last executing test programs: 10.948961318s ago: executing program 2 (id=1457): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2000002, 0xfffffffe}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x4, 0x2}, 0x10) sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x6}}}, 0x10, 0x0}, 0x0) 10.810326363s ago: executing program 0 (id=1460): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x13}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xb, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1, 0x1, 0x9, 0x1, 0x8}, 0xe, 0x0, 0x32, 0x5, 0x9, 0x7, 0x9, 0x1d, 0x1, 0xffffff5c, {0xa632, 0x23, 0x3, 0x3c, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x404c84c}, 0x400c000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x9900, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 10.751138565s ago: executing program 2 (id=1461): execveat$binfmt(0xffffffffffffff9c, 0x0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x4}, 0x4) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000400000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x24040080) 10.638878279s ago: executing program 4 (id=1463): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0x70bd25, 0xffffffff, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xfd, 0xb, 0xd00}, [@RTA_GATEWAY={0x14, 0x5, @mcast1}]}, 0x30}, 0x1, 0x11}, 0x4000080) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) r1 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) read$eventfd(r1, &(0x7f0000000000), 0x8) io_submit(r2, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) r3 = socket$qrtr(0x2a, 0x2, 0x0) getpeername$qrtr(r3, 0x0, 0x0) syz_mount_image$erofs(&(0x7f00000001c0), &(0x7f0000000200)='./file2\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x1f4, &(0x7f0000000240)="$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") creat(0x0, 0x77) 10.102631226s ago: executing program 0 (id=1464): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcdf, 0x1, 0x0}, &(0x7f00000000c0)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcdf, 0x1, 0x0}, &(0x7f00000000c0)=0x40) 9.610503963s ago: executing program 1 (id=1466): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() socket$nl_sock_diag(0x10, 0x3, 0x4) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x10000}], 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x1a00040, &(0x7f0000000140)={[{@uni_xlate}, {@numtail}, {@fat=@time_offset={'time_offset', 0x3d, 0x56a}}, {@rodir}, {@fat=@flush}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@rodir}, {@fat=@debug}, {@fat=@codepage={'codepage', 0x3d, '861'}}, {@fat=@nfs_stale_rw}, {@uni_xlateno}, {@utf8no}]}, 0x3, 0x350, &(0x7f0000000580)="$eJzs3U9oW3UcAPBv9tKkHcz2IAwF4elN0LJWPOipZXQwzEUl+OcgBtepNHXQYLA7NKsX8Sh41JM3D3rwsLMIinjz4NUJMhUPutvA4ZMkL81Lk3adkM3i53MI331/329+v7c8mtfX5tdXV2LjwkxcvHHjeszOlqK8cnYlbpZiIZIYuBLjKhNyAMDxcDPL4s+s74gtpSkvCQCYst77/+unCpl3vz6sPvPuDwDHXv79/9xhNbMHDVyaypIAgCkbu///yMhwZfRH/eXCbwUAAMfV8y+9/MxqLeK5NJ2N2HyvXW/X4+nh+OrFeDOasR5nYj5uRfQvFLoPpd7jufO1tTNpmnbil4Wodzva9YjNTrvev1JYTXr91ViK+VjI+/OrjSzLknNf1NaW0p6IuNLpzR+bpXZ9Jk7m8/94MtZjOdK4f6w/4nxtbTnNn6C+OejvROwO71t0178Y8/H9a3EpmnEhur2Dy5ra2s5Smp7NaiP97Xq1V9d34B0QAAAAAAAAAAAAAAAAAAAAAAD4VxbTPQt7+99kw/17FhcnjPf2x+n35/sD7fb3B8qqWWTZH+88Xn8/iZH9gfbvz9Oul+PEvT10AAAAAAAAAAAAAAAAAAAA+M9obVei0Wyub7W2L28Ug85Wa/tERHQzb3372VdzMV5zm6Ccz1EYSvPU5Y1GlgyKs2SkJg+S7uSDzKdX91ZcrKnuHcXEZVQPHmo2Tz3880fDzEPJ4Jn/HtYkMfkAk33LKAab9/WXdCf/UXvB8m1qrmVZdlD7zivjXVGKKN/5C3d4kHWDb66/8cATrdNP9jJfZn2PPjb/wrUPP/lto9Hszhy9V7Cy1bqVbTTyf08+2Q4OksL5U4p+UCqeCeXD2ndHM43kh99ffPCD7442e1bMvD2hJukfzuf7hyr9oLvMfUNzk+aamXDyTyE4/fFK4+rOT78etavwRcJGHQAAAAAAAAAAAAAAAAAAcFcUPiueyz/sO3NY11PPTn9lAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHD3DP/+fyHYHcscJfirE+ND1fWtVkTlXh8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/c/8EAAD//9HQbnk=") 9.282667154s ago: executing program 0 (id=1467): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x9, 0x4}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x4, 0x1, 0x9181}, {0x4, 0x2, 0x8, 0x2, 0x8, 0x1, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x20000, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x42}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)="aa", 0x1}], 0x1}, 0x4) 8.358756424s ago: executing program 1 (id=1468): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000240)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) syz_clone3(0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) 8.358214694s ago: executing program 2 (id=1469): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000000), 0x4) r3 = dup3(r1, r2, 0x0) sendmsg$tipc(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) bind$tipc(r0, 0x0, 0x0) 8.17106809s ago: executing program 0 (id=1470): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000009c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x9}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x82) 8.152500551s ago: executing program 3 (id=1471): socket(0x2a, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000019300), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200800, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1}) 8.151615041s ago: executing program 2 (id=1472): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)}], 0x2}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x2, 0x20000044) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e0080"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[@ANYBLOB="7c0100", @ANYBLOB="01002bbd7000fbdbdf25070000000c000180080003000100000074000180140002007767320000000000000000000000000008000300020000001400020070696d367265", @ANYRES32, @ANYRES32], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 8.091934163s ago: executing program 4 (id=1473): socket$kcm(0x10, 0x400000002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmdt(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f0000000040)={{0xf}, 0x0, 0x2, 0x7000, {0x2, 0x1}, 0xf9, 0x40}) 6.742682917s ago: executing program 3 (id=1474): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x3, 0xb, &(0x7f0000000900)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x0, 0x0, 'lblc\x00', 0x1e, 0x80}, 0x2c) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000140)="f3", 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) 6.742412457s ago: executing program 2 (id=1475): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) mq_open(&(0x7f0000000040)='GPL\x00', 0x40, 0x7f, &(0x7f0000000140)={0x4, 0x80000000000008, 0x29a5db5f, 0x4}) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x8d0, &(0x7f0000000080)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c00a99176bffea999ec4947785a4b3392b470a878b010acc5fde3f7c39533b111d92aa1e3cd9504b4aec083a038cd1b944d504716e6b8463de9dc9743fbe9e0ef9396a932024b904283205650ea735ae7adac50b5efe5244d737dc9515a51775b2fafbc85c9c1c8f62872a466192aae714a90990e0b07aa2b92e463ad98"], 0x1, 0x25f, &(0x7f0000000840)="$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") openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1, 0x108) sendmmsg$sock(r1, &(0x7f000000bb40)=[{{0x0, 0x48, 0x0}}, {{0x0, 0xfffffffffffffe60, 0x0}}], 0x400006d, 0x2400c045) 6.742255768s ago: executing program 4 (id=1476): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001e00050300000001fedbdf25"], 0x24}, 0x1, 0x8000000, 0x0, 0x400c880}, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0xfd, 0x60, 0xd, 0x1}, 'syz1\x00', 0x3a}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0xcb5e, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.502404506s ago: executing program 0 (id=1477): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.872201646s ago: executing program 4 (id=1478): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) prlimit64(r0, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_clone(0x2080, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 5.606559485s ago: executing program 2 (id=1479): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet_sctp(0x2, 0x5, 0x84) chdir(0x0) syz_usb_connect(0x2, 0x24, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fallocate(r0, 0x0, 0xfea000, 0x2000402) lseek(r0, 0x1, 0x3) 5.602469475s ago: executing program 3 (id=1489): readv(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @remote}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 5.575089646s ago: executing program 1 (id=1480): r0 = openat$mixer(0xffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d06, &(0x7f0000000180)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendfile(r0, r1, 0x0, 0xff) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0xb6, @empty}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x713, 0x40000, 0x0, {{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast1, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x5, 0xb}, [@algo_crypt={0x48, 0x2, {{'ecb-serpent-avx\x00'}}}]}, 0x138}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28) sendto$inet6(r1, 0x0, 0x0, 0xc000, 0x0, 0x0) 4.060079276s ago: executing program 1 (id=1481): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000000a499d0000000000000000020000010900010073797a3100000000080002400000000304000600140000001100", @ANYRES64=r0], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000010a0101"], 0x14}, 0x1, 0x0, 0x0, 0x400c895}, 0x24000800) recvmsg(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x201, 0x2) r2 = fsopen(&(0x7f0000002200)='ramfs\x00', 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000100), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000300)={0x0, 0x0, '\x00', @bt={0x8, 0x1, 0x2, 0xde02, 0x4, 0xe108, 0x9, 0x7}}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000580050001"], 0x80}}, 0x0) r5 = fcntl$dupfd(r2, 0x0, r2) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='\x00', 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11011, r1, 0x2000) 4.059119706s ago: executing program 3 (id=1482): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xc, 0x4}, {0x0, 0xfff1}, {0x8, 0xc}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008044) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004f80)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x2400}, {}, {0x8, 0x4}}}, 0x24}}, 0x0) 4.052527766s ago: executing program 4 (id=1483): r0 = syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x1) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) getdents64(r3, &(0x7f00000005c0)=""/4096, 0x1000) wait4(r0, 0x0, 0x40000000, 0x0) r4 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x86) fchdir(r5) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r6, 0x101, 0x1) getdents(r6, &(0x7f00000002c0)=""/201, 0xc9) 2.366051862s ago: executing program 1 (id=1484): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) ftruncate(r4, 0x2000000) fcntl$addseals(r4, 0x409, 0x7) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x1f, 0x0, 0x1000000}) 1.581111908s ago: executing program 3 (id=1485): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) r4 = shmat(r3, &(0x7f0000ffd000/0x2000)=nil, 0x6000) shmdt(r4) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='f2fs\x00', 0x10, &(0x7f0000000100)='barrier') 1.500455911s ago: executing program 0 (id=1486): timer_create(0x2, 0x0, &(0x7f0000000100)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000380)={{}, {0x0, 0x9}}, 0x0) timer_settime(r0, 0x1, &(0x7f0000000140)={{}, {0x77359400}}, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x17ef, 0x6062, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9}}]}}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x800, 0x1}, 0x20) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 1.303181437s ago: executing program 4 (id=1487): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = open(&(0x7f0000000180)='.\x00', 0x82000, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r2, 0x1) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r3, 0x2) timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 148.534575ms ago: executing program 1 (id=1488): openat(0xffffffffffffff9c, 0x0, 0x101042, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x80) openat$cgroup_procs(r3, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) 0s ago: executing program 3 (id=1490): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x4000) recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) kernel console output (not intermixed with test programs): 1 [ 63.701077][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.714505][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.730843][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.743257][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.748963][ T4231] Bluetooth: hci0: command 0x040f tx timeout [ 63.758587][ T4231] Bluetooth: hci1: command 0x040f tx timeout [ 63.765723][ T4231] Bluetooth: hci2: command 0x040f tx timeout [ 63.773767][ T4231] Bluetooth: hci4: command 0x040f tx timeout [ 63.780680][ T4231] Bluetooth: hci3: command 0x040f tx timeout [ 63.788906][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.799241][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.809942][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.810876][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.820806][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.838673][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.850516][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.862566][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.909864][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.967319][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.032692][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.091629][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.143800][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.199900][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.668719][ T4189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.687915][ T4189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.698040][ T4189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.707000][ T4189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.721528][ T4200] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.735514][ T4200] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.744380][ T4200] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.762191][ T4200] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.795430][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.815323][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.879051][ T4271] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 64.952548][ T4199] device veth0_vlan entered promiscuous mode [ 64.975764][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.996494][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.024713][ T4199] device veth1_vlan entered promiscuous mode [ 65.050145][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.058873][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.067916][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.164388][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.179969][ T4278] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 65.186286][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.215093][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.235911][ T4199] device veth0_macvtap entered promiscuous mode [ 65.260807][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.270216][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.285485][ T4278] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 65.295985][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.304763][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.324737][ T4229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.329932][ T4199] device veth1_macvtap entered promiscuous mode [ 65.338933][ T4229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.384852][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.393387][ T4229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.404357][ T4229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.423516][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.457152][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.578039][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.588554][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.598903][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.611433][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.622002][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.633111][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.643009][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.653480][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.816546][ T4233] Bluetooth: hci4: command 0x0419 tx timeout [ 65.827467][ T4233] Bluetooth: hci2: command 0x0419 tx timeout [ 65.870684][ T4233] Bluetooth: hci1: command 0x0419 tx timeout [ 65.905369][ T4233] Bluetooth: hci0: command 0x0419 tx timeout [ 65.944478][ T4230] Bluetooth: hci3: command 0x0419 tx timeout [ 66.124378][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.412562][ T4268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.447800][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.483515][ T4268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.489984][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.512803][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.524980][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.540567][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.550861][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.561782][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.571805][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.582285][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.592639][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.605277][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.618438][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.664130][ T4199] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.700413][ T4199] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.711338][ T4199] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.722946][ T4199] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.735987][ T4292] bridge0: port 3(syz_tun) entered blocking state [ 66.743525][ T4292] bridge0: port 3(syz_tun) entered disabled state [ 66.752907][ T4292] device syz_tun entered promiscuous mode [ 66.757402][ T4299] loop0: detected capacity change from 0 to 512 [ 66.762936][ T4292] bridge0: port 3(syz_tun) entered blocking state [ 66.772249][ T4292] bridge0: port 3(syz_tun) entered forwarding state [ 66.783432][ T4293] netlink: 'syz.2.10': attribute type 8 has an invalid length. [ 66.796551][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.814914][ T4299] EXT4-fs (loop0): Ignoring removed nobh option [ 66.845810][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.868808][ T4297] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11'. [ 66.931622][ T4307] loop2: detected capacity change from 0 to 1024 [ 66.942695][ T4299] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 66.950072][ T4297] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.951797][ T4299] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 66.959681][ T4297] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.971874][ T4299] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #13: comm syz.0.11: inode has both inline data and extents flags [ 66.976733][ T4297] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.999381][ T4297] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.011912][ T4299] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.11: couldn't read orphan inode 13 (err -117) [ 67.052296][ T4299] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue. Quota