][ T5875] netlink: 272 bytes leftover after parsing attributes in process `syz.3.455'. [ 130.589920][ T5888] netlink: 12 bytes leftover after parsing attributes in process `syz.3.459'. [ 131.013436][ T5890] loop0: detected capacity change from 0 to 40427 [ 131.033751][ T5893] bond2 (unregistering): Released all slaves [ 131.072698][ T5890] F2FS-fs (loop0): build fault injection attr: rate: 14, type: 0x1ffff [ 131.081096][ T5890] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0xe4 [ 131.090748][ T5890] F2FS-fs (loop0): invalid crc value [ 131.144096][ T5890] F2FS-fs (loop0): Found nat_bits in checkpoint [ 131.172787][ T5890] F2FS-fs (loop0) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x44e/0xaa0 [ 131.231763][ T5890] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 131.246880][ T5890] F2FS-fs (loop0) : inject no more block in inc_valid_node_count of f2fs_new_node_page+0x180/0x8e0 [ 131.352518][ T5911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.463'. [ 131.394800][ T4190] attempt to access beyond end of device [ 131.394800][ T4190] loop0: rw=2049, want=45104, limit=40427 [ 131.806099][ T5922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.468'. [ 131.880796][ T4194] Bluetooth: hci4: command 0x0406 tx timeout [ 132.123427][ T5935] device syzkaller0 entered promiscuous mode [ 132.136700][ T5937] nftables ruleset with unbound chain [ 132.145685][ T5934] device syzkaller0 entered promiscuous mode [ 132.161505][ T5934] tipc: Enabled bearer , priority 0 [ 132.205968][ T5934] tipc: Resetting bearer [ 132.247491][ T5933] tipc: Resetting bearer [ 132.289454][ T5933] tipc: Disabling bearer [ 132.429569][ T5945] netlink: 12 bytes leftover after parsing attributes in process `syz.1.475'. [ 132.508103][ T5948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.475'. [ 132.522206][ T5948] netlink: 12 bytes leftover after parsing attributes in process `syz.1.475'. [ 132.659225][ T5945] bond2 (unregistering): Released all slaves [ 132.668136][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.674503][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.384562][ T5973] device syzkaller0 entered promiscuous mode [ 133.452999][ T5978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.486'. [ 133.784698][ T5980] netlink: 'syz.2.486': attribute type 10 has an invalid length. [ 133.831688][ T5980] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 133.857597][ T5973] tipc: Enabled bearer , priority 0 [ 133.917271][ T5972] tipc: Resetting bearer [ 134.029861][ T5972] tipc: Disabling bearer [ 134.881776][ T6008] netlink: 12 bytes leftover after parsing attributes in process `syz.1.493'. [ 135.024095][ T6015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.493'. [ 135.092930][ T6015] netlink: 12 bytes leftover after parsing attributes in process `syz.1.493'. [ 135.175578][ T6008] bond2 (unregistering): Released all slaves [ 135.246951][ T6023] device syzkaller0 entered promiscuous mode [ 135.532191][ T6040] device syzkaller0 entered promiscuous mode [ 135.565171][ T6040] tipc: Started in network mode [ 135.590525][ T6040] tipc: Node identity , cluster identity 4711 [ 135.596990][ T6040] tipc: Failed to obtain node identity [ 135.637723][ T6040] tipc: Enabling of bearer rejected, failed to enable media [ 136.000538][ T6059] netlink: 224 bytes leftover after parsing attributes in process `syz.2.505'. [ 136.385308][ T6069] __nla_validate_parse: 3 callbacks suppressed [ 136.385324][ T6069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.509'. [ 136.415941][ T6069] netlink: 12 bytes leftover after parsing attributes in process `syz.1.509'. [ 136.528766][ T6071] bond2 (unregistering): Released all slaves [ 136.759945][ T6076] device syzkaller0 entered promiscuous mode [ 136.825856][ T6077] device syzkaller0 entered promiscuous mode [ 136.852166][ T6077] tipc: Enabled bearer , priority 0 [ 136.889864][ T6075] tipc: Resetting bearer [ 136.934575][ T6075] tipc: Disabling bearer [ 137.515480][ T6093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.519'. [ 137.949239][ T6106] device syzkaller0 entered promiscuous mode [ 137.979820][ T6106] tipc: Started in network mode [ 137.984823][ T6106] tipc: Node identity , cluster identity 4711 [ 138.001251][ T6106] tipc: Failed to obtain node identity [ 138.018293][ T6106] tipc: Enabling of bearer rejected, failed to enable media [ 138.171952][ T6111] device syzkaller0 entered promiscuous mode [ 138.293319][ T6114] device syzkaller0 entered promiscuous mode [ 138.814621][ T6123] lo speed is unknown, defaulting to 1000 [ 140.044113][ T6142] device syzkaller0 entered promiscuous mode [ 140.327292][ T6151] device syzkaller0 entered promiscuous mode [ 140.425582][ T6161] tipc: Enabled bearer , priority 0 [ 140.438482][ T6161] device syzkaller0 entered promiscuous mode [ 140.456158][ T6161] tipc: Resetting bearer [ 140.469356][ T6159] tipc: Resetting bearer [ 140.488952][ T6159] tipc: Disabling bearer [ 141.114844][ T6197] device syzkaller0 entered promiscuous mode [ 141.166901][ T6199] device syzkaller0 entered promiscuous mode [ 141.179858][ T6197] tipc: Started in network mode [ 141.184999][ T6197] tipc: Node identity , cluster identity 4711 [ 141.191104][ T6197] tipc: Failed to obtain node identity [ 141.196915][ T6197] tipc: Enabling of bearer rejected, failed to enable media [ 142.155982][ T6204] lo speed is unknown, defaulting to 1000 [ 142.468544][ T6211] netlink: 12 bytes leftover after parsing attributes in process `syz.1.560'. [ 142.531369][ T6220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.560'. [ 142.540975][ T6220] netlink: 12 bytes leftover after parsing attributes in process `syz.1.560'. [ 142.625969][ T6211] bond2 (unregistering): Released all slaves [ 143.420067][ T6252] lo speed is unknown, defaulting to 1000 [ 143.594995][ T6254] device syzkaller0 entered promiscuous mode [ 144.000748][ T6267] netlink: 'syz.0.579': attribute type 3 has an invalid length. [ 144.407232][ T6279] futex_wake_op: syz.0.583 tries to shift op by 144; fix this program [ 144.433034][ T6279] loop0: detected capacity change from 0 to 2048 [ 144.495401][ T6279] loop0: p3 < > p4 < > [ 144.499638][ T6279] loop0: partition table partially beyond EOD, truncated [ 144.507077][ T6279] loop0: p3 start 4284289 is beyond EOD, truncated [ 145.233460][ T6284] device syzkaller0 entered promiscuous mode [ 145.681431][ T6292] device syzkaller0 entered promiscuous mode [ 145.879185][ T6294] netlink: 12 bytes leftover after parsing attributes in process `syz.0.589'. [ 145.979739][ T6296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.589'. [ 146.005075][ T6296] netlink: 12 bytes leftover after parsing attributes in process `syz.0.589'. [ 146.107243][ T6294] bond1 (unregistering): Released all slaves [ 146.751755][ T6310] device syzkaller0 entered promiscuous mode [ 146.939661][ T6315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.598'. [ 147.008616][ T6316] loop0: detected capacity change from 0 to 2048 [ 147.034998][ T6315] netlink: 'syz.4.598': attribute type 2 has an invalid length. [ 147.072007][ T6315] netlink: 4 bytes leftover after parsing attributes in process `syz.4.598'. [ 147.244485][ T6318] device syzkaller0 entered promiscuous mode [ 147.378620][ T6316] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 147.787228][ T6329] device syzkaller0 entered promiscuous mode [ 148.111397][ T6333] netlink: 12 bytes leftover after parsing attributes in process `syz.3.603'. [ 148.235472][ T6336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.603'. [ 148.262306][ T6336] netlink: 12 bytes leftover after parsing attributes in process `syz.3.603'. [ 148.392719][ T6340] bond2 (unregistering): Released all slaves [ 148.809443][ T6356] device syzkaller0 entered promiscuous mode [ 148.981797][ T6358] tipc: Started in network mode [ 149.023727][ T6358] tipc: Node identity 161c635e18cf, cluster identity 4711 [ 149.058185][ T6358] tipc: Enabled bearer , priority 0 [ 149.080884][ T6361] device syzkaller0 entered promiscuous mode [ 149.178084][ T6358] tipc: Resetting bearer [ 149.204301][ T6357] tipc: Resetting bearer [ 149.225053][ T6366] futex_wake_op: syz.1.612 tries to shift op by 144; fix this program [ 149.249740][ T6366] loop1: detected capacity change from 0 to 2048 [ 149.259442][ T6357] tipc: Disabling bearer [ 149.304795][ T4655] loop1: p3 < > p4 < > [ 149.309219][ T4655] loop1: partition table partially beyond EOD, truncated [ 149.385374][ T4655] loop1: p3 start 4284289 is beyond EOD, truncated [ 149.572597][ T6367] loop2: detected capacity change from 0 to 40427 [ 149.593478][ T6366] loop1: p3 < > p4 < > [ 149.597695][ T6366] loop1: partition table partially beyond EOD, truncated [ 149.605255][ T6366] loop1: p3 start 4284289 is beyond EOD, truncated [ 149.625860][ T6367] F2FS-fs (loop2): build fault injection attr: rate: 14, type: 0x1ffff [ 149.634298][ T6367] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0xe4 [ 149.643728][ T6367] F2FS-fs (loop2): invalid crc value [ 149.684072][ T6367] F2FS-fs (loop2): Found nat_bits in checkpoint [ 149.713052][ T6367] F2FS-fs (loop2) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x44e/0xaa0 [ 149.734818][ T3559] loop1: p3 < > p4 < > [ 149.739527][ T3559] loop1: partition table partially beyond EOD, truncated [ 149.765984][ T6367] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 149.792267][ T3559] loop1: p3 start 4284289 is beyond EOD, truncated [ 149.821193][ T6367] F2FS-fs (loop2) : inject no more block in inc_valid_node_count of f2fs_new_node_page+0x180/0x8e0 [ 150.130114][ T6387] netlink: 12 bytes leftover after parsing attributes in process `syz.3.617'. [ 150.135698][ T4655] udevd[4655]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 150.226663][ T6391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.617'. [ 150.319546][ T4655] udevd[4655]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 150.345585][ T6391] netlink: 12 bytes leftover after parsing attributes in process `syz.3.617'. [ 150.549014][ T6387] bond2 (unregistering): Released all slaves [ 150.848031][ T6403] device syzkaller0 entered promiscuous mode [ 151.034808][ T6408] tipc: Enabled bearer , priority 0 [ 151.131653][ T6408] device syzkaller0 entered promiscuous mode [ 151.319748][ T6407] tipc: Resetting bearer [ 151.468522][ T6407] tipc: Disabling bearer [ 151.566814][ T4188] attempt to access beyond end of device [ 151.566814][ T4188] loop2: rw=2049, want=45104, limit=40427 [ 151.617066][ T6418] futex_wake_op: syz.1.626 tries to shift op by 144; fix this program [ 151.642947][ T6418] loop1: detected capacity change from 0 to 2048 [ 151.674464][ T4655] loop1: p3 < > p4 < > [ 151.678892][ T4655] loop1: partition table partially beyond EOD, truncated [ 151.699463][ T4655] loop1: p3 start 4284289 is beyond EOD, truncated [ 151.748908][ T6418] loop1: p3 < > p4 < > [ 151.753592][ T6418] loop1: partition table partially beyond EOD, truncated [ 151.760874][ T6418] loop1: p3 start 4284289 is beyond EOD, truncated [ 152.263009][ T4247] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 152.302667][ T4247] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 160 with error 28 [ 152.360591][ T4247] EXT4-fs (loop0): This should not happen!! Data will be lost [ 152.360591][ T4247] [ 152.391703][ T4247] EXT4-fs (loop0): Total free blocks count 0 [ 152.431963][ T4247] EXT4-fs (loop0): Free/Dirty block details [ 152.437905][ T4247] EXT4-fs (loop0): free_blocks=4096 [ 152.466986][ T4247] EXT4-fs (loop0): dirty_blocks=176 [ 152.495682][ T4247] EXT4-fs (loop0): Block reservation details [ 152.527713][ T4247] EXT4-fs (loop0): i_reserved_data_blocks=11 [ 152.567433][ T4247] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 152.635126][ T4247] EXT4-fs (loop0): This should not happen!! Data will be lost [ 152.635126][ T4247] [ 152.729517][ T6434] netlink: 84 bytes leftover after parsing attributes in process `syz.1.629'. [ 153.178237][ T6449] device syzkaller0 entered promiscuous mode [ 153.243753][ T6453] netlink: 12 bytes leftover after parsing attributes in process `syz.3.636'. [ 153.438077][ T6458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.636'. [ 153.455895][ T6458] netlink: 12 bytes leftover after parsing attributes in process `syz.3.636'. [ 153.522270][ T6453] bond2 (unregistering): Released all slaves [ 153.571121][ T6462] futex_wake_op: syz.0.638 tries to shift op by 144; fix this program [ 153.595976][ T6462] loop0: detected capacity change from 0 to 2048 [ 153.826758][ T6461] loop1: detected capacity change from 0 to 40427 [ 153.843141][ T4655] loop0: p3 < > p4 < > [ 153.847701][ T4655] loop0: partition table partially beyond EOD, truncated [ 153.871077][ T4655] loop0: p3 start 4284289 is beyond EOD, truncated [ 153.885307][ T6461] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x1ffff [ 153.893834][ T6461] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0xe4 [ 153.903110][ T6462] loop0: p3 < > p4 < > [ 153.907298][ T6462] loop0: partition table partially beyond EOD, truncated [ 153.914514][ T6462] loop0: p3 start 4284289 is beyond EOD, truncated [ 153.927901][ T6461] F2FS-fs (loop1): invalid crc value [ 153.971054][ T6461] F2FS-fs (loop1): Found nat_bits in checkpoint [ 154.000314][ T6461] F2FS-fs (loop1) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x44e/0xaa0 [ 154.158696][ T6461] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 154.870819][ T6461] F2FS-fs (loop1) : inject no more block in inc_valid_node_count of f2fs_new_node_page+0x180/0x8e0 [ 154.930895][ T6485] netlink: 84 bytes leftover after parsing attributes in process `syz.2.643'. [ 155.060156][ T4655] udevd[4655]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 155.213653][ T4655] udevd[4655]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 155.863478][ T6515] futex_wake_op: syz.2.652 tries to shift op by 144; fix this program [ 155.890540][ T6515] loop2: detected capacity change from 0 to 2048 [ 155.924761][ T4655] loop2: p3 < > p4 < > [ 155.929058][ T4655] loop2: partition table partially beyond EOD, truncated [ 155.961333][ T4655] loop2: p3 start 4284289 is beyond EOD, truncated [ 156.001831][ T6515] loop2: p3 < > p4 < > [ 156.006220][ T6515] loop2: partition table partially beyond EOD, truncated [ 156.013550][ T6515] loop2: p3 start 4284289 is beyond EOD, truncated [ 156.477072][ T4187] attempt to access beyond end of device [ 156.477072][ T4187] loop1: rw=2049, want=45104, limit=40427 [ 157.289752][ T6535] netlink: 84 bytes leftover after parsing attributes in process `syz.3.657'. [ 159.364845][ T6568] futex_wake_op: syz.4.666 tries to shift op by 144; fix this program [ 160.178531][ T6568] loop4: detected capacity change from 0 to 2048 [ 160.212579][ T6563] tipc: Enabled bearer , priority 0 [ 160.226552][ T4262] loop4: p3 < > p4 < > [ 160.230858][ T4262] loop4: partition table partially beyond EOD, truncated [ 160.281618][ T4262] loop4: p3 start 4284289 is beyond EOD, truncated [ 160.290101][ T6574] device syzkaller0 entered promiscuous mode [ 160.366361][ T6563] tipc: Resetting bearer [ 160.410466][ T6562] tipc: Resetting bearer [ 160.447602][ T6562] tipc: Disabling bearer [ 160.563879][ T6568] loop4: p3 < > p4 < > [ 160.568144][ T6568] loop4: partition table partially beyond EOD, truncated [ 160.575536][ T6568] loop4: p3 start 4284289 is beyond EOD, truncated [ 160.887345][ T6595] netlink: 'syz.0.675': attribute type 1 has an invalid length. [ 160.913891][ T6599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.678'. [ 160.989137][ T4655] udevd[4655]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 161.107632][ T4655] udevd[4655]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 161.845038][ T6620] futex_wake_op: syz.0.683 tries to shift op by 144; fix this program [ 161.870261][ T6620] loop0: detected capacity change from 0 to 2048 [ 161.926039][ T6620] loop0: p3 < > p4 < > [ 161.930281][ T6620] loop0: partition table partially beyond EOD, truncated [ 161.938435][ T6620] loop0: p3 start 4284289 is beyond EOD, truncated [ 162.811655][ T3559] loop0: p3 < > p4 < > [ 162.816502][ T3559] loop0: partition table partially beyond EOD, truncated [ 162.888229][ T3559] loop0: p3 start 4284289 is beyond EOD, truncated [ 163.466316][ T6637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.692'. [ 163.571454][ T6641] netlink: 'syz.1.694': attribute type 1 has an invalid length. [ 164.679146][ T6657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.699'. [ 164.711982][ T6657] netlink: 12 bytes leftover after parsing attributes in process `syz.3.699'. [ 164.782109][ T4655] udevd[4655]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 165.883324][ T6687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.707'. [ 165.981178][ T4655] udevd[4655]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 166.540374][ T6701] device syzkaller0 entered promiscuous mode [ 167.744154][ T6722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.717'. [ 167.820355][ T6722] netlink: 12 bytes leftover after parsing attributes in process `syz.3.717'. [ 168.280288][ T6750] rdma_rxe: ignoring netdev event = 10 for lo [ 168.343994][ T6750] infiniband s: set down [ 168.723448][ T6750] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.730872][ T6750] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.130403][ T6750] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.167718][ T6750] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.438187][ T6750] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.447476][ T6750] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.456457][ T6750] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.465663][ T6750] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.560202][ T23] lo speed is unknown, defaulting to 1000 [ 169.659943][ T23] lo speed is unknown, defaulting to 1000 [ 169.685588][ T6792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.733'. [ 169.710540][ T6792] netlink: 12 bytes leftover after parsing attributes in process `syz.2.733'. [ 170.063530][ T6812] tipc: Enabled bearer , priority 0 [ 170.085590][ T6812] tipc: Resetting bearer [ 170.122923][ T6808] tipc: Disabling bearer [ 170.147113][ T6818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.741'. [ 170.521136][ T6837] qfq: no options [ 170.556703][ T6837] netlink: 'syz.1.745': attribute type 1 has an invalid length. [ 170.590851][ T6840] device syzkaller0 entered promiscuous mode [ 170.857689][ T6842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.747'. [ 170.894308][ T6842] netlink: 12 bytes leftover after parsing attributes in process `syz.1.747'. [ 171.172825][ T6856] tipc: Enabled bearer , priority 0 [ 171.208624][ T6856] tipc: Resetting bearer [ 171.274943][ T6855] tipc: Disabling bearer [ 171.456835][ T6872] qfq: no options [ 171.471712][ T6872] netlink: 'syz.2.757': attribute type 1 has an invalid length. [ 171.504662][ T6877] device syzkaller0 entered promiscuous mode [ 171.719903][ T6887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.761'. [ 171.729965][ T6887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.761'. [ 172.035315][ T6909] tipc: Enabled bearer , priority 0 [ 172.079904][ T6909] tipc: Resetting bearer [ 172.156161][ T6907] tipc: Disabling bearer [ 172.206653][ T6928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.771'. [ 172.455355][ T6938] device syzkaller0 entered promiscuous mode [ 173.015485][ T6969] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 173.435662][ T6994] device syzkaller0 entered promiscuous mode [ 173.619701][ T6999] __nla_validate_parse: 3 callbacks suppressed [ 173.619715][ T6999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.793'. [ 173.644041][ T6999] netlink: 12 bytes leftover after parsing attributes in process `syz.0.793'. [ 174.144641][ T7024] device syzkaller0 entered promiscuous mode [ 174.493561][ T7034] lo speed is unknown, defaulting to 1000 [ 174.590221][ T7037] device syzkaller0 entered promiscuous mode [ 174.605592][ T7037] tipc: Enabled bearer , priority 0 [ 174.632268][ T7037] tipc: Resetting bearer [ 174.652549][ T7036] tipc: Resetting bearer [ 174.673859][ T7036] tipc: Disabling bearer [ 174.979525][ T7044] device syzkaller0 entered promiscuous mode [ 175.447781][ T7056] device syzkaller0 entered promiscuous mode [ 175.733086][ T7060] device syzkaller0 entered promiscuous mode [ 175.753435][ T7060] tipc: Enabled bearer , priority 0 [ 175.766401][ T7063] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 175.802659][ T7060] tipc: Resetting bearer [ 175.829690][ T7059] tipc: Resetting bearer [ 175.842805][ T7059] tipc: Disabling bearer [ 175.945648][ T7067] device syzkaller0 entered promiscuous mode [ 176.776017][ T7086] loop1: detected