last executing test programs: 5m55.502512936s ago: executing program 1 (id=3906): unshare(0x22020400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "399421fe8a4c9563", "00b147fbbfc100", "d6dc09ff", "16de86d67a8426bd"}, 0x28) ppoll(&(0x7f0000000280)=[{r0, 0x4b0}], 0x1, 0x0, 0x0, 0x0) 5m55.068410316s ago: executing program 1 (id=3909): sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, 0x0, 0x0) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r1, 0x0, 0xfdef) 5m53.440427913s ago: executing program 1 (id=3910): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/dlm\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/cluster/comms/1\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xc25c}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r0}]}}}]}, 0x38}}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000480)=@abs={0x1, 0x0, 0x4e22}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster/comms/2\x00', 0x1fd) timer_create(0x0, &(0x7f00000007c0)={0x0, 0x33, 0x2, @thr={&(0x7f0000000740)="467de29de66f28a89f043bc670a65f", &(0x7f0000000780)="c31a56a6d768f5b7f9258e80b4dfbe526ee33663fc1d9d89e2e9df7fdb72c3131fea2474dcd8e0"}}, &(0x7f0000000800)=0x0) timer_settime(r1, 0x1, &(0x7f0000000840), &(0x7f0000000880)) r2 = openat$tun(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) write$tun(r2, &(0x7f0000000500)={@void, @val={0x2, 0x3, 0x6, 0x0, 0x9, 0x7}, @ipv6=@tipc_packet={0x8, 0x6, "8d72d0", 0xbc, 0x6, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, {[@hopopts, @srh={0x33, 0x6, 0x4, 0x3, 0x3, 0x8, 0x50be, [@mcast2, @empty, @ipv4={'\x00', '\xff\xff', @empty}]}], @name_distributor={{0x7c, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x40, 0x0, 0x0, 0x2, 0x9, 0x4, 0x4e24, 0x4e21, 0x3, 0x4}, [{0x2, 0xffffffff, 0x4, 0x1, 0x5, 0x5, 0x8, 0x5}, {0x5, 0x200000, 0x8, 0x7fff, 0x80000001, 0x10000, 0x4}, {0x1af2, 0x0, 0xdf12, 0x1ff, 0xf9e0, 0x4, 0x8, 0xbb}]}}}}, 0xee) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/cluster/comms/1/local\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='1\x00', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/dlm/cluster/comms/2/addr\x00', 0x1, 0x0) write(r4, &(0x7f00000003c0)="020052487f00000100"/128, 0x80) 5m51.80831278s ago: executing program 1 (id=3913): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x4000000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5m47.902808233s ago: executing program 1 (id=3917): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0', 0x1) write(r0, &(0x7f00000001a0)='1', 0x1) 5m40.822349246s ago: executing program 1 (id=3922): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1, 0x5531, &(0x7f0000000b00)="$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") sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000080)=ANY=[], 0x0) write$FUSE_CREATE_OPEN(r3, 0x0, 0x0) sendfile(r3, r3, &(0x7f0000000100)=0x4, 0x8112) 5m24.755250831s ago: executing program 32 (id=3922): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1, 0x5531, &(0x7f0000000b00)="$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") sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000080)=ANY=[], 0x0) write$FUSE_CREATE_OPEN(r3, 0x0, 0x0) sendfile(r3, r3, &(0x7f0000000100)=0x4, 0x8112) 5m17.108766401s ago: executing program 3 (id=3951): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1, 0x5531, &(0x7f0000000b00)="$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") sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000080)=ANY=[], 0x0) write$FUSE_CREATE_OPEN(r3, 0x0, 0x0) sendfile(r3, r3, &(0x7f0000000100)=0x4, 0x8112) 5m13.176804286s ago: executing program 3 (id=3955): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') syz_open_procfs(0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x10000, 0x5, 0x7, 0x800003, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x10009, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0xd, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080), 0x7f03) 5m9.444667661s ago: executing program 3 (id=3962): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1, 0x5531, &(0x7f0000000b00)="$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") sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000080)=ANY=[], 0x0) write$FUSE_CREATE_OPEN(r3, 0x0, 0x0) sendfile(r3, r3, &(0x7f0000000100)=0x4, 0x8112) 5m4.3562836s ago: executing program 3 (id=3973): r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) 5m0.208706616s ago: executing program 3 (id=3977): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 4m59.162539425s ago: executing program 3 (id=3979): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) setns(0xc9, 0x0) r1 = socket(0x8, 0x5, 0x7fff) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) ioctl$sock_SIOCOUTQNSD(r1, 0x40106183, &(0x7f0000000000)) 4m43.284545271s ago: executing program 33 (id=3979): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) setns(0xc9, 0x0) r1 = socket(0x8, 0x5, 0x7fff) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) ioctl$sock_SIOCOUTQNSD(r1, 0x40106183, &(0x7f0000000000)) 1m43.504886954s ago: executing program 5 (id=4277): openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2004400, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [], 0x6b}}) shutdown(r0, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r2, &(0x7f0000000100)=""/9, 0xfffffd87) write$tun(r2, &(0x7f00000000c0)=ANY=[], 0xffe) 1m40.563075272s ago: executing program 5 (id=4283): r0 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x4, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) accept(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sk_skb}, 0x48) 1m40.18027251s ago: executing program 5 (id=4286): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x84, 0x7, 0xfffffffffffffffe, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c5610067f0200ff000005000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd0000000a000200040010000800014004000000", 0x58}], 0x1) 1m38.977210907s ago: executing program 5 (id=4289): socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @any, 0xd3ffffff}, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000003, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(0xffffffffffffffff, 0x4068aea3, 0x0) mincore(&(0x7f0000b43000/0x3000)=nil, 0x3000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x28f41000) read(r0, &(0x7f0000000180)=""/145, 0x91) syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0xc474, 0x3850, 0x2, 0x200004}, &(0x7f0000000100), 0x0, 0x0) msync(&(0x7f0000009000/0x2000)=nil, 0x2000, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) epoll_create(0x4) 1m33.436469187s ago: executing program 5 (id=4299): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) socket$kcm(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf9477000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) 1m32.335313029s ago: executing program 5 (id=4301): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000140), 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c69700014000780080006400000020008000840"], 0x60}}, 0x200040c0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040043}, 0x0) 1m16.957220782s ago: executing program 34 (id=4301): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000140), 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c69700014000780080006400000020008000840"], 0x60}}, 0x200040c0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040043}, 0x0) 9.903453534s ago: executing program 6 (id=4461): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) readv(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/202, 0xca}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) 6.581881791s ago: executing program 2 (id=4470): r0 = socket$tipc(0x1e, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x194) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x1) write(r1, &(0x7f0000000000)='7', 0x1) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) 6.339427622s ago: executing program 0 (id=4472): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x84, 0x7, 0xfffffffffffffffe, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c5610067f0200ff000005000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd0000000a000200040010000800014004000000", 0x58}], 0x1) 6.257598226s ago: executing program 4 (id=4473): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f00000000c0)}}, {{&(0x7f00000002c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000100)}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) socket$kcm(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf9477000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) 5.772864579s ago: executing program 2 (id=4474): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, 0x0, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30) r5 = accept$alg(r4, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$alg(r5, &(0x7f00000008c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x408d0}], 0x1, 0xc0041) recvmsg(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001b80)=""/25, 0x19}, {0x0}], 0x2}, 0x8dff) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) 5.274900912s ago: executing program 0 (id=4475): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/target/usb_gadget\x00', 0x1ff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x4000054) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/target/usb_gadget/naa.test/tpgt_1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/target/usb_gadget/naa.test/tpgt_1/lun/lun_0\x00', 0x1ff) 3.945252235s ago: executing program 4 (id=4476): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000900)={'syzkaller0\x00', 0x41}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000000000001410000001c0017fffffffd000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) write(r0, &(0x7f0000000400)="fff7ffffffff00000000000188ca19ec63f7540a5f4000ca0d8b010000cb9d4fca8be3f6bc4d6e223db2b547d85ef5f316133a292d10ef126d66e7e5e18292cbad98fae42acce89dec22", 0x4a) 2.926786423s ago: executing program 6 (id=4477): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r0 = io_uring_setup(0x4520, &(0x7f0000000380)={0x0, 0xdca4, 0x2000, 0x2, 0x2e6}) r1 = syz_io_uring_setup(0x18d6, &(0x7f0000000040)={0x0, 0x3, 0x800, 0xfffffffc, 0xad, 0x0, r0}, &(0x7f0000000440), &(0x7f0000000500), &(0x7f0000000000)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c000000000101040000000000080000020000001400188008000240000000020800014000010000000100000000018008000100d500000108000200e00000010c0002800500010000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x2, &(0x7f0000000180), 0xfe) socket$l2tp(0x2, 0x2, 0x73) r3 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x3, 0x5, 0x1, 0x0, 0x2}) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240), 0xa000, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r4, 0x80044d07, &(0x7f0000000040)) readv(r4, &(0x7f0000000680)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1) mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000009, 0x11, r4, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x9) r5 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, 0x0) 2.832899287s ago: executing program 2 (id=4478): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/dlm\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/cluster/comms/1\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xc25c}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r0}]}}}]}, 0x38}}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000480)=@abs={0x1, 0x0, 0x4e22}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster/comms/2\x00', 0x1fd) timer_create(0x0, &(0x7f00000007c0)={0x0, 0x33, 0x2, @thr={&(0x7f0000000740)="467de29de66f28a89f043bc670a65f", &(0x7f0000000780)="c31a56a6d768f5b7f9258e80b4dfbe526ee33663fc1d9d89e2e9df7fdb72c3131fea2474dcd8e0"}}, &(0x7f0000000800)=0x0) timer_settime(r1, 0x1, &(0x7f0000000840), &(0x7f0000000880)) r2 = openat$tun(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) write$tun(r2, &(0x7f0000000500)={@void, @val={0x2, 0x3, 0x6, 0x0, 0x9, 0x7}, @ipv6=@tipc_packet={0x8, 0x6, "8d72d0", 0x1bc, 0x6, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, {[@hopopts={0x0, 0x20, '\x00', [@calipso={0x7, 0x38, {0x3, 0xc, 0x2, 0x981, [0x4, 0x9, 0xb28, 0x8, 0x8, 0x2]}}, @hao={0xc9, 0x10, @mcast2}, @generic={0x33, 0x98, "15630ba6813003746524f74ea3f5b481c33a813da4ffcc7b1c6b95d48dc1022712bb6919771d4aa4f3965e70fa13dc5a3a80eefa585cb09f03f22832ce4f57c7a51e7a8644ac037357358f141e0384898c29606e218bf13cb8b1bfa8d03a41e4cd5dfe30c25bf597d63220876a11d24b757fe1480f9c949821e1de7e1c8f3e4dbc61e31108da495614f0457722a8d89bf732a544cd738dfd"}, @pad1, @calipso={0x7, 0x10, {0x1, 0x2, 0x2, 0xffc0, [0x8000]}}, @enc_lim={0x4, 0x1, 0x6}, @padn]}, @srh={0x33, 0x6, 0x4, 0x3, 0x3, 0x8, 0x50be, [@mcast2, @empty, @ipv4={'\x00', '\xff\xff', @empty}]}], @name_distributor={{0x7c, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x40, 0x0, 0x0, 0x2, 0x9, 0x4, 0x4e24, 0x4e21, 0x3, 0x4}, [{0x2, 0xffffffff, 0x4, 0x1, 0x5, 0x5, 0x8, 0x5}, {0x5, 0x200000, 0x8, 0x7fff, 0x80000001, 0x10000, 0x4}, {0x1af2, 0x0, 0xdf12, 0x1ff, 0xf9e0, 0x4, 0x8, 0xbb}]}}}}, 0x1ee) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/cluster/comms/1/local\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='1\x00', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/dlm/cluster/comms/2/addr\x00', 0x1, 0x0) write(r4, &(0x7f00000003c0)="020052487f00000100"/128, 0x80) 2.589432439s ago: executing program 0 (id=4479): sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffce3, 0x7, 0x2, 0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000120001"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.472787564s ago: executing program 2 (id=4480): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000340)={@multicast1, @broadcast, 0xffffffffffffffff, "db4dcd4838e16e7fd86fcbe4016c6f6651ca209fc446a60e43205f5281fa7dee", 0x3, 0x7fffffff, 0xff, 0x9}, 0x3c) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r4 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') pread64(r4, &(0x7f0000000100)=""/253, 0xfd, 0x1) 2.144777539s ago: executing program 0 (id=4481): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/dlm\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/cluster/comms/1\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xc25c}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r0}]}}}]}, 0x38}}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000480)=@abs={0x1, 0x0, 0x4e22}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster/comms/2\x00', 0x1fd) timer_create(0x0, &(0x7f00000007c0)={0x0, 0x33, 0x2, @thr={&(0x7f0000000740)="467de29de66f28a89f043bc670a65f", &(0x7f0000000780)="c31a56a6d768f5b7f9258e80b4dfbe526ee33663fc1d9d89e2e9df7fdb72c3131fea2474dcd8e0"}}, &(0x7f0000000800)=0x0) timer_settime(r1, 0x1, &(0x7f0000000840), &(0x7f0000000880)) r2 = openat$tun(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) write$tun(r2, &(0x7f0000000500)={@void, @val={0x2, 0x3, 0x6, 0x0, 0x9, 0x7}, @ipv6=@tipc_packet={0x8, 0x6, "8d72d0", 0x1bc, 0x6, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, {[@hopopts={0x0, 0x20, '\x00', [@calipso={0x7, 0x38, {0x3, 0xc, 0x2, 0x981, [0x4, 0x9, 0xb28, 0x8, 0x8, 0x5]}}, @hao={0xc9, 0x10, @mcast2}, @generic={0x33, 0x98, "15630ba6813003746524f74ea3f5b481c33a813da4ffcc7b1c6b95d48dc1022712bb6919771d4aa4f3965e70fa13dc5a3a80eefa585cb09f03f22832ce4f57c7a51e7a8644ac037357358f141e0384898c29606e218bf13cb8b1bfa8d03a41e4cd5dfe30c25bf597d63220876a11d24b757fe1480f9c949821e1de7e1c8f3e4dbc61e31108da495614f0457722a8d89bf732a544cd738dfd"}, @pad1, @calipso={0x7, 0x10, {0x1, 0x2, 0x2, 0xffc0, [0x8000]}}, @enc_lim={0x4, 0x1, 0x6}, @padn]}, @srh={0x33, 0x6, 0x4, 0x3, 0x3, 0x8, 0x50be, [@mcast2, @empty, @ipv4={'\x00', '\xff\xff', @empty}]}], @name_distributor={{0x7c, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x40, 0x0, 0x0, 0x2, 0x9, 0x4, 0x4e24, 0x4e21, 0x3, 0x4}, [{0x2, 0xffffffff, 0x4, 0x1, 0x5, 0x5, 0x8, 0x5}, {0x5, 0x200000, 0x8, 0x7fff, 0x80000001, 0x10000, 0x4}, {0x1af2, 0x0, 0xdf12, 0x1ff, 0xf9e0, 0x4, 0x8, 0xbb}]}}}}, 0x1ee) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/cluster/comms/1/local\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='1\x00', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/dlm/cluster/comms/2/addr\x00', 0x1, 0x0) write(r4, &(0x7f00000003c0)="020052487f00000100"/128, 0x80) 1.869922872s ago: executing program 4 (id=4482): r0 = socket$tipc(0x1e, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x194) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x1) write(r1, &(0x7f0000000000)='7', 0x1) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) 1.849137913s ago: executing program 6 (id=4483): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x84, 0x7, 0xfffffffffffffffe, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c5610067f0200ff000005000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd0000000a000200040010000800014004000000", 0x58}], 0x1) 1.680304361s ago: executing program 0 (id=4484): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f00000000c0)}}, {{&(0x7f00000002c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000100)}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) socket$kcm(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf9477000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) 1.196899804s ago: executing program 2 (id=4485): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) readv(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/202, 0xca}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) 897.083528ms ago: executing program 4 (id=4486): r0 = socket$inet(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000100)='\b', 0x1}], 0x1, 0x0, 0x0, 0xe0000000}, 0x1a92189d0dd42cd6) 598.560202ms ago: executing program 6 (id=4487): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) unshare(0x8040480) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x1, 0x40002, 0x803a0, 0x1, 0x101}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000), 0x0}, 0x20) 300.773866ms ago: executing program 6 (id=4488): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/dlm\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/cluster/comms/1\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xc25c}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r0}]}}}]}, 0x38}}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000480)=@abs={0x1, 0x0, 0x4e22}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster/comms/2\x00', 0x1fd) timer_create(0x0, &(0x7f00000007c0)={0x0, 0x33, 0x2, @thr={&(0x7f0000000740)="467de29de66f28a89f043bc670a65f", &(0x7f0000000780)="c31a56a6d768f5b7f9258e80b4dfbe526ee33663fc1d9d89e2e9df7fdb72c3131fea2474dcd8e0"}}, &(0x7f0000000800)=0x0) timer_settime(r1, 0x1, &(0x7f0000000840), &(0x7f0000000880)) r2 = openat$tun(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) write$tun(r2, &(0x7f0000000500)={@void, @val={0x2, 0x3, 0x6, 0x0, 0x9, 0x7}, @ipv6=@tipc_packet={0x8, 0x6, "8d72d0", 0x1bc, 0x6, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, {[@hopopts={0x0, 0x20, '\x00', [@calipso={0x7, 0x38, {0x3, 0xc, 0x2, 0x981, [0x4, 0x9, 0xb28, 0x8, 0x8, 0x2]}}, @hao={0xc9, 0x10, @mcast2}, @generic={0x33, 