mode: writeback. [ 67.198142][ T4307] hfsplus: xattr searching failed [ 67.223390][ T4297] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11'. [ 67.234050][ T4311] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 67.262745][ T26] audit: type=1800 audit(1779418741.875:2): pid=4307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.13" name="file1" dev="loop2" ino=2 res=0 errno=0 [ 67.263322][ T4312] hfsplus: catalog searching failed [ 67.333987][ T4297] Zero length message leads to an empty skb [ 67.358520][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.375476][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.383152][ T4268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.406288][ T4299] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11'. [ 67.422736][ T4268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.427656][ T4299] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11'. [ 67.443093][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.486311][ T4246] hfsplus: bad catalog file entry [ 67.491621][ T4246] hfsplus: b-tree write err: -5, ino 3 [ 67.498640][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.593077][ T4297] syz.0.11 (4297) used greatest stack depth: 20664 bytes left [ 69.522351][ T4350] tipc: Started in network mode [ 69.544344][ T4350] tipc: Node identity 2007ff, cluster identity 4711 [ 69.560826][ T4350] tipc: Node number set to 2099199 [ 70.970589][ T4366] netlink: 'syz.3.26': attribute type 10 has an invalid length. [ 71.127886][ T4366] device veth0_vlan left promiscuous mode [ 71.168372][ T4366] device veth0_vlan entered promiscuous mode [ 71.219412][ T4366] team0: Device veth0_vlan failed to register rx_handler [ 71.332135][ T4368] netlink: 'syz.0.27': attribute type 4 has an invalid length. [ 71.391133][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.397943][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.563440][ T4366] syz.3.26 (4366) used greatest stack depth: 20144 bytes left [ 72.746434][ T4368] syz.0.27 (4368) used greatest stack depth: 20056 bytes left [ 73.655466][ T4230] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 74.085914][ T4230] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 74.375915][ T4230] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 74.436584][ T4230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.472105][ T4230] usb 2-1: Product: syz [ 74.503100][ T4401] bridge0: port 3(vlan2) entered blocking state [ 74.510775][ T4230] usb 2-1: Manufacturer: syz [ 74.527883][ T4230] usb 2-1: SerialNumber: syz [ 74.586232][ T4230] usb 2-1: config 0 descriptor?? [ 74.603170][ T4401] bridge0: port 3(vlan2) entered disabled state [ 74.626566][ T4401] device vlan2 entered promiscuous mode [ 74.642187][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 74.667239][ T4230] ims_pcu 2-1:0.0: Missing CDC union descriptor [ 74.674194][ T4230] ims_pcu: probe of 2-1:0.0 failed with error -22 [ 74.691557][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.741401][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.778606][ T4402] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.847788][ T4402] device bridge_slave_1 left promiscuous mode [ 74.865492][ T4402] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.915388][ T4389] process 'syz.2.33' launched './file1' with NULL argv: empty string added [ 74.945902][ T4402] bond0: (slave bond_slave_0): Releasing backup interface [ 74.971211][ T4392] udc-core: couldn't find an available UDC or it's busy [ 74.983868][ T4392] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 74.997589][ T4402] bond0: (slave bond_slave_1): Releasing backup interface [ 75.050175][ T4233] usb 2-1: USB disconnect, device number 2 [ 75.117629][ T4402] team0: Port device team_slave_0 removed [ 75.158629][ T4402] team0: Port device team_slave_1 removed [ 75.195817][ T4402] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.203829][ T4402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.478242][ T4402] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.759259][ T4402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.927206][ T4402] device vlan2 left promiscuous mode [ 75.978833][ T4402] device bridge_slave_0 left promiscuous mode [ 76.007902][ T4402] bridge0: port 3(vlan2) entered disabled state [ 76.145881][ T4402] syz.4.37 (4402) used greatest stack depth: 18712 bytes left [ 76.628702][ T4435] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 76.655264][ T4435] CIFS mount error: No usable UNC path provided in device string! [ 76.655264][ T4435] [ 76.666807][ T4435] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 76.773406][ T4436] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 79.675541][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 79.945417][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 80.070618][ T23] usb 4-1: config 129 has an invalid interface number: 120 but max is 0 [ 80.150187][ T23] usb 4-1: config 129 has an invalid descriptor of length 123, skipping remainder of the config [ 80.305272][ T23] usb 4-1: config 129 has no interface number 0 [ 80.311767][ T23] usb 4-1: config 129 interface 120 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 80.337163][ T23] usb 4-1: config 129 interface 120 has no altsetting 0 [ 80.525422][ T4452] netlink: 10 bytes leftover after parsing attributes in process `syz.1.50'. [ 80.613655][ T23] usb 4-1: New USB device found, idVendor=0499, idProduct=c455, bcdDevice=81.ab [ 80.626872][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.634913][ T23] usb 4-1: Product: syz [ 80.639632][ T23] usb 4-1: Manufacturer: syz [ 80.644513][ T23] usb 4-1: SerialNumber: syz [ 81.646282][ T13] cfg80211: failed to load regulatory.db [ 81.723017][ T4469] netlink: 140 bytes leftover after parsing attributes in process `syz.1.54'. [ 81.750666][ T4469] netlink: 28 bytes leftover after parsing attributes in process `syz.1.54'. [ 81.770687][ T4470] loop2: detected capacity change from 0 to 128 [ 81.778457][ T4466] device syzkaller0 entered promiscuous mode [ 82.278281][ T4470] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,dioread_lock,nouid32,,errors=continue. Quota mode: none. [ 83.606976][ T4470] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 84.556067][ T4488] No such timeout policy "syz1" [ 85.071309][ T23] usb 4-1: USB disconnect, device number 2 [ 86.172865][ T4497] team0 (unregistering): Port device team_slave_0 removed [ 86.377031][ T4497] team0 (unregistering): Port device team_slave_1 removed [ 87.827604][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:129.120/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 88.364370][ T4535] device syzkaller0 entered promiscuous mode [ 89.565203][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 90.134347][ T4558] loop4: detected capacity change from 0 to 512 [ 90.244308][ T4558] ======================================================= [ 90.244308][ T4558] WARNING: The mand mount option has been deprecated and [ 90.244308][ T4558] and is ignored by this kernel. Remove the mand [ 90.244308][ T4558] option from the mount to silence this warning. [ 90.244308][ T4558] ======================================================= [ 91.276083][ T4558] tipc: Started in network mode [ 91.281077][ T4558] tipc: Node identity ee1fa41abe28, cluster identity 4711 [ 91.329475][ T4558] tipc: Enabled bearer , priority 0 [ 91.559291][ T4558] device syzkaller0 entered promiscuous mode [ 92.111901][ T4557] tipc: Resetting bearer [ 92.573169][ T4557] tipc: Disabling bearer [ 92.604483][ T4230] tipc: Node number set to 1345823770 [ 95.045205][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 95.065194][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 95.075186][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 95.085180][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 95.095180][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 95.115218][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 95.125182][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 95.135176][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 95.145187][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 95.842343][ T4606] capability: warning: `syz.0.97' uses deprecated v2 capabilities in a way that may be insecure [ 96.196523][ T4619] device syzkaller0 entered promiscuous mode [ 96.227821][ T4623] netlink: 4 bytes leftover after parsing attributes in process `syz.3.103'. [ 96.266939][ T4623] netlink: 32 bytes leftover after parsing attributes in process `syz.3.103'. [ 96.430022][ T4630] netlink: 'syz.1.105': attribute type 1 has an invalid length. [ 96.453947][ T4630] device bond1 entered promiscuous mode [ 96.460208][ T4630] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.094252][ T4630] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 97.260483][ T4630] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 97.428250][ T4630] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 97.858142][ T4615] loop4: detected capacity change from 0 to 32768 [ 98.013082][ T4615] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.95 (4615) [ 98.322524][ T4615] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 98.333312][ T4615] BTRFS info (device loop4): using free space tree [ 98.340775][ T4615] BTRFS info (device loop4): has skinny extents [ 99.399548][ T4615] BTRFS error (device loop4): open_ctree failed: -12 [ 99.545828][ T4675] netlink: 'syz.3.112': attribute type 21 has an invalid length. [ 99.553922][ T4675] netlink: 132 bytes leftover after parsing attributes in process `syz.3.112'. [ 99.875383][ T4230] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 100.199230][ T4230] usb 4-1: Using ep0 maxpacket: 32 [ 100.395923][ T4230] usb 4-1: unable to get BOS descriptor or descriptor too short [ 100.526915][ T4230] usb 4-1: config 7 has an