last executing test programs: 1m19.529588158s ago: executing program 1 (id=46): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x5, 0x0, 0x9}) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e1f, 0x7, @loopback, 0xc88}}, 0x0, 0x0, 0x1f, 0x0, "25c633e7eb9cc056ed394ba71b6e5d7bf4d988ea7c340885973233ddc0946fbd53f014e2854b661b3f9f55a7e67ba35c3537ea83c3817a08930cf99a34dfc5e167b887734921da2397b9cc8b1e235b95"}, 0xd8) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x3681}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e22, @multicast2}}, 0x0, 0x0, 0x3f, 0x0, "a30b3b68af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000e00000033035551502f07b4001a00"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) 1m15.398316909s ago: executing program 1 (id=53): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f00000005c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r0, &(0x7f0000002100)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x80000000, 0xdb0078e61ebfe5fb, 0xdd2, 0x3, 0xb, 0x0, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000007b40)="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", 0x2000, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x0, {0x87, 0x3, 0x0, {0x1, 0x7ffffffffffffffc, 0x3, 0x2, 0x8, 0x7, 0x2, 0x5, 0x404, 0x8000, 0x4, 0x0, 0xffffffffffffffff, 0x9, 0x408}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=@random={'user.', '(\x00'}, 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 1m15.396678479s ago: executing program 1 (id=55): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x54, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x2000, r3, {0x5, 0xc}, {0xfff1, 0xffff}, {0x300, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf4c}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0xfffa, 0x0, 0x2}, "ddf9"}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) 1m15.394356129s ago: executing program 1 (id=58): userfaultfd(0x80001) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m15.388003409s ago: executing program 1 (id=61): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1m15.243315493s ago: executing program 1 (id=66): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r3, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r1, 0x3, 0x70bd2c, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x11}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) 1m0.11908316s ago: executing program 32 (id=66): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r3, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r1, 0x3, 0x70bd2c, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x11}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) 6.736787616s ago: executing program 4 (id=619): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x4000) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)={0xa0000001}) dup3(r1, r0, 0x80000) ppoll(&(0x7f00000002c0)=[{r0, 0x1001}, {r1, 0x4}, {r2, 0x5124}], 0x3, 0x0, 0x0, 0x0) 5.856467107s ago: executing program 4 (id=629): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x2c, &(0x7f0000000100)={0x0, 0x9, 0x4, "6397e2e6"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d2200"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000440)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000000)='0') 2.752030793s ago: executing program 4 (id=643): semget(0x3, 0x2, 0x426) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./bus\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0x7b, 0x11ff, &(0x7f0000002480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x2fffe) sendfile(r1, r0, 0x0, 0x7ffff000) 2.748672873s ago: executing program 0 (id=651): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000440), &(0x7f0000000500)=0x8) 2.624439606s ago: executing program 0 (id=645): socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x800000, 0x0) 1.858175374s ago: executing program 0 (id=657): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3, 0x25, 0x2, @void}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffff7f, 0x0, {0x0, 0x0, 0x74, r3, {0x4, 0x7}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x804) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r4, 0x4) close(r4) 1.592224381s ago: executing program 3 (id=650): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0xac9, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x10000008, 0x11b}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) write$tun(r0, 0x0, 0x107c) 1.526565683s ago: executing program 4 (id=653): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=3.0,nodfs\x00') r1 = accept(r0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000002000)="00000080fe534d42400001000000000000000100010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000410001000003000000000000", 0x50, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000002100)="00000078fe534d4240000100160000c0010001000100000000000000010000000000000000000000000000000100000000000000", 0x34, 0x0, 0x0, 0x0) 1.417219795s ago: executing program 3 (id=654): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r1, &(0x7f0000000000)='10', 0x2) open_tree(0xffffffffffffffff, 0x0, 0x8800) ioctl(r0, 0x8b1a, &(0x7f0000000040)) 1.335996427s ago: executing program 0 (id=655): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x40001}, 0x881) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x9}, {0xa, 0x4e21, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3ff}, 0xffffffffffffffff, 0x10}}, 0x48) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0xffffff95, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) 1.307089808s ago: executing program 3 (id=658): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r1, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000002840)={0x114, 0x27, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@generic="24d4e3455c7216da3484447f8a081f930884b55764ca84de3d0e7bc8d6f29cd84ba9408cf2351604f1724e10a8fcc3988de886d82375980e92a1ba2f8410b06773cbbf6293af17222761aa1289e6a8f1d888f4809cdccfe1c8695630dcb6bad9b53d1d97f2f820a715ce709fcaa40a70dc4c98ebbe761c0eec46d4f50508215e72fc781a471b1a7c769a074f2d6388253cfdd4b0e37a788fbb7296ae39bb35439c66437fa3347adfaca46f74fbc95f1b070287096cc9bdc953ea637c118a68a8ddc03aa44e8aa8ca5dac063a05", @typed={0x2d, 0x0, 0x0, 0x0, @binary="8bb982eb4ec7e08b552a2807c00bbfbbb5369dd1e04690a1267e29e89d27673db50050419e278e6130"}]}]}, 0x114}], 0x1}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x9}}}}}}, 0x0) 1.21502035s ago: executing program 3 (id=659): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8080) 1.21342204s ago: executing program 2 (id=668): setns(0xc9, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x31863}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x14008005}, 0x20008090) 1.017180685s ago: executing program 2 (id=660): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x7d, &(0x7f0000000000)={0x0, 0x8}, 0x8) 920.686257ms ago: executing program 3 (id=662): r0 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) close(r0) r1 = socket(0x1d, 0x80802, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x1, {0x0, 0xf0, 0x3}, 0xfe}, 0x18) r3 = socket$xdp(0x2c, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) write$FUSE_INTERRUPT(r0, 0x0, 0x0) 910.406897ms ago: executing program 2 (id=663): msgget$private(0x0, 0x3ac) r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xa010102, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x8, 0x0, @void}}}}}}}, 0x0) 841.525829ms ago: executing program 2 (id=664): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r3 = getpgrp(0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x8], 0x0, 0x0, 0x1, 0x1, r3}}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 788.27444ms ago: executing program 2 (id=665): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0), 0x34) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, r0, 0x89f97000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)="6d31d8429eb88dad6a51c21b199223d62307a12f", 0x4000}], 0x1) 485.512798ms ago: executing program 4 (id=666): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x80000002, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setuid(0xee00) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x200}, 0x1c) 417.092589ms ago: executing program 0 (id=667): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000440)={0x0, 0xff63}, 0x8) 313.244572ms ago: executing program 0 (id=669): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x25, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) 312.957272ms ago: executing program 4 (id=670): timer_create(0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) mq_timedsend(r0, 0x0, 0x0, 0x5, 0x0) mq_timedreceive(r0, &(0x7f0000000400)=""/215, 0xd7, 0x0, 0x0) 128.294846ms ago: executing program 2 (id=671): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) shutdown(r0, 0x2) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x10, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 0s ago: executing program 3 (id=672): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0xec00) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da1700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(0xffffffffffffffff, 0x40106e8c, 0xfffffffffffffffe) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00222200000096231b06e53f07010000002a900683"], 0x0}, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.93' (ED25519) to the list of known hosts. [ 74.244228][ T5761] cgroup: Unknown subsys name 'net' [ 74.381912][ T5761] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.728436][ T5761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.187171][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.197255][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.205099][ T5778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.209454][ T5785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.213200][ T5778] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.227378][ T5778] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.235403][ T5778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.244526][ T5778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.251989][ T5778] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.259838][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.260096][ T5778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.274691][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.282874][ T5785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.291007][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.298359][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.307229][ T5787] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.314827][ T5788] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.315210][ T5787] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.336660][ T5787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.345030][ T5787] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.352942][ T5787] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.354892][ T5089] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.369366][ T5089] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.377026][ T5089] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.763914][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 77.859881][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 77.880090][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 77.997248][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 78.013336][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.020995][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.028614][ T5774] bridge_slave_0: entered allmulticast mode [ 78.035347][ T5774] bridge_slave_0: entered promiscuous mode [ 78.075538][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.082825][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.090335][ T5774] bridge_slave_1: entered allmulticast mode [ 78.097157][ T5774] bridge_slave_1: entered promiscuous mode [ 78.121215][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.128531][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.135675][ T5775] bridge_slave_0: entered allmulticast mode [ 78.143191][ T5775] bridge_slave_0: entered promiscuous mode [ 78.183124][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.190432][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.197818][ T5775] bridge_slave_1: entered allmulticast mode [ 78.204499][ T5775] bridge_slave_1: entered promiscuous mode [ 78.241339][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.248546][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.255692][ T5773] bridge_slave_0: entered allmulticast mode [ 78.262631][ T5773] bridge_slave_0: entered promiscuous mode [ 78.284591][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.299628][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.309176][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.316441][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.323589][ T5773] bridge_slave_1: entered allmulticast mode [ 78.330536][ T5773] bridge_slave_1: entered promiscuous mode [ 78.343705][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.391114][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.413744][ T5774] team0: Port device team_slave_0 added [ 78.452142][ T5774] team0: Port device team_slave_1 added [ 78.460224][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.470453][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.480113][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.487586][ T5776] bridge_slave_0: entered allmulticast mode [ 78.494271][ T5776] bridge_slave_0: entered promiscuous mode [ 78.506624][ T5775] team0: Port device team_slave_0 added [ 78.524624][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.534581][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.542000][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.549892][ T5776] bridge_slave_1: entered allmulticast mode [ 78.557366][ T5776] bridge_slave_1: entered promiscuous mode [ 78.565316][ T5775] team0: Port device team_slave_1 added [ 