capacity change from 0 to 40427 [ 176.849841][ T7088] device syzkaller0 entered promiscuous mode [ 176.869360][ T7086] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x1ffff [ 176.877832][ T7086] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0xe4 [ 176.887572][ T7086] F2FS-fs (loop1): invalid crc value [ 176.943680][ T7086] F2FS-fs (loop1): Found nat_bits in checkpoint [ 176.972591][ T7086] F2FS-fs (loop1) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x44e/0xaa0 [ 176.998916][ T7086] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 177.014219][ T7086] F2FS-fs (loop1) : inject no more block in inc_valid_node_count of f2fs_new_node_page+0x180/0x8e0 [ 178.065705][ T7103] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.073157][ T7103] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.493993][ T4187] attempt to access beyond end of device [ 178.493993][ T4187] loop1: rw=2049, want=45104, limit=40427 [ 179.033282][ T7103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.100904][ T7103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.388007][ T7103] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.398127][ T7103] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.408784][ T7103] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.417886][ T7103] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.468022][ T7120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.837'. [ 179.491495][ T7120] netlink: 12 bytes leftover after parsing attributes in process `syz.1.837'. [ 179.885911][ T7140] netlink: 228 bytes leftover after parsing attributes in process `syz.0.847'. [ 180.733711][ T7149] device syzkaller0 entered promiscuous mode [ 180.823354][ T5435] Bluetooth: hci1: command 0x0406 tx timeout [ 180.835315][ T5435] Bluetooth: hci2: command 0x0406 tx timeout [ 180.855321][ T5435] Bluetooth: hci3: command 0x0406 tx timeout [ 180.887884][ T7155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.853'. [ 180.966942][ T7160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.853'. [ 181.081968][ T7160] netlink: 12 bytes leftover after parsing attributes in process `syz.2.853'. [ 181.184969][ T7157] device syzkaller0 entered promiscuous mode [ 181.223603][ T7165] rdma_rxe: ignoring netdev event = 23 for lo [ 181.229956][ T7165] rdma_rxe: lo changed mtu to 5376 [ 181.267354][ T7165] rdma_rxe: ignoring netdev event = 14 for lo [ 181.303268][ T7165] infiniband s: set active [ 181.307970][ T7165] infiniband s: set active [ 181.449941][ T21] lo speed is unknown, defaulting to 1000 [ 181.467463][ T4229] lo speed is unknown, defaulting to 1000 [ 181.482856][ T7166] lo speed is unknown, defaulting to 1000 [ 181.494168][ T21] lo speed is unknown, defaulting to 1000 [ 181.888774][ T7182] netlink: 272 bytes leftover after parsing attributes in process `syz.0.859'. [ 183.462445][ T7228] device syzkaller0 entered promiscuous mode [ 183.679443][ T7236] netlink: 272 bytes leftover after parsing attributes in process `syz.4.872'. [ 184.451687][ T7238] netlink: 84 bytes leftover after parsing attributes in process `syz.3.875'. [ 185.191048][ T1231] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 185.245674][ T7271] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 185.253380][ T7271] IPv6: NLM_F_CREATE should be set when creating new route [ 185.260657][ T7271] IPv6: NLM_F_CREATE should be set when creating new route [ 185.358120][ T7285] device syzkaller0 entered promiscuous mode [ 185.869092][ T7298] device syzkaller0 entered promiscuous mode [ 185.979628][ T7306] device syzkaller0 entered promiscuous mode [ 186.050416][ T7310] netlink: 84 bytes leftover after parsing attributes in process `syz.0.893'. [ 186.131533][ T7306] tipc: Enabled bearer , priority 0 [ 186.224556][ T7306] tipc: Resetting bearer [ 186.259718][ T7305] tipc: Resetting bearer [ 186.297535][ T7305] tipc: Disabling bearer [ 186.568950][ T7319] device syzkaller0 entered promiscuous mode [ 186.599438][ T7319] tipc: Enabled bearer , priority 0 [ 186.668835][ T7318] tipc: Resetting bearer [ 186.748433][ T7318] tipc: Disabling bearer [ 186.783832][ T7328] device syzkaller0 entered promiscuous mode [ 187.252534][ T7351] device syzkaller0 entered promiscuous mode [ 187.292835][ T7357] tipc: Enabled bearer , priority 0 [ 187.502356][ T7350] tipc: Resetting bearer [ 187.579852][ T7350] tipc: Disabling bearer [ 188.021515][ T7388] netlink: 32 bytes leftover after parsing attributes in process `syz.4.914'. [ 188.208310][ T7396] loop4: detected capacity change from 0 to 16 [ 188.281799][ T7396] erofs: (device loop4): erofs_read_superblock: blkszbits 9 isn't supported on this platform [ 188.497231][ T7405] device syzkaller0 entered promiscuous mode [ 188.578151][ T7408] tipc: Enabled bearer , priority 0 [ 188.656181][ T7413] overlayfs: missing 'lowerdir' [ 189.033457][ T7408] tipc: Resetting bearer [ 189.118174][ T7404] tipc: Resetting bearer [ 189.162525][ T7404] tipc: Disabling bearer [ 189.725190][ T7449] lo speed is unknown, defaulting to 1000 [ 191.319941][ T4191] Bluetooth: hci4: link tx timeout [ 191.325583][ T4191] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 191.333423][ T4191] Bluetooth: hci4: link tx timeout [ 191.338546][ T4191] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 192.182356][ T7481] overlayfs: missing 'lowerdir' [ 192.501622][ T7485] device syzkaller0 entered promiscuous mode [ 193.582022][ T7488] tipc: Enabled bearer , priority 0 [ 193.724112][ T7485] tipc: Resetting bearer [ 193.741196][ T7484] tipc: Resetting bearer [ 193.777547][ T7484] tipc: Disabling bearer [ 194.111940][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 194.131940][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 194.141926][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 194.151927][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 194.161926][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 194.171925][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 194.181927][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 194.191923][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 194.201925][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 194.211930][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 195.000386][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.010559][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.306487][ T7520] lo speed is unknown, defaulting to 1000 [ 196.315632][ T7535] xt_CT: You must specify a L4 protocol and not use inversions on it [ 197.370544][ T7549] tipc: Enabled bearer , priority 0 [ 197.401191][ T7549] tipc: Resetting bearer [ 197.434225][ T7548] tipc: Disabling bearer [ 197.760609][ T7559] netlink: 20 bytes leftover after parsing attributes in process `syz.1.960'. [ 197.784730][ T7559] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 197.811744][ T7559] device bridge1 entered promiscuous mode [ 197.989352][ T7560] netlink: 20 bytes leftover after parsing attributes in process `syz.1.960'. [ 198.572346][ T7564] overlayfs: missing 'workdir' [ 198.919388][ T7560] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 199.009974][ T7560] device bridge2 entered promiscuous mode [ 200.574069][ T7595] tipc: Enabling of bearer rejected, failed to enable media [ 200.950255][ T7616] netlink: 12 bytes leftover after parsing attributes in process `syz.4.971'. [ 201.042284][ T7619] netlink: 8 bytes leftover after parsing attributes in process `syz.4.971'. [ 201.051091][ T7619] netlink: 12 bytes leftover after parsing attributes in process `syz.4.971'. [ 201.275546][ T7619] bond1: (slave veth3): Enslaving as an active interface with an up link [ 201.312548][ T7616] bond1 (unregistering): (slave veth3): Releasing backup interface [ 201.387168][ T7616] bond1 (unregistering): Released all slaves [ 201.801178][ T4191] Bluetooth: hci0: unexpected event for opcode 0x0c7c [ 202.435913][ T7640] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.780375][ T7640] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.820914][ T7640] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.068968][ T7640] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.078562][ T7640] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.087518][ T7640] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.096520][ T7640] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.330446][ T7664] tipc: Started in network mode [ 203.377327][ T7664] tipc: Node identity , cluster identity 4711 [ 203.437786][ T7664] tipc: Failed to obtain node identity [ 203.460876][ T7664] tipc: Enabling of bearer rejected, failed to enable media [ 203.486856][ T7675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.984'. [ 203.506131][ T7675] netlink: 12 bytes leftover after parsing attributes in process `syz.0.984'. [ 203.531802][ T7671] netlink: 12 bytes leftover after parsing attributes in process `syz.0.984'. [ 203.588437][ T7679] bond1 (unregistering): Released all slaves [ 203.642296][ T7686] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 203.658542][ T7] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 203.706710][ T7686] loop3: detected capacity change from 0 to 1764 [ 203.921946][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 204.482506][ T7696] lo speed is unknown, defaulting to 1000 [ 205.884883][ T7] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 206.329289][ T7] usb 2-1: config 0 has no interface number 0 [ 206.341085][ T7] usb 2-1: config 0 interface 184 has no altsetting 0 [ 206.382035][ T7] usb 2-1: string descriptor 0 read error: -71 [ 206.398562][ T7] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 206.411083][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.457577][ T7] usb 2-1: config 0 descriptor?? [ 206.530025][ T7] usb 2-1: can't set config #0, error -71 [ 206.577161][ T7] usb 2-1: USB disconnect, device number 2 [ 206.593659][ T7722] loop2: detected capacity change from 0 to 128 [ 206.611198][ T7719] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1514) ! [ 206.730018][ T7722] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 206.822090][ T7722] ext4 filesystem being mounted at /211/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.889342][ T7731] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1000'. [ 206.959732][ T7734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1000'. [ 