invalid interface number: 223 but max is 0 [ 100.733570][ T4230] usb 4-1: config 7 has no interface number 0 [ 100.935265][ T4230] usb 4-1: config 7 interface 223 altsetting 177 endpoint 0xF has invalid wMaxPacketSize 0 [ 100.956726][ T4697] smc: net device ip6_vti0 applied user defined pnetid SYZ2 [ 100.978229][ T4230] usb 4-1: config 7 interface 223 altsetting 177 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 101.014467][ T4230] usb 4-1: config 7 interface 223 has no altsetting 0 [ 101.018679][ T4697] loop4: detected capacity change from 0 to 764 [ 102.085524][ T4230] usb 4-1: New USB device found, idVendor=185b, idProduct=2870, bcdDevice=af.8a [ 102.121179][ T4230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.152073][ T4230] usb 4-1: Product: syz [ 102.211261][ T4230] usb 4-1: Manufacturer: syz [ 102.231639][ T4230] usb 4-1: SerialNumber: syz [ 103.560127][ T4230] usb 4-1: USB disconnect, device number 3 [ 103.748403][ T4720] device syzkaller0 entered promiscuous mode [ 104.058138][ T4230] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 104.486233][ T4230] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 104.521114][ T4230] usb 4-1: config 0 interface 0 has no altsetting 0 [ 104.835819][ T4230] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 104.878249][ T4230] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 104.926276][ T4230] usb 4-1: Product: syz [ 104.948719][ T4230] usb 4-1: Manufacturer: syz [ 104.959827][ T4230] usb 4-1: SerialNumber: syz [ 104.985489][ T4230] usb 4-1: config 0 descriptor?? [ 105.030484][ T4230] usb 4-1: selecting invalid altsetting 0 [ 105.316563][ T7] usb 4-1: USB disconnect, device number 4 [ 106.634079][ T4754] xt_hashlimit: size too large, truncated to 1048576 [ 107.401453][ T4754] xt_hashlimit: invalid rate [ 108.931957][ T4772] netlink: 14 bytes leftover after parsing attributes in process `syz.3.141'. [ 113.645151][ C0] sched: RT throttling activated [ 114.294139][ T4808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.151'. [ 114.821320][ T4813] ODEBUG: Out of memory. ODEBUG disabled [ 115.942499][ T4816] netlink: 36 bytes leftover after parsing attributes in process `syz.4.155'. [ 115.978136][ T4816] netlink: 36 bytes leftover after parsing attributes in process `syz.4.155'. [ 116.018249][ T4816] netlink: 52 bytes leftover after parsing attributes in process `syz.4.155'. [ 116.068426][ T4820] tipc: Started in network mode [ 116.078410][ T4820] tipc: Node identity b6a86bd35e73, cluster identity 4711 [ 116.126740][ T4820] tipc: Enabled bearer , priority 0 [ 116.148932][ T4819] tipc: Resetting bearer [ 116.226871][ T4819] tipc: Disabling bearer [ 119.065860][ T4848] loop4: detected capacity change from 0 to 256 [ 119.229886][ T4850] netlink: 16 bytes leftover after parsing attributes in process `syz.2.164'. [ 119.262974][ T4848] FAT-fs (loop4): Directory bread(block 64) failed [ 119.276014][ T4848] FAT-fs (loop4): Directory bread(block 65) failed [ 119.282950][ T4848] FAT-fs (loop4): Directory bread(block 66) failed [ 119.298174][ T4848] FAT-fs (loop4): Directory bread(block 67) failed [ 119.308441][ T4848] FAT-fs (loop4): Directory bread(block 68) failed [ 119.319653][ T4848] FAT-fs (loop4): Directory bread(block 69) failed [ 119.331665][ T4848] FAT-fs (loop4): Directory bread(block 70) failed [ 119.346109][ T4848] FAT-fs (loop4): Directory bread(block 71) failed [ 119.353065][ T4848] FAT-fs (loop4): Directory bread(block 72) failed [ 119.396931][ T4848] FAT-fs (loop4): Directory bread(block 73) failed [ 119.503566][ T4857] x_tables: unsorted underflow at hook 4 [ 119.503916][ T4855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.166'. [ 125.213727][ T26] audit: type=1800 audit(1779418799.825:3): pid=4882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.175" name="bus" dev="ramfs" ino=34694 res=0 errno=0 [ 125.227990][ T4907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.182'. [ 125.414574][ T4907] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 125.524146][ T4907] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 125.602044][ T4907] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 126.618001][ T4925] device bridge1 entered promiscuous mode [ 130.394311][ T26] audit: type=1326 audit(1779418805.005:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4944 comm="syz.4.195" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727e59de59 code=0x7ffc0000 [ 130.490264][ T4947] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 130.501342][ T26] audit: type=1326 audit(1779418805.005:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4944 comm="syz.4.195" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727e59de59 code=0x7ffc0000 [ 130.566132][ T26] audit: type=1326 audit(1779418805.045:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4944 comm="syz.4.195" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f727e59de59 code=0x7ffc0000 [ 130.694054][ T26] audit: type=1326 audit(1779418805.045:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4944 comm="syz.4.195" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727e59de59 code=0x7ffc0000 [ 130.737826][ T4959] loop0: detected capacity change from 0 to 512 [ 130.828108][ T4959] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 130.865336][ T4959] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 130.899833][ T26] audit: type=1326 audit(1779418805.075:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4952 comm="syz.4.195" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f727e55e68e code=0x7ffc0000 [ 130.963257][ T4959] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 130.980730][ T26] audit: type=1326 audit(1779418805.105:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4944 comm="syz.4.195" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f727e59de59 code=0x7ffc0000 [ 131.013195][ T26] audit: type=1326 audit(1779418805.175:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4944 comm="syz.4.195" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727e59de59 code=0x7ffc0000 [ 131.103510][ T4959] EXT4-fs error (device loop0): ext4_iget_extra_inode:4573: inode #15: comm syz.0.200: corrupted in-inode xattr [ 131.453328][ T4959] EXT4-fs (loop0): Remounting filesystem read-only [ 131.946287][ T4966] device syzkaller0 entered promiscuous mode [ 131.955316][ T4959] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.200: couldn't read orphan inode 15 (err -117) [ 131.995904][ T4959] EXT4-fs (loop0): Remounting filesystem read-only [ 132.002606][ T4959] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,dioread_lock,mblk_io_submit,errors=remount-ro,nombcache,. Quota mode: none. [ 132.025845][ T26] audit: type=1326 audit(1779418805.175:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4944 comm="syz.4.195" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727e59de59 code=0x7ffc0000 [ 132.175617][ T26] audit: type=1326 audit(1779418805.235:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4952 comm="syz.4.195" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f727e59de59 code=0x7ffc0000 [ 133.090807][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.097481][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.578339][ T3520] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 135.562564][ T5020] bridge0: port 3(erspan0) entered blocking state [ 135.649495][ T5020] bridge0: port 3(erspan0) entered disabled state [ 135.669018][ T5028] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 135.735636][ T5020] device erspan0 entered promiscuous mode [ 135.876483][ T5020] bridge0: port 3(erspan0) entered blocking state [ 135.883408][ T5020] bridge0: port 3(erspan0) entered forwarding state [ 135.982666][ T5027] device erspan0 left promiscuous mode [ 135.988776][ T3520] usb 4-1: Using ep0 maxpacket: 16 [ 136.035504][ T5027] bridge0: port 3(erspan0) entered disabled state [ 136.569524][ T5036] loop0: detected capacity change from 0 to 32768 [ 136.784801][ T5038] loop2: detected capacity change from 0 to 2048 [ 136.804690][ T5036] XFS (loop0): Mounting V5 Filesystem [ 136.825847][ T3520] usb 4-1: unable to get BOS descriptor or descriptor too short [ 136.923068][ T5052] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 136.945708][ T3520] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.978880][ T3520] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 137.018151][ T5038] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 137.069302][ T5036] XFS (loop0): Ending clean mount [ 137.346737][ T5036] XFS (loop0): Quotacheck needed: Please wait. [ 138.028567][ T4361] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 138.487402][ T4361] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 138.677482][ T4361] EXT4-fs (loop2): This should not happen!! Data will be lost [ 138.677482][ T4361] [ 138.688229][ T4361] EXT4-fs (loop2): Total free blocks count 0 [ 138.694257][ T4361] EXT4-fs (loop2): Free/Dirty block details [ 138.700395][ T4361] EXT4-fs (loop2): free_blocks=4096 [ 138.735312][ T3520] usb 4-1: New USB device found, idVendor=1235, idProduct=9012, bcdDevice= 0.40 [ 138.755470][ T4361] EXT4-fs (loop2): dirty_blocks=32 [ 138.760820][ T4361] EXT4-fs (loop2): Block reservation details [ 138.810056][ T5036] XFS (loop0): Quotacheck: Done. [ 138.855404][ T3520] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.891862][ T3520] usb 4-1: Product: syz [ 138.912579][ T3520] usb 4-1: Manufacturer: syz [ 138.986104][ T3520] usb 4-1: can't set config #1, error -71 [ 139.009866][ T3520] usb 4-1: USB disconnect, device number 5 [ 139.021021][ T4361] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 139.056368][ T1212] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 139.087317][ T1212] EXT4-fs (loop2): This should not happen!! Data will be lost [ 139.087317][ T1212] [ 139.295428][ T4201] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 139.739510][ T4190] XFS (loop0): Unmounting Filesystem [ 139.946495][ T4201] usb 5-1: unable to get BOS descriptor or descriptor too short [ 140.236602][ T4201] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1023, setting to 0 [ 140.651427][ T4201] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 241, changing to 4 [ 140.664407][ T4201] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 16, setting to 0 [ 141.875649][ T4201] usb 5-1: string descriptor 0 read error: -71 [ 141.880562][ T5088] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 141.882390][ T4201] usb 5-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 141.995877][ T4201] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.016950][ T5091] binder: BC_ACQUIRE_RESULT not supported [ 142.026375][ T4201] usb 5-1: can't set config #1, error -71 [ 142.078427][ T4201] usb 5-1: USB disconnect, device number 2 [ 142.091956][ T5091] binder: 5090:5091 ioctl c0306201 200000000240 returned -22 [ 142.144719][ T5093] loop4: detected capacity change from 0 to 128 [ 142.146986][ T5088] overlayfs: failed to look up (tracing) for ino (-66) [ 142.571059][ T5103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.724499][ T5100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.784176][ T5100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.872173][ T5110] device bridge1 entered promiscuous mode [ 142.976224][ T26] audit: type=1800 audit(1779418817.585:13): pid=5089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.237" name="bus" dev="ramfs" ino=35196 res=0 errno=0 [ 144.169593][ T5115] loop3: detected capacity change from 0 to 256 [ 144.386171][ T5117] loop2: detected capacity change from 0 to 512 [ 144.454611][ T5117] FAT-fs (loop2): bogus number of FAT sectors [ 144.577859][ T5117] FAT-fs (loop2): Can't find a valid FAT filesystem [ 146.321969][ T5132] loop0: detected capacity change from 0 to 512 [ 146.379785][ T5132] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 146.533066][ T5132] block device autoloading is deprecated and will be removed. [ 146.584487][ T5132] EXT4-fs (loop0): external journal has bad superblock [ 146.911097][ T5155] syz.1.256 uses obsolete (PF_INET,SOCK_PACKET) [ 147.074225][ T5160] loop0: detected capacity change from 0 to 512 [ 147.120587][ T5160] EXT4-fs (loop0): Ignoring removed oldalloc option [ 147.171314][ T5160] EXT4-fs (loop0): inline encryption not supported [ 147.269077][ T5160] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x0000000000000000,nodiscard,oldalloc,inlinecrypt,,errors=continue. Quota mode: none. [ 147.527585][ T5182] loop4: detected capacity change from 0 to 512 [ 148.474562][ T5182] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 148.497515][ T5182] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 149.416533][ T5199] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.424270][ T5199] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.736362][ T5199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.774861][ T5199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.117796][ T5199] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.127315][ T5199] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.136576][ T5199] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.145563][ T5199] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.245837][ T5199] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.255216][ T5199] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.264396][ T5199] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.274147][ T5199] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.297322][ T5199] device bridge1 left promiscuous mode [ 150.440627][ T5234] loop0: detected capacity change from 0 to 512 [ 153.553138][ T5254] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 153.838175][ T4677] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 154.955222][ T4677] usb 4-1: Using ep0 maxpacket: 32 [ 156.565774][ T4677] usb 4-1: device descriptor read/all, error -71 [ 157.386270][ T5258] bridge0: port 3(syz_tun) entered disabled state [ 157.572842][ T5258] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.580668][ T5258] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.469099][ T5295] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000000 [ 159.646071][ T5258] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.697339][ T5258] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.935367][ T4685] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 163.315685][ T4685] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 163.348967][ T4685] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.399632][ T4685] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 163.445327][ T4685] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.543507][ T4685] usb 5-1: config 0 descriptor?? [ 164.003707][ T5258] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.021790][ T5258] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.038060][ T5258] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.066155][ T5258] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.070400][ T4685] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 164.084103][ T4685] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 164.091655][ T4685] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 164.100776][ T4685] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 164.113291][ T4685] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 164.122473][ T4685] elan 0003:04F3:0755.0001: failed to start in urb: -90 [ 164.144599][ T4685] elan 0003:04F3:0755.0001: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 165.405851][ T5263] device syzkaller0 entered promiscuous mode [ 165.465516][ T4689] usb 5-1: USB disconnect, device number 3 [ 165.473317][ T5323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.300'. [ 165.867016][ T5340] PKCS7: Unknown OID: [4] 0.0 [ 165.872238][ T5340] PKCS7: Only support pkcs7_signedData type [ 169.911225][ T5376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.316'. [ 170.772448][ T5376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.316'. [ 170.854352][ T5387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.956311][ T1107] wlan1: authenticate with 08:02:11:00:00:00 [ 171.001410][ T1107] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 171.029111][ T5387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.092934][ T4361] wlan1: authenticated [ 171.114406][ T5400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.132721][ T1107] mac80211_hwsim hwsim11 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP [ 171.933325][ T1107] wlan1: associating with AP with corrupt probe response [ 171.968347][ T4361] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 171.991621][ T4361] wlan1: associate with 08:02:11:00:00:00 (try 2/3) [ 172.029806][ T4361] wlan1: associate with 08:02:11:00:00:00 (try 3/3) [ 172.056242][ T4361] wlan1: association with 08:02:11:00:00:00 timed out [ 172.143464][ T5413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.327'. [ 173.272715][ T5436] netlink: 12 bytes leftover after parsing attributes in process `syz.2.335'. [ 174.256841][ T5436] bridge1: port 1(erspan0) entered blocking state [ 174.322020][ T5436] bridge1: port 1(erspan0) entered disabled state [ 174.342373][ T5436] device erspan0 entered promiscuous mode [ 175.015360][ T5461] xt_ecn: cannot match TCP bits for non-tcp packets [ 179.903125][ T5486] netlink: 'syz.2.350': attribute type 12 has an invalid length. [ 179.923647][ T5489] loop3: detected capacity change from 0 to 512 [ 179.975939][ T5486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.350'. [ 180.005382][ T5486] bond0: option primary_reselect: invalid value (114) [ 180.296239][ T5489] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 180.552077][ T5489] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 180.724375][ T5502] loop2: detected capacity change from 0 to 2048 [ 180.841003][ T5502] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 181.848783][ T5516] xt_ecn: cannot match TCP bits for non-tcp packets [ 181.971273][ T4688] Bluetooth: hci4: command 0x0406 tx timeout [ 182.145173][ T4201] Bluetooth: hci0: command 0x0406 tx timeout [ 182.152759][ T4201] Bluetooth: hci3: command 0x0406 tx timeout [ 182.162070][ T4201] Bluetooth: hci1: command 0x0406 tx timeout [ 182.179410][ T4201] Bluetooth: hci2: command 0x0406 tx timeout [ 184.734495][ T5545] device syzkaller0 entered promiscuous mode [ 187.920416][ T5571] netlink: 'syz.4.373': attribute type 1 has an invalid length. [ 189.449896][ T5571] device bond1 entered promiscuous mode [ 189.456222][ T5571] 8021q: adding VLAN 0 to HW filter on device bond1 [ 189.537467][ T5577] 8021q: adding VLAN 0 to HW filter on device bond1 [ 189.586739][ T5577] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 189.622105][ T5577] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 189.642863][ T5577] bond1: (slave ip6gre1): making interface the new active one [ 189.653382][ T5577] device ip6gre1 entered promiscuous mode [ 189.690364][ T5577] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 189.754655][ T5580] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 189.826250][ T5580] device ip6gre1 left promiscuous mode [ 189.845924][ T5580] bond1 (unregistering): Released all slaves [ 190.616644][ T5592] netlink: 14 bytes leftover after parsing attributes in process `syz.2.376'. [ 190.982433][ T5599] device syzkaller0 entered promiscuous mode [ 194.275464][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.281905][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.118579][ T5678] loop0: detected capacity change from 0 to 512 [ 200.176910][ T26] audit: type=1800 audit(1779418874.785:14): pid=5681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.404" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 