78.616987][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.624143][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.650180][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.664937][ T5773] team0: Port device team_slave_0 added [ 78.690688][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.697776][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.723813][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.736407][ T5773] team0: Port device team_slave_1 added [ 78.757711][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.770471][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.780660][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.787909][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.814282][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.827019][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.834001][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.860233][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.949869][ T5774] hsr_slave_0: entered promiscuous mode [ 78.957783][ T5774] hsr_slave_1: entered promiscuous mode [ 78.984599][ T5776] team0: Port device team_slave_0 added [ 78.993870][ T5776] team0: Port device team_slave_1 added [ 79.001011][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.008127][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.034503][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.048075][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.055063][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.081056][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.096635][ T5775] hsr_slave_0: entered promiscuous mode [ 79.102906][ T5775] hsr_slave_1: entered promiscuous mode [ 79.109467][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.117585][ T5775] Cannot create hsr debugfs directory [ 79.194171][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.201401][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.228292][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.271962][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.279179][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.305500][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.316907][ T51] Bluetooth: hci1: command tx timeout [ 79.398753][ T5773] hsr_slave_0: entered promiscuous mode [ 79.405100][ T5773] hsr_slave_1: entered promiscuous mode [ 79.411833][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.419556][ T5773] Cannot create hsr debugfs directory [ 79.460192][ T5776] hsr_slave_0: entered promiscuous mode [ 79.471281][ T5776] hsr_slave_1: entered promiscuous mode [ 79.477871][ T51] Bluetooth: hci3: command tx timeout [ 79.478078][ T5784] Bluetooth: hci2: command tx timeout [ 79.487679][ T5089] Bluetooth: hci0: command tx timeout [ 79.494763][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.502790][ T5776] Cannot create hsr debugfs directory [ 79.683549][ T5774] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.697482][ T5774] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.714253][ T5774] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.749847][ T5774] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.859416][ T5775] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.882087][ T5775] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.920738][ T5775] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.977440][ T5775] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.006647][ T5773] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.019669][ T5773] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.036257][ T5773] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.052362][ T5773] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.150834][ T5776] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.163360][ T5776] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.190407][ T5776] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.202492][ T5776] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.220647][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.298910][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.318536][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.331156][ T3456] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.338526][ T3456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.361803][ T1071] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.368982][ T1071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.424517][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.443822][ T3456] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.451000][ T3456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.491628][ T1071] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.498861][ T1071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.594617][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.611618][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.653853][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.691251][ T2957] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.698432][ T2957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.713098][ T2957] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.720210][ T2957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.757645][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.783698][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.790876][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.865513][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.872719][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.010940][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.175243][ T5774] veth0_vlan: entered promiscuous mode [ 81.193660][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.212918][ T5774] veth1_vlan: entered promiscuous mode [ 81.293990][ T5775] veth0_vlan: entered promiscuous mode [ 81.323845][ T5774] veth0_macvtap: entered promiscuous mode [ 81.347550][ T5774] veth1_macvtap: entered promiscuous mode [ 81.361410][ T5775] veth1_vlan: entered promiscuous mode [ 81.406010][ T5089] Bluetooth: hci1: command tx timeout [ 81.421405][ T5775] veth0_macvtap: entered promiscuous mode [ 81.447640][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.460464][ T5775] veth1_macvtap: entered promiscuous mode [ 81.474925][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.489019][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.513688][ T5774] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.523737][ T5774] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.532700][ T5774] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.542713][ T5774] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.556069][ T5089] Bluetooth: hci2: command tx timeout [ 81.561483][ T5089] Bluetooth: hci0: command tx timeout [ 81.567655][ T5784] Bluetooth: hci3: command tx timeout [ 81.575362][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.587430][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.599253][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.616464][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.628857][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.641931][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.653647][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.679343][ T5775] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.689032][ T5775] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.698739][ T5775] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.708075][ T5775] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.839986][ T5776] veth0_vlan: entered promiscuous mode [ 81.916555][ T5776] veth1_vlan: entered promiscuous mode [ 81.924763][ T5773] veth0_vlan: entered promiscuous mode [ 81.932084][ T1071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.944892][ T1071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.005126][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.017846][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.040343][ T5773] veth1_vlan: entered promiscuous mode [ 82.127192][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.143690][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.153746][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.162349][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.171211][ T5776] veth0_macvtap: entered promiscuous mode [ 82.190811][ T5776] veth1_macvtap: entered promiscuous mode [ 82.288515][ T5773] veth0_macvtap: entered promiscuous mode [ 82.326347][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.342801][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.353416][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.365148][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.377772][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.389811][ T5773] veth1_macvtap: entered promiscuous mode [ 82.454566][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.505869][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.515746][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.538471][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.555727][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.597627][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.626488][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.645216][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.658031][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.669164][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.681438][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.697655][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.743193][ T5776] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.760376][ T5776] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.772114][ T5776] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.784520][ T5776] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.797032][ T5847] syz.2.6[5847]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 82.814840][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.830702][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.852504][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.868985][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.881843][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.895031][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.910672][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.965779][ T5773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.975393][ T5773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.986222][ T5773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.995009][ T5773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.109309][ T2957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.120300][ T2957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.165257][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.187191][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.207237][ T1116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.226851][ T1116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.281643][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.301578][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.476037][ T5089] Bluetooth: hci1: command tx timeout [ 83.526714][ T5860] ======================================================= [ 83.526714][ T5860] WARNING: The mand mount option has been deprecated and [ 83.526714][ T5860] and is ignored by this kernel. Remove the mand [ 83.526714][ T5860] option from the mount to silence this warning. [ 83.526714][ T5860] ======================================================= [ 83.636004][ T5089] Bluetooth: hci0: command tx timeout [ 83.641605][ T5784] Bluetooth: hci3: command tx timeout [ 83.641622][ T51] Bluetooth: hci2: command tx timeout [ 83.973694][ T5877] fuse: root generation should be zero [ 84.174542][ T5882] pimreg: entered allmulticast mode [ 84.192588][ T5883] netlink: 76 bytes leftover after parsing attributes in process `syz.2.17'. [ 84.200767][ T5880] pimreg: left allmulticast mode [ 84.850520][ T5898] capability: warning: `syz.2.23' uses deprecated v2 capabilities in a way that may be insecure [ 84.955435][ T5905] ip_tables: iptables: counters copy to user failed while replacing table [ 84.981700][ T5907] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.129896][ T5913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28'. [ 85.267694][ T5919] process 'syz.2.31' launched './file0' with NULL argv: empty string added [ 85.506351][ T5929] syz.2.35 uses obsolete (PF_INET,SOCK_PACKET) [ 85.557264][ T51] Bluetooth: hci1: command tx timeout [ 85.716340][ T51] Bluetooth: hci3: command tx timeout [ 85.716350][ T5784] Bluetooth: hci0: command tx timeout [ 85.728939][ T5784] Bluetooth: hci2: command tx timeout [ 86.928068][ T27] cfg80211: failed to load regulatory.db [ 87.968136][ T5992] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.118124][ T5992] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.251321][ T5992] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.380872][ T5992] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.883810][ T6014] netlink: 24 bytes leftover after parsing attributes in process `syz.3.56'. [ 89.407075][ T5996] Zero length message leads to an empty skb [ 92.016110][ T6038] Illegal XDP return value 4294967274 on prog (id 6) dev syz_tun, expect packet loss! [ 92.252846][ T6046] loop7: detected capacity change from 0 to 16384 [ 92.283426][ T6046] loop2: detected capacity change from 0 to 512 [ 92.302316][ T6046] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 92.344155][ T6046] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 92.425436][ T6046] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.72: invalid indirect mapped block 32768 (level 2) [ 92.491144][ T6046] EXT4-fs (loop2): 1 orphan inode deleted [ 92.498239][ T6046] EXT4-fs (loop2): 1 truncate cleaned up [ 92.505313][ T6046] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.554842][ T28] audit: type=1800 audit(1791380822.785:2): pid=6046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.72" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 92.644607][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.194340][ T6081] netlink: 52 bytes leftover after parsing attributes in process `syz.0.87'. [ 93.220606][ T6081] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.229112][ T6081] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.308093][ T6085] netlink: 52 bytes leftover after parsing attributes in process `syz.0.87'. [ 93.722640][ T6103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.95'. [ 93.750670][ T6103] netlink: 'syz.0.95': attribute type 11 has an invalid length. [ 93.780320][ T6103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.95'. [ 93.791931][ T6103] netlink: 'syz.0.95': attribute type 11 has an invalid length. [ 93.998188][ T6110] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3835797286 (7671594572 ns) > initial count (4918772610 ns). Using initial count to start timer. [ 94.023973][ T6110] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2527804186 (323558935808 ns) > initial count (117850194176 ns). Using initial count to start timer. [ 94.180942][ T6120] bpf: recursion limit reached on datapath, buggy bpf program? [ 94.188793][ T6120] Dead loop on virtual device gre0, fix it urgently! [ 94.197900][ T6120] bpf: recursion limit reached on datapath, buggy bpf program? [ 94.205544][ T6120] Dead loop on virtual device gre0, fix it urgently! [ 94.213852][ T6120] bpf: recursion limit reached on datapath, buggy bpf program? [ 94.221668][ T6120] Dead loop on virtual device gre0, fix it urgently! [ 94.230717][ T6120] bpf: recursion limit reached on datapath, buggy bpf program? [ 94.238443][ T6120] Dead loop on virtual device gre0, fix it urgently! [ 94.247425][ T6120] bpf: recursion limit reached on datapath, buggy bpf program? [ 94.255168][ T6120] Dead loop on virtual device gre0, fix it urgently! [ 95.056900][ T6120] syz.3.102 (6120) used greatest stack depth: 15480 bytes left [ 95.149569][ T28] audit: type=1800 audit(1791380825.385:3): pid=6130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.103" name="file0" dev="overlay" ino=221 res=0 errno=0 [ 95.423546][ T6146] loop0: detected capacity change from 0 to 256 [ 95.503486][ T6146] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 96.433197][ T6205] loop0: detected capacity change from 0 to 512 [ 96.534643][ T51] Bluetooth: hci2: command tx timeout [ 96.579936][ T6205] EXT4-fs (loop0): 1 truncate cleaned up [ 96.587112][ T6205] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.957316][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.182552][ T6233] loop0: detected capacity change from 0 to 128 [ 97.315715][ T6233] FAT-fs (loop0): error, invalid FAT chain (i_pos 548, last_block 8) [ 97.345218][ T6233] FAT-fs (loop0): Filesystem has been set read-only [ 97.356083][ T6233] FAT-fs (loop0): error, corrupted file size (i_pos 548, 522) [ 97.380018][ T6238] loop3: detected capacity change from 0 to 256 [ 98.136483][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 98.342551][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 98.352591][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 98.362488][ T9] usb 4-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 98.371571][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.395218][ T9] spcp8x5 4-1:1.0: SPCP8x5 converter detected [ 98.407436][ T9] usb 4-1: SPCP8x5 converter now attached to ttyUSB0 [ 98.422784][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 98.615901][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 98.622850][ T23] usb 3-1: too many endpoints for config 0 interface 0 altsetting 6: 255, using maximum allowed: 30 [ 98.633896][ T23] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.645109][ T23] usb 3-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 98.660004][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 98.666708][ T23] usb 3-1: New USB device found, idVendor=1bac, idProduct=0304, bcdDevice= 0.00 [ 98.675746][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.688050][ T23] usb 3-1: config 0 descriptor?? [ 99.035598][ T6251] SPCP8x5 ttyUSB0: failed to set control lines: -71 [ 99.043245][ T27] usb 4-1: USB disconnect, device number 2 [ 99.057661][ T6251] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -19) [ 99.104866][ T27] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 99.125666][ T27] spcp8x5 4-1:1.0: device disconnected [ 99.139503][ T23] input: HID 1bac:0304 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:1BAC:0304.0001/input/input5 [ 99.265066][ T23] hid-generic 0003:1BAC:0304.0001: input,hidraw0: USB HID vd.8f Joystick [HID 1bac:0304] on usb-dummy_hcd.2-1/input0 [ 99.471255][ T5856] usb 3-1: USB disconnect, device number 2 [ 100.181471][ T6268] loop3: detected capacity change from 0 to 2048 [ 100.248745][ T6268] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 100.262818][ T6268] UDF-fs: Scanning with blocksize 512 failed [ 100.288191][ T6268] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 100.300816][ T6268] UDF-fs: Scanning with blocksize 1024 failed [ 100.337305][ T6268] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=515, location=515 [ 100.359285][ T6268] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 100.376473][ T6268] UDF-fs: Scanning with blocksize 2048 failed [ 100.385556][ T6268] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=259, location=259 [ 100.399421][ T6268] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=515, location=515 [ 100.411159][ T6268] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 100.419061][ T6268] UDF-fs: Scanning with blocksize 4096 failed [ 100.425233][ T6268] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 100.624268][ T6283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.145'. [ 100.758110][ T6287] ip6erspan0: entered allmulticast mode [ 101.086479][ T6294] loop3: detected capacity change from 0 to 256 [ 101.101178][ T6294] exfat: Deprecated parameter 'utf8' [ 101.126619][ T6294] exfat: Deprecated parameter 'utf8' [ 101.132037][ T6294] exfat: Deprecated parameter 'utf8' [ 101.170755][ T6294] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 101.581634][ T6299] loop0: detected capacity change from 0 to 16 [ 101.629204][ T6299] erofs: (device loop0): mounted with root inode @ nid 36. [ 102.080431][ T6325] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input6 [ 102.096211][ T28] audit: type=1326 audit(1791380832.325:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6326 comm="syz.2.165" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa37219e199 code=0x0 [ 102.503569][ T6339] loop3: detected capacity change from 0 to 40427 [ 102.524183][ T6339] F2FS-fs (loop3): build fault injection attr: rate: 14, type: 0x7ffff [ 102.534770][ T6339] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0xe4 [ 102.550483][ T6339] F2FS-fs (loop3): invalid crc value [ 102.567359][ T6339] F2FS-fs (loop3): Found nat_bits in checkpoint [ 102.608430][ T6339] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x665/0x970 [ 102.645051][ T6339] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 102.685503][ T6339] F2FS-fs (loop3): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x885/0x1a80 [ 102.710537][ T6339] F2FS-fs (loop3): inject alloc nid in f2fs_alloc_nid of f2fs_new_inode+0x10d/0x1030 [ 102.728287][ T6339] F2FS-fs (loop3): inject orphan in f2fs_acquire_orphan_inode of f2fs_unlink+0x3ac/0x9e0 [ 102.768715][ T5775] syz-executor: attempt to access beyond end of device [ 102.768715][ T5775] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 102.790189][ T5775] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 102.798324][ T5775] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 102.851333][ T6344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.169'. [ 103.432789][ T6363] tipc: Started in network mode [ 103.440767][ T6363] tipc: Node identity 1000004, cluster identity 4711 [ 103.453553][ T6363] tipc: Node number set to 16777220 [ 103.467828][ T6363] tipc: Enabled bearer , priority 0 [ 103.731895][ T28] audit: type=1326 audit(1791380833.965:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6373 comm="syz.2.182" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37219e199 code=0x7ffc0000 [ 103.775955][ T28] audit: type=1326 audit(1791380833.965:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6373 comm="syz.2.182" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37219e199 code=0x7ffc0000 [ 103.801454][ T28] audit: type=1326 audit(1791380833.995:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6373 comm="syz.2.182" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fa37219e199 code=0x7ffc0000 [ 103.862044][ T28] audit: type=1326 audit(1791380833.995:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6373 comm="syz.2.182" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37219e199 code=0x7ffc0000 [ 103.887228][ T28] audit: type=1326 audit(1791380833.995:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6373 comm="syz.2.182" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37219e199 code=0x7ffc0000 [ 103.914252][ T28] audit: type=1326 audit(1791380833.995:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6373 comm="syz.2.182" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fa37219e199 code=0x7ffc0000 [ 103.939095][ T28] audit: type=1326 audit(1791380833.995:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6373 comm="syz.2.182" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37219e199 code=0x7ffc0000 [ 103.976510][ T28] audit: type=1326 audit(1791380833.995:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6373 comm="syz.2.182" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fa37219e199 code=0x7ffc0000 [ 104.018911][ T28] audit: type=1326 audit(1791380833.995:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6373 comm="syz.2.182" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37219e199 code=0x7ffc0000 [ 104.144392][ T6390] loop0: detected capacity change from 0 to 1024 [ 104.156512][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 104.205525][ T6390] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.376070][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 104.390156][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 104.399493][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.407734][ T9] usb 4-1: Product: syz [ 104.411931][ T9] usb 4-1: Manufacturer: syz [ 104.420621][ T9] usb 4-1: SerialNumber: syz [ 104.433557][ T9] usb 4-1: config 0 descriptor?? [ 104.525966][ T5856] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 104.656591][ T9] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 104.715944][ T5856] usb 1-1: Using ep0 maxpacket: 16 [ 104.725202][ T5856] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.736485][ T5856] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 104.748411][ T5856] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 104.757622][ T5856] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.765618][ T5856] usb 1-1: Product: syz [ 104.770044][ T5856] usb 1-1: Manufacturer: syz [ 104.774657][ T5856] usb 1-1: SerialNumber: syz [ 105.036296][ T5856] usb 1-1: USB disconnect, device number 2 [ 105.060053][ T5789] udevd[5789]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 105.071767][ T9] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 105.120609][ T9] usb 4-1: USB disconnect, device number 3 [ 105.621082][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.989609][ T6418] fuse: Bad value for 'fd' [ 106.407596][ T6430] loop3: detected capacity change from 0 to 8192 [ 106.428814][ T6430] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 106.445497][ T6430] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 106.455603][ T6430] REISERFS (device loop3): using ordered data mode [ 106.462530][ T6430] reiserfs: using flush barriers [ 106.472498][ T6430] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 106.496818][ T6430] REISERFS (device loop3): checking transaction log (loop3) [ 106.703359][ T6430] REISERFS (device loop3): Using tea hash to sort names [ 106.718361][ T6430] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 107.591006][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 107.604385][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 107.613241][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 107.623388][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 107.632831][ T5784] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 107.640598][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 107.801505][ T6329] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.933128][ T6329] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.020043][ T6329] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.183502][ T6329] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.292004][ T6446] chnl_net:caif_netlink_parms(): no params data found [ 108.591251][ T6446] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.606587][ T6446] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.613969][ T6446] bridge_slave_0: entered allmulticast mode [ 108.623101][ T6446] bridge_slave_0: entered promiscuous mode [ 108.632864][ T6446] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.640232][ T6446] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.647671][ T6446] bridge_slave_1: entered allmulticast mode [ 108.655067][ T6446] bridge_slave_1: entered promiscuous mode [ 108.738202][ T6446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.792546][ T6471] loop3: detected capacity change from 0 to 1024 [ 108.819294][ T6446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.954585][ T6446] team0: Port device team_slave_0 added [ 109.054683][ T6446] team0: Port device team_slave_1 added [ 109.311523][ T6446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.355922][ T6446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.416062][ T6446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.448045][ T6446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.455037][ T6446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.491316][ T6446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.645340][ T6492] loop0: detected capacity change from 0 to 256 [ 