207.008261][ T7734] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1000'. [ 207.036613][ T7734] bond1: (slave veth5): Enslaving as an active interface with an up link [ 207.065003][ T7732] tipc: Enabled bearer , priority 0 [ 207.137309][ T7731] bond1 (unregistering): (slave veth5): Releasing backup interface [ 207.161683][ T7731] bond1 (unregistering): Released all slaves [ 207.240640][ T7749] tipc: Resetting bearer [ 207.261407][ T7729] tipc: Disabling bearer [ 207.381578][ T7748] lo speed is unknown, defaulting to 1000 [ 209.606951][ T7775] loop1: detected capacity change from 0 to 2048 [ 209.727935][ T7776] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 210.379724][ T7783] loop2: detected capacity change from 0 to 2048 [ 210.490544][ T7783] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,init_itable=0x0000000000000b7f,. Quota mode: none. [ 212.031745][ T7803] tipc: Enabling of bearer rejected, failed to enable media [ 212.516623][ T7823] loop4: detected capacity change from 0 to 2048 [ 212.668685][ T7828] loop1: detected capacity change from 0 to 2048 [ 212.810072][ T7829] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 212.867464][ T7823] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 215.283165][ T7846] loop4: detected capacity change from 0 to 128 [ 215.348247][ T7850] tipc: Enabled bearer , priority 0 [ 215.378214][ T7846] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 215.391090][ T7850] tipc: Resetting bearer [ 215.467809][ T26] audit: type=1800 audit(1784370718.636:2): pid=7846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1030" name="file2" dev="loop4" ino=1048591 res=0 errno=0 [ 215.498458][ T7849] tipc: Disabling bearer [ 215.499799][ T7846] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 215.592056][ T7846] FAT-fs (loop4): Filesystem has been set read-only [ 215.599140][ T7846] attempt to access beyond end of device [ 215.599140][ T7846] loop4: rw=0, want=2073, limit=128 [ 215.625883][ T7855] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1017'. [ 215.719966][ T7860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1017'. [ 215.735777][ T7857] loop3: detected capacity change from 0 to 1024 [ 215.739501][ T7860] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1017'. [ 215.810053][ T7860] bond1: (slave veth7): Enslaving as an active interface with an up link [ 215.977102][ T7855] bond1 (unregistering): (slave veth7): Releasing backup interface [ 217.217932][ T7855] bond1 (unregistering): Released all slaves [ 217.359595][ T5019] hfsplus: b-tree write err: -5, ino 25 [ 217.393622][ T5019] hfsplus: b-tree write err: -5, ino 4 [ 217.399566][ T5019] hfsplus: b-tree write err: -5, ino 2 [ 217.435116][ T5019] hfsplus: b-tree write err: -5, ino 17 [ 217.614728][ T7879] loop1: detected capacity change from 0 to 2048 [ 217.715566][ T7880] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 218.084736][ T7878] loop0: detected capacity change from 0 to 1024 [ 218.361134][ T7878] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 218.371410][ T7885] loop2: detected capacity change from 0 to 128 [ 218.379184][ T7882] loop3: detected capacity change from 0 to 1024 [ 218.521756][ T7885] attempt to access beyond end of device [ 218.521756][ T7885] loop2: rw=2049, want=224, limit=128 [ 218.534973][ T7878] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,nombcache,mb_optimize_scan=0x0000000000000000,errors=remount-ro,barrier,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x0000000000000007,. Quota mode: none. [ 219.015090][ T7898] tipc: Enabled bearer , priority 0 [ 219.058067][ T7898] tipc: Resetting bearer [ 219.092898][ T7897] tipc: Disabling bearer [ 220.352204][ T6784] tipc: Node number set to 248734558 [ 220.443096][ T7913] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1048'. [ 220.481420][ T7914] loop1: detected capacity change from 0 to 1024 [ 220.633376][ T7913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1048'. [ 221.742069][ T7913] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1048'. [ 222.245735][ T5325] hfsplus: b-tree write err: -5, ino 25 [ 222.255407][ T5325] hfsplus: b-tree write err: -5, ino 4 [ 222.260980][ T5325] hfsplus: b-tree write err: -5, ino 2 [ 222.293321][ T7913] bond2: (slave veth3): Enslaving as an active interface with an up link [ 222.455359][ T7920] bond2 (unregistering): (slave veth3): Releasing backup interface [ 222.483011][ T7920] bond2 (unregistering): Released all slaves [ 222.541528][ T7932] 9pnet: Insufficient options for proto=fd [ 222.552530][ T9] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 222.581779][ T7934] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 222.589041][ T7934] IPv6: NLM_F_CREATE should be set when creating new route [ 222.596295][ T7934] IPv6: NLM_F_CREATE should be set when creating new route [ 223.819177][ T7964] tipc: Enabling of bearer rejected, failed to enable media [ 224.086060][ T7976] loop2: detected capacity change from 0 to 2048 [ 224.218862][ T7978] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 224.422087][ T5435] Bluetooth: hci4: command 0x0405 tx timeout [ 226.064978][ T7995] loop4: detected capacity change from 0 to 512 [ 226.180558][ T7995] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nogrpid,inode_readahead_blks=0x0000000000010000,,errors=continue. Quota mode: writeback. [ 226.316461][ T7995] ext4 filesystem being mounted at /167/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 226.383083][ T8003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1065'. [ 226.462469][ T8006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1065'. [ 226.531509][ T7995] TCP: TCP_TX_DELAY enabled [ 226.538878][ T8006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1065'. [ 226.661401][ T8006] bond2: (slave veth5): Enslaving as an active interface with an up link [ 226.711006][ T8003] bond2 (unregistering): (slave veth5): Releasing backup interface [ 226.746775][ T8003] bond2 (unregistering): Released all slaves [ 228.180309][ T8036] loop0: detected capacity change from 0 to 2048 [ 228.524761][ T8037] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 230.326917][ T8056] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1085'. [ 231.543309][ T8061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1085'. [ 231.667182][ T8061] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1085'. [ 231.856692][ T8067] loop3: detected capacity change from 0 to 128 [ 231.902605][ T8067] ======================================================= [ 231.902605][ T8067] WARNING: The mand mount option has been deprecated and [ 231.902605][ T8067] and is ignored by this kernel. Remove the mand [ 231.902605][ T8067] option from the mount to silence this warning. [ 231.902605][ T8067] ======================================================= [ 232.001734][ T8067] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 232.053005][ T8067] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 232.165440][ T8069] loop1: detected capacity change from 0 to 1024 [ 232.194911][ T144] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 232.199140][ T8073] loop4: detected capacity change from 0 to 256 [ 232.238916][ T8073] exFAT-fs (loop4): invalid fs_name [ 232.273693][ T8073] exFAT-fs (loop4): failed to read boot sector [ 232.312985][ T8073] exFAT-fs (loop4): failed to recognize exfat type [ 233.137137][ T8073] loop4: detected capacity change from 0 to 256 [ 233.304548][ T8099] loop1: detected capacity change from 0 to 128 [ 233.374257][ T8099] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 233.385681][ T8103] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1099'. [ 235.553971][ T8099] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 235.576920][ T8109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1099'. [ 235.646057][ T8109] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1099'. [ 236.408963][ T8131] loop4: detected capacity change from 0 to 512 [ 236.569701][ T8131] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nogrpid,inode_readahead_blks=0x0000000000010000,,errors=continue. Quota mode: writeback. [ 236.587244][ T8131] ext4 filesystem being mounted at /172/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 236.632115][ T8144] loop2: detected capacity change from 0 to 16 [ 236.689070][ T8144] erofs: (device loop2): mounted with root inode @ nid 36. [ 236.717219][ T8146] device syzkaller0 entered promiscuous mode [ 236.748497][ T8152] loop1: detected capacity change from 0 to 2048 [ 236.813560][ T8152] EXT4-fs (loop1): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 237.962811][ T8161] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1114'. [ 238.067194][ T8165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1114'. [ 238.087063][ T8168] loop0: detected capacity change from 0 to 1024 [ 238.107547][ T8165] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1114'. [ 238.162495][ T8168] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 238.517821][ T8176] device syzkaller0 entered promiscuous mode [ 239.826401][ T8182] device syzkaller0 entered promiscuous mode [ 241.513701][ T8215] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1130'. [ 241.590869][ T8217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1130'. [ 241.680548][ T8217] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1130'. [ 241.838214][ T8224] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1135'. [ 241.867744][ T8224] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1135'. [ 245.226677][ T8254] loop3: detected capacity change from 0 to 512 [ 245.521011][ T8254] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 245.540957][ T8254] ext4 filesystem being mounted at /236/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.615101][ T8263] lo speed is unknown, defaulting to 1000 [ 247.241661][ T8267] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1150'. [ 248.472784][ T8267] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1150'. [ 249.315536][ T8293] ODEBUG: Out of memory. ODEBUG disabled [ 249.997855][ T8300] loop4: detected capacity change from 0 to 128 [ 250.035014][ T8301] loop0: detected capacity change from 0 to 256 [ 250.079796][ T8300] EXT4-fs (loop4): Test dummy encryption mode enabled [ 250.130440][ T8300] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 