200.411704][ T5678] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.401: inode has both inline data and extents flags [ 200.621459][ T5678] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.401: couldn't read orphan inode 15 (err -117) [ 200.811083][ T5678] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 201.185769][ T5689] cgroup2: Unexpected value for 'memory_localevents' [ 201.270654][ T5689] loop2: detected capacity change from 0 to 256 [ 202.030351][ T5689] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 202.201815][ T26] audit: type=1804 audit(1779418876.815:15): pid=5689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.403" name="/newroot/78/file0/bus" dev="loop2" ino=1048601 res=1 errno=0 [ 204.601817][ T5731] MPTCP: addr_signal error, add_addr=1, echo=0 [ 205.064893][ T5741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.420'. [ 205.371360][ T26] audit: type=1326 audit(1779418879.985:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5742 comm="syz.3.418" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47d11bfe59 code=0x7fc00000 [ 205.613992][ T26] audit: type=1326 audit(1779418880.015:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5742 comm="syz.3.418" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f47d11bfe59 code=0x7fc00000 [ 205.790334][ T5759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.423'. [ 205.891737][ T5761] device syzkaller0 entered promiscuous mode [ 205.906332][ T5761] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 65487 [ 206.182627][ T5774] netlink: 'syz.1.429': attribute type 10 has an invalid length. [ 206.319898][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.351452][ T5774] bond0: (slave team0): Enslaving as an active interface with an up link [ 208.418563][ T5805] fuse: Bad value for 'fd' [ 208.751604][ T5813] x_tables: ip6_tables: CT target: only valid in raw table, not vfat [ 212.379620][ T5834] capability: warning: `syz.1.448' uses 32-bit capabilities (legacy support in use) [ 212.386602][ T5832] loop3: detected capacity change from 0 to 128 [ 212.490193][ T5836] syz.2.449[5836] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 212.490398][ T5836] syz.2.449[5836] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 212.535699][ T5832] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 212.667282][ T5832] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 212.717314][ T5832] ext2 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.148529][ T26] audit: type=1326 audit(1779418888.765:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5861 comm="syz.2.457" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6d0b3d5e59 code=0x0 [ 214.264538][ T5867] xt_connbytes: Forcing CT accounting to be enabled [ 214.566864][ T5867] xt_CT: No such helper "netbios-ns" [ 214.743354][ T5885] loop0: detected capacity change from 0 to 256 [ 214.788493][ T5885] exfat: Deprecated parameter 'utf8' [ 214.822870][ T5885] exfat: Bad value for 'errors' [ 215.001777][ T4233] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 215.064810][ T5894] loop2: detected capacity change from 0 to 128 [ 215.120653][ T5894] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 215.407044][ T4233] usb 4-1: device descriptor read/64, error -71 [ 217.445334][ T4233] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 217.665246][ T4233] usb 4-1: device descriptor read/64, error -71 [ 217.785497][ T4233] usb usb4-port1: attempt power cycle [ 218.696896][ T5915] device syzkaller0 entered promiscuous mode [ 218.731600][ T5922] netlink: 'syz.3.472': attribute type 12 has an invalid length. [ 219.238278][ T26] audit: type=1326 audit(1779418893.855:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5908 comm="syz.0.469" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137acb7e59 code=0x7fc00000 [ 219.413873][ T26] audit: type=1326 audit(1779418893.875:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5908 comm="syz.0.469" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f137ac7868e code=0x7fc00000 [ 219.517291][ T26] audit: type=1326 audit(1779418893.875:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5908 comm="syz.0.469" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137acb7e59 code=0x7fc00000 [ 219.642897][ T26] audit: type=1326 audit(1779418893.875:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5908 comm="syz.0.469" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137acb7e59 code=0x7fc00000 [ 219.732407][ T26] audit: type=1326 audit(1779418893.875:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5908 comm="syz.0.469" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137acb7e59 code=0x7fc00000 [ 220.055804][ T26] audit: type=1326 audit(1779418893.885:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5908 comm="syz.0.469" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137acb7e59 code=0x7fc00000 [ 220.080486][ T26] audit: type=1326 audit(1779418893.885:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5908 comm="syz.0.469" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137acb7e59 code=0x7fc00000 [ 220.125370][ T26] audit: type=1326 audit(1779418893.885:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5908 comm="syz.0.469" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137acb7e59 code=0x7fc00000 [ 220.167372][ T5956] trusted_key: encrypted_key: master key parameter 'šÙ|™{E' is invalid [ 220.486997][ T26] audit: type=1326 audit(1779418893.885:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5908 comm="syz.0.469" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137acb7e59 code=0x7fc00000 [ 220.816137][ T26] audit: type=1326 audit(1779418893.885:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5908 comm="syz.0.469" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137acb7e59 code=0x7fc00000 [ 221.044526][ T5968] loop2: detected capacity change from 0 to 1024 [ 228.032623][ T6045] loop3: detected capacity change from 0 to 1024 [ 228.177230][ T6045] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 228.251369][ T26] kauditd_printk_skb: 63 callbacks suppressed [ 228.251388][ T26] audit: type=1800 audit(1779418902.865:92): pid=6045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.507" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 229.190316][ T6086] set match dimension is over the limit! [ 230.862511][ T6101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.525'. [ 232.174881][ T6115] netlink: 24 bytes leftover after parsing attributes in process `syz.2.529'. [ 232.333547][ T4685] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 232.429996][ T6122] syz.2.532 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 233.395484][ T4685] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 233.404635][ T4685] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.505010][ T4685] usb 1-1: Product: syz [ 233.515240][ T4685] usb 1-1: Manufacturer: syz [ 233.530368][ T4685] usb 1-1: SerialNumber: syz [ 233.531815][ T6139] device syzkaller0 entered promiscuous mode [ 233.575382][ T4685] usb 1-1: config 0 descriptor?? [ 233.787182][ T4685] hub 1-1:0.0: bad descriptor, ignoring hub [ 233.793419][ T4685] hub: probe of 1-1:0.0 failed with error -5 [ 233.835243][ T4685] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 234.166671][ T6148] loop0: detected capacity change from 0 to 256 [ 234.250075][ T4685] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 234.416437][ T6151] netlink: 12 bytes leftover after parsing attributes in process `syz.1.541'. [ 234.444183][ T4685] dib0700: firmware download failed at 7 with -22 [ 234.696091][ T6151] bridge1: port 1(veth3) entered blocking state [ 234.702507][ T6151] bridge1: port 1(veth3) entered disabled state [ 234.710631][ T6151] device veth3 entered promiscuous mode [ 234.787723][ T4685] usb 1-1: USB disconnect, device number 2 [ 234.855748][ T6151] bridge1: port 2(veth0_to_bond) entered blocking state [ 234.876730][ T6151] bridge1: port 2(veth0_to_bond) entered disabled state [ 234.888941][ T6151] device veth0_to_bond entered promiscuous mode [ 234.904343][ T6151] bridge1: port 2(veth0_to_bond) entered blocking state [ 234.911482][ T6151] bridge1: port 2(veth0_to_bond) entered forwarding state [ 235.648744][ T6158] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 237.709954][ T6174] xt_CT: You must specify a L4 protocol and not use inversions on it [ 239.012943][ T6197] xt_CT: You must specify a L4 protocol and not use inversions on it [ 239.199418][ T6198] netlink: 'syz.1.555': attribute type 10 has an invalid length. [ 239.436703][ T6199] device bond0 entered promiscuous mode [ 239.452607][ T6199] device bond_slave_0 entered promiscuous mode [ 239.484571][ T6199] device bond_slave_1 entered promiscuous mode [ 239.781443][ T6213] loop0: detected capacity change from 0 to 1024 [ 240.489903][ T6217] loop3: detected capacity change from 0 to 16 [ 240.606021][ T6213] EXT4-fs (loop0): Ignoring removed orlov option [ 240.681633][ T6217] erofs: (device loop3): mounted with root inode @ nid 36. [ 240.758006][ T6217] attempt to access beyond end of device [ 240.758006][ T6217] loop3: rw=0, want=24, limit=16 [ 240.803514][ T6217] attempt to access beyond end of device [ 240.803514][ T6217] loop3: rw=0, want=24, limit=16 [ 240.830777][ T6213] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,bsddf,user_xattr,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,usrquota,noauto_da_alloc,norecovery,,errors=continue. Quota mode: writeback. [ 240.891590][ T6217] attempt to access beyond end of device [ 240.891590][ T6217] loop3: rw=0, want=24, limit=16 [ 244.743905][ T26] audit: type=1326 audit(2000000011.832:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6266 comm="syz.3.578" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47d11bfe59 code=0x7ffc0000 [ 245.233484][ T6276] loop2: detected capacity change from 0 to 16 [ 245.318238][ T6276] erofs: (device loop2): mounted with root inode @ nid 36. [ 245.433547][ T6287] tipc: Enabling of bearer rejected, failed to enable media [ 245.437899][ T6287] tipc: Enabled bearer , priority 10 [ 245.441978][ T6287] tipc: Enabled bearer , priority 27 [ 245.442783][ T6287] tipc: Enabled bearer , priority 12 [ 245.475410][ T26] audit: type=1326 audit(2000000011.832:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6266 comm="syz.3.578" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47d11bfe59 code=0x7ffc0000 [ 245.724839][ T6291] attempt to access beyond end of device [ 245.724839][ T6291] loop2: rw=0, want=24, limit=16 [ 246.032273][ T6276] attempt to access beyond end of device [ 246.032273][ T6276] loop2: rw=0, want=24, limit=16 [ 246.254600][ T6296] attempt to access beyond end of device [ 246.254600][ T6296] loop2: rw=0, want=24, limit=16 [ 246.288115][ T26] audit: type=1326 audit(2000000011.832:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6266 comm="syz.3.578" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f47d118068e code=0x7ffc0000 [ 246.385968][ T26] audit: type=1326 audit(2000000011.842:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6266 comm="syz.3.578" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f47d118068e code=0x7ffc0000 [ 246.536249][ T26] audit: type=1326 audit(2000000011.842:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6266 comm="syz.3.578" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f47d118068e code=0x7ffc0000 [ 246.652369][ T26] audit: type=1326 audit(2000000011.842:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6266 comm="syz.3.578" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f47d118068e code=0x7ffc0000 [ 246.677388][ T26] audit: type=1326 audit(2000000012.253:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6266 comm="syz.3.578" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f47d11611d9 code=0x7ffc0000 [ 246.702724][ T26] audit: type=1326 audit(2000000012.253:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6266 comm="syz.3.578" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f47d11611d9 code=0x7ffc0000 [ 247.212766][ T6313] netlink: 'syz.4.592': attribute type 16 has an invalid length. [ 247.221131][ T6313] netlink: 'syz.4.592': attribute type 17 has an invalid length. [ 247.242230][ T6313] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 247.250838][ T6313] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 247.264392][ T6313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 247.272517][ T6313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 247.287528][ T6313] tipc: Resetting bearer [ 247.940448][ T26] audit: type=1326 audit(2000000012.253:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6266 comm="syz.3.578" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f47d11611d9 code=0x7ffc0000 [ 247.964852][ C0] vkms_vblank_simulate: vblank timer overrun [ 248.773769][ T26] audit: type=1326 audit(2000000012.253:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6266 comm="syz.3.578" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f47d11611d9 code=0x7ffc0000 [ 248.798577][ C0] vkms_vblank_simulate: vblank timer overrun [ 252.829383][ T6365] loop2: detected capacity change from 0 to 32768 [ 252.887654][ T6365] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.611 (6365) [ 253.133703][ T6365] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 253.142805][ T6365] BTRFS info (device loop2): turning on sync discard [ 253.150412][ T6365] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 253.161219][ T6365] BTRFS info (device loop2): use zstd compression, level 3 [ 253.169007][ T6365] BTRFS info (device loop2): turning on async discard [ 253.176241][ T6365] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 253.187106][ T6365] BTRFS info (device loop2): trying to use backup root at mount time [ 253.195486][ T6365] BTRFS info (device loop2): enabling auto defrag [ 253.202319][ T6365] BTRFS info (device loop2): using free space tree [ 253.209048][ T6365] BTRFS info (device loop2): has skinny extents [ 253.898818][ T6375] loop0: detected capacity change from 0 to 2048 [ 254.076043][ T6375] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 254.695634][ T1212] BTRFS warning (device loop2): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 255.237755][ T6365] BTRFS warning (device loop2): failed to read root (objectid=2): -5 [ 255.247479][ T1212] BTRFS warning (device loop2): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 255.277319][ T6365] BTRFS warning (device loop2): couldn't read tree root [ 255.316592][ T6365] BTRFS error (device loop2): parent transid verify failed on 5255168 wanted 5 found 7 [ 255.327473][ T6365] BTRFS warning (device loop2): couldn't read tree root [ 255.399968][ T6365] BTRFS info (device loop2): enabling ssd optimizations [ 255.408300][ T6365] BTRFS info (device loop2): clearing free space tree [ 255.415953][ T6365] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 255.426345][ T6365] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 255.469947][ T6365] BTRFS info (device loop2): creating free space tree [ 255.479659][ T6365] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 255.489310][ T6365] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 255.539031][ T6407] netlink: 'syz.4.620': attribute type 10 has an invalid length. [ 255.607990][ T6407] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 257.587652][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 258.400443][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.757035][ T6432] netlink: 14 bytes leftover after parsing attributes in process `syz.1.627'. [ 260.986695][ T6455] tipc: Enabled bearer , priority 0 [ 260.996627][ T6455] tipc: Enabling of bearer rejected, failed to enable media [ 261.007987][ T6455] tipc: Enabled bearer , priority 27 [ 261.016495][ T6455] tipc: Enabled bearer , priority 12 [ 261.041192][ T6457] loop3: detected capacity change from 0 to 512 [ 262.452594][ T6480] netlink: 'syz.3.640': attribute type 1 has an invalid length. [ 262.523898][ T6480] device bond1 entered promiscuous mode [ 262.529785][ T6480] 8021q: adding VLAN 0 to HW filter on device bond1 [ 262.556812][ T6482] netlink: 48 bytes leftover after parsing attributes in process `syz.1.638'. [ 262.579981][ T6480] 8021q: adding VLAN 0 to HW filter on device bond1 [ 262.592293][ T6480] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 262.607148][ T6480] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 263.095321][ T6480] bond1: (slave ip6gre1): making interface the new active one [ 263.356042][ T6480] device ip6gre1 entered promiscuous mode [ 263.892264][ T6480] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 263.998560][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 264.493796][ T6486] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 264.562637][ T6486] device ip6gre1 left promiscuous mode [ 264.603241][ T6486] bond1 (unregistering): Released all slaves [ 264.944786][ T26] kauditd_printk_skb: 22 callbacks suppressed [ 264.944804][ T26] audit: type=1800 audit(2000000030.718:125): pid=6514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.651" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 266.269295][ T6516] ./file0: Can't open blockdev [ 266.388541][ T6528] sctp: [Deprecated]: syz.2.653 (pid 6528) Use of struct sctp_assoc_value in delayed_ack socket option. [ 266.388541][ T6528] Use struct sctp_sack_info instead [ 267.021782][ T6533] loop3: detected capacity change from 0 to 2048 [ 267.099812][ T6533] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 271.941258][ T26] audit: type=1800 audit(2000000037.266:126): pid=6577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.666" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 272.438662][ T6586] MPTCP: addr_signal error, add_addr=2, echo=1 [ 272.451735][ T6586] MPTCP: addr_signal error, add_addr=2, echo=1 [ 272.475577][ C1] MPTCP: addr_signal error, add_addr=2, echo=1 [ 275.112328][ T6596] loop0: detected capacity change from 0 to 128 [ 275.532617][ T6589] MPTCP: addr_signal error, add_addr=2, echo=1 [ 277.118556][ T6625] lo: Caught tx_queue_len zero misconfig [ 277.392597][ T6625] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 283.076885][ T6629] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 283.528109][ T6637] netlink: 'syz.2.680': attribute type 16 has an invalid length. [ 283.535898][ T6637] netlink: 'syz.2.680': attribute type 17 has an invalid length. [ 287.667434][ T6650] loop2: detected capacity change from 0 to 262144 [ 288.483437][ T26] audit: type=1800 audit(2000000052.738:127): pid=6654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.684" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 290.228419][ T6677] loop3: detected capacity change from 0 to 8 [ 292.365464][ T6681] Illegal XDP return value 51, expect packet loss! [ 292.369724][ T6677] squashfs: Unknown parameter 'erurs' [ 292.415691][ T4178] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop2 scanned by udevd (4178) [ 294.112584][ T6724] overlayfs: failed to clone upperpath [ 294.175847][ T4684] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 294.614454][ T4684] usb 3-1: Using ep0 maxpacket: 16 [ 295.683163][ T4684] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.697888][ T6734] loop3: detected capacity change from 0 to 256 [ 295.726844][ T4684] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.994968][ T4684] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 296.012510][ T4684] usb 3-1: config 0 interface 0 has no altsetting 0 [ 296.038314][ T4684] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 296.085247][ T6734] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 296.744501][ T6734] tipc: Started