109.685951][ T6446] hsr_slave_0: entered promiscuous mode [ 109.708383][ T6446] hsr_slave_1: entered promiscuous mode [ 109.716655][ T51] Bluetooth: hci0: command tx timeout [ 109.721670][ T6492] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 109.764407][ T6446] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.782622][ T6446] Cannot create hsr debugfs directory [ 110.178987][ T6504] netlink: 28 bytes leftover after parsing attributes in process `syz.2.224'. [ 110.360878][ T6510] fuse: Bad value for 'fd' [ 110.808660][ T6329] hsr_slave_0: left promiscuous mode [ 110.842515][ T6329] hsr_slave_1: left promiscuous mode [ 110.868739][ T6329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.886219][ T6329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.936157][ T6329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.953839][ T6329] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.993283][ T6329] bridge_slave_1: left allmulticast mode [ 111.004697][ T6329] bridge_slave_1: left promiscuous mode [ 111.035689][ T6329] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.085235][ T6329] bridge_slave_0: left allmulticast mode [ 111.096242][ T6329] bridge_slave_0: left promiscuous mode [ 111.105485][ T6329] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.212411][ T6329] veth1_macvtap: left promiscuous mode [ 111.224197][ T6329] veth0_macvtap: left promiscuous mode [ 111.240791][ T6329] veth1_vlan: left promiscuous mode [ 111.252292][ T6329] veth0_vlan: left promiscuous mode [ 111.492353][ T6513] loop0: detected capacity change from 0 to 40427 [ 111.517288][ T6513] F2FS-fs (loop0): invalid crc value [ 111.541606][ T6513] F2FS-fs (loop0): Found nat_bits in checkpoint [ 111.756424][ T6513] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 111.796861][ T51] Bluetooth: hci0: command tx timeout [ 112.075553][ T5776] syz-executor: attempt to access beyond end of device [ 112.075553][ T5776] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 112.099055][ T5776] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 112.108673][ T5776] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 112.610195][ T6329] team0 (unregistering): Port device team_slave_1 removed [ 112.649279][ T6329] team0 (unregistering): Port device team_slave_0 removed [ 112.689823][ T6329] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.730740][ T6329] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.830291][ T8] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 113.034003][ T8] usb 1-1: unable to get BOS descriptor or descriptor too short [ 113.052147][ T8] usb 1-1: not running at top speed; connect to a high speed hub [ 113.071727][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.092013][ T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 113.124443][ T8] usb 1-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 113.141045][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.164642][ T8] usb 1-1: Product: syz [ 113.171411][ T8] usb 1-1: Manufacturer: syz [ 113.201625][ T8] usb 1-1: SerialNumber: syz [ 113.228209][ T6329] bond0 (unregistering): Released all slaves [ 113.274332][ T6555] overlayfs: failed to resolve './cgroup': -2 [ 113.291720][ T6555] Invalid ELF header len 7 [ 113.459027][ T8] usb 1-1: 3:0: failed to get current value for ch 1 (-71) [ 113.477374][ T8] usb 1-1: 3:0: failed to get current value for ch 2 (-71) [ 113.524320][ T8] usb 1-1: 3:0: failed to get current value for ch 1 (-71) [ 113.555042][ T8] usb 1-1: 3:0: cannot get min/max values for control 11 (id 3) [ 113.596761][ T8] usb 1-1: 3:0: cannot get min/max values for control 12 (id 3) [ 113.632349][ T8] usb 1-1: 3:0: failed to get current value for ch 0 (-71) [ 113.709196][ T6446] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 113.748346][ T6446] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 113.762621][ T8] usb 1-1: USB disconnect, device number 3 [ 113.783348][ T6446] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 113.841214][ T5789] udevd[5789]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 113.861342][ T6446] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 113.876896][ T51] Bluetooth: hci0: command tx timeout [ 114.093921][ T6446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.154889][ T6446] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.183413][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.190633][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.213349][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.220590][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.769097][ T6446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.030864][ T6615] loop8: detected capacity change from 0 to 16384 [ 115.405938][ T6615] loop8: detected capacity change from 16384 to 16383 [ 115.535061][ T6446] veth0_vlan: entered promiscuous mode [ 115.538842][ T6618] I/O error, dev loop8, sector 5376 op 0x0:(READ) flags 0x80700 phys_seg 12 prio class 1 [ 115.581605][ T6446] veth1_vlan: entered promiscuous mode [ 115.593289][ T6615] ldm_validate_partition_table(): Disk read failed. [ 115.623300][ T6615] Dev loop8: unable to read RDB block 0 [ 115.641690][ T6615] loop8: unable to read partition table [ 115.672031][ T6446] veth0_macvtap: entered promiscuous mode [ 115.700849][ T6446] veth1_macvtap: entered promiscuous mode [ 115.703172][ T6615] loop8: partition table beyond EOD, truncated [ 115.746792][ T6615] loop_reread_partitions: partition scan of loop8 () failed (rc=-5) [ 115.747149][ T6446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.801726][ T6446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.840959][ T6446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.862360][ T6446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.883019][ T6446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.902377][ T6446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.923891][ T6446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.957295][ T51] Bluetooth: hci0: command tx timeout [ 115.977440][ T6446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.014354][ T6446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.065010][ T6446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.095874][ T6446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.112595][ T6446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.132906][ T6446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.164763][ T6446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.238376][ T6446] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.274238][ T6446] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.295892][ T6446] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.304638][ T6446] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.429307][ T6652] tipc: Started in network mode [ 116.436354][ T6655] FAULT_INJECTION: forcing a failure. [ 116.436354][ T6655] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 116.455941][ T6652] tipc: Node identity 4, cluster identity 4711 [ 116.466717][ T6652] tipc: Node number set to 4 [ 116.474919][ T6655] CPU: 1 PID: 6655 Comm: syz.0.254 Not tainted syzkaller #0 [ 116.482264][ T6655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 116.492369][ T6655] Call Trace: [ 116.495671][ T6655] [ 116.498623][ T6655] dump_stack_lvl+0x18c/0x250 [ 116.503380][ T6655] ? show_regs_print_info+0x20/0x20 [ 116.508611][ T6655] ? load_image+0x420/0x420 [ 116.513139][ T6655] ? __might_fault+0xaa/0x120 [ 116.517829][ T6655] ? __lock_acquire+0x7eb0/0x7eb0 [ 116.522864][ T6655] ? __virt_addr_valid+0x10c/0x380 [ 116.528013][ T6655] should_fail_ex+0x394/0x4c0 [ 116.532736][ T6655] _copy_to_user+0x2f/0xa0 [ 116.537190][ T6655] generic_map_lookup_batch+0x85d/0xc60 [ 116.542773][ T6655] ? bpf_map_update_value+0x710/0x710 [ 116.548186][ T6655] ? __fdget+0x180/0x210 [ 116.552480][ T6655] ? bpf_map_update_value+0x710/0x710 [ 116.557880][ T6655] bpf_map_do_batch+0x2e3/0x600 [ 116.562764][ T6655] ? bpf_lsm_bpf+0x9/0x10 [ 116.567126][ T6655] ? security_bpf+0x7e/0xa0 [ 116.571666][ T6655] __sys_bpf+0x7d7/0x890 [ 116.575935][ T6655] ? bpf_link_show_fdinfo+0x560/0x560 [ 116.581339][ T6655] ? lock_chain_count+0x20/0x20 [ 116.586201][ T6655] __x64_sys_bpf+0x7c/0x90 [ 116.590617][ T6655] do_syscall_64+0x55/0xb0 [ 116.595035][ T6655] ? clear_bhb_loop+0x40/0x90 [ 116.599710][ T6655] ? clear_bhb_loop+0x40/0x90 [ 116.604395][ T6655] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 116.610313][ T6655] RIP: 0033:0x7f8df4d9e199 [ 116.614732][ T6655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.634347][ T6655] RSP: 002b:00007f8df5bda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 116.642765][ T6655] RAX: ffffffffffffffda RBX: 00007f8df5025fa0 RCX: 00007f8df4d9e199 [ 116.650739][ T6655] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 0000000000000018 [ 116.658715][ T6655] RBP: 00007f8df4e358e0 R08: 0000000000000000 R09: 0000000000000000 [ 116.666718][ T6655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.674691][ T6655] R13: 00007f8df5026038 R14: 00007f8df5025fa0 R15: 00007ffcd591c4c8 [ 116.682687][ T6655] [ 116.796420][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.830563][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.895217][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.906279][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.754097][ T6702] vti0: entered promiscuous mode [ 117.879183][ T51] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 117.889338][ T51] Bluetooth: hci2: Injecting HCI hardware error event [ 117.898934][ T5784] Bluetooth: hci2: hardware error 0x00 [ 117.979580][ T6710] loop3: detected capacity change from 0 to 512 [ 118.000163][ T6710] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 118.016194][ T6710] EXT4-fs (loop3): can't mount with commit=4194313, fs mounted w/o journal [ 118.314381][ T6723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.272'. [ 118.488472][ T6723] bridge_slave_1 (unregistering): left allmulticast mode [ 118.516442][ T6723] bridge_slave_1 (unregistering): left promiscuous mode [ 118.526280][ T6723] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.922967][ T6717] loop3: detected capacity change from 0 to 32768 [ 118.964965][ T6717] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.271 (6717) [ 119.114440][ T6717] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 119.146043][ T6717] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 119.170177][ T6717] BTRFS info (device loop3): setting nodatasum [ 119.176831][ T6717] BTRFS info (device loop3): force zlib compression, level 3 [ 119.196388][ T6717] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 119.220807][ T6717] BTRFS info (device loop3): use lzo compression, level 0 [ 119.285961][ T6717] BTRFS info (device loop3): turning on flush-on-commit [ 119.295436][ T6717] BTRFS info (device loop3): enabling auto defrag [ 119.325982][ T6717] BTRFS info (device loop3): max_inline at 4096 [ 119.332304][ T6717] BTRFS info (device loop3): using free space tree [ 119.473568][ T6766] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 119.473568][ T6766] The task syz.4.276 (6766) triggered the difference, watch for misbehavior. [ 119.527575][ T6717] BTRFS info (device loop3): enabling ssd optimizations [ 119.868487][ T5775] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 119.883517][ T56] IPVS: starting estimator thread 0... [ 119.961167][ T5784] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 119.998528][ T6783] IPVS: using max 19 ests per chain, 45600 per kthread [ 121.312026][ T6831] loop4: detected capacity change from 0 to 512 [ 122.005951][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 122.005965][ T28] audit: type=1326 audit(1791380852.235:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6848 comm="syz.4.300" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490539e199 code=0x7fc00000 [ 122.070314][ T28] audit: type=1326 audit(1791380852.235:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6848 comm="syz.4.300" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f490539e199 code=0x7fc00000 [ 122.112656][ T6838] loop3: detected capacity change from 0 to 40427 [ 122.125259][ T6838] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 122.133977][ T6838] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 122.176191][ T28] audit: type=1326 audit(1791380852.235:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6848 comm="syz.4.300" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490539e199 code=0x7fc00000 [ 122.209910][ T6838] F2FS-fs (loop3): invalid crc value [ 122.218304][ T28] audit: type=1326 audit(1791380852.235:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6848 comm="syz.4.300" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490539e199 code=0x7fc00000 [ 122.274578][ T28] audit: type=1326 audit(1791380852.235:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6848 comm="syz.4.300" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490539e199 code=0x7fc00000 [ 122.298877][ T6838] F2FS-fs (loop3): Found nat_bits in checkpoint [ 122.345912][ T28] audit: type=1326 audit(1791380852.235:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6848 comm="syz.4.300" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490539e199 code=0x7fc00000 [ 122.435956][ T28] audit: type=1326 audit(1791380852.235:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6848 comm="syz.4.300" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490539e199 code=0x7fc00000 [ 122.467702][ T28] audit: type=1326 audit(1791380852.235:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6848 comm="syz.4.300" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490539e199 code=0x7fc00000 [ 122.502124][ T28] audit: type=1326 audit(1791380852.235:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6848 comm="syz.4.300" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490539e199 code=0x7fc00000 [ 122.508876][ T6838] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 122.547476][ T28] audit: type=1326 audit(1791380852.235:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6848 