250.162627][ T8301] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x23633cdc, utbl_chksum : 0xe619d30d) [ 250.318526][ T8300] ext4 filesystem being mounted at /183/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 250.842343][ T8323] lo speed is unknown, defaulting to 1000 [ 253.724151][ T8341] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1162'. [ 253.782600][ T8341] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1162'. [ 253.908940][ T8350] loop1: detected capacity change from 0 to 1024 [ 254.151962][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 254.802717][ T4191] Bluetooth: hci4: link tx timeout [ 254.807847][ T4191] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 254.815547][ T4191] Bluetooth: hci4: link tx timeout [ 254.820659][ T4191] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 254.944798][ T8356] mmap: syz.1.1169 (8356) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 255.534353][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 255.554135][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.560473][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.595528][ T8361] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.1168' sets config #0 [ 255.732430][ T23] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 256.061831][ T23] usb 5-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 256.070961][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.079815][ T23] usb 5-1: Product: syz [ 256.084315][ T23] usb 5-1: Manufacturer: syz [ 256.089073][ T23] usb 5-1: SerialNumber: syz [ 256.147360][ T23] usb 5-1: config 0 descriptor?? [ 256.203607][ T8348] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 258.131546][ T5435] usb 5-1: USB disconnect, device number 2 [ 258.148395][ T8377] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1172'. [ 258.363869][ T8383] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1175'. [ 259.723172][ T8389] device syzkaller0 entered promiscuous mode [ 260.089468][ T8395] binder: 8392:8395 ioctl c0306201 200000000480 returned -14 [ 260.290088][ T8399] loop0: detected capacity change from 0 to 128 [ 260.320595][ T8399] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 260.389936][ T26] audit: type=1800 audit(1784370763.556:3): pid=8399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1181" name="file1" dev="loop0" ino=94 res=0 errno=0 [ 267.525763][ T8413] loop1: detected capacity change from 0 to 1024 [ 267.570619][ T8410] lo speed is unknown, defaulting to 1000 [ 268.593351][ T8429] loop0: detected capacity change from 0 to 8 [ 268.733213][ T8429] SQUASHFS error: zstd decompression error: 2 [ 268.739606][ T8429] SQUASHFS error: zstd decompression failed, data probably corrupt [ 268.786100][ T8434] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1188'. [ 268.847295][ T8429] SQUASHFS error: Failed to read block 0x62b: -5 [ 268.895230][ T8429] SQUASHFS error: Unable to read metadata cache entry [629] [ 269.496656][ T8429] SQUASHFS error: Unable to read directory block [629:ff26] [ 269.605725][ T8438] loop3: detected capacity change from 0 to 512 [ 269.975184][ T8438] FAT-fs (loop3): bogus sectors per cluster 69 [ 269.981423][ T8438] FAT-fs (loop3): Can't find a valid FAT filesystem [ 270.057693][ T8443] loop1: detected capacity change from 0 to 256 [ 270.222261][ T8447] loop4: detected capacity change from 0 to 128 [ 270.251764][ T8443] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 270.367938][ T8447] EXT4-fs (loop4): Test dummy encryption mode enabled [ 270.472550][ T8447] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 270.575111][ T8447] ext4 filesystem being mounted at /190/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 270.662188][ T4233] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 270.995955][ T8447] fscrypt (loop4): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 271.082126][ T4233] usb 1-1: unable to get BOS descriptor or descriptor too short [ 271.106046][ T4655] udevd[4655]: incorrect ext4 checksum on /dev/loop4 [ 271.202161][ T4233] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 271.952743][ T4233] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 272.017475][ T4233] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 272.060256][ T4233] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 273.151958][ T4233] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 273.202190][ T4233] usb 1-1: config 1 interface 1 has no altsetting 0 [ 273.322923][ T8492] lo speed is unknown, defaulting to 1000 [ 273.491998][ T4233] usb 1-1: string descriptor 0 read error: -71 [ 273.498373][ T4233] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 273.574900][ T8496] loop3: detected capacity change from 0 to 2048 [ 273.697437][ T8497] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 274.231574][ T8500] device syzkaller0 entered promiscuous mode [ 275.374863][ T5435] Bluetooth: hci0: command 0x0409 tx timeout [ 276.636644][ T8507] lo speed is unknown, defaulting to 1000 [ 276.652178][ T4233] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.802629][ T4233] usb 1-1: can't set config #1, error -71 [ 276.828294][ T4233] usb 1-1: USB disconnect, device number 2 [ 277.293922][ T8513] loop0: detected capacity change from 0 to 1024 [ 277.421559][ T8513] hfsplus: keylen 65060 too large [ 277.429789][ T8513] hfsplus: xattr search failed [ 277.432670][ T8492] chnl_net:caif_netlink_parms(): no params data found [ 277.440165][ T8519] loop3: detected capacity change from 0 to 1024 [ 277.472011][ T4233] Bluetooth: hci0: command 0x041b tx timeout [ 278.045192][ T8492] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.282083][ T8492] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.352088][ T8492] device bridge_slave_0 entered promiscuous mode [ 278.412804][ T8492] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.442695][ T8492] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.470896][ T8492] device bridge_slave_1 entered promiscuous mode [ 278.894236][ T8539] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6 [ 279.101265][ T8492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.611704][ T4264] Bluetooth: hci0: command 0x040f tx timeout [ 279.630023][ T8492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.678979][ T8492] team0: Port device team_slave_0 added [ 279.700811][ T8492] team0: Port device team_slave_1 added [ 279.723551][ T8492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.741502][ T8492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.769362][ T8492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.802788][ T8492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.826401][ T8492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.965772][ T8492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.015181][ T8560] loop3: detected capacity change from 0 to 1024 [ 281.234053][ T8492] device hsr_slave_0 entered promiscuous mode [ 281.262168][ T8492] device hsr_slave_1 entered promiscuous mode [ 281.278353][ T8492] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 281.312547][ T8492] Cannot create hsr debugfs directory [ 281.622032][ T4264] Bluetooth: hci0: command 0x0419 tx timeout [ 281.800629][ T8571] loop4: detected capacity change from 0 to 2048 [ 282.034201][ T8576] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 282.640677][ T8584] loop3: detected capacity change from 0 to 512 [ 282.721221][ T8584] EXT4-fs (loop3): Ignoring removed bh option [ 282.747871][ T8590] loop4: detected capacity change from 0 to 1024 [ 282.855708][ T8584] EXT4-fs (loop3): orphan cleanup on readonly fs [ 282.863999][ T8584] EXT4-fs warning (device loop3): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 283.022807][ T8590] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 283.065246][ T4375] tipc: Left network mode [ 283.073060][ T8584] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 283.117745][ T8492] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 283.132208][ T8584] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #13: comm syz.3.1228: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 283.193582][ T8584] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.1228: couldn't read orphan inode 13 (err -117) [ 283.232411][ T8584] EXT4-fs (loop3): mounted filesystem without journal. Opts: sysvgroups,noblock_validity,min_batch_time=0x0000000000000514,grpjquota=,stripe=0x0000000000000002,journal_ioprio=0x0000000000000001,bh,,errors=continue. Quota mode: writeback. [ 283.258757][ T8492] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 283.322363][ T8492] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 283.370390][ T8492] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 285.552816][ T8646] infiniband s: set active [ 285.559345][ T4194] lo speed is unknown, defaulting to 1000 [ 285.600232][ T8492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.687689][ T8492] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.735455][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 285.766151][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 285.828893][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 285.870962][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 285.919578][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.926739][ T4271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.971628][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 285.984458][ T8661] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1245'. [ 286.003519][ T8661] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1245'. [ 286.012541][ T5325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 286.022696][ T5325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 286.068071][ T5325] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.075227][ T5325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.572289][ T8663] fuse: Bad value for 'fd' [ 287.342264][ T5325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 287.358050][ T5325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 287.415812][ T5325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 287.449822][ T5325] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 287.483430][ T5325] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 287.560204][ T8492] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 