0x98, "15630ba6813003746524f74ea3f5b481c33a813da4ffcc7b1c6b95d48dc1022712bb6919771d4aa4f3965e70fa13dc5a3a80eefa585cb09f03f22832ce4f57c7a51e7a8644ac037357358f141e0384898c29606e218bf13cb8b1bfa8d03a41e4cd5dfe30c25bf597d63220876a11d24b757fe1480f9c949821e1de7e1c8f3e4dbc61e31108da495614f0457722a8d89bf732a544cd738dfd"}, @pad1, @calipso={0x7, 0x10, {0x1, 0x2, 0x2, 0xffc0, [0x8000]}}, @enc_lim={0x4, 0x1, 0x6}, @padn]}, @srh={0x33, 0x6, 0x4, 0x3, 0x3, 0x8, 0x50be, [@mcast2, @empty, @ipv4={'\x00', '\xff\xff', @empty}]}], @name_distributor={{0x7c, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x40, 0x0, 0x0, 0x2, 0x9, 0x4, 0x4e24, 0x4e21, 0x3, 0x4}, [{0x2, 0xffffffff, 0x4, 0x1, 0x5, 0x5, 0x8, 0x5}, {0x5, 0x200000, 0x8, 0x7fff, 0x80000001, 0x10000, 0x4}, {0x1af2, 0x0, 0xdf12, 0x1ff, 0xf9e0, 0x4, 0x8, 0xbb}]}}}}, 0x1ee) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/cluster/comms/1/local\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='1\x00', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/dlm/cluster/comms/2/addr\x00', 0x1, 0x0) write(r4, &(0x7f00000003c0)="020052487f00000100"/128, 0x80) 300.586346ms ago: executing program 4 (id=4489): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/target/usb_gadget\x00', 0x1ff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x4000054) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/target/usb_gadget/naa.test/tpgt_1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/target/usb_gadget/naa.test/tpgt_1/lun/lun_0\x00', 0x1ff) 204.952821ms ago: executing program 0 (id=4490): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0xa02) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x7, 0x6776, 0x20}) 117.130425ms ago: executing program 2 (id=4491): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi4\x00', 0xc0240, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f000003edc0)={0x1, &(0x7f000003ed40)=[{0x4000000, 0x0, 0x0, 0x1, 0x1}]}) 2.85351ms ago: executing program 6 (id=4492): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/dlm\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/cluster/comms/1\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xc25c}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r0}]}}}]}, 0x38}}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000480)=@abs={0x1, 0x0, 0x4e22}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster/comms/2\x00', 0x1fd) timer_create(0x0, &(0x7f00000007c0)={0x0, 0x33, 0x2, @thr={&(0x7f0000000740)="467de29de66f28a89f043bc670a65f", &(0x7f0000000780)="c31a56a6d768f5b7f9258e80b4dfbe526ee33663fc1d9d89e2e9df7fdb72c3131fea2474dcd8e0"}}, &(0x7f0000000800)=0x0) timer_settime(r1, 0x1, &(0x7f0000000840), &(0x7f0000000880)) r2 = openat$tun(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) write$tun(r2, &(0x7f0000000500)={@void, @val={0x2, 0x3, 0x6, 0x0, 0x9, 0x7}, @ipv6=@tipc_packet={0x8, 0x6, "8d72d0", 0x1bc, 0x6, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, {[@hopopts={0x0, 0x20, '\x00', [@calipso={0x7, 0x38, {0x3, 0xc, 0x2, 0x981, [0x4, 0x9, 0xb28, 0x8, 0x8, 0x5]}}, @hao={0xc9, 0x10, @mcast2}, @generic={0x33, 0x98, "15630ba6813003746524f74ea3f5b481c33a813da4ffcc7b1c6b95d48dc1022712bb6919771d4aa4f3965e70fa13dc5a3a80eefa585cb09f03f22832ce4f57c7a51e7a8644ac037357358f141e0384898c29606e218bf13cb8b1bfa8d03a41e4cd5dfe30c25bf597d63220876a11d24b757fe1480f9c949821e1de7e1c8f3e4dbc61e31108da495614f0457722a8d89bf732a544cd738dfd"}, @pad1, @calipso={0x7, 0x10, {0x1, 0x2, 0x2, 0xffc0, [0x8000]}}, @enc_lim={0x4, 0x1, 0x6}, @padn]}, @srh={0x33, 0x6, 0x4, 0x3, 0x3, 0x8, 0x50be, [@mcast2, @empty, @ipv4={'\x00', '\xff\xff', @empty}]}], @name_distributor={{0x7c, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x40, 0x0, 0x0, 0x2, 0x9, 0x4, 0x4e24, 0x4e21, 0x3, 0x4}, [{0x2, 0xffffffff, 0x4, 0x1, 0x5, 0x5, 0x8, 0x5}, {0x5, 0x200000, 0x8, 0x7fff, 0x80000001, 0x10000, 0x4}, {0x1af2, 0x0, 0xdf12, 0x1ff, 0xf9e0, 0x4, 0x8, 0xbb}]}}}}, 0x1ee) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/cluster/comms/1/local\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='1\x00', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/dlm/cluster/comms/2/addr\x00', 0x1, 0x0) write(r4, &(0x7f00000003c0)="020052487f00000100"/128, 0x80) 0s ago: executing program 4 (id=4500): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/dlm\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/cluster/comms/1\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xc25c}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r0}]}}}]}, 0x38}}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000480)=@abs={0x1, 0x0, 0x4e22}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster/comms/2\x00', 0x1fd) timer_create(0x0, &(0x7f00000007c0)={0x0, 0x33, 0x2, @thr={&(0x7f0000000740)="467de29de66f28a89f043bc670a65f", &(0x7f0000000780)="c31a56a6d768f5b7f9258e80b4dfbe526ee33663fc1d9d89e2e9df7fdb72c3131fea2474dcd8e0"}}, &(0x7f0000000800)=0x0) timer_settime(r1, 0x1, &(0x7f0000000840), &(0x7f0000000880)) r2 = openat$tun(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) write$tun(r2, &(0x7f0000000500)={@void, @val={0x2, 0x3, 0x6, 0x0, 0x9, 0x7}, @ipv6=@tipc_packet={0x8, 0x6, "8d72d0", 0x1bc, 0x6, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, {[@hopopts={0x0, 0x20, '\x00', [@calipso={0x7, 0x38, {0x3, 0xc, 0x2, 0x981, [0x4, 0x9, 0xb28, 0x8, 0x8, 0x2]}}, @hao={0xc9, 0x10, @mcast2}, @generic={0x33, 0x98, "15630ba6813003746524f74ea3f5b481c33a813da4ffcc7b1c6b95d48dc1022712bb6919771d4aa4f3965e70fa13dc5a3a80eefa585cb09f03f22832ce4f57c7a51e7a8644ac037357358f141e0384898c29606e218bf13cb8b1bfa8d03a41e4cd5dfe30c25bf597d63220876a11d24b757fe1480f9c949821e1de7e1c8f3e4dbc61e31108da495614f0457722a8d89bf732a544cd738dfd"}, @pad1, @calipso={0x7, 0x10, {0x1, 0x2, 0x2, 0xffc0, [0x8000]}}, @enc_lim={0x4, 0x1, 0x6}, @padn]}, @srh={0x33, 0x6, 0x4, 0x3, 0x3, 0x8, 0x50be, [@mcast2, @empty, @ipv4={'\x00', '\xff\xff', @empty}]}], @name_distributor={{0x7c, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x40, 0x0, 0x0, 0x2, 0x9, 0x4, 0x4e24, 0x4e21, 0x3, 0x4}, [{0x2, 0xffffffff, 0x4, 0x1, 0x5, 0x5, 0x8, 0x5}, {0x5, 0x200000, 0x8, 0x7fff, 0x80000001, 0x10000, 0x4}, {0x1af2, 0x0, 0xdf12, 0x1ff, 0xf9e0, 0x4, 0x8, 0xbb}]}}}}, 0x1ee) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/cluster/comms/1/local\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='1\x00', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/dlm/cluster/comms/2/addr\x00', 0x1, 0x0) write(r4, &(0x7f00000003c0)="020052487f00000100"/128, 0x80) kernel console output (not intermixed with test programs): t=40427 [ 838.609037][T12645] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 840.759038][ T27] audit: type=1800 audit(1789922201.355:566): pid=15731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3443" name="file0" dev="overlay" ino=1725 res=0 errno=0 [ 841.907428][T15737] overlayfs: failed to resolve './file0': -2 [ 842.907255][T15746] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3448'. [ 843.116604][ T27] audit: type=1800 audit(1789922203.735:567): pid=15749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3446" name="file0" dev="overlay" ino=1552 res=0 errno=0 [ 843.392260][T15754] loop0: detected capacity change from 0 to 1024 [ 843.399969][T15754] EXT4-fs: Ignoring removed bh option [ 843.587924][T15754] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 843.749683][T15755] loop3: detected capacity change from 0 to 40427 [ 843.760636][T15755] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 843.767256][T15755] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 843.781959][T12645] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 843.800829][T15755] F2FS-fs (loop3): invalid crc value [ 844.153681][T15755] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 844.160796][T15755] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 845.519459][T12446] syz-executor: attempt to access beyond end of device [ 845.519459][T12446] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 845.645980][T12446] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 846.457875][T15779] loop1: detected capacity change from 0 to 40427 [ 846.551152][T15779] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 846.557631][T15779] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 846.574048][T15779] F2FS-fs (loop1): invalid crc value [ 846.721591][T15779] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 846.729049][T15779] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 847.447739][ T27] audit: type=1800 audit(1789922208.065:568): pid=15787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3458" name="file0" dev="overlay" ino=1770 res=0 errno=0 [ 847.456013][T11898] syz-executor: attempt to access beyond end of device [ 847.456013][T11898] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 847.621183][T11898] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 847.738981][T15794] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3460'. [ 848.280220][T15796] loop2: detected capacity change from 0 to 40427 [ 848.384334][T15796] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 848.390777][T15796] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 848.402740][T15796] F2FS-fs (loop2): invalid crc value [ 849.020958][T15796] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 849.028207][T15796] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 849.366760][T12071] syz-executor: attempt to access beyond end of device [ 849.366760][T12071] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 849.385121][T12071] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 851.236217][ T27] audit: type=1800 audit(1789922211.855:569): pid=15821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3468" name="file0" dev="overlay" ino=1595 res=0 errno=0 [ 853.252061][T15841] loop2: detected capacity change from 0 to 40427 [ 853.471651][T15841] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 853.478175][T15841] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 853.501529][T15841] F2FS-fs (loop2): invalid crc value [ 853.648922][T15841] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 853.656231][T15841] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 855.566328][ T27] audit: type=1800 audit(1789922216.145:570): pid=15864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3479" name="file0" dev="overlay" ino=1891 res=0 errno=0 [ 856.082467][T15872] loop1: detected capacity change from 0 to 40427 [ 856.132078][T15872] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 856.138598][T15872] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 856.151037][T15872] F2FS-fs (loop1): invalid crc value [ 856.378543][T15872] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 856.385866][T15872] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 856.992594][T11898] syz-executor: attempt to access beyond end of device [ 856.992594][T11898] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 857.035422][T11898] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 857.486606][T15882] loop3: detected capacity change from 0 to 1024 [ 857.513939][T15882] EXT4-fs: Ignoring removed bh option [ 857.708697][T15882] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 858.502867][T12446] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 858.837818][T12071] syz-executor: attempt to access beyond end of device [ 858.837818][T12071] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 858.868665][T12071] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 860.549051][ T27] audit: type=1800 audit(1789922221.145:571): pid=15901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3491" name="file0" dev="overlay" ino=1923 res=0 errno=0 [ 862.061520][T15914] loop2: detected capacity change from 0 to 1024 [ 862.070789][T15914] EXT4-fs: Ignoring removed bh option [ 862.285886][T15918] loop3: detected capacity change from 0 to 40427 [ 862.310281][ T27] audit: type=1800 audit(1789922222.925:572): pid=15917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3498" name="file0" dev="overlay" ino=1947 res=0 errno=0 [ 862.416062][T15918] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 862.422452][T15918] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 862.453727][T15914] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 862.494277][T15918] F2FS-fs (loop3): invalid crc value [ 862.632054][T15918] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 862.639186][T15918] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 864.193364][T12071] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 865.470064][ T27] audit: type=1800 audit(1789922226.065:573): pid=15944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3501" name="file0" dev="overlay" ino=1818 res=0 errno=0 [ 866.520576][T12446] syz-executor: attempt to access beyond end of device [ 866.520576][T12446] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 866.606616][T12446] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 867.404356][T15956] SET target dimension over the limit! [ 867.935967][T15962] loop1: detected capacity change from 0 to 40427 [ 867.967523][T15962] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 867.973986][T15962] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 867.984539][T15962] F2FS-fs (loop1): invalid crc value [ 868.215832][T15970] overlayfs: failed to resolve './file1': -2 [ 868.230162][T15962] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 868.237388][T15962] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 869.033719][T11898] syz-executor: attempt to access beyond end of device [ 869.033719][T11898] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 869.050174][T11898] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 870.269619][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.276291][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.014288][T15993] SET target dimension over the limit! [ 872.468541][T16005] loop2: detected capacity change from 0 to 40427 [ 872.480457][T16005] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 872.486904][T16005] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 872.497204][T16005] F2FS-fs (loop2): invalid crc value [ 872.619406][T16011] overlayfs: failed to resolve './file1': -2 [ 872.633673][T16005] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 872.640760][T16005] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 874.761981][T12071] syz-executor: attempt to access beyond end of device [ 874.761981][T12071] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 874.797692][T12071] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 876.077951][T16029] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3528'. [ 876.100399][T16028] SET target dimension over the limit! [ 876.900505][T16037] loop0: detected capacity change from 0 to 40427 [ 876.933547][T16037] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 876.939967][T16037] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 876.951565][T16037] F2FS-fs (loop0): invalid crc value [ 877.105567][T16037] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 877.112821][T16037] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 877.286867][T12645] syz-executor: attempt to access beyond end of device [ 877.286867][T12645] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 877.613257][T12645] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 877.768053][T16053] overlayfs: failed to resolve './file1': -2 [ 878.650077][T16061] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3543'. [ 881.916826][T16076] loop1: detected capacity change from 0 to 40427 [ 881.955307][T16076] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 881.961748][T16076] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 881.986413][T16076] F2FS-fs (loop1): invalid crc value [ 882.274611][T16076] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 882.281831][T16076] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 882.377495][T11898] syz-executor: attempt to access beyond end of device [ 882.377495][T11898] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 882.535364][T16086] syz.2.3551 uses obsolete (PF_INET,SOCK_PACKET) [ 882.619232][T11898] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 883.012987][T16094] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3553'. [ 886.327239][T16121] netlink: 'syz.3.3562': attribute type 1 has an invalid length. [ 886.472607][T16125] overlayfs: failed to resolve './file1': -2 [ 887.190434][T16121] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3562'. [ 893.026913][T16152] netlink: 'syz.3.3572': attribute type 1 has an invalid length. [ 893.047717][T16152] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3572'. [ 893.423320][T16158] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3574'. [ 894.276478][T16170] overlayfs: failed to resolve './file1': -2 [ 896.362483][T16186] netlink: 'syz.3.3582': attribute type 1 has an invalid length. [ 896.370609][T16186] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3582'. [ 898.506661][T16195] loop2: detected capacity change from 0 to 1024 [ 898.518070][T16195] EXT4-fs: Ignoring removed bh option [ 898.609129][T16195] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 898.817211][T12071] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 898.959378][T16208] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3592'. [ 899.009669][T16210] overlayfs: failed to resolve './file0': -2 [ 901.347695][T16219] loop0: detected capacity change from 0 to 40427 [ 901.410977][T16221] overlayfs: failed to resolve './file0': -2 [ 901.426988][T16219] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 901.433375][T16219] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 901.448822][T16219] F2FS-fs (loop0): invalid crc value [ 901.689007][T16219] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 901.696269][T16219] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 902.660149][T16239] loop2: detected capacity change from 0 to 1024 [ 902.682221][T16239] EXT4-fs: Ignoring removed bh option [ 902.728027][T16239] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 903.743209][T16246] loop1: detected capacity change from 0 to 40427 [ 903.768706][T16246] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 903.769451][T12645] syz-executor: attempt to access beyond end of device [ 903.769451][T12645] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 903.775243][T16246] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 903.798916][T16246] F2FS-fs (loop1): invalid crc value [ 903.830897][T12645] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 903.878487][T16252] overlayfs: failed to resolve './file0': -2 [ 903.959560][T16246] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 903.966837][T16246] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 905.444074][T16262] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3603'. [ 908.628383][T15488] IPVS: starting estimator thread 0... [ 908.733775][T16270] IPVS: using max 16 ests per chain, 38400 per kthread [ 909.166065][T11898] syz-executor: attempt to access beyond end of device [ 909.166065][T11898] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 