comm="syz.4.300" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490539e199 code=0x7fc00000 [ 122.580293][ T6838] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 122.745248][ T6877] loop4: detected capacity change from 0 to 256 [ 122.955087][ T6877] net_ratelimit: 1660 callbacks suppressed [ 122.955097][ T6877] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 123.574236][ T6900] X25: diagnostic #0 - 55 85 A6 [ 124.956901][ T6923] loop0: detected capacity change from 0 to 40427 [ 124.971220][ T6948] loop4: detected capacity change from 0 to 512 [ 124.980711][ T6923] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 124.997185][ T6923] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 125.045908][ T6923] F2FS-fs (loop0): invalid crc value [ 125.091344][ T6948] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.165161][ T6948] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.261705][ T6923] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 125.272369][ T6923] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 125.374072][ T6948] capability: warning: `syz.4.329' uses 32-bit capabilities (legacy support in use) [ 125.563499][ T6446] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.050834][ T7014] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 127.156464][ T7020] loop0: detected capacity change from 0 to 16 [ 127.187209][ T7020] erofs: (device loop0): mounted with root inode @ nid 36. [ 127.210648][ T7020] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 127.273247][ T7020] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 127.292951][ T7023] "syz.4.346" (7023) uses obsolete ecb(arc4) skcipher [ 127.304216][ T7022] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 127.331931][ T7026] erofs: (device loop0): z_erofs_readahead: readahead error at folio 87 @ nid 36 [ 127.336055][ T7022] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 127.377452][ T7026] erofs: (device loop0): z_erofs_readahead: readahead error at folio 86 @ nid 36 [ 127.456291][ T7026] syz.0.345: attempt to access beyond end of device [ 127.456291][ T7026] loop0: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 127.514914][ T7026] syz.0.345: attempt to access beyond end of device [ 127.514914][ T7026] loop0: rw=524288, sector=14425508768, nr_sectors = 8 limit=16 [ 127.523351][ T7031] netlink: 'syz.4.349': attribute type 1 has an invalid length. [ 127.570033][ T7031] netlink: 4 bytes leftover after parsing attributes in process `syz.4.349'. [ 127.574268][ T7026] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -50 in[64, 4032] out[3749] [ 127.978014][ T7049] 9pnet: p9_errstr2errno: server reported unknown error n$[ [ 127.978014][ T7049] Q&|x [ 128.149103][ T7056] FAULT_INJECTION: forcing a failure. [ 128.149103][ T7056] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 128.169930][ T7056] CPU: 1 PID: 7056 Comm: syz.0.357 Not tainted syzkaller #0 [ 128.177284][ T7056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 128.187371][ T7056] Call Trace: [ 128.190674][ T7056] [ 128.193623][ T7056] dump_stack_lvl+0x18c/0x250 [ 128.198340][ T7056] ? show_regs_print_info+0x20/0x20 [ 128.203577][ T7056] ? load_image+0x420/0x420 [ 128.208124][ T7056] ? __lock_acquire+0x7eb0/0x7eb0 [ 128.213211][ T7056] should_fail_ex+0x394/0x4c0 [ 128.217927][ T7056] prepare_alloc_pages+0x1e1/0x5b0 [ 128.223067][ T7056] __alloc_pages+0x134/0x460 [ 128.227690][ T7056] ? zone_statistics+0x170/0x170 [ 128.232709][ T7056] system_heap_allocate+0x3bc/0xd40 [ 128.238069][ T7056] ? system_heap_create+0x100/0x100 [ 128.243305][ T7056] ? __might_fault+0xaa/0x120 [ 128.248010][ T7056] ? __might_fault+0xc6/0x120 [ 128.252712][ T7056] ? __might_fault+0xaa/0x120 [ 128.257417][ T7056] dma_heap_ioctl+0x4d6/0x5f0 [ 128.262174][ T7056] ? dma_heap_init+0xb0/0xb0 [ 128.266804][ T7056] ? bpf_lsm_file_ioctl+0x9/0x10 [ 128.271773][ T7056] ? security_file_ioctl+0x80/0xa0 [ 128.276919][ T7056] ? dma_heap_init+0xb0/0xb0 [ 128.281530][ T7056] __se_sys_ioctl+0xfd/0x170 [ 128.286161][ T7056] do_syscall_64+0x55/0xb0 [ 128.290613][ T7056] ? clear_bhb_loop+0x40/0x90 [ 128.295317][ T7056] ? clear_bhb_loop+0x40/0x90 [ 128.300026][ T7056] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 128.305954][ T7056] RIP: 0033:0x7f8df4d9e199 [ 128.310398][ T7056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.330120][ T7056] RSP: 002b:00007f8df5bda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 128.338585][ T7056] RAX: ffffffffffffffda RBX: 00007f8df5025fa0 RCX: 00007f8df4d9e199 [ 128.346588][ T7056] RDX: 0000200000000040 RSI: 00000000c0184800 RDI: 0000000000000003 [ 128.354589][ T7056] RBP: 00007f8df4e358e0 R08: 0000000000000000 R09: 0000000000000000 [ 128.362584][ T7056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.370581][ T7056] R13: 00007f8df5026038 R14: 00007f8df5025fa0 R15: 00007ffcd591c4c8 [ 128.378602][ T7056] [ 128.463491][ T7044] loop4: detected capacity change from 0 to 40427 [ 128.511139][ T7044] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 128.550317][ T7044] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 128.570242][ T7044] F2FS-fs (loop4): invalid crc value [ 128.595150][ T7044] F2FS-fs (loop4): Found nat_bits in checkpoint [ 128.778589][ T7071] mac80211_hwsim hwsim7 ..c: renamed from wlan1 (while UP) [ 128.810997][ T7044] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 128.849417][ T7044] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 129.026299][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 129.026313][ T28] audit: type=1804 audit(1791380859.265:91): pid=7044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.354" name="/newroot/25/file0/bus" dev="loop4" ino=10 res=1 errno=0 [ 130.133373][ T7110] FAULT_INJECTION: forcing a failure. [ 130.133373][ T7110] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 130.154240][ T7110] CPU: 1 PID: 7110 Comm: syz.4.369 Not tainted syzkaller #0 [ 130.161589][ T7110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 130.171674][ T7110] Call Trace: [ 130.174973][ T7110] [ 130.177941][ T7110] dump_stack_lvl+0x18c/0x250 [ 130.182659][ T7110] ? show_regs_print_info+0x20/0x20 [ 130.187891][ T7110] ? load_image+0x420/0x420 [ 130.192434][ T7110] ? __lock_acquire+0x7eb0/0x7eb0 [ 130.197506][ T7110] should_fail_ex+0x394/0x4c0 [ 130.202223][ T7110] prepare_alloc_pages+0x1e1/0x5b0 [ 130.207367][ T7110] __alloc_pages+0x134/0x460 [ 130.211986][ T7110] ? zone_statistics+0x170/0x170 [ 130.216965][ T7110] system_heap_allocate+0x3bc/0xd40 [ 130.222206][ T7110] ? system_heap_create+0x100/0x100 [ 130.227470][ T7110] ? __might_fault+0xaa/0x120 [ 130.232175][ T7110] ? __might_fault+0xc6/0x120 [ 130.236874][ T7110] ? __might_fault+0xaa/0x120 [ 130.241580][ T7110] dma_heap_ioctl+0x4d6/0x5f0 [ 130.246288][ T7110] ? dma_heap_init+0xb0/0xb0 [ 130.250911][ T7110] ? bpf_lsm_file_ioctl+0x9/0x10 [ 130.255863][ T7110] ? security_file_ioctl+0x80/0xa0 [ 130.260996][ T7110] ? dma_heap_init+0xb0/0xb0 [ 130.265593][ T7110] __se_sys_ioctl+0xfd/0x170 [ 130.270193][ T7110] do_syscall_64+0x55/0xb0 [ 130.274618][ T7110] ? clear_bhb_loop+0x40/0x90 [ 130.279295][ T7110] ? clear_bhb_loop+0x40/0x90 [ 130.283973][ T7110] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 130.289963][ T7110] RIP: 0033:0x7f490539e199 [ 130.294382][ T7110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.314001][ T7110] RSP: 002b:00007f49062de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 130.322422][ T7110] RAX: ffffffffffffffda RBX: 00007f4905625fa0 RCX: 00007f490539e199 [ 130.330439][ T7110] RDX: 0000200000000040 RSI: 00000000c0184800 RDI: 0000000000000003 [ 130.338419][ T7110] RBP: 00007f49054358e0 R08: 0000000000000000 R09: 0000000000000000 [ 130.346393][ T7110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.354360][ T7110] R13: 00007f4905626038 R14: 00007f4905625fa0 R15: 00007ffe9d9356a8 [ 130.362346][ T7110] [ 130.674027][ T7124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.375'. [ 130.722169][ T7124] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.731615][ T7124] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.740435][ T7124] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.749744][ T7124] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.767926][ T7124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.375'. [ 131.023753][ T7134] sock: sock_set_timeout: `syz.2.380' (pid 7134) tries to set negative timeout [ 131.926008][ T8] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 131.961436][ T7181] loop8: detected capacity change from 0 to 16384 [ 132.119933][ T8] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 132.136206][ T7185] loop8: detected capacity change from 16384 to 16383 [ 132.136636][ T8] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.178287][ T8] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 132.194475][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 132.201411][ T8] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 132.232770][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.252595][ T8] usb 5-1: config 0 descriptor?? [ 132.699050][ T8] input: HID 17ef:6047 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:17EF:6047.0002/input/input7 [ 132.890014][ T8] lenovo 0003:17EF:6047.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.4-1/input0 [ 132.985294][ T8] usb 5-1: USB disconnect, device number 2 [ 133.026590][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.033469][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.158119][ T7201] fido_id[7201]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 134.153345][ T7237] overlayfs: failed to clone upperpath [ 134.802712][ T7257] netlink: 152 bytes leftover after parsing attributes in process `syz.2.413'. [ 135.188062][ T7273] warning: `syz.0.428' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 136.084724][ T7312] ip_tables: iptables: counters copy to user failed while replacing table [ 136.326052][ T9] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 136.542833][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.576288][ T9] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 136.627870][ T9] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 136.657986][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.001386][ T7342] netlink: 152 bytes leftover after parsing attributes in process `syz.3.446'. [ 137.109581][ T9] dvb_ttusb_budget: cmd xter failed, receive error -22 [ 137.121648][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 137.136033][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 137.341186][ T9] DVB: Unable to find symbol stv0299_attach() [ 137.531650][ T9] DVB: Unable to find symbol tda8083_attach() [ 137.555975][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 137.594782][ T9] usb 5-1: USB disconnect, device number 3 [ 137.812543][ T7373] netlink: 'syz.0.444': attribute type 1 has an invalid length. [ 137.868211][ T7373] bond1: entered promiscuous mode [ 137.873690][ T7373] 8021q: adding VLAN 0 to HW filter on device bond1 [ 137.916717][ T7373] netlink: 4 bytes leftover after parsing attributes in process `syz.0.444'. [ 137.944319][ T7373] 8021q: adding VLAN 0 to HW filter on device bond1 [ 137.951623][ T7373] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 137.966106][ T7373] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 137.980092][ T7373] bond1: (slave wireguard0): making interface the new active one [ 137.988056][ T7373] wireguard0: entered promiscuous mode [ 137.995552][ T7373] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 138.709556][ T7377] loop3: detected capacity change from 0 to 32768 [ 138.832761][ T7377] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 139.032568][ T7377] XFS (loop3): Ending clean mount [ 139.039520][ T7408] overlayfs: failed to clone lowerpath [ 139.091840][ T7408] overlayfs: failed to clone lowerpath [ 139.123801][ T7408] overlayfs: failed to clone upperpath [ 139.443151][ T5775] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 139.938892][ T7436] IPv4: Oversized IP packet from 127.202.26.0 [ 141.154850][ T7449] loop0: detected capacity change from 0 to 32768 [ 141.197548][ T7473] netlink: 'syz.2.468': attribute type 1 has an invalid length. [ 141.251037][ T7449] loop0: p1 p3 < > [ 141.262706][ T7473] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.292700][ T7473] veth0_virt_wifi: entered promiscuous mode [ 141.339718][ T7473] bond1: (slave veth0_virt_wifi): making interface the new active one [ 141.385145][ T7473] bond1: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 141.978776][ T7487] FAULT_INJECTION: forcing a failure. [ 141.978776][ T7487] name failslab, interval 1, probability 0, space 0, times 1 [ 141.992133][ T7487] CPU: 1 PID: 7487 Comm: syz.3.473 Not tainted syzkaller #0 [ 141.999454][ T7487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 142.009536][ T7487] Call Trace: [ 142.012844][ T7487] [ 142.015795][ T7487] dump_stack_lvl+0x18c/0x250 [ 142.020525][ T7487] ? show_regs_print_info+0x20/0x20 [ 142.025769][ T7487] ? load_image+0x420/0x420 [ 142.030318][ T7487] ? __lock_acquire+0x7eb0/0x7eb0 [ 142.035381][ T7487] ? aa_label_sk_perm+0x500/0x6a0 [ 142.040451][ T7487] should_fail_ex+0x394/0x4c0 [ 142.045182][ T7487] should_failslab+0x9/0x20 [ 142.049726][ T7487] slab_pre_alloc_hook+0x59/0x300 [ 142.054789][ T7487] ? do_raw_spin_lock+0x11f/0x2b0 [ 142.059935][ T7487] kmem_cache_alloc+0x5a/0x2c0 [ 142.064737][ T7487] ? inet_bind_bucket_create+0x2f/0x230 [ 142.070333][ T7487] inet_bind_bucket_create+0x2f/0x230 [ 142.075781][ T7487] inet_csk_get_port+0xd67/0x1890 [ 142.080839][ T7487] ? __local_bh_enable_ip+0x13a/0x1c0 [ 142.086261][ T7487] ? _local_bh_enable+0xa0/0xa0 [ 142.091140][ T7487] ? do_raw_spin_unlock+0x121/0x230 [ 142.096381][ T7487] __inet_bind+0x5d3/0xa90 [ 142.100835][ T7487] __sys_bind+0x2f0/0x3f0 [ 142.105207][ T7487] ? __ia32_sys_socketpair+0xb0/0xb0 [ 142.110730][ T7487] __x64_sys_bind+0x7a/0x90 [ 142.115266][ T7487] do_syscall_64+0x55/0xb0 [ 142.119715][ T7487] ? clear_bhb_loop+0x40/0x90 [ 142.124415][ T7487] ? clear_bhb_loop+0x40/0x90 [ 142.129125][ T7487] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 