287.608238][ T8492] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 287.640369][ T5325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 287.650750][ T5325] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 287.682765][ T5325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 287.712806][ T5325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 287.745964][ T8675] loop0: detected capacity change from 0 to 1024 [ 287.752745][ T5325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 287.772445][ T5325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 287.832853][ T5325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 290.034139][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 290.041714][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 290.116444][ T8492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.189468][ T8703] device syzkaller0 entered promiscuous mode [ 290.210300][ T8707] loop0: detected capacity change from 0 to 1024 [ 290.516745][ T8716] device syzkaller0 entered promiscuous mode [ 290.535315][ T8721] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1256'. [ 290.596594][ T8721] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1256'. [ 290.770200][ T4375] device hsr_slave_0 left promiscuous mode [ 290.794389][ T4375] device hsr_slave_1 left promiscuous mode [ 291.802753][ T4375] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.823604][ T4375] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.882685][ T4375] device bridge_slave_0 left promiscuous mode [ 291.890725][ T4375] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.057936][ T4375] bond1 (unregistering): Released all slaves [ 292.341679][ T4375] team0 (unregistering): Port device team_slave_1 removed [ 292.357015][ T4375] team0 (unregistering): Port device team_slave_0 removed [ 292.371300][ T4375] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 292.388862][ T4375] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.115488][ T4375] bond0 (unregistering): Released all slaves [ 293.222710][ T8733] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1248'. [ 293.231712][ T8733] netem: invalid attributes len -16 [ 293.251827][ T8733] netem: change failed [ 293.274218][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 293.299234][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 293.329729][ T8750] fuse: Bad value for 'fd' [ 293.423629][ T8492] device veth0_vlan entered promiscuous mode [ 293.453051][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 293.462480][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 293.496507][ T8492] device veth1_vlan entered promiscuous mode [ 293.533174][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 293.546617][ T8761] loop4: detected capacity change from 0 to 128 [ 293.569908][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 293.591594][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 293.648819][ T8761] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: none. [ 293.649943][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 293.675867][ T8761] ext4 filesystem being mounted at /204/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 293.714537][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 293.723621][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 293.750929][ T8492] device veth0_macvtap entered promiscuous mode [ 293.803888][ T8492] device veth1_macvtap entered promiscuous mode [ 293.891348][ T8492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.898945][ T8779] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1266'. [ 293.921772][ T8778] loop0: detected capacity change from 0 to 1024 [ 293.926946][ T8492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.530262][ T8761] fscrypt (loop4, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)") [ 294.535778][ T8492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.551219][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 294.558053][ T8779] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1266'. [ 294.575891][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 294.768398][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 294.782615][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 294.794080][ T8492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.916049][ T8492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.018978][ T8492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.052343][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 295.088580][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 295.299638][ T8492] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.337119][ T8492] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.367579][ T8492] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.389345][ T8492] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.406159][ T8800] device syzkaller0 entered promiscuous mode [ 295.480110][ T8807] binder: BINDER_SET_CONTEXT_MGR already set [ 295.533298][ T8807] binder: 8806:8807 ioctl 4018620d 200000004a80 returned -16 [ 295.712054][ T5325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.720058][ T5325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.760137][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 295.854996][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.892569][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.914953][ T8823] device syzkaller0 entered promiscuous mode [ 295.970658][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 296.011424][ T8830] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1278'. [ 296.230599][ T8830] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1278'. [ 296.843870][ T8845] device syzkaller0 entered promiscuous mode [ 296.936605][ T8847] sch_tbf: peakrate 8 is lower than or equals to rate 4294961300 ! [ 296.967735][ T8850] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1201'. [ 296.993287][ T8858] device syzkaller0 entered promiscuous mode [ 297.184290][ T8867] device syzkaller0 entered promiscuous mode [ 298.386873][ T8882] device syzkaller0 entered promiscuous mode [ 298.520083][ T8889] loop3: detected capacity change from 0 to 16 [ 298.635498][ T8889] erofs: (device loop3): check_layout_compatibility: unidentified incompatible feature 8, please upgrade kernel version [ 299.237620][ T8900] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1300'. [ 300.447594][ T8933] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1305'. [ 300.512023][ T8933] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1305'. [ 300.547622][ T8935] device syzkaller0 entered promiscuous mode [ 302.914576][ T8952] loop0: detected capacity change from 0 to 40427 [ 302.957664][ T8956] sch_tbf: peakrate 8 is lower than or equals to rate 4294961300 ! [ 302.996506][ T8952] F2FS-fs (loop0): build fault injection attr: rate: 14, type: 0x1ffff [ 303.005042][ T8952] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0xe4 [ 303.014390][ T8952] F2FS-fs (loop0): invalid crc value [ 303.044437][ T8956] device syzkaller0 entered promiscuous mode [ 303.055433][ T8952] F2FS-fs (loop0): Found nat_bits in checkpoint [ 303.085097][ T8952] F2FS-fs (loop0) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x44e/0xaa0 [ 303.112034][ T8952] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 303.128223][ T8952] F2FS-fs (loop0) : inject no more block in inc_valid_node_count of f2fs_new_node_page+0x180/0x8e0 [ 303.223354][ T4190] attempt to access beyond end of device [ 303.223354][ T4190] loop0: rw=2049, want=45104, limit=40427 [ 303.737237][ T8984] loop4: detected capacity change from 0 to 128 [ 304.153111][ T8993] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1318'. [ 304.487829][ T8993] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1318'. [ 305.006333][ T9006] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1312'. [ 305.199847][ T9022] loop0: detected capacity change from 0 to 512 [ 305.219955][ T9026] tipc: Started in network mode [ 305.884927][ T9026] tipc: Node identity , cluster identity 4711 [ 305.905053][ T9026] tipc: Failed to obtain node identity [ 305.939387][ T9026] tipc: Enabling of bearer rejected, failed to enable media [ 306.089939][ T9041] loop0: detected capacity change from 0 to 128 [ 306.107500][ T9034] device syzkaller0 entered promiscuous mode [ 306.223093][ T9048] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1332'. [ 306.244147][ T9041] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 306.284694][ T9041] ext4 filesystem being mounted at /268/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 306.310278][ T9048] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1332'. [ 308.488867][ T9071] loop4: detected capacity change from 0 to 512 [ 309.573702][ T9071] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nogrpid,inode_readahead_blks=0x0000000000010000,,errors=continue. Quota mode: writeback. [ 309.592122][ T9071] ext4 filesystem being mounted at /220/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 309.877004][ T9091] tipc: Enabling of bearer rejected, failed to enable media [ 314.490265][ T9131] device syzkaller0 entered promiscuous mode [ 314.521572][ T9133] device syzkaller0 entered promiscuous mode [ 316.129239][ T9152] tipc: Enabling of bearer rejected, failed to enable media [ 316.280188][ T9162] loop3: detected capacity change from 0 to 512 [ 316.853773][ T9162] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 316.863005][ T9162] EXT4-fs (loop3): orphan cleanup on readonly fs [ 316.871048][ T9162] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #16: comm syz.3.1356: inode has both inline data and extents flags [ 316.892911][ T9162] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.1356: couldn't read orphan inode 16 (err -117) [ 316.965250][ T9162] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 316.988546][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.996113][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.088660][ T4233] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 319.147126][ T9186] loop3: detected capacity change from 0 to 512 [ 319.170451][ T4233] Bluetooth: hci4: Injecting HCI hardware error event [ 319.204511][ T4191] Bluetooth: hci4: hardware error 0x00 [ 319.248240][ T9186] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 319.308924][ T9186] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 319.361566][ T9186] EXT4-fs (loop3): 1 truncate cleaned up [ 319.368023][ T9186] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 319.441474][ T9198] loop0: detected capacity change from 0 to 512 [ 319.503120][ T9198] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 319.531816][ T9198] EXT4-fs (loop0): inline encryption not supported [ 319.568136][ T9198] EXT4-fs (loop0): Test dummy encryption mode enabled [ 319.606383][ T9198] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 319.686465][ T9198] EXT4-fs (loop0): 1 truncate cleaned up [ 319.745339][ T9198] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,discard,max_dir_size_kb=0x0000000000000002,. Quota mode: none. [ 319.886147][ T9214] process 'syz.2.1366' launched './file5' with NULL argv: empty string added [ 320.021749][ T9218] tipc: Enabled bearer , priority 0 [ 320.028987][ T9198] loop_set_status: loop0 () has still dirty pages (nrpages=64) [ 320.055073][ T9218] tipc: Resetting bearer [ 320.082726][ T9217] tipc: Disabling bearer [ 320.366842][ T9234] loop3: detected capacity change from 0 to 512 [ 320.461838][ T9234] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 320.998978][ T9234] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,errors=remount-ro,user_xattr,nodiscard,dioread_nolock,. Quota mode: writeback. [ 321.123459][ T9234] ext4 filesystem being mounted at /286/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 321.168573][ T9247] trusted_key: encrypted_key: insufficient parameters specified [ 322.315622][ T9234] EXT4-fs error (device loop3): ext4_get_first_dir_block:3605: inode #12: block 32: comm syz.3.1371: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 322.400132][ T9257] PKCS7: Unknown OID: [4] 0.0.9.0(bad) [ 322.423572][ T9234] EXT4-fs (loop3): Remounting filesystem read-only [ 322.436865][ T9257] PKCS7: Only support pkcs7_signedData type [ 322.456489][ T9234] EXT4-fs error (device loop3): ext4_get_first_dir_block:3608: inode #12: comm syz.3.1371: directory missing '.' [ 322.501973][ T9234] EXT4-fs (loop3): Remounting filesystem read-only [ 322.530240][ T9234] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #2: block 3: comm syz.3.1371: lblock 0 mapped to illegal pblock 3 (length 1) [ 322.581469][ T9234] EXT4-fs (loop3): Remounting filesystem read-only [ 322.601647][ T9234] EXT4-fs error (device loop3) in ext4_resetent:3739: Corrupt filesystem [ 322.649012][ T9234] EXT4-fs (loop3): Remounting filesystem read-only [ 322.752220][ T9234] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz.3.1371: Invalid inode table block 34 in block_group 0 [ 322.753928][ T9271] tipc: Started in network mode [ 322.829398][ T9234] EXT4-fs (loop3): Remounting filesystem read-only [ 322.844371][ T9234] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 322.869207][ T9271] tipc: Node identity , cluster identity 4711 [ 322.883221][ T9234] EXT4-fs (loop3): Remounting filesystem read-only [ 322.900431][ T9271] tipc: Failed to obtain node identity [ 322.910676][ T9234] EXT4-fs error (device loop3): ext4_rename:4087: inode #18: comm syz.3.1371: mark_inode_dirty error [ 322.931755][ T9271] tipc: Enabling of bearer rejected, failed to enable media [ 322.956459][ T9234] EXT4-fs (loop3): Remounting filesystem read-only [ 322.990880][ T9234] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz.3.1371: Invalid inode table block 34 in block_group 0 [ 323.077783][ T9234] EXT4-fs (loop3): Remounting filesystem read-only [ 323.098588][ T9234] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 323.130021][ T26] audit: type=1326 audit(1784370826.296:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9287 comm="syz.5.1384" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06ef9fe99 code=0x7ffc0000 [ 323.167460][ T9234] EXT4-fs (loop3): Remounting filesystem read-only [ 323.212282][ T9234] EXT4-fs error (device loop3): ext4_evict_inode:284: inode #18: comm syz.3.1371: mark_inode_dirty error [ 323.271989][ T26] audit: type=1326 audit(1784370826.336:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9287 comm="syz.5.1384" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06ef9fe99 code=0x7ffc0000 [ 323.296744][ T9234] EXT4-fs (loop3): Remounting filesystem read-only [ 323.304973][ T9234] EXT4-fs warning (device loop3): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 323.485261][ T26] audit: type=1326 audit(1784370826.336:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9287 comm="syz.5.1384" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd06ef9fe99 code=0x7ffc0000 [ 323.654522][ T26] audit: type=1326 audit(1784370826.336:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9287 comm="syz.5.1384" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06ef9fe99 code=0x7ffc0000 [ 323.703936][ T26] audit: type=1326 audit(1784370826.336:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9287 comm="syz.5.1384" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06ef9fe99 code=0x7ffc0000 [ 323.752245][ T26] audit: type=1326 audit(1784370826.336:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9287 comm="syz.5.1384" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd06ef9fe99 code=0x7ffc0000 [ 323.801657][ T26] audit: type=1326 audit(1784370826.336:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9287 comm="syz.5.1384" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06ef9fe99 code=0x7ffc0000 [ 323.870369][ T26] audit: type=1326 audit(1784370826.336:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9287 comm="syz.5.1384" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06ef9fe99 code=0x7ffc0000 [ 323.907698][ T9321] device syzkaller0 entered promiscuous mode [ 323.914890][ T26] audit: type=1326 audit(1784370826.336:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9287 comm="syz.5.1384" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd06ef9fe99 code=0x7ffc0000 [ 323.942566][ T26] audit: type=1326 audit(1784370826.336:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9287 comm="syz.5.1384" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06ef9fe99 code=0x7ffc0000 [ 324.236263][ T9333] loop3: detected capacity change from 0 to 256 [ 324.259269][ T9339] tipc: Started in network mode [ 324.272731][ T9339] tipc: Node identity , cluster identity 4711 [ 324.288709][ T9339] tipc: Failed to obtain node identity [ 324.307758][ T9339] tipc: Enabling of bearer rejected, failed to enable media [ 324.341071][ T9333] binfmt_misc: register: failed to install interpreter file ./file0 [ 325.253584][ T9360] device syzkaller0 entered promiscuous mode [ 325.284184][ T9361] device syzkaller0 entered promiscuous mode [ 325.359500][ T4316] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 325.545792][ T9372] device syzkaller0 entered promiscuous mode [ 325.559780][ T9364] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 325.567077][ T9364] IPv6: NLM_F_CREATE should be set when creating new route [ 325.574368][ T9364] IPv6: NLM_F_CREATE should be set when creating new route [ 325.960821][ T9393] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1409'. [ 326.075352][ T9401] comedi comedi0: 8255: I/O port conflict (0x3,4) [ 326.082496][ T9401] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 326.090507][ T9401] comedi comedi0: 8255: I/O port conflict (0x5,4) [ 326.097130][ T9401] comedi comedi0: 8255: I/O port conflict (0x4,4) [ 326.104377][ T9401] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffff7,4) [ 326.115307][ T9401] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffff8,4) [ 326.134133][ T9401] comedi comedi0: 8255: I/O port conflict (0x2,4) [ 326.140941][ T9401] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 326.149234][ T9401] comedi comedi0: 8255: I/O port conflict (0xc3,4) [ 326.156138][ T9401] comedi comedi0: 8255: I/O port conflict (0x1000007,4) [ 326.163488][ T9401] comedi comedi0: 8255: I/O port conflict (0x1,4) [ 326.170134][ T9401] comedi comedi0: 8255: I/O port conflict (0x10003,4) [ 326.177241][ T9401] comedi comedi0: 8255: I/O port conflict (0x801000,4) [ 326.184318][ T9401] comedi comedi0: 8255: I/O port conflict (0x7fffffff,4) [ 326.191700][ T9401] comedi comedi0: 8255: I/O port conflict (0x3ff,4) [ 326.199173][ T9401] comedi comedi0: 8255: I/O port conflict (0x1001010,4) [ 326.206568][ T9401] comedi comedi0: 8255: I/O port conflict (0x1ff,4) [ 326.213827][ T9401] comedi comedi0: 8255: I/O port conflict (0x8,4) [ 326.220777][ T9401] comedi comedi0: 8255: I/O port conflict (0x3,4) [ 326.227646][ T9401] comedi comedi0: 8255: I/O port conflict (0x8001,4) [ 326.234620][ T9401] comedi comedi0: 8255: I/O port conflict (0x7,4) [ 326.241294][ T9401] comedi comedi0: 8255: I/O port conflict (0x3ff,4) [ 326.248237][ T9401] comedi comedi0: 8255: I/O port conflict (0x5,4) [ 326.255077][ T9401] comedi comedi0: 8255: I/O port conflict (0x3,4) [ 326.261731][ T9401] comedi comedi0: 8255: I/O port conflict (0xfffd,4) [ 328.097234][ T9410] tipc: Enabling of bearer rejected, failed to enable media [ 329.061859][ T9434] device syzkaller0 entered promiscuous mode [ 329.082797][ T9436] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 329.468375][ T9457] device syzkaller0 entered promiscuous mode [ 331.058848][ T9480] tipc: Started in network mode [ 331.104183][ T9480] tipc: Node identity , cluster identity 4711 [ 331.138470][ T9480] tipc: Failed to obtain node identity [ 331.144693][ T9480] tipc: Enabling of bearer rejected, failed to enable media [ 331.211506][ T144] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 331.242292][ T9488] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 331.372035][ T4229] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 331.514070][ T9519] device syzkaller0 entered promiscuous mode [ 331.842515][ T4229] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 331.860635][ T4229] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 331.874066][ T4229] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 331.885232][ T4229] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.013352][ T4229] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 332.032538][ T4229] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 332.041982][ T4229] usb 6-1: Product: syz [ 332.047351][ T4229] usb 6-1: Manufacturer: syz [ 332.146032][ T4229] cdc_wdm 6-1:1.0: skipping garbage [ 332.151859][ T4229] cdc_wdm 6-1:1.0: skipping garbage [ 332.189192][ T4229] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 332.195497][ T4229] cdc_wdm 6-1:1.0: Unknown control protocol [ 333.539027][ T4229] usb 6-1: USB disconnect, device number 2 [ 333.589264][ T9550] device syzkaller0 entered promiscuous mode [ 333.630263][ T9553] qfq: no options [ 333.635296][ T9553] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1440'. [ 333.834230][ T9559] tipc: Started in network mode [ 333.839235][ T9559] tipc: Node identity , cluster identity 4711 [ 333.850582][ T9559] tipc: Failed to obtain node identity [ 333.856534][ T9559] tipc: Enabling of bearer rejected, failed to enable media [ 335.970368][ T9597] qfq: no options [ 335.980784][ T9596] device syzkaller0 entered promiscuous mode [ 335.989171][ T9597] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1451'. [ 336.123784][ T9600] loop3: detected capacity change from 0 to 1024 [ 336.189675][ T9603] tipc: Started in network mode [ 336.218219][ T9603] tipc: Node identity , cluster identity 4711 [ 336.225058][ T9603] tipc: Failed to obtain node identity [ 336.243275][ T9603] tipc: Enabling of bearer rejected, failed to enable media [ 337.243331][ T9618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1457'. [ 337.870494][ T9624] device syzkaller0 entered promiscuous mode [ 338.116119][ T9638] infiniband s: set active [ 338.148992][ T5435] lo speed is unknown, defaulting to 1000 [ 338.243917][ T9645] device syzkaller0 entered promiscuous mode [ 338.286815][ T9648] qfq: no options [ 338.508716][ T9648] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1466'. [ 338.606884][ T9658] loop0: detected capacity change from 0 to 1024 [ 338.656276][ T9661] tipc: Started in network mode [ 338.661165][ T9661] tipc: Node identity , cluster identity 4711 [ 338.762004][ T9661] tipc: Failed to obtain node identity [ 338.767645][ T9661] tipc: Enabling of bearer rejected, failed to enable media [ 339.884377][ T9683] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1473'. [ 340.813410][ T9692] device syzkaller0 entered promiscuous mode [ 341.850248][ T9702] device syzkaller0 entered promiscuous mode [ 342.735872][ T9736] tipc: Enabling of bearer rejected, failed to enable media [ 343.912254][ T9742] loop3: detected capacity change from 0 to 1024 [ 344.802554][ T9772] device syzkaller0 entered promiscuous mode [ 346.083514][ T9809] loop3: detected capacity change from 0 to 1024 [ 346.790576][ T9815] tipc: Started in network mode [ 346.802156][ T9815] tipc: Node identity , cluster identity 4711 [ 346.816465][ T9815] tipc: Failed to obtain node identity [ 346.841611][ T9815] tipc: Enabling of bearer rejected, failed to enable media [ 347.546196][ T9838] device syzkaller0 entered promiscuous mode [ 348.033093][ T9872] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 348.335089][ T9889] infiniband s: set active [ 348.355165][ T5435] lo speed is unknown, defaulting to 1000 [ 348.364715][ T9886] tipc: Started in network mode [ 348.377248][ T9886] tipc: Node identity , cluster identity 4711 [ 348.426128][ T9886] tipc: Failed to obtain node identity [ 348.438775][ T9886] tipc: Enabling of bearer rejected, failed to enable media [ 349.443850][ T9942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1528'. [ 349.989882][ T9957] loop4: detected capacity change from 0 to 40427 [ 350.040191][ T9957] F2FS-fs (loop4): build fault injection attr: rate: 14, type: 0x1ffff [ 350.048659][ T9957] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0xe4 [ 350.063562][ T9957] F2FS-fs (loop4): invalid crc value [ 350.085744][ T9954] tipc: Enabled bearer , priority 0 [ 350.108487][ T9957] F2FS-fs (loop4): Found nat_bits in checkpoint [ 350.137082][ T9957] F2FS-fs (loop4) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x44e/0xaa0 [ 350.164815][ T9954] tipc: Resetting bearer [ 350.165525][ T9957] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 350.191792][ T9951] F2FS-fs (loop4) : inject no more block in inc_valid_node_count of f2fs_new_node_page+0x180/0x8e0 [ 350.266676][ T9953] tipc: Disabling bearer [ 350.406107][ T4189] attempt to access beyond end of device [ 350.406107][ T4189] loop4: rw=2049, want=45104, limit=40427 [ 350.440732][ T9975] device syzkaller0 entered promiscuous mode [ 350.805818][ T9999] device syzkaller0 entered promiscuous mode [ 350.938536][T10009] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1542'. [ 350.999984][T10009] qfq: no options [ 352.759746][T10037] device syzkaller0 entered promiscuous mode [ 353.095670][T10055] loop4: detected capacity change from 0 to 40427 [ 353.226878][T10055] F2FS-fs (loop4): build fault injection attr: rate: 14, type: 0x1ffff [ 353.235354][T10055] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0xe4 [ 353.244715][T10055] F2FS-fs (loop4): invalid crc value [ 353.281626][T10055] F2FS-fs (loop4): Found nat_bits in checkpoint [ 353.311555][T10055] F2FS-fs (loop4) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x44e/0xaa0 [ 353.354202][T10055] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 353.375813][T10042] F2FS-fs (loop4) : inject no more block in inc_valid_node_count of f2fs_new_node_page+0x180/0x8e0 [ 353.573563][ T4189] attempt to access beyond end of device [ 353.573563][ T4189] loop4: rw=2049, want=45104, limit=40427 [ 353.777453][T10080] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1558'. [ 353.813947][T10080] qfq: no options [ 354.510684][T10113] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1571'. [ 354.537805][T10113] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1571'. [ 354.563995][T10113] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1571'. [ 354.865930][T10120] loop3: detected capacity change from 0 to 40427 [ 354.967027][T10120] F2FS-fs (loop3): build fault injection attr: rate: 14, type: 0x1ffff [ 354.975507][T10120] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0xe4 [ 354.987217][T10120] F2FS-fs (loop3): invalid crc value [ 355.037994][T10120] F2FS-fs (loop3): Found nat_bits in checkpoint [ 355.067770][T10120] F2FS-fs (loop3) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x44e/0xaa0 [ 355.092477][T10122] device syzkaller0 entered promiscuous mode [ 355.098776][T10120] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 355.120110][T10114] F2FS-fs (loop3) : inject no more block in inc_valid_node_count of f2fs_new_node_page+0x180/0x8e0 [ 355.123458][T10122] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 355.394610][ T4186] attempt to access beyond end of device [ 355.394610][ T4186] loop3: rw=2049, want=45104, limit=40427 [ 356.062285][T10150] device syzkaller0 entered promiscuous mode [ 356.165876][T10162] INFO: trying to register non-static key. [ 356.171712][T10162] The code is fine but needs lockdep annotation, or maybe [ 356.178821][T10162] you didn't initialize this object before use? [ 356.185060][T10162] turning off the locking correctness validator. [ 356.191384][T10162] CPU: 1 PID: 10162 Comm: syz.0.1587 Not tainted syzkaller #0 [ 356.198846][T10162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 356.208915][T10162] Call Trace: [ 356.212211][T10162] [ 356.215195][T10162] dump_stack_lvl+0x188/0x250 [ 356.219886][T10162] ? show_regs_print_info+0x20/0x20 [ 356.225096][T10162] ? load_image+0x410/0x410 [ 356.229632][T10162] ? cpumask_next+0xb3/0xd0 [ 356.234147][T10162] assign_lock_key+0x1ec/0x200 [ 356.238918][T10162] ? SOFTIRQ_verbose+0x10/0x10 [ 356.243691][T10162] ? mark_lock+0x94/0x320 [ 356.248027][T10162] register_lock_class+0x21d/0x880 [ 356.253151][T10162] ? is_dynamic_key+0x1f0/0x1f0 [ 356.258014][T10162] __lock_acquire+0x16f/0x7b50 [ 356.262793][T10162] ? verify_lock_unused+0x140/0x140 [ 356.268002][T10162] ? __rwlock_init+0x140/0x140 [ 356.272779][T10162] ? lockdep_hardirqs_on+0x94/0x140 [ 356.277988][T10162] ? verify_lock_unused+0x140/0x140 [ 356.283206][T10162] ? __might_sleep+0xf0/0xf0 [ 356.287813][T10162] ? __might_fault+0xb7/0x110 [ 356.292597][T10162] lock_acquire+0x19e/0x400 [ 356.297111][T10162] ? gsmld_write+0x57/0x120 [ 356.301632][T10162] ? __might_fault+0xb3/0x110 [ 356.306320][T10162] ? read_lock_is_recursive+0x10/0x10 [ 356.311704][T10162] ? _copy_from_iter+0x5bf/0x1160 [ 356.316737][T10162] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 356.322210][T10162] ? lockdep_hardirqs_off+0x70/0x100 [ 356.327506][T10162] _raw_spin_lock_irqsave+0xb0/0x100 [ 356.332797][T10162] ? gsmld_write+0x57/0x120 [ 356.337305][T10162] ? _raw_spin_lock+0x40/0x40 [ 356.341987][T10162] ? __virt_addr_valid+0x3c6/0x470 [ 356.347103][T10162] gsmld_write+0x57/0x120 [ 356.351450][T10162] file_tty_write+0x50c/0x8a0 [ 356.356140][T10162] ? gsmld_read+0x10/0x10 [ 356.360475][T10162] do_iter_readv_writev+0x47d/0x5f0 [ 356.365683][T10162] ? aa_path_link+0x8a0/0x8a0 [ 356.370378][T10162] ? generic_file_rw_checks+0x280/0x280 [ 356.375939][T10162] ? common_file_perm+0x171/0x1c0 [ 356.380986][T10162] ? fsnotify_perm+0x5d/0x560 [ 356.385676][T10162] ? security_file_permission+0x75/0xa0 [ 356.391233][T10162] do_iter_write+0x1f8/0x7a0 [ 356.395929][T10162] ? import_iovec+0x6f/0xa0 [ 356.400451][T10162] do_writev+0x281/0x480 [ 356.404710][T10162] ? do_readv+0x460/0x460 [ 356.409052][T10162] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 356.415052][T10162] ? lock_chain_count+0x20/0x20 [ 356.419914][T10162] ? lockdep_hardirqs_on+0x94/0x140 [ 356.425122][T10162] do_syscall_64+0x4c/0xa0 [ 356.429546][T10162] ? clear_bhb_loop+0x30/0x80 [ 356.434231][T10162] ? clear_bhb_loop+0x30/0x80 [ 356.438918][T10162] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 356.444827][T10162] RIP: 0033:0x7f2848056e99 [ 356.449246][T10162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.468854][T10162] RSP: 002b:00007f28462af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 356.477255][T10162] RAX: ffffffffffffffda RBX: 00007f28482defa0 RCX: 00007f2848056e99 [ 356.485219][T10162] RDX: 0000000000000001 RSI: 0000200000000a80 RDI: 0000000000000003 [ 356.493191][T10162] RBP: 00007f28480eceaf R08: 0000000000000000 R09: 0000000000000000 [ 356.501158][T10162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.509122][T10162] R13: 00007f28482df038 R14: 00007f28482defa0 R15: 00007ffd86b64378 [ 356.517085][T10162] [ 356.532766][T10163] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1585'.