909.216065][T11898] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 909.251883][T12071] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 909.490674][T16276] loop0: detected capacity change from 0 to 40427 [ 909.499524][T16276] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 909.506113][T16276] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 909.580483][T16276] F2FS-fs (loop0): invalid crc value [ 909.754030][T16276] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 909.761273][T16276] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 909.896226][T16283] overlayfs: failed to resolve './file0': -2 [ 910.896128][T16288] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3614'. [ 912.494628][T16309] loop3: detected capacity change from 0 to 1024 [ 912.527284][T16309] EXT4-fs: Ignoring removed bh option [ 912.666296][T16314] overlayfs: missing 'lowerdir' [ 912.818295][T16309] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 914.158991][T16324] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3625'. [ 914.545454][T12645] syz-executor: attempt to access beyond end of device [ 914.545454][T12645] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 914.616477][T12645] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 920.163834][T16344] overlayfs: missing 'lowerdir' [ 921.156767][T16393] loop2: detected capacity change from 0 to 40427 [ 921.171387][T16393] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 921.177900][T16393] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 921.219254][T16413] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3635'. [ 921.230766][T16393] F2FS-fs (loop2): invalid crc value [ 921.257437][T16412] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3636'. [ 921.405646][T16393] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 921.412975][T16393] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 924.156186][T12446] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 924.312651][T16439] overlayfs: missing 'lowerdir' [ 925.795615][T16447] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3646'. [ 926.007124][T16450] SET target dimension over the limit! [ 926.280465][T12071] syz-executor: attempt to access beyond end of device [ 926.280465][T12071] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 926.307818][T12071] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 930.465653][T16473] overlayfs: missing 'lowerdir' [ 931.743604][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.772525][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.099651][T16490] SET target dimension over the limit! [ 934.060811][T16497] jffs2: notice: (16497) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 937.002359][T16516] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3666'. [ 937.471841][T16521] SET target dimension over the limit! [ 944.374628][T16590] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3677'. [ 944.514013][T16592] sctp: [Deprecated]: syz.0.3671 (pid 16592) Use of int in max_burst socket option deprecated. [ 944.514013][T16592] Use struct sctp_assoc_value instead [ 944.696371][T16596] SET target dimension over the limit! [ 951.144357][T16629] SET target dimension over the limit! [ 954.502725][T16644] jffs2: notice: (16644) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 955.655284][T16659] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3686'. [ 956.657787][T16666] SET target dimension over the limit! [ 959.961169][T16685] jffs2: notice: (16685) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 961.436188][T16702] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3708'. [ 961.535700][T16703] SET target dimension over the limit! [ 963.774657][T16724] jffs2: notice: (16724) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 969.734434][T16778] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3719'. [ 972.910903][T16804] SET target dimension over the limit! [ 973.610210][T16814] overlayfs: missing 'lowerdir' [ 974.359746][T16817] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3732'. [ 977.979643][T16842] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3742'. [ 978.117618][T16844] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3740'. [ 978.284823][T16851] overlayfs: missing 'lowerdir' [ 982.771169][T16882] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3754'. [ 982.912280][T16886] overlayfs: missing 'lowerdir' [ 983.702855][T16885] loop0: detected capacity change from 0 to 1024 [ 983.744568][T16885] EXT4-fs: Ignoring removed bh option [ 984.074565][T16885] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 986.185610][T16911] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3765'. [ 986.904072][T16914] overlayfs: missing 'lowerdir' [ 991.025448][T16931] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3774'. [ 993.148684][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.155117][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.179314][T12645] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 993.409987][T16941] overlayfs: missing 'lowerdir' [ 994.483634][T16950] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3781'. [ 994.664635][T16954] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3768'. [ 996.918033][T16959] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3784'. [ 998.369295][T16973] overlayfs: missing 'workdir' [ 1000.552338][T16988] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3795'. [ 1000.600577][T16990] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3796'. [ 1001.043645][T17001] overlayfs: missing 'workdir' [ 1001.934564][T17003] SET target dimension over the limit! [ 1003.641112][T16994] loop0: detected capacity change from 0 to 40427 [ 1003.696182][T16994] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 1003.713690][T16994] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 1003.743727][T16994] F2FS-fs (loop0): invalid crc value [ 1003.759497][T16994] F2FS-fs (loop0): Failed to start F2FS issue_checkpoint_thread (-4) [ 1003.812260][T17020] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3811'. [ 1004.770590][T17025] overlayfs: missing 'workdir' [ 1005.020708][T17027] SET target dimension over the limit! [ 1007.709253][T17053] overlayfs: missing 'lowerdir' [ 1008.524703][T17055] SET target dimension over the limit! [ 1008.588089][T17042] loop3: detected capacity change from 0 to 40427 [ 1008.607111][T17042] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 1008.613738][T17042] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1008.650464][T17042] F2FS-fs (loop3): invalid crc value [ 1009.034151][T17042] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 1009.041257][T17042] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1010.490534][T17083] SET target dimension over the limit! [ 1012.001226][T17089] overlayfs: missing 'lowerdir' [ 1013.938622][T17116] SET target dimension over the limit! [ 1015.015319][T17121] overlayfs: missing 'lowerdir' [ 1015.418953][T17111] loop0: detected capacity change from 0 to 40427 [ 1015.458547][T17111] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 1015.489970][T17111] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 1015.552479][T17111] F2FS-fs (loop0): invalid crc value [ 1016.674885][T17148] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1016.684114][T17148] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1018.150630][ T9] smpboot: CPU 1 is now offline [ 1018.367729][T17166] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1022.304018][T17183] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1022.312776][T17183] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1023.821514][T17193] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 1024.307624][T17205] loop0: detected capacity change from 0 to 1024 [ 1024.315112][T17205] EXT4-fs: Ignoring removed bh option [ 1024.355544][T17205] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1024.478821][T12645] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1024.703571][ T1200] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 1028.241294][ T1200] usb 3-1: device descriptor read/all, error -71 [ 1036.469118][T17266] overlayfs: failed to resolve './file0': -2 [ 1038.733693][ T1200] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1041.020576][ T1200] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 1042.893489][ T1200] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1042.949371][ T1200] usb 2-1: config 0 has no interface number 0 [ 1042.999289][ T1200] usb 2-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1043.049061][ T1200] usb 2-1: config 0 interface 106 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1043.097477][ T1200] usb 2-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1043.123882][ T788] smpboot: CPU 1 is now offline [ 1044.548454][ T1200] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1044.627768][ T1200] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.670330][T17296] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1044.715110][ T1200] usb 2-1: config 0 descriptor?? [ 1044.747147][ T1200] usb 2-1: can't set config #0, error -71 [ 1044.813823][ T1200] usb 2-1: USB disconnect, device number 10 [ 1054.586299][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.593047][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.887004][T15488] smpboot: CPU 1 is now offline [ 1056.288825][T17344] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1057.257124][T17354] overlayfs: failed to resolve './file0': -2 [ 1060.201619][T17366] loop1: detected capacity change from 0 to 40427 [ 1060.216929][T17366] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 1060.223489][T17366] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1060.238570][T17366] F2FS-fs (loop1): invalid crc value [ 1060.343488][T17366] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 1060.350699][T17366] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1060.903745][T15488] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 1063.399556][T15488] usb 4-1: not running at top speed; connect to a high speed hub [ 1063.432505][T15488] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1065.605739][T15488] usb 4-1: string descriptor 0 read error: -71 [ 1065.718385][T15488] usb 4-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 1065.739546][T17390] loop0: detected capacity change from 0 to 1024 [ 1065.747988][T17390] EXT4-fs: Ignoring removed bh option [ 1065.787504][T15488] usb 4-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 1065.805871][T17390] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1065.909712][T15488] usb 4-1: can't set config #1, error -71 [ 1065.937141][ T27] audit: type=1326 audit(1789922426.555:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17396 comm="syz.2.3933" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03c739e159 code=0x7ffc0000 [ 1065.976313][ T27] audit: type=1326 audit(1789922426.555:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17396 comm="syz.2.3933" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f03c739e159 code=0x7ffc0000 [ 1066.018439][ T27] audit: type=1326 audit(1789922426.555:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17396 comm="syz.2.3933" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03c739e159 code=0x7ffc0000 [ 1066.060911][ T27] audit: type=1326 audit(1789922426.555:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17396 comm="syz.2.3933" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03c739e159 code=0x7ffc0000 [ 1066.225855][T15488] usb 4-1: USB disconnect, device number 5 [ 1066.628394][ T27] audit: type=1326 audit(1789922427.245:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17396 comm="syz.2.3933" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f03c735e98e code=0x7ffc0000 [ 1066.698372][ T27] audit: type=1326 audit(1789922427.245:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17396 comm="syz.2.3933" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03c739e159 code=0x7ffc0000 [ 1066.736778][ T27] audit: type=1326 audit(1789922427.245:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17396 comm="syz.2.3933" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03c739e159 code=0x7ffc0000 [ 1066.798964][ T27] audit: type=1326 audit(1789922427.365:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17396 comm="syz.2.3933" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f03c739e159 code=0x7ffc0000 [ 1066.841631][ T27] audit: type=1326 audit(1789922427.365:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17396 comm="syz.2.3933" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03c739e159 code=0x7ffc0000 [ 1066.879652][ T27] audit: type=1326 audit(1789922427.365:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17396 comm="syz.2.3933" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03c739e159 code=0x7ffc0000 [ 1068.743595][T12648] Bluetooth: hci1: command 0x0406 tx timeout [ 1069.542931][T12645] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1076.864694][T17467] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1076.878461][T17467] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1076.892465][T17467] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1076.909766][T17467] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1076.921137][T17467] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1076.932527][T17467] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1077.674172][T11898] syz-executor: attempt to access beyond end of device [ 1077.674172][T11898] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1078.138962][T17466] chnl_net:caif_netlink_parms(): no params data found [ 1078.272146][T11898] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1078.406251][T17466] bridge0: port 1(bridge_slave_0) entered blocking state [ 1078.413814][T17466] bridge0: port 1(bridge_slave_0) entered disabled state [ 1078.420983][T17466] bridge_slave_0: entered allmulticast mode [ 1078.435304][T17466] bridge_slave_0: entered promiscuous mode [ 1078.454493][T17466] bridge0: port 2(bridge_slave_1) entered blocking state [ 1078.461844][T17466] bridge0: port 2(bridge_slave_1) entered disabled state [ 1078.474684][T17466] bridge_slave_1: entered allmulticast mode [ 1078.482040][T17466] bridge_slave_1: entered promiscuous mode [ 1078.524214][T17480] loop3: detected capacity change from 0 to 1024 [ 1078.531626][T17480] EXT4-fs: Ignoring removed bh option [ 1078.545363][T17466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1078.595048][T17480] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1078.606004][T17466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1078.692385][T17466] team0: Port device team_slave_0 added [ 1078.706925][T17466] team0: Port device team_slave_1 added [ 1078.754326][T17466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1078.761313][T17466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1078.797111][T17466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1078.813213][T17466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1078.823388][T17466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1078.860188][T17466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1078.983764][T17467] Bluetooth: hci4: command tx timeout [ 1079.857272][T17466] hsr_slave_0: entered promiscuous mode [ 1079.878703][T17466] hsr_slave_1: entered promiscuous mode [ 1081.063664][T17467] Bluetooth: hci4: command tx timeout [ 1081.136698][T17466] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1081.376881][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 1081.376898][ T27] audit: type=1800 audit(1789922441.995:588): pid=17485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3945" name="file0" dev="overlay" ino=2007 res=0 errno=0 [ 1082.440818][T17466] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1082.508230][T17466] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1082.548412][T12446] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1082.598464][T17466] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1082.935174][T17466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1082.979090][T17466] 8021q: adding VLAN 0 to HW filter on device team0 [ 1083.005498][T16779] bridge0: port 1(bridge_slave_0) entered blocking state [ 1083.012679][T16779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1083.068718][T16779] bridge0: port 2(bridge_slave_1) entered blocking state [ 1083.075948][T16779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1083.156412][T17467] Bluetooth: hci4: command tx timeout [ 1083.162816][T17466] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1083.213605][ T788] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1083.466105][ T788] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1083.476873][T17466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1083.503591][ T788] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 1083.563450][ T788] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1083.621789][ T788] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1083.657055][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.936919][T17466] veth0_vlan: entered promiscuous mode [ 1085.038028][T17466] veth1_vlan: entered promiscuous mode [ 1085.223894][T17467] Bluetooth: hci4: command tx timeout [ 1085.260624][T17466] veth0_macvtap: entered promiscuous mode [ 1085.308780][T17466] veth1_macvtap: entered promiscuous mode [ 1085.434644][T17466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1085.460770][T17466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1085.482431][T17466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1085.533875][T17466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1085.561363][T17466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1085.579672][T17466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1085.599677][T17466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1085.629905][T17466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1085.658181][T17466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1085.712885][T17466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1085.785044][T17466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1085.810473][T17466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1085.830956][T17466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1085.851454][T17466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1085.868535][T17466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1085.900302][T17466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1085.934631][T17466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1085.968770][T17466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1086.036054][T17466] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.060772][T17466] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.078130][T17466] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.100968][T17466] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.868648][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1086.903716][ T788] cxacru 1-1:1.0: send of cm 