142.135052][ T7487] RIP: 0033:0x7f6f84b9e199 [ 142.139473][ T7487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.159111][ T7487] RSP: 002b:00007f6f85ad8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 142.167639][ T7487] RAX: ffffffffffffffda RBX: 00007f6f84e25fa0 RCX: 00007f6f84b9e199 [ 142.175634][ T7487] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000003 [ 142.183630][ T7487] RBP: 00007f6f84c358e0 R08: 0000000000000000 R09: 0000000000000000 [ 142.191653][ T7487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.199730][ T7487] R13: 00007f6f84e26038 R14: 00007f6f84e25fa0 R15: 00007fffea7056b8 [ 142.207740][ T7487] [ 143.446442][ T27] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 143.661148][ T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.693061][ T27] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 143.705878][ T27] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 143.724592][ T27] usb 4-1: Product: syz [ 143.734499][ T27] usb 4-1: Manufacturer: syz [ 143.744850][ T27] usb 4-1: SerialNumber: syz [ 143.757727][ T27] usb 4-1: config 0 descriptor?? [ 143.766482][ T27] keyspan 4-1:0.0: Keyspan 4 port adapter converter detected [ 143.774194][ T27] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 143.824281][ T27] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 88 [ 143.847241][ T27] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 143.878825][ T27] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 143.897838][ T27] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 143.930258][ T27] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 143.959444][ T27] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4 [ 144.010467][ T27] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 144.052377][ T27] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 6 [ 144.090219][ T27] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 144.236434][ T56] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 144.312490][ T5763] usb 4-1: USB disconnect, device number 4 [ 144.329309][ T5763] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 144.370183][ T5763] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 144.409971][ T5763] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 144.437118][ T5763] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 144.449429][ T56] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.458382][ T5763] keyspan 4-1:0.0: device disconnected [ 144.475514][ T56] usb 1-1: config 0 has no interfaces? [ 144.494235][ T56] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 144.531019][ T56] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.561408][ T56] usb 1-1: config 0 descriptor?? [ 146.431959][ T7568] loop3: detected capacity change from 0 to 512 [ 146.517504][ T7568] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.549472][ T7568] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.872565][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.036099][ T56] usb 1-1: USB disconnect, device number 4 [ 147.727200][ T27] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 147.924260][ T27] usb 4-1: not running at top speed; connect to a high speed hub [ 147.938192][ T27] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 32, changing to 4 [ 147.961269][ T27] usb 4-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 147.976211][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.997749][ T27] usb 4-1: Product: syz [ 148.003255][ T27] usb 4-1: Manufacturer: syz [ 148.012856][ T27] usb 4-1: SerialNumber: syz [ 148.542703][ T7612] netlink: 4 bytes leftover after parsing attributes in process `syz.4.516'. [ 148.567196][ T7612] bridge_slave_1: left allmulticast mode [ 148.572892][ T7612] bridge_slave_1: left promiscuous mode [ 148.624153][ T7612] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.687744][ T7612] bridge_slave_0: left allmulticast mode [ 148.693012][ T27] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 148.694778][ T7612] bridge_slave_0: left promiscuous mode [ 148.732561][ T27] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 148.737168][ T7612] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.761772][ T27] usb 4-1: USB disconnect, device number 5 [ 148.821448][ T5789] udevd[5789]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 149.397597][ T7629] loop0: detected capacity change from 0 to 512 [ 149.472739][ T7629] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.501004][ T7629] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.840048][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.087821][ C1] Unknown status report in ack skb [ 150.256081][ T5763] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 150.457969][ T5763] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 150.478308][ T5763] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 150.511994][ T5763] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 150.526356][ T5763] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.779374][ T5763] usb 1-1: usb_control_msg returned -32 [ 150.785096][ T5763] usbtmc 1-1:16.0: can't read capabilities [ 151.901356][ T7693] netlink: 'syz.4.546': attribute type 1 has an invalid length. [ 151.927515][ T7694] loop3: detected capacity change from 0 to 512 [ 151.935757][ T7693] 8021q: adding VLAN 0 to HW filter on device bond1 [ 151.962712][ T7694] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 151.980756][ T7694] EXT4-fs (loop3): 1 truncate cleaned up [ 151.989692][ T7694] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.001529][ T5789] udevd[5789]: symlink '../../loop3' '/dev/disk/by-diskseq/128.tmp-b7:3' failed: Read-only file system [ 152.031441][ T7693] bond1: (slave veth3): Enslaving as an active interface with a down link [ 152.034940][ T5789] udevd[5789]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 152.079815][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.101800][ T7693] bond1: (slave macvlan0): making interface the new active one [ 152.123383][ T7693] macvlan0: entered promiscuous mode [ 152.134368][ T5789] udevd[5789]: symlink '../../loop3' '/dev/disk/by-diskseq/128.tmp-b7:3' failed: Read-only file system [ 152.148126][ T7693] bond1: (slave macvlan0): Enslaving as an active interface with an up link [ 152.172536][ T5789] udevd[5789]: symlink '../../loop3' '/dev/disk/by-diskseq/128.tmp-b7:3' failed: Read-only file system [ 152.272268][ T7704] netlink: 'syz.4.549': attribute type 5 has an invalid length. [ 152.456408][ T5763] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 152.646044][ T5763] usb 4-1: Using ep0 maxpacket: 32 [ 152.660214][ T5763] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 152.672238][ T5763] usb 4-1: config 0 has no interface number 0 [ 152.681487][ T5763] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 152.695279][ T5763] usb 4-1: config 0 interface 85 has no altsetting 0 [ 152.710569][ T5763] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 152.722635][ T5763] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.732080][ T5763] usb 4-1: Product: syz [ 152.736660][ T5763] usb 4-1: Manufacturer: syz [ 152.741447][ T5763] usb 4-1: SerialNumber: syz [ 152.750745][ T5763] usb 4-1: config 0 descriptor?? [ 153.020886][ T23] usb 1-1: USB disconnect, device number 5 [ 153.346885][ T5781] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 153.378289][ T5763] appletouch 4-1:0.85: Geyser mode initialized. [ 153.387025][ T5781] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 153.410020][ T5763] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input8 [ 153.701413][ T5763] usb 4-1: USB disconnect, device number 6 [ 153.745114][ T5763] appletouch 4-1:0.85: input: appletouch disconnected [ 154.174137][ T7745] loop4: detected capacity change from 0 to 128 [ 154.189062][ T28] audit: type=1326 audit(1791380884.415:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7746 comm="syz.2.566" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37219e199 code=0x7ffc0000 [ 154.213923][ T7742] loop0: detected capacity change from 0 to 8192 [ 154.241490][ T28] audit: type=1326 audit(1791380884.415:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7746 comm="syz.2.566" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37219e199 code=0x7ffc0000 [ 154.249064][ T5789] udevd[5789]: symlink '../../loop4' '/dev/disk/by-diskseq/130.tmp-b7:4' failed: Read-only file system [ 154.325942][ T5789] udevd[5789]: symlink '../../loop4' '/dev/disk/by-label/SYZKALLER.tmp-b7:4' failed: Read-only file system [ 154.348877][ T28] audit: type=1326 audit(1791380884.415:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7746 comm="syz.2.566" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fa37219e199 code=0x7ffc0000 [ 154.350527][ T5789] udevd[5789]: symlink '../../loop4' '/dev/disk/by-uuid/1DC8-5927.tmp-b7:4' failed: Read-only file system [ 154.412540][ T5789] udevd[5789]: symlink '../../loop4' '/dev/disk/by-diskseq/130.tmp-b7:4' failed: Read-only file system [ 154.425340][ T5789] udevd[5789]: symlink '../../loop4' '/dev/disk/by-label/SYZKALLER.tmp-b7:4' failed: Read-only file system [ 154.442833][ T5789] udevd[5789]: symlink '../../loop4' '/dev/disk/by-uuid/1DC8-5927.tmp-b7:4' failed: Read-only file system [ 154.467051][ T28] audit: type=1326 audit(1791380884.425:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7746 comm="syz.2.566" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37219e199 code=0x7ffc0000 [ 154.500370][ T5789] udevd[5789]: symlink '../../loop4' '/dev/disk/by-diskseq/130.tmp-b7:4' failed: Read-only file system [ 154.535119][ T5766] udevd[5766]: symlink '../../loop0' '/dev/disk/by-diskseq/131.tmp-b7:0' failed: Read-only file system [ 154.558017][ T28] audit: type=1326 audit(1791380884.425:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7746 comm="syz.2.566" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37219e199 code=0x7ffc0000 [ 154.591041][ T5789] udevd[5789]: symlink '../../loop4' '/dev/disk/by-diskseq/130.tmp-b7:4' failed: Read-only file system [ 154.596741][ T5766] udevd[5766]: symlink '../../loop0' '/dev/disk/by-label/SYZKALLER.tmp-b7:0' failed: Read-only file system [ 154.655923][ T28] audit: type=1326 audit(1791380884.425:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7746 comm="syz.2.566" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37219e199 code=0x7ffc0000 [ 154.701657][ T28] audit: type=1326 audit(1791380884.425:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7746 comm="syz.2.566" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37219e199 code=0x7ffc0000 [ 154.726260][ T28] audit: type=1326 audit(1791380884.425:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7746 comm="syz.2.566" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa37219e199 code=0x7ffc0000 [ 154.754562][ T28] audit: type=1326 audit(1791380884.425:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7746 comm="syz.2.566" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37219e199 code=0x7ffc0000 [ 154.780495][ T28] audit: type=1326 audit(1791380884.425:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7746 comm="syz.2.566" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa37219e199 code=0x7ffc0000 [ 155.113972][ T5781] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 155.149322][ T5781] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 155.218735][ T7766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.574'. [ 155.245968][ T7766] bridge_slave_1: left allmulticast mode [ 155.252735][ T7766] bridge_slave_1: left promiscuous mode [ 155.263124][ T7766] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.334757][ T7766] bridge_slave_0: left allmulticast mode [ 155.341146][ T7766] bridge_slave_0: left promiscuous mode [ 155.357939][ T7766] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.488042][ T7772] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 155.507949][ T7772] overlayfs: overlapping lowerdir path [ 155.701046][ T7778] loop0: detected capacity change from 0 to 4096 [ 155.786684][ T7778] ntfs3: loop0: ino=9, mi_enum_attr [ 155.806610][ T7778] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 155.834318][ T7778] ntfs3: loop0: ino=9, mi_enum_attr [ 155.842321][ T7778] ntfs3: loop0: ino=b, mi_enum_attr [ 155.848926][ T7778] ntfs3: loop0: Failed to load $Extend (-22). [ 155.855168][ T7778] ntfs3: loop0: Failed to initialize $Extend. [ 156.173520][ T7783] FAULT_INJECTION: forcing a failure. [ 156.173520][ T7783] name failslab, interval 1, probability 0, space 0, times 0 [ 156.209445][ T7783] CPU: 0 PID: 7783 Comm: syz.0.580 Not tainted syzkaller #0 [ 156.216799][ T7783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 156.226876][ T7783] Call Trace: [ 156.230162][ T7783] [ 156.233096][ T7783] dump_stack_lvl+0x18c/0x250 [ 156.237795][ T7783] ? show_regs_print_info+0x20/0x20 [ 156.243008][ T7783] ? load_image+0x420/0x420 [ 156.247533][ T7783] ? __might_sleep+0xe0/0xe0 [ 156.252134][ T7783] ? __lock_acquire+0x7eb0/0x7eb0 [ 156.257222][ T7783] should_fail_ex+0x394/0x4c0 [ 156.261916][ T7783] should_failslab+0x9/0x20 [ 156.266424][ T7783] slab_pre_alloc_hook+0x59/0x300 [ 156.271463][ T7783] ? drm_atomic_helper_connector_duplicate_state+0x7d/0x190 [ 156.278758][ T7783] __kmem_cache_alloc_node+0x53/0x250 [ 156.284140][ T7783] ? drm_atomic_helper_connector_duplicate_state+0x7d/0x190 [ 156.291441][ T7783] kmalloc_trace+0x2a/0xe0 [ 156.295884][ T7783] drm_atomic_helper_connector_duplicate_state+0x7d/0x190 [ 156.303021][ T7783] drm_atomic_get_connector_state+0x374/0x720 [ 156.309108][ T7783] drm_atomic_add_affected_connectors+0x2d7/0x420 [ 156.315540][ T7783] ? drm_atomic_add_encoder_bridges+0x1d0/0x1d0 [ 156.321795][ T7783] ? modeset_lock+0x362/0x620 [ 156.326483][ T7783] __drm_atomic_helper_set_config+0x676/0xed0 [ 156.332560][ T7783] ? __drm_atomic_helper_plane_duplicate_state+0x4b/0xf0 [ 156.339596][ T7783] ? __drm_atomic_helper_plane_duplicate_state+0x85/0xf0 [ 156.346629][ T7783] ? __drm_atomic_helper_disable_plane+0x60/0x60 [ 156.352962][ T7783] ? drm_client_rotation+0x446/0x570 [ 156.358260][ T7783] drm_client_modeset_commit_atomic+0x49d/0x7b0 [ 