0x90 failed (-71) [ 1086.923822][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1086.966012][T17523] cxacru 1-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 1086.978544][ T788] usb 1-1: USB disconnect, device number 6 [ 1087.008470][T17523] cxacru 1-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 1087.072697][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1087.121660][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1087.278179][T12648] Bluetooth: hci1: hardware error 0x69 [ 1090.160880][T17545] loop4: detected capacity change from 0 to 1024 [ 1090.258621][T17545] EXT4-fs: Ignoring removed bh option [ 1090.322506][T17545] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1090.495251][ T27] audit: type=1800 audit(1789922451.085:589): pid=17538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3955" name="file0" dev="overlay" ino=2290 res=0 errno=0 [ 1090.666854][T17466] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1090.751669][T12648] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1093.753986][ T1200] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1096.687659][T17575] loop4: detected capacity change from 0 to 1024 [ 1096.695324][T17575] EXT4-fs: Ignoring removed bh option [ 1096.913993][T17575] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1098.337024][T17466] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1101.428405][T17604] loop4: detected capacity change from 0 to 40427 [ 1101.525901][T17604] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 1101.532271][T17604] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 1101.545147][T17604] F2FS-fs (loop4): invalid crc value [ 1101.676545][T17604] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 1101.683704][T17604] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1109.125090][T17466] syz-executor: attempt to access beyond end of device [ 1109.125090][T17466] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1109.172731][T17466] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1109.463885][T17614] loop0: detected capacity change from 0 to 1024 [ 1109.472881][T17614] EXT4-fs: Ignoring removed bh option [ 1109.552626][T17614] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1110.045159][T12645] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1110.217601][T11241] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 1110.460414][T11241] usb 5-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0xFF, skipping [ 1110.501412][T11241] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1110.564111][T11241] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1110.629865][T11241] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1110.665194][T11241] usb 5-1: Product: syz [ 1110.679318][T11241] usb 5-1: Manufacturer: syz [ 1110.703043][T11241] usb 5-1: SerialNumber: syz [ 1110.744227][T11241] usb 5-1: config 0 descriptor?? [ 1110.938568][T11241] snd-usb-audio: probe of 5-1:0.0 failed with error -22 [ 1111.201340][T17612] udevd[17612]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1111.238368][T15058] usb 5-1: USB disconnect, device number 2 [ 1115.149932][T17644] loop4: detected capacity change from 0 to 40427 [ 1115.162791][T17644] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 1115.169310][T17644] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 1115.255168][T17644] F2FS-fs (loop4): invalid crc value [ 1115.369915][T17644] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 1115.377184][T17644] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1116.184522][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.208431][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1119.930728][T17659] loop2: detected capacity change from 0 to 1024 [ 1119.938278][T17659] EXT4-fs: Ignoring removed bh option [ 1119.985138][T17659] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1120.274687][T12071] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1120.374654][T17467] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1120.386122][T17467] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1120.394419][T17467] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1120.411407][T17467] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1120.428554][T17467] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1120.436471][T17467] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1121.095909][T14188] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.504837][T17467] Bluetooth: hci0: command tx timeout [ 1122.732028][T17466] syz-executor: attempt to access beyond end of device [ 1122.732028][T17466] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1122.793015][T17466] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1124.024909][ T27] audit: type=1800 audit(1789922484.645:590): pid=17677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3999" name="file0" dev="overlay" ino=2668 res=0 errno=0 [ 1124.197701][T14188] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.584000][T17467] Bluetooth: hci0: command tx timeout [ 1126.665708][T17467] Bluetooth: hci0: command tx timeout [ 1127.729475][T14188] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1127.834993][T17666] chnl_net:caif_netlink_parms(): no params data found [ 1128.119433][T14188] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1128.743925][T17467] Bluetooth: hci0: command tx timeout [ 1129.517057][T17696] FAULT_INJECTION: forcing a failure. [ 1129.517057][T17696] name failslab, interval 1, probability 0, space 0, times 1 [ 1129.530933][T17696] CPU: 1 PID: 17696 Comm: syz.4.4004 Not tainted syzkaller #0 [ 1129.538435][T17696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1129.548503][T17696] Call Trace: [ 1129.551841][T17696] [ 1129.554816][T17696] dump_stack_lvl+0x18c/0x250 [ 1129.559634][T17696] ? show_regs_print_info+0x20/0x20 [ 1129.564877][T17696] ? load_image+0x420/0x420 [ 1129.569413][T17696] ? __might_sleep+0xe0/0xe0 [ 1129.574055][T17696] ? __lock_acquire+0x7d80/0x7d80 [ 1129.579121][T17696] should_fail_ex+0x394/0x4c0 [ 1129.583852][T17696] should_failslab+0x9/0x20 [ 1129.588387][T17696] slab_pre_alloc_hook+0x59/0x300 [ 1129.593454][T17696] ? memcg_list_lru_alloc+0x231/0xb00 [ 1129.598841][T17696] ? memcg_list_lru_alloc+0x231/0xb00 [ 1129.604226][T17696] __kmem_cache_alloc_node+0x53/0x250 [ 1129.609622][T17696] ? memcg_list_lru_alloc+0x231/0xb00 [ 1129.615007][T17696] __kmalloc+0xa7/0x240 [ 1129.619181][T17696] memcg_list_lru_alloc+0x231/0xb00 [ 1129.624400][T17696] ? memcg_reparent_list_lrus+0x860/0x860 [ 1129.630141][T17696] ? get_obj_cgroup_from_current+0xd4/0x280 [ 1129.636050][T17696] ? get_obj_cgroup_from_current+0xd4/0x280 [ 1129.641965][T17696] slab_pre_alloc_hook+0x2ad/0x300 [ 1129.647101][T17696] ? slab_pre_alloc_hook+0xb1/0x300 [ 1129.652320][T17696] kmem_cache_alloc_lru+0x4d/0x2b0 [ 1129.657449][T17696] ? iget_locked+0x205/0x8c0 [ 1129.662076][T17696] iget_locked+0x205/0x8c0 [ 1129.666522][T17696] kernfs_get_inode+0x4f/0x6e0 [ 1129.671321][T17696] kernfs_iop_lookup+0x263/0x380 [ 1129.676276][T17696] ? kernfs_dop_revalidate+0x570/0x570 [ 1129.681754][T17696] path_openat+0x1110/0x3270 [ 1129.686426][T17696] ? do_filp_open+0x430/0x430 [ 1129.691133][T17696] do_filp_open+0x1f2/0x430 [ 1129.695661][T17696] ? vfs_tmpfile+0x620/0x620 [ 1129.700284][T17696] ? _raw_spin_unlock+0x28/0x40 [ 1129.705216][T17696] ? alloc_fd+0x590/0x640 [ 1129.709579][T17696] do_sys_openat2+0x134/0x1d0 [ 1129.714278][T17696] ? do_sys_open+0xe0/0xe0 [ 1129.718708][T17696] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1129.724702][T17696] ? lock_chain_count+0x20/0x20 [ 1129.729575][T17696] __x64_sys_openat+0x139/0x160 [ 1129.734445][T17696] do_syscall_64+0x55/0xb0 [ 1129.738876][T17696] ? clear_bhb_loop+0x40/0x90 [ 1129.743627][T17696] ? clear_bhb_loop+0x40/0x90 [ 1129.748319][T17696] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1129.754226][T17696] RIP: 0033:0x7fd0cc19e159 [ 1129.758684][T17696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1129.778321][T17696] RSP: 002b:00007fd0ccfa8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1129.786752][T17696] RAX: ffffffffffffffda RBX: 00007fd0cc425fa0 RCX: 00007fd0cc19e159 [ 1129.794745][T17696] RDX: 0000000000004000 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 1129.802730][T17696] RBP: 00007fd0cc23506b R08: 0000000000000000 R09: 0000000000000000 [ 1129.810712][T17696] R10: 0000000000000029 R11: 0000000000000246 R12: 0000000000000000 [ 1129.818696][T17696] R13: 00007fd0cc426038 R14: 00007fd0cc425fa0 R15: 00007fff089d8fa8 [ 1129.826698][T17696] [ 1129.928185][T17666] bridge0: port 1(bridge_slave_0) entered blocking state [ 1129.949707][T17666] bridge0: port 1(bridge_slave_0) entered disabled state [ 1129.994549][T17666] bridge_slave_0: entered allmulticast mode [ 1130.033732][T17666] bridge_slave_0: entered promiscuous mode [ 1130.087057][T17666] bridge0: port 2(bridge_slave_1) entered blocking state [ 1130.128209][T17666] bridge0: port 2(bridge_slave_1) entered disabled state [ 1130.207134][T17700] loop2: detected capacity change from 0 to 1024 [ 1130.214768][T17700] EXT4-fs: Ignoring removed bh option [ 1130.221235][T17666] bridge_slave_1: entered allmulticast mode [ 1130.228801][T17666] bridge_slave_1: entered promiscuous mode [ 1130.526285][T17703] loop4: detected capacity change from 0 to 40427 [ 1130.594061][T17703] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 1130.600463][T17703] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 1130.613902][T17703] F2FS-fs (loop4): invalid crc value [ 1130.746549][T17703] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 1130.753811][T17703] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1130.762124][T17700] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1131.056311][T17666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1131.096916][T17666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1131.160483][T12071] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1131.675947][T17666] team0: Port device team_slave_0 added [ 1131.716538][T17666] team0: Port device team_slave_1 added [ 1131.813932][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1132.033592][T17666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1132.035558][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1132.040577][T17666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1132.040610][T17666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1132.042699][T17666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1132.086373][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1132.163585][ T9] usb 3-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 1132.198598][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.222624][T17666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1132.302101][T17666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1134.404633][T17666] hsr_slave_0: entered promiscuous mode [ 1134.482146][T17666] hsr_slave_1: entered promiscuous mode [ 1134.552229][T17666] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1134.638000][T17666] Cannot create hsr debugfs directory [ 1135.827459][T17466] syz-executor: attempt to access beyond end of device [ 1135.827459][T17466] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1135.985902][T17466] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1136.207624][ T9] rtsx_usb: probe of 3-1:1.0 failed with error -110 [ 1137.824468][T17692] usb 3-1: USB disconnect, device number 11 [ 1139.845578][T14188] hsr_slave_0: left promiscuous mode [ 1139.883517][T14188] hsr_slave_1: left promiscuous mode [ 1139.907641][T14188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1139.934949][T14188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1139.980631][T14188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1140.009634][T14188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1140.071435][T14188] bridge_slave_1: left allmulticast mode [ 1140.075887][T17773] loop4: detected capacity change from 0 to 1024 [ 1140.125428][T14188] bridge_slave_1: left promiscuous mode [ 1140.157211][T17773] EXT4-fs: Ignoring removed bh option [ 1140.173803][T14188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1140.299477][T14188] bridge_slave_0: left allmulticast mode [ 1140.332653][T14188] bridge_slave_0: left promiscuous mode [ 1140.387879][T14188] bridge0: port 1(bridge_slave_0) entered disabled state [ 1140.431585][T17773] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1140.723405][T14188] veth1_macvtap: left promiscuous mode [ 1140.777627][T14188] veth0_macvtap: left promiscuous mode [ 1140.829873][T14188] veth1_vlan: left promiscuous mode [ 1140.885761][T14188] veth0_vlan: left promiscuous mode [ 1141.338648][T17466] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1141.917627][T17785] loop4: detected capacity change from 0 to 40427 [ 1141.957316][T17785] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 1141.963886][T17785] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 1141.974111][T17785] F2FS-fs (loop4): invalid crc value [ 1142.116819][T17785] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 1142.124045][T17785] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1142.512928][T17466] syz-executor: attempt to access beyond end of device [ 1142.512928][T17466] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1142.548741][T17466] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1143.213211][T14188] team0 (unregistering): Port device team_slave_1 removed [ 1143.502515][T14188] team0 (unregistering): Port device team_slave_0 removed [ 1143.791107][T14188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1144.093175][T14188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1145.309772][T17807] program syz.4.4024 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1147.168616][T14188] bond0 (unregistering): Released all slaves [ 1148.612771][T17819] loop4: detected capacity change from 0 to 1024 [ 1148.619959][T17819] EXT4-fs: Ignoring removed bh option [ 1148.741374][T17819] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1149.648764][T17666] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1149.964004][T17666] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1150.351482][T17666] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1150.466051][T17466] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1150.737644][T17666] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1151.283941][T14188] IPVS: stop unused estimator thread 0... [ 1151.745984][T17666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1151.821080][T17666] 8021q: adding VLAN 0 to HW filter on device team0 [ 1151.860991][T14188] bridge0: port 1(bridge_slave_0) entered blocking state [ 1151.868243][T14188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1151.894784][T17523] cxacru 1-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 1151.935962][T14188] bridge0: port 2(bridge_slave_1) entered blocking state [ 1151.943161][T14188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1152.157389][T17666] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1153.288945][T17851] overlayfs: failed to resolve './file0': -2 [ 1154.110231][T17666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1156.775063][T17877] FAULT_INJECTION: forcing a failure. [ 1156.775063][T17877] name failslab, interval 1, probability 0, space 0, times 0 [ 1156.827354][T17877] CPU: 0 PID: 17877 Comm: syz.0.4027 Not tainted syzkaller #0 [ 1156.834888][T17877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1156.844979][T17877] Call Trace: [ 1156.848293][T17877] [ 1156.851258][T17877] dump_stack_lvl+0x18c/0x250 [ 1156.855994][T17877] ? show_regs_print_info+0x20/0x20 [ 1156.861244][T17877] ? load_image+0x420/0x420 [ 1156.865808][T17877] ? __might_sleep+0xe0/0xe0 [ 1156.867140][T17666] veth0_vlan: entered promiscuous mode [ 1156.870422][T17877] ? __lock_acquire+0x7d80/0x7d80 [ 1156.880959][T17877] should_fail_ex+0x394/0x4c0 [ 1156.885693][T17877] should_failslab+0x9/0x20 [ 1156.890252][T17877] slab_pre_alloc_hook+0x59/0x300 [ 1156.895330][T17877] ? memcg_list_lru_alloc+0x231/0xb00 [ 1156.900757][T17877] ? memcg_list_lru_alloc+0x231/0xb00 [ 1156.906172][T17877] __kmem_cache_alloc_node+0x53/0x250 [ 1156.911600][T17877] ? memcg_list_lru_alloc+0x231/0xb00 [ 1156.917018][T17877] __kmalloc+0xa7/0x240 [ 1156.921230][T17877] memcg_list_lru_alloc+0x231/0xb00 [ 1156.926484][T17877] ? memcg_reparent_list_lrus+0x860/0x860 [ 1156.929897][T17666] veth1_vlan: entered promiscuous mode [ 1156.932244][T17877] ? get_obj_cgroup_from_current+0xd4/0x280 [ 1156.943619][T17877] ? get_obj_cgroup_from_current+0xd4/0x280 [ 1156.949529][T17877] slab_pre_alloc_hook+0x2ad/0x300 [ 1156.954659][T17877] ? slab_pre_alloc_hook+0xb1/0x300 [ 1156.959876][T17877] kmem_cache_alloc_lru+0x4d/0x2b0 [ 1156.965003][T17877] ? __d_alloc+0x31/0x710 [ 1156.969375][T17877] __d_alloc+0x31/0x710 [ 1156.973547][T17877] d_alloc_parallel+0xe0/0x1590 [ 1156.978409][T17877] ? __d_lookup+0x8f/0x7c0 [ 1156.982838][T17877] ? __lock_acquire+0x7d80/0x7d80 [ 1156.987886][T17877] ? __d_lookup+0x8f/0x7c0 [ 1156.992316][T17877] ? d_hash_and_lookup+0x1b0/0x1b0 [ 1156.997452][T17877] path_openat+0x955/0x3270 [ 1157.001988][T17877] ? do_sys_openat2+0xda/0x1d0 [ 1157.006773][T17877] ? do_filp_open+0x430/0x430 [ 1157.011475][T17877] do_filp_open+0x1f2/0x430 [ 1157.015996][T17877] ? vfs_tmpfile+0x620/0x620 [ 1157.020615][T17877] ? _raw_spin_unlock+0x28/0x40 [ 1157.025505][T17877] ? alloc_fd+0x590/0x640 [ 1157.029862][T17877] do_sys_openat2+0x134/0x1d0 [ 1157.034563][T17877] ? do_sys_open+0xe0/0xe0 [ 1157.038993][T17877] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1157.044990][T17877] ? lock_chain_count+0x20/0x20 [ 1157.049857][T17877] __x64_sys_openat+0x139/0x160 [ 1157.054725][T17877] do_syscall_64+0x55/0xb0 [ 1157.059161][T17877] ? clear_bhb_loop+0x40/0x90 [ 1157.063857][T17877] ? clear_bhb_loop+0x40/0x90 [ 1157.068549][T17877] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1157.074462][T17877] RIP: 0033:0x7fe3b019e159 [ 1157.078887][T17877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1157.098504][T17877] RSP: 002b:00007fe3b1107028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1157.106931][T17877] RAX: ffffffffffffffda RBX: 00007fe3b0425fa0 RCX: 00007fe3b019e159 [ 1157.114912][T17877] RDX: 0000000000004000 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 1157.122891][T17877] RBP: 00007fe3b023506b R08: 0000000000000000 R09: 0000000000000000 [ 1157.130871][T17877] R10: 0000000000000029 R11: 0000000000000246 R12: 0000000000000000 [ 1157.138852][T17877] R13: 00007fe3b0426038 R14: 00007fe3b0425fa0 R15: 00007ffc2bda7958 [ 1157.146844][T17877] [ 1157.220238][T17666] veth0_macvtap: entered promiscuous mode [ 1157.236763][T17666] veth1_macvtap: entered promiscuous mode [ 1157.374254][T17666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1157.421672][T17666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1157.473641][T17666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1157.513529][T17666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1157.553396][T17666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1157.623866][T17666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1157.679367][T17666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1157.704112][T17666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1157.728885][T17666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1157.848306][T17666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1157.957676][T17666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1158.116293][T17889] loop4: detected capacity change from 0 to 40427 [ 1158.146660][T17889] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 1158.153060][T17889] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 1158.156625][T17893] loop0: detected capacity change from 0 to 1024 [ 1158.162258][T17666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1158.168613][T17893] EXT4-fs: Ignoring removed bh option [ 1158.211138][T17889] F2FS-fs (loop4): invalid crc value [ 1158.243425][T17666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1158.326794][T17893] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1158.366541][T17889] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 1158.374414][T17889] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1158.375638][T17666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1158.568297][T17666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1158.643502][T17666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1158.682883][T17666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1158.723057][T17666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1158.802836][T17466] syz-executor: attempt to access beyond end of device [ 1158.802836][T17466] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1158.842149][T17666] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.865654][T17466] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1158.875443][T17666] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.891839][T17666] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.896517][T12645] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1158.908134][T17666] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.836799][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1159.940968][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1160.339799][ T1076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1160.410969][ T1076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1161.233671][ T27] audit: type=1800 audit(1789922521.795:591): pid=17910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4042" name="file0" dev="overlay" ino=2748 res=0 errno=0 [ 1168.093797][T17944] loop5: detected capacity change from 0 to 1024 [ 1168.117538][T17944] EXT4-fs: Ignoring removed bh option [ 1168.267746][T17944] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1168.841746][T17951] loop0: detected capacity change from 0 to 40427 [ 1168.880854][T17951] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 1168.887968][T17951] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 1168.906913][T17951] F2FS-fs (loop0): invalid crc value [ 1168.919461][T17666] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1169.043476][T17951] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 1169.050642][T17951] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1171.848949][T12645] syz-executor: attempt to access beyond end of device [ 1171.848949][T12645] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1171.908943][T12645] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1175.996241][T18001] loop0: detected capacity change from 0 to 1024 [ 1176.003786][T18001] EXT4-fs: Ignoring removed bh option [ 1176.426822][T18007] loop2: detected capacity change from 0 to 40427 [ 1176.442128][T18007] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 1176.448752][T18007] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1176.462999][T18007] F2FS-fs (loop2): invalid crc value [ 1176.475745][T15058] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1176.493975][T18001] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1176.666414][T18007] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 1176.673625][T18007] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1176.685971][T15058] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1176.724233][T15058] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1176.802695][T15058] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1176.861165][T15058] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1176.923613][T15058] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1176.997646][T15058] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.468929][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.472358][T12645] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1177.492225][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.631848][T12071] syz-executor: attempt to access beyond end of device [ 1177.631848][T12071] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1177.666425][T12071] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1179.398969][T15058] gud 6-1:1.0: Failed to get connectors (error=-71) [ 1179.453385][T15058] gud: probe of 6-1:1.0 failed with error -71 [ 1181.484997][T15058] usb 6-1: USB disconnect, device number 2 [ 1181.626340][T18041] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4065'. [ 1181.684048][T18043] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4065'. [ 1185.256533][T18093] loop5: detected capacity change from 0 to 40427 [ 1185.315813][T18093] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 1185.322273][T18093] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 1188.136534][T18093] F2FS-fs (loop5): invalid crc value [ 1188.142095][T18093] F2FS-fs (loop5): Failed to start F2FS issue_checkpoint_thread (-4) [ 1189.257191][T18116] FAULT_INJECTION: forcing a failure. [ 1189.257191][T18116] name failslab, interval 1, probability 0, space 0, times 0 [ 1189.303605][T18116] CPU: 0 PID: 18116 Comm: syz.2.4076 Not tainted syzkaller #0 [ 1189.311134][T18116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1189.321225][T18116] Call Trace: [ 1189.324537][T18116] [ 1189.327492][T18116] dump_stack_lvl+0x18c/0x250 [ 1189.332217][T18116] ? show_regs_print_info+0x20/0x20 [ 1189.337457][T18116] ? load_image+0x420/0x420 [ 1189.342013][T18116] ? __might_sleep+0xe0/0xe0 [ 1189.346675][T18116] ? __lock_acquire+0x7d80/0x7d80 [ 1189.351752][T18116] should_fail_ex+0x394/0x4c0 [ 1189.356486][T18116] should_failslab+0x9/0x20 [ 1189.361036][T18116] slab_pre_alloc_hook+0x59/0x300 [ 1189.366113][T18116] ? single_open+0x5a/0x240 [ 1189.370666][T18116] __kmem_cache_alloc_node+0x53/0x250 [ 1189.376083][T18116] ? snd_info_text_entry_release+0x1c0/0x1c0 [ 1189.382171][T18116] ? single_open+0x5a/0x240 [ 1189.386691][T18116] kmalloc_trace+0x2a/0xe0 [ 1189.391122][T18116] ? snd_info_text_entry_release+0x1c0/0x1c0 [ 1189.397112][T18116] single_open+0x5a/0x240 [ 1189.401453][T18116] ? snd_info_text_entry_open+0x219/0x2b0 [ 1189.407186][T18116] snd_info_text_entry_open+0x22d/0x2b0 [ 1189.412748][T18116] proc_reg_open+0x23f/0x520 [ 1189.417357][T18116] do_dentry_open+0x880/0x14b0 [ 1189.422143][T18116] ? proc_reg_mmap+0x290/0x290 [ 1189.426923][T18116] path_openat+0x284f/0x3270 [ 1189.431549][T18116] ? do_filp_open+0x430/0x430 [ 1189.436253][T18116] do_filp_open+0x1f2/0x430 [ 1189.440800][T18116] ? vfs_tmpfile+0x620/0x620 [ 1189.445457][T18116] ? _raw_spin_unlock+0x28/0x40 [ 1189.450324][T18116] ? alloc_fd+0x590/0x640 [ 1189.454676][T18116] do_sys_openat2+0x134/0x1d0 [ 1189.459372][T18116] ? do_sys_open+0xe0/0xe0 [ 1189.463816][T18116] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1189.469822][T18116] ? lock_chain_count+0x20/0x20 [ 1189.474697][T18116] __x64_sys_openat+0x139/0x160 [ 1189.479573][T18116] do_syscall_64+0x55/0xb0 [ 1189.484008][T18116] ? clear_bhb_loop+0x40/0x90 [ 1189.488701][T18116] ? clear_bhb_loop+0x40/0x90 [ 1189.493395][T18116] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1189.499302][T18116] RIP: 0033:0x7f03c739e159 [ 1189.503737][T18116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1189.523360][T18116] RSP: 002b:00007f03c81cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1189.531788][T18116] RAX: ffffffffffffffda RBX: 00007f03c7626090 RCX: 00007f03c739e159 [ 1189.539779][T18116] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 00000000ffffff9c [ 1189.547768][T18116] RBP: 00007f03c743506b R08: 0000000000000000 R09: 0000000000000000 [ 1189.555755][T18116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1189.563833][T18116] R13: 00007f03c7626128 R14: 00007f03c7626090 R15: 00007fff7c29bda8 [ 1189.571837][T18116] [ 1190.866074][T18139] loop0: detected capacity change from 0 to 40427 [ 1192.742589][T18139] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 1192.750177][T18139] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 1192.764141][T18139] F2FS-fs (loop0): invalid crc value [ 1192.976485][T18139] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 1192.983724][T18139] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1195.345647][T12645] syz-executor: attempt to access beyond end of device [ 1195.345647][T12645] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1195.411072][T12645] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1195.717622][T18167] FAULT_INJECTION: forcing a failure. [ 1195.717622][T18167] name failslab, interval 1, probability 0, space 0, times 0 [ 1195.730914][T18167] CPU: 0 PID: 18167 Comm: syz.2.4087 Not tainted syzkaller #0 [ 1195.738412][T18167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1195.748501][T18167] Call Trace: [ 1195.751810][T18167] [ 1195.754776][T18167] dump_stack_lvl+0x18c/0x250 [ 1195.759510][T18167] ? show_regs_print_info+0x20/0x20 [ 1195.764753][T18167] ? load_image+0x420/0x420 [ 1195.769304][T18167] ? verify_lock_unused+0x140/0x140 [ 1195.774545][T18167] ? verify_lock_unused+0x140/0x140 [ 1195.779794][T18167] should_fail_ex+0x394/0x4c0 [ 1195.784523][T18167] should_failslab+0x9/0x20 [ 1195.789079][T18167] slab_pre_alloc_hook+0x59/0x300 [ 1195.794158][T18167] ? tipc_nametbl_insert_publ+0x64/0x1380 [ 1195.800007][T18167] __kmem_cache_alloc_node+0x53/0x250 [ 1195.805433][T18167] ? tipc_nametbl_insert_publ+0x64/0x1380 [ 1195.811191][T18167] kmalloc_trace+0x2a/0xe0 [ 1195.815651][T18167] tipc_nametbl_insert_publ+0x64/0x1380 [ 1195.821242][T18167] ? do_raw_spin_lock+0x11f/0x2b0 [ 1195.826309][T18167] ? __rwlock_init+0x150/0x150 [ 1195.831111][T18167] ? tipc_net+0x45/0x270 [ 1195.835391][T18167] ? tipc_nametbl_publish+0x74/0x1f0 [ 1195.840717][T18167] tipc_nametbl_publish+0xbd/0x1f0 [ 1195.845882][T18167] tipc_sk_publish+0x1cc/0x430 [ 1195.850683][T18167] ? tipc_sk_withdraw+0x640/0x640 [ 1195.855726][T18167] ? do_raw_spin_unlock+0x121/0x230 [ 1195.860950][T18167] tipc_sk_bind+0x1ee/0x300 [ 1195.865476][T18167] __sys_bind+0x2f0/0x3f0 [ 1195.869926][T18167] ? __ia32_sys_socketpair+0xb0/0xb0 [ 1195.875258][T18167] __x64_sys_bind+0x7a/0x90 [ 1195.879783][T18167] do_syscall_64+0x55/0xb0 [ 1195.884229][T18167] ? clear_bhb_loop+0x40/0x90 [ 1195.888929][T18167] ? clear_bhb_loop+0x40/0x90 [ 1195.893637][T18167] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1195.899551][T18167] RIP: 0033:0x7f03c739e159 [ 1195.903981][T18167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1195.923600][T18167] RSP: 002b:00007f03c81ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1195.932032][T18167] RAX: ffffffffffffffda RBX: 00007f03c7625fa0 RCX: 00007f03c739e159 [ 1195.940016][T18167] RDX: 0000000000000010 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1195.947997][T18167] RBP: 00007f03c743506b R08: 0000000000000000 R09: 0000000000000000 [ 1195.955976][T18167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1195.963958][T18167] R13: 00007f03c7626038 R14: 00007f03c7625fa0 R15: 00007fff7c29bda8 [ 1195.971953][T18167] [ 1200.478267][T18201] loop5: detected capacity change from 0 to 40427 [ 1201.511572][T18201] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 1201.518101][T18201] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 1201.531248][T18201] F2FS-fs (loop5): invalid crc value [ 1201.699387][T18201] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 1201.707442][T18201] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1201.722296][T12648] Bluetooth: hci4: command 0x0406 tx timeout [ 1202.363575][T17666] syz-executor: attempt to access beyond end of device [ 1202.363575][T17666] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1202.414464][T17666] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1213.858909][T18293] loop2: detected capacity change from 0 to 40427 [ 1213.875066][T18293] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 1213.881497][T18293] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1213.931623][T18293] F2FS-fs (loop2): invalid crc value [ 1214.095007][T18293] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 1214.102155][T18293] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1214.696176][T12071] syz-executor: attempt to access beyond end of device [ 1214.696176][T12071] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1214.794745][T12071] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1214.893964][T18318] loop4: detected capacity change from 0 to 1024 [ 1217.945461][T18318] EXT4-fs: Ignoring removed bh option [ 1218.313244][T18318] EXT4-fs warning (device loop4): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop4. [ 1221.443536][T18356] loop5: detected capacity change from 0 to 40427 [ 1221.497209][T18356] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 1221.503675][T18356] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 1221.521962][T18356] F2FS-fs (loop5): invalid crc value [ 1221.690828][T18356] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 1221.698410][T18356] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1223.432885][T17666] syz-executor: attempt to access beyond end of device [ 1223.432885][T17666] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1223.639035][T17666] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1229.520986][T18402] loop0: detected capacity change from 0 to 40427 [ 1229.634591][T18402] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 1229.640974][T18402] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 1229.662426][T18402] F2FS-fs (loop0): invalid crc value [ 1229.848970][T18402] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 1229.856154][T18402] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1230.740684][T12645] syz-executor: attempt to access beyond end of device [ 1230.740684][T12645] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1230.883453][T12645] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1234.611077][T18445] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1235.117157][T18453] loop5: detected capacity change from 0 to 40427 [ 1235.175922][T18453] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 1235.182327][T18453] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 1235.214614][T18453] F2FS-fs (loop5): invalid crc value [ 1235.294580][T18453] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 1235.301667][T18453] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1236.571368][T18467] tipc: Publication distribution failure [ 1237.842359][ T5815] smpboot: CPU 1 is now offline [ 1238.911202][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1241.555253][T18504] loop4: detected capacity change from 0 to 40427 [ 1241.614096][T18504] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 1241.620493][T18504] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 1241.630583][T18504] F2FS-fs (loop4): invalid crc value [ 1241.780240][T18504] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 1241.787568][T18504] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1242.945306][T12648] Bluetooth: hci0: command 0x0406 tx timeout [ 1243.311467][T18518] FAULT_INJECTION: forcing a failure. [ 1243.311467][T18518] name failslab, interval 1, probability 0, space 0, times 0 [ 1243.324186][T18518] CPU: 0 PID: 18518 Comm: syz.5.4163 Not tainted syzkaller #0 [ 1243.331641][T18518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1243.341692][T18518] Call Trace: [ 1243.344966][T18518] [ 1243.347899][T18518] dump_stack_lvl+0x18c/0x250 [ 1243.352588][T18518] ? show_regs_print_info+0x20/0x20 [ 1243.357788][T18518] ? load_image+0x420/0x420 [ 1243.362291][T18518] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1243.368273][T18518] ? lock_chain_count+0x20/0x20 [ 1243.373125][T18518] should_fail_ex+0x394/0x4c0 [ 1243.377808][T18518] should_failslab+0x9/0x20 [ 1243.382313][T18518] slab_pre_alloc_hook+0x59/0x300 [ 1243.387346][T18518] kmem_cache_alloc_node+0x5e/0x310 [ 1243.392548][T18518] ? __alloc_skb+0x103/0x2c0 [ 1243.397177][T18518] __alloc_skb+0x103/0x2c0 [ 1243.401595][T18518] tipc_buf_acquire+0x2b/0xe0 [ 1243.406277][T18518] tipc_named_publish+0x266/0x760 [ 1243.411311][T18518] tipc_nametbl_publish+0xee/0x1f0 [ 1243.416429][T18518] tipc_sk_publish+0x1cc/0x430 [ 1243.421201][T18518] ? tipc_sk_withdraw+0x640/0x640 [ 1243.426227][T18518] ? do_raw_spin_unlock+0x121/0x230 [ 1243.431428][T18518] tipc_sk_bind+0x1ee/0x300 [ 1243.435934][T18518] __sys_bind+0x2f0/0x3f0 [ 1243.440264][T18518] ? __ia32_sys_socketpair+0xb0/0xb0 [ 1243.445558][T18518] __x64_sys_bind+0x7a/0x90 [ 1243.450059][T18518] do_syscall_64+0x55/0xb0 [ 1243.454472][T18518] ? clear_bhb_loop+0x40/0x90 [ 1243.459165][T18518] ? clear_bhb_loop+0x40/0x90 [ 1243.463857][T18518] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1243.469766][T18518] RIP: 0033:0x7f455219e159 [ 1243.474196][T18518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1243.493805][T18518] RSP: 002b:00007f45530d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1243.502224][T18518] RAX: ffffffffffffffda RBX: 00007f4552425fa0 RCX: 00007f455219e159 [ 1243.510193][T18518] RDX: 0000000000000010 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1243.518161][T18518] RBP: 00007f455223506b R08: 0000000000000000 R09: 0000000000000000 [ 1243.526130][T18518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1243.534096][T18518] R13: 00007f4552426038 R14: 00007f4552425fa0 R15: 00007fff08e280d8 [ 1243.542075][T18518] [ 1243.545242][T18518] tipc: Publication distribution failure [ 1246.402827][ T5815] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1246.644638][ T5815] usb 1-1: Using ep0 maxpacket: 16 [ 1246.679548][ T5815] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 1246.752602][ T5815] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1246.900473][ T5815] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.959743][ T5815] usb 1-1: Product: syz [ 1247.003504][ T5815] usb 1-1: Manufacturer: syz [ 1247.008129][ T5815] usb 1-1: SerialNumber: syz [ 1247.079611][ T5815] r8152-cfgselector 1-1: config 0 descriptor?? [ 1247.353615][T18568] FAULT_INJECTION: forcing a failure. [ 1247.353615][T18568] name failslab, interval 1, probability 0, space 0, times 0 [ 1247.366401][T18568] CPU: 0 PID: 18568 Comm: syz.2.4175 Not tainted syzkaller #0 [ 