156.364527][ T7783] ? drm_client_modeset_check+0x180/0x180 [ 156.370268][ T7783] ? mutex_lock_nested+0x20/0x20 [ 156.375218][ T7783] ? drm_fb_helper_lastclose+0x97/0x150 [ 156.380778][ T7783] ? mutex_lock_nested+0x20/0x20 [ 156.385721][ T7783] ? drm_client_dev_restore+0xad/0x270 [ 156.391184][ T7783] drm_client_modeset_commit_locked+0xcb/0x4c0 [ 156.397354][ T7783] drm_client_modeset_commit+0x4a/0x70 [ 156.402818][ T7783] drm_fb_helper_lastclose+0x9f/0x150 [ 156.408204][ T7783] drm_fbdev_generic_client_restore+0x34/0x40 [ 156.414275][ T7783] drm_client_dev_restore+0x138/0x270 [ 156.419655][ T7783] drm_release+0x4b3/0x670 [ 156.424081][ T7783] ? drm_lastclose+0x100/0x100 [ 156.428856][ T7783] __fput+0x221/0x940 [ 156.432857][ T7783] task_work_run+0x1d4/0x260 [ 156.437459][ T7783] ? task_work_cancel+0x220/0x220 [ 156.442496][ T7783] ? exit_to_user_mode_loop+0x3b/0x110 [ 156.447968][ T7783] exit_to_user_mode_loop+0xe6/0x110 [ 156.453260][ T7783] exit_to_user_mode_prepare+0xee/0x180 [ 156.458815][ T7783] syscall_exit_to_user_mode+0x1a/0x50 [ 156.464273][ T7783] do_syscall_64+0x61/0xb0 [ 156.468699][ T7783] ? clear_bhb_loop+0x40/0x90 [ 156.473371][ T7783] ? clear_bhb_loop+0x40/0x90 [ 156.478050][ T7783] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 156.483949][ T7783] RIP: 0033:0x7f8df4d9e199 [ 156.488380][ T7783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.508017][ T7783] RSP: 002b:00007f8df5bda028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 156.516445][ T7783] RAX: 0000000000000000 RBX: 00007f8df5025fa0 RCX: 00007f8df4d9e199 [ 156.524416][ T7783] RDX: 0200000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 156.532388][ T7783] RBP: 00007f8df4e358e0 R08: 0000000000000000 R09: 0000000000000000 [ 156.540356][ T7783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.548326][ T7783] R13: 00007f8df5026038 R14: 00007f8df5025fa0 R15: 00007ffcd591c4c8 [ 156.556383][ T7783] [ 157.714677][ T7808] FAULT_INJECTION: forcing a failure. [ 157.714677][ T7808] name failslab, interval 1, probability 0, space 0, times 0 [ 157.734746][ T7808] CPU: 0 PID: 7808 Comm: syz.3.589 Not tainted syzkaller #0 [ 157.742086][ T7808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 157.752173][ T7808] Call Trace: [ 157.755474][ T7808] [ 157.758430][ T7808] dump_stack_lvl+0x18c/0x250 [ 157.763143][ T7808] ? show_regs_print_info+0x20/0x20 [ 157.768373][ T7808] ? load_image+0x420/0x420 [ 157.772925][ T7808] ? __might_sleep+0xe0/0xe0 [ 157.777547][ T7808] ? __lock_acquire+0x7eb0/0x7eb0 [ 157.782607][ T7808] should_fail_ex+0x394/0x4c0 [ 157.787316][ T7808] should_failslab+0x9/0x20 [ 157.791847][ T7808] slab_pre_alloc_hook+0x59/0x300 [ 157.796908][ T7808] kmem_cache_alloc_lru+0x4d/0x2b0 [ 157.802040][ T7808] ? proc_alloc_inode+0x2a/0xb0 [ 157.806925][ T7808] proc_alloc_inode+0x2a/0xb0 [ 157.811633][ T7808] ? proc_invalidate_siblings_dcache+0x6c0/0x6c0 [ 157.817986][ T7808] new_inode_pseudo+0x63/0x1d0 [ 157.822776][ T7808] new_inode+0x22/0x1d0 [ 157.826965][ T7808] proc_setup_self+0xc3/0x2c0 [ 157.831680][ T7808] ? _raw_spin_unlock+0x28/0x40 [ 157.836570][ T7808] proc_fill_super+0x4ee/0x730 [ 157.841368][ T7808] ? proc_reconfigure+0x370/0x370 [ 157.846421][ T7808] get_tree_nodev+0xb5/0x140 [ 157.851037][ T7808] vfs_get_tree+0x8c/0x280 [ 157.855474][ T7808] do_new_mount+0x24a/0xa40 [ 157.860013][ T7808] __se_sys_mount+0x2e7/0x3d0 [ 157.864713][ T7808] ? __x64_sys_mount+0xc0/0xc0 [ 157.869503][ T7808] ? lockdep_hardirqs_on+0x98/0x150 [ 157.874721][ T7808] ? __x64_sys_mount+0x20/0xc0 [ 157.879508][ T7808] do_syscall_64+0x55/0xb0 [ 157.883949][ T7808] ? clear_bhb_loop+0x40/0x90 [ 157.888645][ T7808] ? clear_bhb_loop+0x40/0x90 [ 157.893345][ T7808] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 157.899267][ T7808] RIP: 0033:0x7f6f84b9e199 [ 157.903702][ T7808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.923324][ T7808] RSP: 002b:00007f6f85ad8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 157.931738][ T7808] RAX: ffffffffffffffda RBX: 00007f6f84e25fa0 RCX: 00007f6f84b9e199 [ 157.939710][ T7808] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 157.947691][ T7808] RBP: 00007f6f84c358e0 R08: 0000000000000000 R09: 0000000000000000 [ 157.955802][ T7808] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000000 [ 157.963796][ T7808] R13: 00007f6f84e26038 R14: 00007f6f84e25fa0 R15: 00007fffea7056b8 [ 157.971817][ T7808] [ 158.012580][ T7808] proc_fill_super: can't allocate /proc/self [ 158.143345][ T7815] tipc: Enabling of bearer rejected, failed to enable media [ 158.723204][ T7835] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 159.199391][ T7853] CIFS: Attempting to mount //127.0.0.1/share [ 159.823921][ T7873] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 160.059396][ T7853] CIFS: VFS: \\127.0.0.1 Send error in SessSetup = -11 [ 160.060481][ T7877] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 160.073928][ T7853] CIFS: VFS: cifs_mount failed w/return code = -11 [ 160.112778][ T7877] overlayfs: overlapping lowerdir path [ 160.300448][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 160.347073][ T9] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 160.832585][ T7906] overlayfs: failed to clone upperpath [ 160.860523][ T7903] loop3: detected capacity change from 0 to 8192 [ 160.863355][ T7906] overlayfs: failed to clone lowerpath [ 160.939937][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 160.939953][ T28] audit: type=1804 audit(1791380891.175:132): pid=7903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.626" name="/newroot/151/bus/bus" dev="loop3" ino=1048647 res=1 errno=0 [ 161.133542][ T5789] udevd[5789]: symlink '../../loop3' '/dev/disk/by-diskseq/136.tmp-b7:3' failed: Read-only file system [ 161.172591][ T5789] udevd[5789]: symlink '../../loop3' '/dev/disk/by-label/SYZKALLER.tmp-b7:3' failed: Read-only file system [ 161.187069][ T5789] udevd[5789]: symlink '../../loop3' '/dev/disk/by-uuid/1DC8-C73B.tmp-b7:3' failed: Read-only file system [ 161.310239][ T5789] udevd[5789]: symlink '../../loop3' '/dev/disk/by-diskseq/136.tmp-b7:3' failed: Read-only file system [ 161.326406][ T5789] udevd[5789]: symlink '../../loop3' '/dev/disk/by-label/SYZKALLER.tmp-b7:3' failed: Read-only file system [ 161.346351][ T5789] udevd[5789]: symlink '../../loop3' '/dev/disk/by-uuid/1DC8-C73B.tmp-b7:3' failed: Read-only file system [ 161.375984][ T27] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 161.566127][ T27] usb 5-1: Using ep0 maxpacket: 16 [ 161.586500][ T27] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.622673][ T27] usb 5-1: config 0 interface 0 has no altsetting 0 [ 161.640809][ T27] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 161.665939][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.670441][ T7918] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 161.686626][ T27] usb 5-1: config 0 descriptor?? [ 161.854872][ T5789] udevd[5789]: symlink '../../loop3' '/dev/disk/by-diskseq/136.tmp-b7:3' failed: Read-only file system [ 161.880470][ T5789] udevd[5789]: symlink '../../loop3' '/dev/disk/by-diskseq/136.tmp-b7:3' failed: Read-only file system [ 161.907010][ T7911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.920979][ T7911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.926142][ T9] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 161.951916][ T27] usbhid 5-1:0.0: can't add hid device: -71 [ 161.966745][ T27] usbhid: probe of 5-1:0.0 failed with error -71 [ 161.985408][ T27] usb 5-1: USB disconnect, device number 4 [ 162.154971][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 162.169463][ T9] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 32, changing to 4 [ 162.193607][ T9] usb 1-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 162.216222][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.225115][ T9] usb 1-1: Product: syz [ 162.231185][ T9] usb 1-1: Manufacturer: syz [ 162.236545][ T9] usb 1-1: SerialNumber: syz [ 162.301306][ T28] audit: type=1326 audit(1791380892.535:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7936 comm="syz.3.641" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f84b9e199 code=0x7ffc0000 [ 162.326673][ T28] audit: type=1326 audit(1791380892.535:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7936 comm="syz.3.641" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f84b9e199 code=0x7ffc0000 [ 162.353838][ T28] audit: type=1326 audit(1791380892.545:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7936 comm="syz.3.641" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f84b9e199 code=0x7ffc0000 [ 162.412851][ T28] audit: type=1326 audit(1791380892.545:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7936 comm="syz.3.641" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f84b9e199 code=0x7ffc0000 [ 162.439601][ T28] audit: type=1326 audit(1791380892.545:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7936 comm="syz.3.641" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6f84b9e199 code=0x7ffc0000 [ 162.464213][ T28] audit: type=1326 audit(1791380892.545:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7936 comm="syz.3.641" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f84b9e199 code=0x7ffc0000 [ 162.488951][ T28] audit: type=1326 audit(1791380892.545:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7936 comm="syz.3.641" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f84b9e199 code=0x7ffc0000 [ 162.513633][ T28] audit: type=1326 audit(1791380892.545:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7936 comm="syz.3.641" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f84b9e199 code=0x7ffc0000 [ 162.540659][ T28] audit: type=1326 audit(1791380892.545:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7936 comm="syz.3.641" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f6f84b9e199 code=0x7ffc0000 [ 162.575937][ T27] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 162.721604][ T9] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 162.741032][ T9] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 162.756317][ T9] usb 1-1: USB disconnect, device number 6 [ 162.758673][ T27] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.783064][ T5789] udevd[5789]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 162.786956][ T27] usb 5-1: config 0 interface 0 has no altsetting 0 [ 162.812828][ T27] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 162.822282][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.841164][ T27] usb 5-1: config 0 descriptor?? [ 163.267356][ T27] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0006/input/input9 [ 163.309681][ T27] cm6533_jd 0003:0D8C:0022.0006: input,hiddev0,hidraw0: USB HID v0.05 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 163.668884][ T9] usb 5-1: USB disconnect, device number 5 [ 163.828582][ T2930] macvlan0: left promiscuous mode [ 164.410171][ T7946] loop4: detected capacity change from 0 to 8192 [ 164.441652][ T7951] FAULT_INJECTION: forcing a failure. [ 164.441652][ T7951] name failslab, interval 1, probability 0, space 0, times 0 [ 164.462275][ T7951] CPU: 1 PID: 7951 Comm: syz.0.645 Not tainted syzkaller #0 [ 164.469636][ T7951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 164.479735][ T7951] Call Trace: [ 164.483053][ T7951] [ 164.486016][ T7951] dump_stack_lvl+0x18c/0x250 [ 164.490748][ T7951] ? show_regs_print_info+0x20/0x20 [ 164.495988][ T7951] ? load_image+0x420/0x420 [ 164.500537][ T7951] ? __might_sleep+0xe0/0xe0 [ 164.505176][ T7951] ? __lock_acquire+0x7eb0/0x7eb0 [ 164.510239][ T7951] should_fail_ex+0x394/0x4c0 [ 164.514940][ T7951] should_failslab+0x9/0x20 [ 164.519462][ T7951] slab_pre_alloc_hook+0x59/0x300 [ 164.524504][ T7951] kmem_cache_alloc_lru+0x4d/0x2b0 [ 164.529647][ T7951] ? proc_alloc_inode+0x2a/0xb0 [ 164.534603][ T7951] proc_alloc_inode+0x2a/0xb0 [ 164.539286][ T7951] ? proc_invalidate_siblings_dcache+0x6c0/0x6c0 [ 164.545620][ T7951] new_inode_pseudo+0x63/0x1d0 [ 164.550392][ T7951] new_inode+0x22/0x1d0 [ 164.554555][ T7951] proc_setup_self+0xc3/0x2c0 [ 164.559243][ T7951] ? _raw_spin_unlock+0x28/0x40 [ 164.564188][ T7951] proc_fill_super+0x4ee/0x730 [ 164.568963][ T7951] ? proc_reconfigure+0x370/0x370 [ 164.573992][ T7951] get_tree_nodev+0xb5/0x140 [ 164.578594][ T7951] vfs_get_tree+0x8c/0x280 [ 164.583047][ T7951] do_new_mount+0x24a/0xa40 [ 164.587566][ T7951] __se_sys_mount+0x2e7/0x3d0 [ 164.592258][ T7951] ? __x64_sys_mount+0xc0/0xc0 [ 164.597042][ T7951] ? lockdep_hardirqs_on+0x98/0x150 [ 164.602246][ T7951] ? __x64_sys_mount+0x20/0xc0 [ 164.607014][ T7951] do_syscall_64+0x55/0xb0 [ 164.611447][ T7951] ? clear_bhb_loop+0x40/0x90 [ 164.616217][ T7951] ? clear_bhb_loop+0x40/0x90 [ 164.620931][ T7951] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 164.626836][ T7951] RIP: 0033:0x7f8df4d9e199 [ 164.631255][ T7951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.650868][ T7951] RSP: 002b:00007f8df5bda028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 164.659288][ T7951] RAX: ffffffffffffffda RBX: 00007f8df5025fa0 RCX: 00007f8df4d9e199 [ 164.667264][ T7951] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 164.675237][ T7951] RBP: 00007f8df4e358e0 R08: 0000000000000000 R09: 0000000000000000 [ 164.683210][ T7951] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000000 [ 164.691188][ T7951] R13: 00007f8df5026038 R14: 00007f8df5025fa0 R15: 00007ffcd591c4c8 [ 164.699194][ T7951] [ 164.729996][ T7951] proc_fill_super: can't allocate /proc/self [ 164.793435][ T7955] netlink: 'syz.2.646': attribute type 1 has an invalid length. [ 164.815462][ T5789] udevd[5789]: symlink '../../loop4' '/dev/disk/by-diskseq/138.tmp-b7:4' failed: Read-only file system [ 164.862372][ T7955] 8021q: adding VLAN 0 to HW filter on device bond2 [ 164.897887][ T7957] bond2: (slave veth3): Enslaving as an active interface with a down link [ 165.005274][ T7955] bond2: (slave macvlan0): making interface the new active one [ 165.017839][ T7955] macvlan0: entered promiscuous mode [ 165.023767][ T7955] bond2: (slave macvlan0): Enslaving as an active interface with an up link [ 165.159573][ T7959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.657'. [ 165.403330][ T7959] hsr_slave_1 (unregistering): left promiscuous mode [ 165.562510][ T7975] CIFS: Attempting to mount //127.0.0.1/share [ 165.689760][ T7982] netlink: 256 bytes leftover after parsing attributes in process `syz.3.658'. [ 165.701817][ T7982] unsupported nlmsg_type 40 [ 165.785107][ T7987] bond0: (slave ip6tnl1): refused to change device type [ 165.801248][ T7988] netlink: 'syz.3.659': attribute type 1 has an invalid length. [ 165.831315][ T7988] 8021q: adding VLAN 0 to HW filter on device bond1 [ 165.867527][ T7990] bond1: (slave veth3): Enslaving as an active interface with a down link [ 165.948622][ T7988] bond1: (slave macvlan0): making interface the new active one [ 165.963189][ T7988] macvlan0: entered promiscuous mode [ 165.974243][ T7988] bond1: (slave macvlan0): Enslaving as an active interface with an up link [ 166.087169][ T7996] ip_tables: iptables: counters copy to user failed while replacing table [ 166.407252][ T7975] CIFS: VFS: \\127.0.0.1 Send error in SessSetup = -11 [ 166.414363][ T7975] CIFS: VFS: cifs_mount failed w/return code = -11 [ 166.662952][ T8020] TCP: TCP_TX_DELAY enabled [ 166.998000][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 166.998014][ T28] audit: type=1326 audit(1791380897.235:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8017 comm="syz.4.670" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490539e199 code=0x7ffc0000 [ 167.055941][ T28] audit: type=1326 audit(1791380897.235:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8017 comm="syz.4.670" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490539e199 code=0x7ffc0000 [ 167.105963][ T28] audit: type=1326 audit(1791380897.235:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8017 comm="syz.4.670" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f490539e199 code=0x7ffc0000 [ 167.143832][ T6316] ------------[ cut here ]------------ [ 167.150078][ T6316] WARNING: CPU: 0 PID: 6316 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 167.155943][ T28] audit: type=1326 audit(1791380897.235:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8017 comm="syz.4.670" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490539e199 code=0x7ffc0000 [ 167.161432][ T6316] Modules linked in: [ 167.189150][ T6316] CPU: 0 PID: 6316 Comm: kworker/u4:26 Not tainted syzkaller #0 [ 167.196876][ T6316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 167.203698][ T28] audit: type=1326 audit(1791380897.235:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8017 comm="syz.4.670" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490539e199 code=0x7ffc0000 [ 167.207009][ T6316] Workqueue: phy5 ieee80211_csa_finalize_work [ 167.207042][ T6316] RIP: 0010:ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 167.207067][ T6316] Code: 48 89 df e8 74 45 cb f7 e9 d6 fc ff ff e8 da 9d 72 f7 eb 24 e8 d3 9d 72 f7 c7 04 24 f4 ff ff ff e9 cc f5 ff ff e8 c2 9d 72 f7 <0f> 0b 0f 0b e9 b7 f5 ff ff e8 b4 9d 72 f7 48 8b 7c 24 08 4c 8b 74 [ 167.207083][ T6316] RSP: 0018:ffffc900033679c0 EFLAGS: 00010293 [ 167.207102][ T6316] RAX: ffffffff8a14eee2 RBX: 0000000000000001 RCX: ffff88802d1ebc00 [ 167.207117][ T6316] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 167.207130][ T6316] RBP: dffffc0000000000 R08: ffff88805db8562f R09: 1ffff1100bb70ac5 [ 167.232727][ T6312] ------------[ cut here ]------------ [ 167.237289][ T6316] R10: dffffc0000000000 R11: ffffed100bb70ac6 R12: 0000000000000001 [ 167.237316][ T6316] R13: ffff88805db86659 R14: ffff8880776dad48 R15: ffff88802bfd3b00 [ 167.237332][ T6316] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 167.237350][ T6316] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 167.237364][ T6316] CR2: 00007fd292000218 CR3: 0000000060737000 CR4: 00000000003506f0 [ 167.237382][ T6316] DR0: 0000000000000000 DR1: 000000000000c846 DR2: 0000000000000000 [ 167.237395][ T6316] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 167.237410][ T6316] Call Trace: [ 167.237418][ T6316] [ 167.237443][ T6316] ieee80211_link_use_reserved_context+0x37b/0x5c0 [ 167.237477][ T6316] ieee80211_csa_finalize+0x571/0xeb0 [ 167.237501][ T6316] ? mutex_lock_nested+0x20/0x20 [ 167.237523][ T6316] ? lockdep_hardirqs_on+0x98/0x150 [ 167.237544][ T6316] ? ieee80211_csa_finalize_work+0x140/0x140 [ 167.237565][ T6316] ? read_lock_is_recursive+0x20/0x20 [ 167.245342][ T6312] WARNING: CPU: 1 PID: 6312 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 167.245380][ T6312] Modules linked in: [ 167.245397][ T6312] CPU: 1 PID: 6312 Comm: kworker/u4:22 Not tainted syzkaller #0 [ 167.245417][ T6312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 167.245431][ T6312] Workqueue: phy3 ieee80211_csa_finalize_work [ 167.245457][ T6312] RIP: 0010:ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 167.245481][ T6312] Code: 48 89 df e8 74 45 cb f7 e9 d6 fc ff ff e8 da 9d 72 f7 eb 24 e8 d3 9d 72 f7 c7 04 24 f4 ff ff ff e9 cc f5 ff ff e8 c2 9d 72 f7 <0f> 0b 0f 0b e9 b7 f5 ff ff e8 b4 9d 72 f7 48 8b 7c 24 08 4c 8b 74 [ 167.245498][ T6312] RSP: 0018:ffffc900033179c0 EFLAGS: 00010293 [ 167.245518][ T6312] RAX: ffffffff8a14eee2 RBX: 0000000000000001 RCX: ffff88802bd21e00 [ 167.245533][ T6312] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 167.245547][ T6312] RBP: dffffc0000000000 R08: ffff88805da7162f R09: 1ffff1100bb4e2c5 [ 167.245562][ T6312] R10: dffffc0000000000 R11: ffffed100bb4e2c6 R12: 0000000000000001 [ 167.245577][ T6312] R13: ffff88805da72659 R14: ffff88807cacad48 R15: ffff88802f93e100 [ 167.245593][ T6312] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 167.245611][ T6312] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 167.245627][ T6312] CR2: 00007ffea96ac948 CR3: 0000000030ddb000 CR4: 00000000003506e0 [ 167.245645][ T6312] Call Trace: [ 167.245654][ T6312] [ 167.245680][ T6312] ieee80211_link_use_reserved_context+0x37b/0x5c0 [ 167.245710][ T6312] ieee80211_csa_finalize+0x571/0xeb0 [ 167.245733][ T6312] ? mutex_lock_nested+0x20/0x20 [ 167.245757][ T6312] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 167.245781][ T6312] ? ieee80211_csa_finalize_work+0x140/0x140 [ 167.245932][ T6312] ? read_lock_is_recursive+0x20/0x20 [ 167.245967][ T6312] ieee80211_csa_finalize_work+0xf6/0x140 [ 167.245980][ C0] ------------[ cut here ]------------ [ 167.245989][ T6312] ? process_scheduled_works+0x975/0x1600 [ 167.246006][ C0] WARNING: CPU: 0 PID: 6316 at net/mac80211/tx.c:5057 __ieee80211_beacon_get+0x1141/0x1520 [ 167.246016][ T6312] process_scheduled_works+0xa60/0x1600 [ 167.246047][ C0] Modules linked in: [ 167.246061][ C0] CPU: 0 PID: 6316 Comm: kworker/u4:26 Not tainted syzkaller #0 [ 167.246072][ T6312] ? worker_attach_to_pool+0x370/0x370 [ 167.246083][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 167.246098][ C0] Workqueue: phy5 ieee80211_csa_finalize_work [ 167.246103][ T6312] ? assign_work+0x3cc/0x5d0 [ 167.246120][ C0] [ 167.246127][ C0] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 167.246134][ T6312] worker_thread+0xa5e/0xfe0 [ 167.246155][ C0] Code: f7 4c 89 ef e8 f0 56 b5 f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 bb 4b 77 f7 0f 0b e9 61 f8 ff ff e8 af 4b 77 f7 <0f> 0b e9 85 fb ff ff e8 a3 4b 77 f7 48 c7 c7 40 99 65 8e 4c 89 e6 [ 167.246173][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 167.246189][ T6312] kthread+0x2fa/0x390 [ 167.246194][ C0] RAX: ffffffff8a104501 RBX: dffffc0000000000 RCX: ffff88802d1ebc00 [ 167.246209][ T6312] ? pr_cont_work+0x550/0x550 [ 167.246212][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 167.246227][ C0] RBP: 0000000000000000 R08: ffff88802d1ebc00 R09: 0000000000000003 [ 167.246234][ T6312] ? kthread_blkcg+0xd0/0xd0 [ 167.246243][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805db86440 [ 167.246255][ T6312] ret_from_fork+0x48/0x80 [ 167.246258][ C0] R13: ffff88805dee8c24 R14: ffff88805db86930 R15: ffff88805dee8c00 [ 167.246275][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 167.246277][ T6312] ? kthread_blkcg+0xd0/0xd0 [ 167.246295][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 167.246299][ T6312] ret_from_fork_asm+0x11/0x20 [ 167.246318][ C0] CR2: 00007fd292000218 CR3: 0000000060737000 CR4: 00000000003506f0 [ 167.246337][ C0] DR0: 0000000000000000 DR1: 000000000000c846 DR2: 0000000000000000 [ 167.246340][ T6312] [ 167.246352][ T6312] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 167.246350][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 167.246362][ C0] Call Trace: [ 167.246360][ T6312] CPU: 1 PID: 6312 Comm: kworker/u4:22 Not tainted syzkaller #0 [ 167.246370][ C0] [ 167.246377][ T6312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 167.246378][ C0] ? __ieee80211_beacon_get+0x36/0x1520 [ 167.246387][ T6312] Workqueue: phy3 ieee80211_csa_finalize_work [ 167.246407][ T6312] Call Trace: [ 167.246414][ T6312] [ 167.246413][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 167.246420][ T6312] dump_stack_lvl+0x18c/0x250 [ 167.246442][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 167.246449][ T6312] ? show_regs_print_info+0x20/0x20 [ 167.246474][ T6312] ? load_image+0x420/0x420 [ 167.246477][ C0] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 167.246510][ T6312] panic+0x2ca/0x720 [ 167.246512][ C0] __iterate_interfaces+0x225/0x4c0 [ 167.246537][ T6312] ? bpf_jit_dump+0xd0/0xd0 [ 167.246541][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 167.246569][ T6312] ? ret_from_fork_asm+0x11/0x20 [ 167.246569][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 167.246596][ T6312] __warn+0x2e0/0x470 [ 167.246599][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 167.246615][ T6312] ? ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 167.246627][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 167.246638][ T6312] ? ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 167.246657][ T6312] report_bug+0x2be/0x4f0 [ 167.246660][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 167.246675][ T6312] ? ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 167.246685][ C0] ? hw_scan_work+0xf10/0xf10 [ 167.246696][ T6312] ? ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 167.246710][ C0] __hrtimer_run_queues+0x525/0xc10 [ 167.246716][ T6312] ? ieee80211_vif_use_reserved_switch+0x1110/0x2900 [ 167.246735][ T6312] handle_bug+0xcf/0x120 [ 167.246753][ T6312] exc_invalid_op+0x1a/0x50 [ 167.246753][ C0] ? hrtimer_interrupt+0x980/0x980 [ 167.246770][ T6312] asm_exc_invalid_op+0x1a/0x20 [ 167.246774][ C0] ? read_tsc+0x9/0x20 [ 167.246793][ T6312] RIP: 0010:ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 167.246804][ C0] hrtimer_run_softirq+0x177/0x290 [ 167.246821][ T6312] Code: 48 89 df e8 74 45 cb f7 e9 d6 fc ff ff e8 da 9d 72 f7 eb 24 e8 d3 9d 72 f7 c7 04 24 f4 ff ff ff e9 cc f5 ff ff e8 c2 9d 72 f7 <0f> 0b 0f 0b e9 b7 f5 ff ff e8 b4 9d 72 f7 48 8b 7c 24 08 4c 8b 74 [ 167.246835][ T6312] RSP: 0018:ffffc900033179c0 EFLAGS: 00010293 [ 167.246832][ C0] handle_softirqs+0x27d/0x820 [ 167.246846][ T6312] [ 167.246851][ T6312] RAX: ffffffff8a14eee2 RBX: 0000000000000001 RCX: ffff88802bd21e00 [ 167.246852][ C0] ? read_tsc+0x9/0x20 [ 167.246864][ T6312] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 167.246874][ T6312] RBP: dffffc0000000000 R08: ffff88805da7162f R09: 1ffff1100bb4e2c5 [ 167.246873][ C0] ? ktime_get+0x24b/0x280 [ 167.246888][ T6312] R10: dffffc0000000000 R11: ffffed100bb4e2c6 R12: 0000000000000001 [ 167.246900][ T6312] R13: ffff88805da72659 R14: ffff88807cacad48 R15: ffff88802f93e100 [ 167.246899][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 167.246922][ T6312] ? ieee80211_vif_use_reserved_switch+0xd02/0x2900 [ 167.246925][ C0] ? do_softirq+0x1a0/0x1a0 [ 167.246950][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 167.246964][ T6312] ieee80211_link_use_reserved_context+0x37b/0x5c0 [ 167.246979][ C0] __irq_exit_rcu+0xd3/0x190 [ 167.246991][ T6312] ieee80211_csa_finalize+0x571/0xeb0 [ 167.247000][ C0] ? irq_exit_rcu+0x20/0x20 [ 167.247011][ T6312] ? mutex_lock_nested+0x20/0x20 [ 167.247030][ C0] irq_exit_rcu+0x9/0x20 [ 167.247032][ T6312] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 167.247048][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 167.247053][ T6312] ? ieee80211_csa_finalize_work+0x140/0x140 [ 167.247072][ C0] [ 167.247078][ C0] [ 167.247075][ T6312] ? read_lock_is_recursive+0x20/0x20 [ 167.247085][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 167.247105][ T6312] ieee80211_csa_finalize_work+0xf6/0x140 [ 167.247115][ C0] RIP: 0010:vprintk_emit+0x46f/0x610 [ 167.247124][ T6312] ? process_scheduled_works+0x975/0x1600 [ 167.247140][ C0] Code: 85 3f 01 00 00 e8 61 aa 1b 00 45 89 f7 48 85 db 48 8b 1c 24 75 07 e8 50 aa 1b 00 eb 06 e8 49 aa 1b 00 fb 48 c7 c7 c0 64 12 8d <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 89 b2 [ 167.247148][ T6312] process_scheduled_works+0xa60/0x1600 [ 167.247155][ C0] RSP: 0018:ffffc90003367540 EFLAGS: 00000293 [ 167.247172][ C0] RAX: ffffffff816be667 RBX: ffffffff816be50b RCX: ffff88802d1ebc00 [ 167.247197][ T6312] ? worker_attach_to_pool+0x370/0x370 [ 167.247213][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8d1264c0 [ 167.247226][ C0] RBP: ffffc90003367630 R08: ffffffff911f05c7 R09: 1ffffffff223e0b8 [ 167.247226][ T6312] ? assign_work+0x3cc/0x5d0 [ 167.247241][ C0] R10: dffffc0000000000 R11: fffffbfff223e0b9 R12: dffffc0000000000 [ 167.247256][ C0] R13: 1ffff9200066ceac R14: 0000000000000023 R15: 0000000000000023 [ 167.247254][ T6312] worker_thread+0xa5e/0xfe0 [ 167.247273][ C0] ? vprintk_emit+0x30b/0x610 [ 167.247304][ T6312] kthread+0x2fa/0x390 [ 167.247305][ C0] ? vprintk_emit+0x467/0x610 [ 167.247321][ T6312] ? pr_cont_work+0x550/0x550 [ 167.247344][ T6312] ? kthread_blkcg+0xd0/0xd0 [ 167.247347][ C0] ? vprintk_emit+0x30b/0x610 [ 167.247363][ T6312] ret_from_fork+0x48/0x80 [ 167.247374][ C0] ? printk_sprint+0x460/0x460 [ 167.247382][ T6312] ? kthread_blkcg+0xd0/0xd0 [ 167.247401][ T6312] ret_from_fork_asm+0x11/0x20 [ 167.247415][ C0] _printk+0xde/0x130 [ 167.247438][ T6312] [ 167.247441][ C0] ? read_lock_is_recursive+0x20/0x20 [ 167.247706][ T6312] Kernel Offset: disabled