1247.373870][T18568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1247.383918][T18568] Call Trace: [ 1247.387195][T18568] [ 1247.390123][T18568] dump_stack_lvl+0x18c/0x250 [ 1247.394828][T18568] ? show_regs_print_info+0x20/0x20 [ 1247.400040][T18568] ? load_image+0x420/0x420 [ 1247.404540][T18568] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1247.410537][T18568] ? lock_chain_count+0x20/0x20 [ 1247.415405][T18568] should_fail_ex+0x394/0x4c0 [ 1247.420086][T18568] should_failslab+0x9/0x20 [ 1247.424588][T18568] slab_pre_alloc_hook+0x59/0x300 [ 1247.429615][T18568] kmem_cache_alloc_node+0x5e/0x310 [ 1247.434814][T18568] ? __alloc_skb+0x103/0x2c0 [ 1247.439428][T18568] __alloc_skb+0x103/0x2c0 [ 1247.443845][T18568] tipc_buf_acquire+0x2b/0xe0 [ 1247.448522][T18568] tipc_named_publish+0x266/0x760 [ 1247.453545][T18568] tipc_nametbl_publish+0xee/0x1f0 [ 1247.458670][T18568] tipc_sk_publish+0x1cc/0x430 [ 1247.463434][T18568] ? tipc_sk_withdraw+0x640/0x640 [ 1247.468459][T18568] ? do_raw_spin_unlock+0x121/0x230 [ 1247.473658][T18568] tipc_sk_bind+0x1ee/0x300 [ 1247.478162][T18568] __sys_bind+0x2f0/0x3f0 [ 1247.482495][T18568] ? __ia32_sys_socketpair+0xb0/0xb0 [ 1247.487813][T18568] __x64_sys_bind+0x7a/0x90 [ 1247.492315][T18568] do_syscall_64+0x55/0xb0 [ 1247.496729][T18568] ? clear_bhb_loop+0x40/0x90 [ 1247.501425][T18568] ? clear_bhb_loop+0x40/0x90 [ 1247.506101][T18568] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1247.512004][T18568] RIP: 0033:0x7f03c739e159 [ 1247.516416][T18568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1247.536031][T18568] RSP: 002b:00007f03c81ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1247.544439][T18568] RAX: ffffffffffffffda RBX: 00007f03c7625fa0 RCX: 00007f03c739e159 [ 1247.552436][T18568] RDX: 0000000000000010 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1247.560414][T18568] RBP: 00007f03c743506b R08: 0000000000000000 R09: 0000000000000000 [ 1247.568397][T18568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1247.576373][T18568] R13: 00007f03c7626038 R14: 00007f03c7625fa0 R15: 00007fff7c29bda8 [ 1247.584363][T18568] [ 1247.587592][T18568] tipc: Publication distribution failure [ 1247.937320][ T5815] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1247.956666][ T5815] r8152-cfgselector 1-1: USB disconnect, device number 7 [ 1248.770322][T18580] loop4: detected capacity change from 0 to 1024 [ 1248.824287][T18580] EXT4-fs: Ignoring removed bh option [ 1249.168494][T18580] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1249.467971][T18591] loop0: detected capacity change from 0 to 40427 [ 1249.488731][T18591] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 1249.495167][T18591] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 1249.521305][T18591] F2FS-fs (loop0): invalid crc value [ 1249.572955][T18591] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 1249.580152][T18591] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1251.089067][T12645] syz-executor: attempt to access beyond end of device [ 1251.089067][T12645] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1251.237853][T12645] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1251.388968][T17466] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1253.545255][T18617] loop0: detected capacity change from 0 to 40427 [ 1253.572121][T18617] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 1253.578542][T18617] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 1253.593557][T18617] F2FS-fs (loop0): invalid crc value [ 1253.705387][T18617] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 1253.712511][T18617] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1255.191538][T12645] syz-executor: attempt to access beyond end of device [ 1255.191538][T12645] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1255.317929][T12645] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1258.506929][T18652] loop0: detected capacity change from 0 to 1024 [ 1258.591541][T18652] EXT4-fs: Ignoring removed bh option [ 1258.794701][T18652] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1259.658758][T12645] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1260.113475][T17692] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1260.315441][T18678] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1260.368205][T17692] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1260.403431][T18678] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1260.446500][T17692] usb 6-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 1261.293422][ T788] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 1261.661222][T17692] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.722430][T17692] usb 6-1: Product: syz [ 1261.746843][T17692] usb 6-1: Manufacturer: syz [ 1261.793476][T17692] usb 6-1: SerialNumber: syz [ 1261.821124][T17692] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 1261.919983][ T788] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 1261.972924][ T788] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 1262.050995][ T788] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1262.109755][ T788] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1262.173012][ T788] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1262.221247][ T788] usb 3-1: Product: syz [ 1262.315818][ T788] usb 3-1: Manufacturer: syz [ 1262.328744][T18694] loop4: detected capacity change from 0 to 1024 [ 1262.336767][T18694] EXT4-fs: Ignoring removed bh option [ 1262.530544][ T788] usb 3-1: SerialNumber: syz [ 1262.540654][T18694] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1262.850087][T17692] gspca_mr97310a: reg read [21] error -71 [ 1262.885139][T17692] mr97310a: probe of 6-1:1.0 failed with error -71 [ 1262.901421][ T788] usb 3-1: config 0 descriptor?? [ 1262.959176][T17692] usb 6-1: USB disconnect, device number 3 [ 1262.968896][ T788] usb 3-1: selecting invalid altsetting 0 [ 1263.219385][T18678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1263.232948][T17466] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1263.298687][T18678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1263.687045][ T9] usb 3-1: USB disconnect, device number 12 [ 1268.485725][T18731] loop2: detected capacity change from 0 to 1024 [ 1268.492726][T18731] EXT4-fs: Ignoring removed bh option [ 1268.520649][T18731] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1268.774715][T12071] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1274.605623][T18765] loop4: detected capacity change from 0 to 1024 [ 1274.612702][T18765] EXT4-fs: Ignoring removed bh option [ 1274.683645][T18765] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1274.904566][T17466] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1287.957051][T18832] FAULT_INJECTION: forcing a failure. [ 1287.957051][T18832] name failslab, interval 1, probability 0, space 0, times 0 [ 1287.969773][T18832] CPU: 0 PID: 18832 Comm: syz.2.4257 Not tainted syzkaller #0 [ 1287.977228][T18832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1287.987280][T18832] Call Trace: [ 1287.990557][T18832] [ 1287.993485][T18832] dump_stack_lvl+0x18c/0x250 [ 1287.998168][T18832] ? show_regs_print_info+0x20/0x20 [ 1288.003364][T18832] ? load_image+0x420/0x420 [ 1288.007870][T18832] ? verify_lock_unused+0x140/0x140 [ 1288.013064][T18832] ? verify_lock_unused+0x140/0x140 [ 1288.018347][T18832] should_fail_ex+0x394/0x4c0 [ 1288.023027][T18832] should_failslab+0x9/0x20 [ 1288.027529][T18832] slab_pre_alloc_hook+0x59/0x300 [ 1288.032554][T18832] ? tipc_nametbl_insert_publ+0x64/0x1380 [ 1288.038274][T18832] __kmem_cache_alloc_node+0x53/0x250 [ 1288.043647][T18832] ? tipc_nametbl_insert_publ+0x64/0x1380 [ 1288.049376][T18832] kmalloc_trace+0x2a/0xe0 [ 1288.053792][T18832] tipc_nametbl_insert_publ+0x64/0x1380 [ 1288.059343][T18832] ? do_raw_spin_lock+0x11f/0x2b0 [ 1288.064368][T18832] ? __rwlock_init+0x150/0x150 [ 1288.069131][T18832] ? tipc_net+0x45/0x270 [ 1288.073370][T18832] ? tipc_nametbl_publish+0x74/0x1f0 [ 1288.078650][T18832] tipc_nametbl_publish+0xbd/0x1f0 [ 1288.083760][T18832] tipc_sk_publish+0x1cc/0x430 [ 1288.088524][T18832] ? tipc_sk_withdraw+0x640/0x640 [ 1288.093547][T18832] ? do_raw_spin_unlock+0x121/0x230 [ 1288.098761][T18832] tipc_sk_bind+0x1ee/0x300 [ 1288.103280][T18832] __sys_bind+0x2f0/0x3f0 [ 1288.107625][T18832] ? __ia32_sys_socketpair+0xb0/0xb0 [ 1288.112931][T18832] __x64_sys_bind+0x7a/0x90 [ 1288.117429][T18832] do_syscall_64+0x55/0xb0 [ 1288.121858][T18832] ? clear_bhb_loop+0x40/0x90 [ 1288.126533][T18832] ? clear_bhb_loop+0x40/0x90 [ 1288.131207][T18832] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1288.137098][T18832] RIP: 0033:0x7f03c739e159 [ 1288.141507][T18832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1288.161108][T18832] RSP: 002b:00007f03c81ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1288.169516][T18832] RAX: ffffffffffffffda RBX: 00007f03c7625fa0 RCX: 00007f03c739e159 [ 1288.177481][T18832] RDX: 0000000000000010 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1288.185446][T18832] RBP: 00007f03c743506b R08: 0000000000000000 R09: 0000000000000000 [ 1288.193411][T18832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1288.201389][T18832] R13: 00007f03c7626038 R14: 00007f03c7625fa0 R15: 00007fff7c29bda8 [ 1288.209364][T18832] [ 1289.172899][T18847] loop5: detected capacity change from 0 to 1024 [ 1289.181378][T18847] EXT4-fs: Ignoring removed bh option [ 1289.209841][T18847] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1291.568540][T17666] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1295.010068][T18882] FAULT_INJECTION: forcing a failure. [ 1295.010068][T18882] name failslab, interval 1, probability 0, space 0, times 0 [ 1295.022857][T18882] CPU: 0 PID: 18882 Comm: syz.4.4273 Not tainted syzkaller #0 [ 1295.030328][T18882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1295.040376][T18882] Call Trace: [ 1295.043653][T18882] [ 1295.046596][T18882] dump_stack_lvl+0x18c/0x250 [ 1295.051282][T18882] ? show_regs_print_info+0x20/0x20 [ 1295.056494][T18882] ? load_image+0x420/0x420 [ 1295.060999][T18882] ? verify_lock_unused+0x140/0x140 [ 1295.066194][T18882] ? verify_lock_unused+0x140/0x140 [ 1295.071390][T18882] should_fail_ex+0x394/0x4c0 [ 1295.076070][T18882] should_failslab+0x9/0x20 [ 1295.080574][T18882] slab_pre_alloc_hook+0x59/0x300 [ 1295.085614][T18882] ? tipc_nametbl_insert_publ+0x64/0x1380 [ 1295.091330][T18882] __kmem_cache_alloc_node+0x53/0x250 [ 1295.096704][T18882] ? tipc_nametbl_insert_publ+0x64/0x1380 [ 1295.102437][T18882] kmalloc_trace+0x2a/0xe0 [ 1295.106875][T18882] tipc_nametbl_insert_publ+0x64/0x1380 [ 1295.112434][T18882] ? do_raw_spin_lock+0x11f/0x2b0 [ 1295.117468][T18882] ? __rwlock_init+0x150/0x150 [ 1295.122233][T18882] ? tipc_net+0x45/0x270 [ 1295.126475][T18882] ? tipc_nametbl_publish+0x74/0x1f0 [ 1295.131771][T18882] tipc_nametbl_publish+0xbd/0x1f0 [ 1295.136879][T18882] tipc_sk_publish+0x1cc/0x430 [ 1295.141643][T18882] ? tipc_sk_withdraw+0x640/0x640 [ 1295.146666][T18882] ? do_raw_spin_unlock+0x121/0x230 [ 1295.151863][T18882] tipc_sk_bind+0x1ee/0x300 [ 1295.156382][T18882] __sys_bind+0x2f0/0x3f0 [ 1295.160709][T18882] ? __ia32_sys_socketpair+0xb0/0xb0 [ 1295.166020][T18882] __x64_sys_bind+0x7a/0x90 [ 1295.170534][T18882] do_syscall_64+0x55/0xb0 [ 1295.174947][T18882] ? clear_bhb_loop+0x40/0x90 [ 1295.179622][T18882] ? clear_bhb_loop+0x40/0x90 [ 1295.184315][T18882] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1295.190203][T18882] RIP: 0033:0x7fd0cc19e159 [ 1295.194614][T18882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1295.214214][T18882] RSP: 002b:00007fd0ccfa8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1295.222623][T18882] RAX: ffffffffffffffda RBX: 00007fd0cc425fa0 RCX: 00007fd0cc19e159 [ 1295.230592][T18882] RDX: 0000000000000010 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1295.238557][T18882] RBP: 00007fd0cc23506b R08: 0000000000000000 R09: 0000000000000000 [ 1295.246521][T18882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1295.254495][T18882] R13: 00007fd0cc426038 R14: 00007fd0cc425fa0 R15: 00007fff089d8fa8 [ 1295.262471][T18882] [ 1296.099162][T18891] loop5: detected capacity change from 0 to 1024 [ 1296.106466][T18891] EXT4-fs: Ignoring removed bh option [ 1296.552943][T18891] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1296.699279][T17666] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1300.523423][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.587475][T18927] loop0: detected capacity change from 0 to 1024 [ 1300.594539][T18927] EXT4-fs: Ignoring removed bh option [ 1300.618754][T18927] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1301.296423][T12645] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1313.531129][T17692] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1313.793369][T17692] usb 3-1: Using ep0 maxpacket: 32 [ 1313.812389][T17692] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1313.872747][T17692] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1313.910982][T17692] usb 3-1: Product: syz [ 1313.935918][T17692] usb 3-1: Manufacturer: syz [ 1313.940538][T17692] usb 3-1: SerialNumber: syz [ 1313.998975][T17692] usb 3-1: config 0 descriptor?? [ 1314.051665][T17692] usb 3-1: can't set config #0, error -71 [ 1314.109737][T17692] usb 3-1: USB disconnect, device number 13 [ 1324.655967][T17692] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1324.762909][T12648] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1324.775123][T12648] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1324.783473][T12648] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1324.791686][T12648] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1324.802401][T12648] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1324.811551][T12648] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1324.873719][T17692] usb 5-1: Using ep0 maxpacket: 8 [ 1324.927178][T17692] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1324.980737][T17692] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1325.057724][T17692] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1325.116718][T17692] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1325.191490][T17692] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1325.332637][T17692] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1325.411329][T17692] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1325.934188][T17692] usb 5-1: GET_CAPABILITIES returned 0 [ 1325.957968][T17692] usbtmc 5-1:16.0: can't read capabilities [ 1326.157561][T17692] usb 5-1: USB disconnect, device number 3 [ 1326.223920][T14188] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1326.387621][T19047] chnl_net:caif_netlink_parms(): no params data found [ 1326.903357][T12648] Bluetooth: hci2: command tx timeout [ 1328.983369][T12648] Bluetooth: hci2: command tx timeout [ 1329.321632][T14188] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1330.990412][T14188] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1331.065872][T12648] Bluetooth: hci2: command tx timeout [ 1331.234821][T14188] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1331.727295][T19047] bridge0: port 1(bridge_slave_0) entered blocking state [ 1331.774324][T19047] bridge0: port 1(bridge_slave_0) entered disabled state [ 1331.831221][T19047] bridge_slave_0: entered allmulticast mode [ 1331.854368][T19047] bridge_slave_0: entered promiscuous mode [ 1331.913034][T19047] bridge0: port 2(bridge_slave_1) entered blocking state [ 1331.952575][T19047] bridge0: port 2(bridge_slave_1) entered disabled state [ 1331.992068][T19047] bridge_slave_1: entered allmulticast mode [ 1332.031617][T19047] bridge_slave_1: entered promiscuous mode [ 1332.202782][T19047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1332.270776][T19047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1333.143369][T12648] Bluetooth: hci2: command tx timeout [ 1334.965952][T19047] team0: Port device team_slave_0 added [ 1335.384874][T19047] team0: Port device team_slave_1 added [ 1336.950657][T19047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1337.001114][T19047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1337.229733][T19047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1337.262732][T19047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1337.505727][T19047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1337.571647][T19047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1337.912500][T19047] hsr_slave_0: entered promiscuous mode [ 1338.093621][T19047] hsr_slave_1: entered promiscuous mode [ 1338.138640][T19047] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1339.282994][T19047] Cannot create hsr debugfs directory [ 1339.960174][ T788] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1340.463512][ T788] usb 3-1: Using ep0 maxpacket: 16 [ 1340.486798][ T788] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 1340.533915][ T788] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1340.568379][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.609007][ T788] usb 3-1: Product: syz [ 1340.631457][ T788] usb 3-1: Manufacturer: syz [ 1340.660698][ T788] usb 3-1: SerialNumber: syz [ 1340.682994][ T788] usb 3-1: config 0 descriptor?? [ 1341.012046][ T27] audit: type=1326 audit(1789922701.625:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19156 comm="syz.4.4352" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0cc19e159 code=0x7ffc0000 [ 1341.080776][T19159] FAULT_INJECTION: forcing a failure. [ 1341.080776][T19159] name fail_futex, interval 1, probability 0, space 0, times 1 [ 1341.163804][T19159] CPU: 0 PID: 19159 Comm: syz.0.4353 Not tainted syzkaller #0 [ 1341.171298][T19159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1341.181349][T19159] Call Trace: [ 1341.184626][T19159] [ 1341.187554][T19159] dump_stack_lvl+0x18c/0x250 [ 1341.192255][T19159] ? show_regs_print_info+0x20/0x20 [ 1341.197452][T19159] ? load_image+0x420/0x420 [ 1341.201954][T19159] ? ring_buffer_unlock_commit+0x476/0x5f0 [ 1341.207781][T19159] should_fail_ex+0x394/0x4c0 [ 1341.212466][T19159] get_futex_key+0x136/0x1030 [ 1341.217157][T19159] ? futex_setup_timer+0xc0/0xc0 [ 1341.222106][T19159] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1341.228083][T19159] ? __lock_acquire+0x7d80/0x7d80 [ 1341.233114][T19159] ? lock_chain_count+0x20/0x20 [ 1341.237962][T19159] futex_wait_setup+0xbc/0x270 [ 1341.242726][T19159] ? futex_wait_multiple+0x920/0x920 [ 1341.248006][T19159] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1341.253897][T19159] ? _raw_spin_unlock+0x40/0x40 [ 1341.258746][T19159] futex_wait+0x1bc/0x5c0 [ 1341.263077][T19159] ? futex_wait_setup+0x270/0x270 [ 1341.268109][T19159] ? __fget_files+0x28/0x460 [ 1341.272709][T19159] ? __fget_files+0x3fc/0x460 [ 1341.277384][T19159] do_futex+0x2ff/0x3e0 [ 1341.281534][T19159] ? asm_exc_page_fault+0x26/0x30 [ 1341.286560][T19159] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1341.292448][T19159] ? __sys_bind+0x134/0x3f0 [ 1341.296952][T19159] __se_sys_futex+0x3a9/0x440 [ 1341.301627][T19159] ? __x64_sys_futex+0xf0/0xf0 [ 1341.306389][T19159] ? __x64_sys_futex+0x21/0xf0 [ 1341.311335][T19159] do_syscall_64+0x55/0xb0 [ 1341.315768][T19159] ? clear_bhb_loop+0x40/0x90 [ 1341.320442][T19159] ? clear_bhb_loop+0x40/0x90 [ 1341.325121][T19159] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1341.331012][T19159] RIP: 0033:0x7fe3b019e159 [ 1341.335425][T19159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1341.355025][T19159] RSP: 002b:00007fe3b11070e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1341.363453][T19159] RAX: ffffffffffffffda RBX: 00007fe3b0425fa8 RCX: 00007fe3b019e159 [ 1341.371434][T19159] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe3b0425fa8 [ 1341.379419][T19159] RBP: 00007fe3b0425fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1341.387383][T19159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1341.395345][T19159] R13: 00007fe3b0426038 R14: 00007ffc2bda7870 R15: 00007ffc2bda7958 [ 1341.403666][T19159] [ 1341.413275][ T27] audit: type=1326 audit(1789922701.625:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19156 comm="syz.4.4352" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0cc19e159 code=0x7ffc0000 [ 1341.461318][ T27] audit: type=1326 audit(1789922701.655:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19156 comm="syz.4.4352" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd0cc19e159 code=0x7ffc0000 [ 1341.502462][ T27] audit: type=1326 audit(1789922701.655:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19156 comm="syz.4.4352" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0cc19e159 code=0x7ffc0000 [ 1341.538300][ T27] audit: type=1326 audit(1789922701.655:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19156 comm="syz.4.4352" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0cc19e159 code=0x7ffc0000 [ 1341.572873][ T27] audit: type=1326 audit(1789922701.665:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19156 comm="syz.4.4352" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd0cc19e159 code=0x7ffc0000 [ 1341.609792][ T27] audit: type=1326 audit(1789922701.665:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19156 comm="syz.4.4352" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0cc19e159 code=0x7ffc0000 [ 1341.636297][T14188] hsr_slave_0: left promiscuous mode [ 1341.644005][ T27] audit: type=1326 audit(1789922701.665:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19156 comm="syz.4.4352" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd0cc19e159 code=0x7ffc0000 [ 1341.673753][ T27] audit: type=1326 audit(1789922701.665:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19156 comm="syz.4.4352" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0cc19e159 code=0x7ffc0000 [ 1341.698070][T14188] hsr_slave_1: left promiscuous mode [ 1341.707795][T14188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1341.720038][T14188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1341.727436][ T27] audit: type=1326 audit(1789922701.665:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19156 comm="syz.4.4352" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0cc19e159 code=0x7ffc0000 [ 1341.756704][T14188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1341.765487][T14188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1341.776997][T14188] bridge_slave_1: left allmulticast mode [ 1341.782640][T14188] bridge_slave_1: left promiscuous mode [ 1341.790140][T14188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1341.806536][T14188] bridge_slave_0: left allmulticast mode [ 1341.827544][T14188] bridge_slave_0: left promiscuous mode [ 1341.887618][T14188] bridge0: port 1(bridge_slave_0) entered disabled state [ 1341.930751][T14188] veth1_macvtap: left promiscuous mode [ 1341.949787][T14188] veth0_macvtap: left promiscuous mode [ 1341.958540][T14188] veth1_vlan: left promiscuous mode [ 1341.965479][T14188] veth0_vlan: left promiscuous mode [ 1342.699813][T15488] usb 3-1: USB disconnect, device number 14 [ 1345.804686][T17692] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1345.872939][T14188] team0 (unregistering): Port device team_slave_1 removed [ 1345.936104][T14188] team0 (unregistering): Port device team_slave_0 removed [ 1345.997780][T14188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1346.017039][T17692] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1346.040624][T17692] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1346.061642][T17692] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1346.100889][T17692] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1346.123340][T14188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1346.132022][T17692] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1346.160488][T17692] usb 5-1: config 0 descriptor?? [ 1346.607627][T17692] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 1346.672892][T17692] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1346.732991][T14188] bond0 (unregistering): Released all slaves [ 1346.807477][T17692] usb 5-1: USB disconnect, device number 4 [ 1346.887874][T19180] fido_id[19180]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1347.933141][T19047] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1347.958223][T19191] loop4: detected capacity change from 0 to 1024 [ 1347.965350][T19191] EXT4-fs: Ignoring removed bh option [ 1348.024398][T19191] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1348.054977][T19047] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1348.284197][T17466] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1348.332242][T19047] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1348.369841][T19199] FAULT_INJECTION: forcing a failure. [ 1348.369841][T19199] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1348.478796][T19047] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1348.507332][T19199] CPU: 0 PID: 19199 Comm: syz.0.4362 Not tainted syzkaller #0 [ 1348.514819][T19199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1348.524870][T19199] Call Trace: [ 1348.528144][T19199] [ 1348.531077][T19199] dump_stack_lvl+0x18c/0x250 [ 1348.535760][T19199] ? show_regs_print_info+0x20/0x20 [ 1348.540962][T19199] ? load_image+0x420/0x420 [ 1348.545482][T19199] ? ring_buffer_unlock_commit+0x476/0x5f0 [ 1348.551288][T19199] should_fail_ex+0x394/0x4c0 [ 1348.555972][T19199] get_futex_key+0x136/0x1030 [ 1348.560650][T19199] ? futex_setup_timer+0xc0/0xc0 [ 1348.565582][T19199] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1348.571557][T19199] ? __lock_acquire+0x7d80/0x7d80 [ 1348.576576][T19199] ? lock_chain_count+0x20/0x20 [ 1348.581427][T19199] futex_wait_setup+0xbc/0x270 [ 1348.586189][T19199] ? futex_wait_multiple+0x920/0x920 [ 1348.591476][T19199] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1348.597366][T19199] ? _raw_spin_unlock+0x40/0x40 [ 1348.602214][T19199] futex_wait+0x1bc/0x5c0 [ 1348.606570][T19199] ? futex_wait_setup+0x270/0x270 [ 1348.611606][T19199] ? __fget_files+0x28/0x460 [ 1348.616209][T19199] ? __fget_files+0x3fc/0x460 [ 1348.620886][T19199] do_futex+0x2ff/0x3e0 [ 1348.625034][T19199] ? asm_exc_page_fault+0x26/0x30 [ 1348.630069][T19199] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1348.635964][T19199] ? __sys_bind+0x134/0x3f0 [ 1348.640475][T19199] __se_sys_futex+0x3a9/0x440 [ 1348.645153][T19199] ? __x64_sys_futex+0xf0/0xf0 [ 1348.649916][T19199] ? __x64_sys_futex+0x21/0xf0 [ 1348.654677][T19199] do_syscall_64+0x55/0xb0 [ 1348.659095][T19199] ? clear_bhb_loop+0x40/0x90 [ 1348.663771][T19199] ? clear_bhb_loop+0x40/0x90 [ 1348.668450][T19199] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1348.674342][T19199] RIP: 0033:0x7fe3b019e159 [ 1348.678765][T19199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1348.698364][T19199] RSP: 002b:00007fe3b11070e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1348.706774][T19199] RAX: ffffffffffffffda RBX: 00007fe3b0425fa8 RCX: 00007fe3b019e159 [ 1348.714739][T19199] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe3b0425fa8 [ 1348.722701][T19199] RBP: 00007fe3b0425fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1348.730664][T19199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1348.738626][T19199] R13: 00007fe3b0426038 R14: 00007ffc2bda7870 R15: 00007ffc2bda7958 [ 1348.746600][T19199] [ 1349.777012][T19047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1350.346294][T19047] 8021q: adding VLAN 0 to HW filter on device team0 [ 1350.411683][ T6758] bridge0: port 1(bridge_slave_0) entered blocking state [ 1350.418843][ T6758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1350.472247][ T6758] bridge0: port 2(bridge_slave_1) entered blocking state [ 1350.479419][ T6758] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1350.686376][T19047] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1351.435955][T19238] FAULT_INJECTION: forcing a failure. [ 1351.435955][T19238] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1351.538731][T19238] CPU: 0 PID: 19238 Comm: syz.2.4371 Not tainted syzkaller #0 [ 1351.546233][T19238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1351.556281][T19238] Call Trace: [ 1351.559551][T19238] [ 1351.562476][T19238] dump_stack_lvl+0x18c/0x250 [ 1351.567155][T19238] ? show_regs_print_info+0x20/0x20 [ 1351.572348][T19238] ? load_image+0x420/0x420 [ 1351.576847][T19238] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1351.582211][T19238] ? lockdep_hardirqs_on+0x98/0x150 [ 1351.587454][T19238] should_fail_ex+0x394/0x4c0 [ 1351.592129][T19238] get_futex_key+0x136/0x1030 [ 1351.596802][T19238] ? futex_setup_timer+0xc0/0xc0 [ 1351.601736][T19238] futex_wake+0x127/0x4f0 [ 1351.606059][T19238] ? futex_wake_mark+0x150/0x150 [ 1351.610987][T19238] ? fput+0x154/0x1a0 [ 1351.614965][T19238] ? __sys_sendto+0x52b/0x6b0 [ 1351.619637][T19238] do_futex+0x35d/0x3e0 [ 1351.623787][T19238] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1351.629675][T19238] __se_sys_futex+0x3a9/0x440 [ 1351.634348][T19238] ? __x64_sys_futex+0xf0/0xf0 [ 1351.639105][T19238] ? __x64_sys_futex+0x21/0xf0 [ 1351.643864][T19238] do_syscall_64+0x55/0xb0 [ 1351.648274][T19238] ? clear_bhb_loop+0x40/0x90 [ 1351.652945][T19238] ? clear_bhb_loop+0x40/0x90 [ 1351.657617][T19238] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1351.663506][T19238] RIP: 0033:0x7f03c739e159 [ 1351.667914][T19238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1351.687525][T19238] RSP: 002b:00007f03c81ec0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1351.695933][T19238] RAX: ffffffffffffffda RBX: 00007f03c7625fa8 RCX: 00007f03c739e159 [ 1351.703894][T19238] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f03c7625fac [ 1351.711854][T19238] RBP: 00007f03c7625fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 1351.719816][T19238] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1351.727776][T19238] R13: 00007f03c7626038 R14: 00007fff7c29bcc0 R15: 00007fff7c29bda8 [ 1351.735755][T19238] [ 1352.020821][T19242] loop0: detected capacity change from 0 to 1024 [ 1352.027991][T19242] EXT4-fs: Ignoring removed bh option [ 1352.540261][T19047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1352.601733][T19242] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1352.707394][T12645] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1353.409286][T19263] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4375'. [ 1356.605776][T19047] veth0_vlan: entered promiscuous mode [ 1356.680182][T19047] veth1_vlan: entered promiscuous mode [ 1356.837855][T19047] veth0_macvtap: entered promiscuous mode [ 1356.895704][T19047] veth1_macvtap: entered promiscuous mode [ 1357.040017][T19047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1357.201430][T19047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1357.274220][T19047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1357.399577][T19309] loop0: detected capacity change from 0 to 1024 [ 1357.406763][T19309] EXT4-fs: Ignoring removed bh option [ 1357.423319][T19047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1357.469518][T19309] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1357.514195][T19047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1357.525319][ T1200] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1357.586835][T19047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1357.625882][T19047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1357.680394][T19047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1357.734862][ T1200] usb 5-1: Using ep0 maxpacket: 8 [ 1357.754985][T19047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1357.762652][T12645] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1357.781667][ T1200] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1357.833063][T19047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1357.847748][ T1200] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1357.896331][T19047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1357.917321][ T1200] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1357.969253][T19047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1357.997318][ T1200] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1358.030983][T19047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1358.056379][ T1200] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1358.200362][T19047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1358.221876][ T1200] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1358.238688][T19047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1358.512558][T19047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1358.541604][T19047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1358.570409][T19047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1358.635201][T19047] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.658495][T19047] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.682589][ T1200] usb 5-1: GET_CAPABILITIES returned 0 [ 1358.690668][T19047] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.713905][ T1200] usbtmc 5-1:16.0: can't read capabilities [ 1358.729420][T19047] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.982680][ C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1359.016180][T17745] usb 5-1: USB disconnect, device number 5 [ 1359.787577][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1360.576846][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1360.657426][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1360.714572][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1361.788377][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1368.324416][T19394] FAULT_INJECTION: forcing a failure. [ 1368.324416][T19394] name failslab, interval 1, probability 0, space 0, times 0 [ 1368.485921][T19394] CPU: 0 PID: 19394 Comm: syz.6.4391 Not tainted syzkaller #0 [ 1368.493416][T19394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1368.503493][T19394] Call Trace: [ 1368.506776][T19394] [ 1368.509704][T19394] dump_stack_lvl+0x18c/0x250 [ 1368.514384][T19394] ? show_regs_print_info+0x20/0x20 [ 1368.519583][T19394] ? load_image+0x420/0x420 [ 1368.524083][T19394] ? __might_sleep+0xe0/0xe0 [ 1368.528687][T19394] ? __lock_acquire+0x7d80/0x7d80 [ 1368.533724][T19394] should_fail_ex+0x394/0x4c0 [ 1368.538401][T19394] should_failslab+0x9/0x20 [ 1368.542904][T19394] slab_pre_alloc_hook+0x59/0x300 [ 1368.547929][T19394] ? key_alloc+0x34a/0x1030 [ 1368.552459][T19394] ? key_alloc+0x34a/0x1030 [ 1368.556958][T19394] __kmem_cache_alloc_node+0x53/0x250 [ 1368.562328][T19394] ? slab_post_alloc_hook+0x86/0x4d0 [ 1368.567614][T19394] ? key_alloc+0x34a/0x1030 [ 1368.572113][T19394] __kmalloc_node_track_caller+0xa4/0x230 [ 1368.577837][T19394] kmemdup+0x2b/0x70 [ 1368.581738][T19394] key_alloc+0x34a/0x1030 [ 1368.586101][T19394] request_key_auth_new+0x718/0x970 [ 1368.591299][T19394] ? request_key_auth_rcu_disposal+0x20/0x20 [ 1368.597276][T19394] ? up_write+0x1be/0x410 [ 1368.601604][T19394] request_key_and_link+0xdb6/0x1450 [ 1368.606898][T19394] ? request_key_and_link+0x2b2/0x1450 [ 1368.612351][T19394] ? complete_request_key+0xa0/0xa0 [ 1368.617544][T19394] ? __might_sleep+0xe0/0xe0 [ 1368.622145][T19394] ? restrict_link_reject+0x10/0x10 [ 1368.627343][T19394] ? keyring_search_rcu+0x280/0x280 [ 1368.632542][T19394] ? down_read+0x1ac/0x2e0 [ 1368.636959][T19394] __se_sys_request_key+0x297/0x350 [ 1368.642159][T19394] ? __x64_sys_request_key+0xb0/0xb0 [ 1368.647446][T19394] ? lockdep_hardirqs_on+0x98/0x150 [ 1368.652640][T19394] do_syscall_64+0x55/0xb0 [ 1368.657065][T19394] ? clear_bhb_loop+0x40/0x90 [ 1368.661736][T19394] ? clear_bhb_loop+0x40/0x90 [ 1368.666410][T19394] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1368.672298][T19394] RIP: 0033:0x7f862939e159 [ 1368.676709][T19394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1368.696309][T19394] RSP: 002b:00007f862a29e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 1368.704719][T19394] RAX: ffffffffffffffda RBX: 00007f8629625fa0 RCX: 00007f862939e159 [ 1368.712685][T19394] RDX: 0000200000001fee RSI: 0000200000001ffb RDI: 0000200000000040 [ 1368.720648][T19394] RBP: 00007f862943506b R08: 0000000000000000 R09: 0000000000000000 [ 1368.728609][T19394] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000 [ 1368.736585][T19394] R13: 00007f8629626038 R14: 00007f8629625fa0 R15: 00007ffda77da628 [ 1368.744560][T19394] [ 1375.551721][ T27] kauditd_printk_skb: 31 callbacks suppressed [ 1375.551733][ T27] audit: type=1326 audit(1789922736.165:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19456 comm="syz.6.4415" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f862939e159 code=0x7ffc0000 [ 1375.849334][ T27] audit: type=1326 audit(1789922736.205:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19456 comm="syz.6.4415" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f862939e159 code=0x7ffc0000 [ 1375.903154][T19461] netlink: 'syz.0.4416': attribute type 1 has an invalid length. [ 1376.050058][ T27] audit: type=1326 audit(1789922736.225:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19456 comm="syz.6.4415" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f862939e159 code=0x7ffc0000 [ 1376.102485][T19467] bond1: (slave gretap1): making interface the new active one [ 1376.160205][T19467] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1376.189379][ T27] audit: type=1326 audit(1789922736.225:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19456 comm="syz.6.4415" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f862939e159 code=0x7ffc0000 [ 1376.253992][ T1200] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1376.392345][ T27] audit: type=1326 audit(1789922736.225:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19456 comm="syz.6.4415" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f862939e159 code=0x7ffc0000 [ 1376.541293][ T1200] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1376.578311][ T27] audit: type=1326 audit(1789922736.235:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19456 comm="syz.6.4415" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f862939e159 code=0x7ffc0000 [ 1376.649273][ T1200] usb 7-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1376.715071][ T1200] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1376.876031][ T27] audit: type=1326 audit(1789922736.235:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19456 comm="syz.6.4415" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f862939e159 code=0x7ffc0000 [ 1376.913543][ T1200] usb 7-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 1376.976989][ T1200] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1377.009536][ T1200] usb 7-1: config 0 descriptor?? [ 1377.110672][ T27] audit: type=1326 audit(1789922736.235:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19456 comm="syz.6.4415" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f862939e159 code=0x7ffc0000 [ 1377.165871][T19491] loop2: detected capacity change from 0 to 1024 [ 1377.172996][T19491] EXT4-fs: Ignoring removed bh option [ 1377.240852][T19491] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1377.384121][T12071] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1377.401959][ T27] audit: type=1326 audit(1789922736.235:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19456 comm="syz.6.4415" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f862939e159 code=0x7ffc0000 [ 1377.737704][ T27] audit: type=1326 audit(1789922736.235:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19456 comm="syz.6.4415" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f862939e159 code=0x7ffc0000 [ 1377.814597][T19499] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4426'. [ 1378.059757][ T1200] sony 0003:054C:0268.0002: can't set operational mode: step 1 [ 1378.345505][ T1200] sony 0003:054C:0268.0002: Failed to set controller into operational mode [ 1378.442265][ T1200] sony 0003:054C:0268.0002: hiddev0,hidraw0: USB HID v80.00 Joystick [HID 054c:0268] on usb-dummy_hcd.6-1/input0 [ 1378.525604][ T1200] sony 0003:054C:0268.0002: failed to claim input [ 1378.645772][ T1200] usb 7-1: USB disconnect, device number 2 [ 1378.886554][T19510] fido_id[19510]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1381.001267][T19528] loop0: detected capacity change from 0 to 1024 [ 1381.008415][T19528] EXT4-fs: Ignoring removed bh option [ 1381.052638][T19528] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1381.253765][T12645] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1381.916343][T19548] device-mapper: ioctl: populate_table: no targets specified [ 1383.608945][T19572] loop2: detected capacity change from 0 to 1024 [ 1383.616024][T19572] EXT4-fs: Ignoring removed bh option [ 1383.686786][T19572] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1384.598598][T12071] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1384.827968][ C0] Unknown status report in ack skb [ 1391.269910][T19644] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4464'. [ 1393.444484][T19661] program syz.2.4467 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1397.523656][T19702] tipc: Started in network mode [ 1397.528563][T19702] tipc: Node identity 0660abc663df, cluster identity 4711 [ 1397.567245][T19703] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4477'. [ 1397.590542][T19702] tipc: Enabled bearer , priority 10 [ 1397.673759][T19701] tipc: Resetting bearer [ 1397.800566][T19701] tipc: Disabling bearer [ 1400.291854][ T1101] ------------[ cut here ]------------ [ 1400.298037][ T1101] WARNING: CPU: 0 PID: 1101 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 1400.309371][ T1101] Modules linked in: [ 1400.313504][ T1101] CPU: 0 PID: 1101 Comm: kworker/u4:8 Not tainted syzkaller #0 [ 1400.321047][ T1101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1400.331261][ T1101] Workqueue: phy18 ieee80211_csa_finalize_work [ 1400.337489][ T1101] RIP: 0010:ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 1400.344945][ T1101] Code: 48 89 df e8 a4 5e cc f7 e9 d6 fc ff ff e8 9a d2 73 f7 eb 24 e8 93 d2 73 f7 c7 04 24 f4 ff ff ff e9 cc f5 ff ff e8 82 d2 73 f7 <0f> 0b 0f 0b e9 b7 f5 ff ff e8 74 d2 73 f7 48 8b 7c 24 08 4c 8b 74 [ 1400.364745][ T1101] RSP: 0018:ffffc9000456f9c0 EFLAGS: 00010293 [ 1400.370813][ T1101] RAX: ffffffff8a13b4c2 RBX: 0000000000000001 RCX: ffff888023d5da00 [ 1400.378813][ T1101] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1400.387216][ C0] ------------[ cut here ]------------ [ 1400.387231][ C0] WARNING: CPU: 0 PID: 1101 at net/mac80211/tx.c:5049 __ieee80211_beacon_get+0x1141/0x1520 [ 1400.387255][ C0] Modules linked in: [ 1400.387264][ C0] CPU: 0 PID: 1101 Comm: kworker/u4:8 Not tainted syzkaller #0 [ 1400.387277][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1400.387285][ C0] Workqueue: phy18 ieee80211_csa_finalize_work [ 1400.387300][ C0] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 1400.387314][ C0] Code: f7 4c 89 ef e8 c0 6f b6 f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 1b 80 78 f7 0f 0b e9 61 f8 ff ff e8 0f 80 78 f7 <0f> 0b e9 85 fb ff ff e8 03 80 78 f7 48 c7 c7 60 6b 65 8e 4c 89 e6 [ 1400.387324][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 1400.387336][ C0] RAX: ffffffff8a0f0b41 RBX: dffffc0000000000 RCX: ffff888023d5da00 [ 1400.387346][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1400.387354][ C0] RBP: 0000000000000000 R08: ffff888023d5da00 R09: 0000000000000003 [ 1400.387362][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805c2c6440 [ 1400.387370][ C0] R13: ffff88802ad0c424 R14: ffff88805c2c6930 R15: ffff88802ad0c400 [ 1400.387379][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1400.387390][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1400.387398][ C0] CR2: 00007f862a15da08 CR3: 0000000019aa6000 CR4: 00000000003506f0 [ 1400.387411][ C0] Call Trace: [ 1400.387417][ C0] [ 1400.387423][ C0] ? __ieee80211_beacon_get+0x36/0x1520 [ 1400.387443][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 1400.387458][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 1400.387477][ C0] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 1400.387527][ C0] __iterate_interfaces+0x225/0x4c0 [ 1400.387541][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1400.387556][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1400.387572][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1400.387586][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1400.387603][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 1400.387616][ C0] ? hw_scan_work+0xf10/0xf10 [ 1400.387636][ C0] __hrtimer_run_queues+0x525/0xc10 [ 1400.387660][ C0] ? hrtimer_interrupt+0x980/0x980 [ 1400.387672][ C0] ? read_tsc+0x9/0x20 [ 1400.387696][ C0] hrtimer_run_softirq+0x177/0x290 [ 1400.387712][ C0] handle_softirqs+0x27d/0x820 [ 1400.387723][ C0] ? read_tsc+0x9/0x20 [ 1400.387735][ C0] ? ktime_get+0x24b/0x280 [ 1400.387750][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 1400.387765][ C0] ? do_softirq+0x1a0/0x1a0 [ 1400.387779][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1400.387795][ C0] __irq_exit_rcu+0xd3/0x190 [ 1400.387807][ C0] ? irq_exit_rcu+0x20/0x20 [ 1400.387824][ C0] irq_exit_rcu+0x9/0x20 [ 1400.387835][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1400.387848][ C0] [ 1400.387852][ C0] [ 1400.387858][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1400.387875][ C0] RIP: 0010:console_flush_all+0x883/0xcf0 [ 1400.387889][ C0] Code: ed 01 00 00 e8 be 85 1b 00 4d 85 ff 48 8b 5c 24 38 75 07 e8 af 85 1b 00 eb 06 e8 a8 85 1b 00 fb 49 bf 00 00 00 00 00 fc ff df <48> 8b 44 24 58 42 0f b6 04 38 84 c0 0f 85 2f 02 00 00 80 3b 01 0f [ 1400.387899][ C0] RSP: 0018:ffffc9000456f360 EFLAGS: 00000293 [ 1400.387911][ C0] RAX: ffffffff816c05a8 RBX: ffffc9000456f4df RCX: ffff888023d5da00 [ 1400.387919][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1400.387927][ C0] RBP: ffffc9000456f4b0 R08: ffffffff911eb507 R09: 1ffffffff223d6a0 [ 1400.387935][ C0] R10: dffffc0000000000 R11: fffffbfff223d6a1 R12: ffffffff8d8ce340 [ 1400.387944][ C0] R13: 1ffffffff19f9740 R14: ffffffff8d8ce398 R15: dffffc0000000000 [ 1400.387957][ C0] ? console_flush_all+0x878/0xcf0 [ 1400.387977][ C0] ? console_flush_all+0x10b/0xcf0 [ 1400.387995][ C0] ? is_console_locked+0x20/0x20 [ 1400.388010][ C0] ? lock_chain_count+0x20/0x20 [ 1400.388025][ C0] ? __down_trylock_console_sem+0xf6/0x1f0 [ 1400.388041][ C0] console_unlock+0xad/0x350 [ 1400.388057][ C0] ? other_cpu_in_panic+0xf0/0xf0 [ 1400.388069][ C0] ? vprintk_emit+0x53d/0x610 [ 1400.388084][ C0] ? printk_sprint+0x460/0x460 [ 1400.388099][ C0] ? __wake_up_klogd+0xd9/0x100 [ 1400.388114][ C0] vprintk_emit+0x497/0x610 [ 1400.388129][ C0] ? printk_sprint+0x460/0x460 [ 1400.388143][ C0] ? _printk+0xde/0x130 [ 1400.388155][ C0] ? copy_from_kernel_nofault+0x17b/0x2f0 [ 1400.388176][ C0] _printk+0xde/0x130 [ 1400.388188][ C0] ? ieee80211_vif_use_reserved_switch+0x10e4/0x2900 [ 1400.388207][ C0] ? load_image+0x420/0x420 [ 1400.388227][ C0] __show_regs+0x159/0x600 [ 1400.388240][ C0] ? dump_stack_print_info+0xf5/0x150 [ 1400.388256][ C0] show_regs+0x44/0x90 [ 1400.388285][ C0] __warn+0x160/0x470 [ 1400.388295][ C0] ? ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 1400.388313][ C0] ? ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 1400.388329][ C0] report_bug+0x2be/0x4f0 [ 1400.388372][ C0] ? ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 1400.388389][ C0] ? ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 1400.388405][ C0] ? ieee80211_vif_use_reserved_switch+0x1110/0x2900 [ 1400.388421][ C0] handle_bug+0xcf/0x120 [ 1400.388436][ C0] exc_invalid_op+0x1a/0x50 [ 1400.388451][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1400.388464][ C0] RIP: 0010:ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 1400.388481][ C0] Code: 48 89 df e8 a4 5e cc f7 e9 d6 fc ff ff e8 9a d2 73 f7 eb 24 e8 93 d2 73 f7 c7 04 24 f4 ff ff ff e9 cc f5 ff ff e8 82 d2 73 f7 <0f> 0b 0f 0b e9 b7 f5 ff ff e8 74 d2 73 f7 48 8b 7c 24 08 4c 8b 74 [ 1400.388490][ C0] RSP: 0018:ffffc9000456f9c0 EFLAGS: 00010293 [ 1400.388502][ C0] RAX: ffffffff8a13b4c2 RBX: 0000000000000001 RCX: ffff888023d5da00 [ 1400.388510][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1400.388518][ C0] RBP: dffffc0000000000 R08: ffff88805c2c562f R09: 1ffff1100b858ac5 [ 1400.388526][ C0] R10: dffffc0000000000 R11: ffffed100b858ac6 R12: 0000000000000001 [ 1400.388535][ C0] R13: ffff88805c2c6659 R14: ffff88807dc02d48 R15: ffff888023cfdf00 [ 1400.388547][ C0] ? ieee80211_vif_use_reserved_switch+0xd02/0x2900 [ 1400.388575][ C0] ieee80211_link_use_reserved_context+0x37b/0x5c0 [ 1400.388594][ C0] ieee80211_csa_finalize+0x571/0xeb0 [ 1400.388607][ C0] ? mutex_lock_nested+0x20/0x20 [ 1400.388625][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1400.388639][ C0] ? ieee80211_csa_finalize_work+0x140/0x140 [ 1400.388652][ C0] ? read_lock_is_recursive+0x20/0x20 [ 1400.388670][ C0] ieee80211_csa_finalize_work+0xf6/0x140 [ 1400.388682][ C0] ? process_scheduled_works+0x975/0x1600 [ 1400.388698][ C0] process_scheduled_works+0xa60/0x1600 [ 1400.388726][ C0] ? worker_attach_to_pool+0x370/0x370 [ 1400.388744][ C0] ? assign_work+0x3cc/0x5d0 [ 1400.388761][ C0] worker_thread+0xa5e/0xfe0 [ 1400.388788][ C0] kthread+0x2fa/0x390 [ 1400.388800][ C0] ? pr_cont_work+0x550/0x550 [ 1400.388814][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1400.388826][ C0] ret_from_fork+0x48/0x80 [ 1400.388839][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1400.388851][ C0] ret_from_fork_asm+0x11/0x20 [ 1400.388879][ C0] [ 1400.388885][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1400.388891][ C0] CPU: 0 PID: 1101 Comm: kworker/u4:8 Not tainted syzkaller #0 [ 1400.388902][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1400.388907][ C0] Workqueue: phy18 ieee80211_csa_finalize_work [ 1400.388919][ C0] Call Trace: [ 1400.388923][ C0] [ 1400.388927][ C0] dump_stack_lvl+0x18c/0x250 [ 1400.388942][ C0] ? show_regs_print_info+0x20/0x20 [ 1400.388956][ C0] ? load_image+0x420/0x420 [ 1400.388974][ C0] panic+0x2ca/0x720 [ 1400.388987][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 1400.389002][ C0] ? ret_from_fork_asm+0x11/0x20 [ 1400.389018][ C0] __warn+0x2e0/0x470 [ 1400.389028][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 1400.389040][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 1400.389051][ C0] report_bug+0x2be/0x4f0 [ 1400.389064][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 1400.389076][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 1400.389087][ C0] ? __ieee80211_beacon_get+0x1143/0x1520 [ 1400.389097][ C0] handle_bug+0xcf/0x120 [ 1400.389112][ C0] exc_invalid_op+0x1a/0x50 [ 1400.389125][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1400.389138][ C0] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 1400.389149][ C0] Code: f7 4c 89 ef e8 c0 6f b6 f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 1b 80 78 f7 0f 0b e9 61 f8 ff ff e8 0f 80 78 f7 <0f> 0b e9 85 fb ff ff e8 03 80 78 f7 48 c7 c7 60 6b 65 8e 4c 89 e6 [ 1400.389158][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 1400.389166][ C0] RAX: ffffffff8a0f0b41 RBX: dffffc0000000000 RCX: ffff888023d5da00 [ 1400.389174][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1400.389181][ C0] RBP: 0000000000000000 R08: ffff888023d5da00 R09: 0000000000000003 [ 1400.389188][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805c2c6440 [ 1400.389195][ C0] R13: ffff88802ad0c424 R14: ffff88805c2c6930 R15: ffff88802ad0c400 [ 1400.389206][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 1400.389221][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 1400.389231][ C0] ? __ieee80211_beacon_get+0x36/0x1520 [ 1400.389247][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 1400.389261][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 1400.389278][ C0] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 1400.389295][ C0] __iterate_interfaces+0x225/0x4c0 [ 1400.389308][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1400.389322][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1400.389336][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1400.389349][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1400.389364][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 1400.389376][ C0] ? hw_scan_work+0xf10/0xf10 [ 1400.389389][ C0] __hrtimer_run_queues+0x525/0xc10 [ 1400.389410][ C0] ? hrtimer_interrupt+0x980/0x980 [ 1400.389420][ C0] ? read_tsc+0x9/0x20 [ 1400.389437][ C0] hrtimer_run_softirq+0x177/0x290 [ 1400.389451][ C0] handle_softirqs+0x27d/0x820 [ 1400.389461][ C0] ? read_tsc+0x9/0x20 [ 1400.389471][ C0] ? ktime_get+0x24b/0x280 [ 1400.389485][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 1400.389498][ C0] ? do_softirq+0x1a0/0x1a0 [ 1400.389511][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1400.389526][ C0] __irq_exit_rcu+0xd3/0x190 [ 1400.389537][ C0] ? irq_exit_rcu+0x20/0x20 [ 1400.389552][ C0] irq_exit_rcu+0x9/0x20 [ 1400.389562][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1400.389572][ C0] [ 1400.389576][ C0] [ 1400.389580][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1400.389594][ C0] RIP: 0010:console_flush_all+0x883/0xcf0 [ 1400.389606][ C0] Code: ed 01 00 00 e8 be 85 1b 00 4d 85 ff 48 8b 5c 24 38 75 07 e8 af 85 1b 00 eb 06 e8 a8 85 1b 00 fb 49 bf 00 00 00 00 00 fc ff df <48> 8b 44 24 58 42 0f b6 04 38 84 c0 0f 85 2f 02 00 00 80 3b 01 0f [ 1400.389615][ C0] RSP: 0018:ffffc9000456f360 EFLAGS: 00000293 [ 1400.389629][ C0] RAX: ffffffff816c05a8 RBX: ffffc9000456f4df RCX: ffff888023d5da00 [ 1400.389636][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1400.389643][ C0] RBP: ffffc9000456f4b0 R08: ffffffff911eb507 R09: 1ffffffff223d6a0 [ 1400.389650][ C0] R10: dffffc0000000000 R11: fffffbfff223d6a1 R12: ffffffff8d8ce340 [ 1400.389657][ C0] R13: 1ffffffff19f9740 R14: ffffffff8d8ce398 R15: dffffc0000000000 [ 1400.389669][ C0] ? console_flush_all+0x878/0xcf0 [ 1400.389687][ C0] ? console_flush_all+0x10b/0xcf0 [ 1400.389704][ C0] ? is_console_locked+0x20/0x20 [ 1400.389717][ C0] ? lock_chain_count+0x20/0x20 [ 1400.389731][ C0] ? __down_trylock_console_sem+0xf6/0x1f0 [ 1400.389747][ C0] console_unlock+0xad/0x350 [ 1400.389761][ C0] ? other_cpu_in_panic+0xf0/0xf0 [ 1400.389772][ C0] ? vprintk_emit+0x53d/0x610 [ 1400.389786][ C0] ? printk_sprint+0x460/0x460 [ 1400.389799][ C0] ? __wake_up_klogd+0xd9/0x100 [ 1400.389813][ C0] vprintk_emit+0x497/0x610 [ 1400.389827][ C0] ? printk_sprint+0x460/0x460 [ 1400.389839][ C0] ? _printk+0xde/0x130 [ 1400.389851][ C0] ? copy_from_kernel_nofault+0x17b/0x2f0 [ 1400.389870][ C0] _printk+0xde/0x130 [ 1400.389881][ C0] ? ieee80211_vif_use_reserved_switch+0x10e4/0x2900 [ 1400.389898][ C0] ? load_image+0x420/0x420 [ 1400.389917][ C0] __show_regs+0x159/0x600 [ 1400.389928][ C0] ? dump_stack_print_info+0xf5/0x150 [ 1400.389943][ C0] show_regs+0x44/0x90 [ 1400.389956][ C0] __warn+0x160/0x470 [ 1400.389966][ C0] ? ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 1400.389982][ C0] ? ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 1400.389997][ C0] report_bug+0x2be/0x4f0 [ 1400.390010][ C0] ? ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 1400.390026][ C0] ? ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 1400.390041][ C0] ? ieee80211_vif_use_reserved_switch+0x1110/0x2900 [ 1400.390055][ C0] handle_bug+0xcf/0x120 [ 1400.390068][ C0] exc_invalid_op+0x1a/0x50 [ 1400.390082][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1400.390094][ C0] RIP: 0010:ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 1400.390109][ C0] Code: 48 89 df e8 a4 5e cc f7 e9 d6 fc ff ff e8 9a d2 73 f7 eb 24 e8 93 d2 73 f7 c7 04 24 f4 ff ff ff e9 cc f5 ff ff e8 82 d2 73 f7 <0f> 0b 0f 0b e9 b7 f5 ff ff e8 74 d2 73 f7 48 8b 7c 24 08 4c 8b 74 [ 1400.390117][ C0] RSP: 0018:ffffc9000456f9c0 EFLAGS: 00010293 [ 1400.390125][ C0] RAX: ffffffff8a13b4c2 RBX: 0000000000000001 RCX: ffff888023d5da00 [ 1400.390133][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1400.390139][ C0] RBP: dffffc0000000000 R08: ffff88805c2c562f R09: 1ffff1100b858ac5 [ 1400.390146][ C0] R10: dffffc0000000000 R11: ffffed100b858ac6 R12: 0000000000000001 [ 1400.390153][ C0] R13: ffff88805c2c6659 R14: ffff88807dc02d48 R15: ffff888023cfdf00 [ 1400.390165][ C0] ? ieee80211_vif_use_reserved_switch+0xd02/0x2900 [ 1400.390190][ C0] ieee80211_link_use_reserved_context+0x37b/0x5c0 [ 1400.390208][ C0] ieee80211_csa_finalize+0x571/0xeb0 [ 1400.390219][ C0] ? mutex_lock_nested+0x20/0x20 [ 1400.390230][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1400.390243][ C0] ? ieee80211_csa_finalize_work+0x140/0x140 [ 1400.390255][ C0] ? read_lock_is_recursive+0x20/0x20 [ 1400.390271][ C0] ieee80211_csa_finalize_work+0xf6/0x140 [ 1400.390282][ C0] ? process_scheduled_works+0x975/0x1600 [ 1400.390296][ C0] process_scheduled_works+0xa60/0x1600 [ 1400.390322][ C0] ? worker_attach_to_pool+0x370/0x370 [ 1400.390339][ C0] ? assign_work+0x3cc/0x5d0 [ 1400.390355][ C0] worker_thread+0xa5e/0xfe0 [ 1400.390381][ C0] kthread+0x2fa/0x390 [ 1400.390391][ C0] ? pr_cont_work+0x550/0x550 [ 1400.390404][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1400.390415][ C0] ret_from_fork+0x48/0x80 [ 1400.390426][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1400.390437][ C0] ret_from_fork_asm+0x11/0x20 [ 1400.390457][ C0] [ 1400.390512][ C0] Kernel Offset: disabled