in network mode [ 296.793119][ T6734] tipc: Node identity 4, cluster identity 4711 [ 296.813004][ T4684] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.832914][ T4684] usb 3-1: config 0 descriptor?? [ 296.840598][ T6734] tipc: Node number set to 4 [ 297.033429][ T6755] netlink: 'syz.1.715': attribute type 12 has an invalid length. [ 297.169235][ T4684] usbhid 3-1:0.0: can't add hid device: -71 [ 297.175419][ T4684] usbhid: probe of 3-1:0.0 failed with error -71 [ 297.211425][ T4684] usb 3-1: USB disconnect, device number 2 [ 299.039483][ T6791] __sock_release: fasync list not empty! [ 299.290476][ T6795] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 299.841718][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 300.039804][ T6811] netlink: 'syz.4.734': attribute type 12 has an invalid length. [ 300.510054][ T6821] device syzkaller0 entered promiscuous mode [ 301.953777][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 303.031281][ T6836] loop2: detected capacity change from 0 to 1024 [ 303.091809][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 304.203532][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 305.315426][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 305.503316][ T6852] loop3: detected capacity change from 0 to 64 [ 307.878330][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 308.993936][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 309.327916][ T6880] netlink: 'syz.2.752': attribute type 12 has an invalid length. [ 309.537177][ T6887] loop0: detected capacity change from 0 to 512 [ 310.104698][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 310.568963][ T6887] EXT4-fs (loop0): Ignoring removed nobh option [ 310.600931][ T6887] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 310.700235][ T6887] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 310.757631][ T6887] EXT4-fs (loop0): 1 truncate cleaned up [ 310.763498][ T6887] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nobh,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,max_batch_time=0x0000000000000007,dioread_lock,. Quota mode: none. [ 311.217742][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 312.328342][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 312.734557][ T4201] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 313.408824][ T4201] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 313.440247][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 313.503678][ T4201] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.675434][ T4201] usb 4-1: Product: syz [ 313.690780][ T4201] usb 4-1: Manufacturer: syz [ 313.695438][ T4201] usb 4-1: SerialNumber: syz [ 313.803902][ T6919] binder: 6918:6919 unknown command 0 [ 313.959272][ T6919] binder: 6918:6919 ioctl c0306201 2000000001c0 returned -22 [ 314.551986][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 314.595938][ T4201] usb 4-1: config 0 descriptor?? [ 314.637789][ T4201] usb 4-1: can't set config #0, error -71 [ 314.694726][ T6923] loop3: detected capacity change from 0 to 1024 [ 314.703367][ T4201] usb 4-1: USB disconnect, device number 11 [ 314.824526][ T6923] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 314.846334][ T6923] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 314.878351][ T6923] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 314.980310][ T6923] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e054c018, mo2=0002] [ 315.013205][ T6923] System zones: 0-1, 3-36 [ 315.047899][ T6923] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,sysvgroups,nomblk_io_submit,bsddf,dioread_nolock,jqfmt=vfsv0,debug,errors=continue,,errors=continue. Quota mode: writeback. [ 315.084516][ T6940] netlink: 44 bytes leftover after parsing attributes in process `syz.4.771'. [ 315.394702][ T6946] loop3: detected capacity change from 0 to 512 [ 315.663936][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 316.678496][ T6955] netlink: 'syz.4.776': attribute type 10 has an invalid length. [ 316.701291][ T6955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.776'. [ 316.775702][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 317.887510][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 318.318872][ T6988] set match dimension is over the limit! [ 318.999311][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 320.111216][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 320.383557][ T7010] device syzkaller0 entered promiscuous mode [ 321.222926][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 322.334758][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 322.714451][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.732896][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.837675][ T7036] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 0 [ 322.863606][ T7035] IPVS: stopping master sync thread 7036 ... [ 322.935176][ T7038] netlink: 12 bytes leftover after parsing attributes in process `syz.4.798'. [ 323.026579][ T7038] af_packet: tpacket_rcv: packet too big, clamped from 64521 to 3956. macoff=92 [ 323.446776][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 325.010397][ T7051] syz.2.803 (7051): drop_caches: 2 [ 326.589376][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 326.627586][ T7055] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 326.637479][ T7055] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 326.645287][ T7055] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 326.657007][ T7055] tipc: Resetting bearer [ 327.722910][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 327.990448][ T7068] xt_nat: multiple ranges no longer supported [ 328.289403][ T4676] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 328.381594][ T7074] binder: 7069:7074 ioctl 4002f516 0 returned -22 [ 328.835212][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 329.946449][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 330.875843][ T7095] device ip6gre1 entered promiscuous mode [ 330.884529][ T4230] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 330.923490][ T7099] overlayfs: failed to clone lowerpath [ 330.945921][ T4230] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 331.007680][ T7095] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 331.015921][ T7095] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 331.048088][ T3520] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 331.058409][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 332.092241][ T4230] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 332.170172][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 332.200946][ T4230] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 333.282041][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 334.352103][ T7148] loop0: detected capacity change from 0 to 512 [ 334.394012][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 335.249080][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 335.505694][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 335.699445][ T7148] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 335.830077][ T7148] EXT4-fs (loop0): 1 truncate cleaned up [ 335.847671][ T7148] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,errors=remount-ro,nombcache,. Quota mode: none. [ 338.255297][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 339.190797][ T7188] trusted_key: encrypted_key: master key parameter 'šÙ|™{E' is invalid [ 339.354533][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 340.466188][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 340.943889][ T7199] loop3: detected capacity change from 0 to 1024 [ 341.521789][ T7204] netlink: 16 bytes leftover after parsing attributes in process `syz.2.846'. [ 341.578322][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 342.718439][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 343.801680][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 344.401969][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 344.913951][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 345.659222][ T7244] loop2: detected capacity change from 0 to 256 [ 345.982946][ T7244] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 346.025283][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 347.105192][ T7262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.863'. [ 347.137145][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 348.249226][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 349.360763][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 349.512072][ T26] audit: type=1326 audit(2000000109.825:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7281 comm="syz.4.869" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727e59de59 code=0x7ffc0000 [ 349.541617][ T26] audit: type=1326 audit(2000000109.825:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7281 comm="syz.4.869" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727e59de59 code=0x7ffc0000 [ 349.568725][ T26] audit: type=1326 audit(2000000109.853:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7281 comm="syz.4.869" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f727e59de59 code=0x7ffc0000 [ 349.594598][ T26] audit: type=1326 audit(2000000109.853:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7281 comm="syz.4.869" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727e59de59 code=0x7ffc0000 [ 349.633370][ T26] audit: type=1326 audit(2000000109.853:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7281 comm="syz.4.869" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727e59de59 code=0x7ffc0000 [ 349.661829][ T7288] device syzkaller0 entered promiscuous mode [ 349.791885][ T26] audit: type=1326 audit(2000000109.965:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7281 comm="syz.4.869" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f727e59de59 code=0x7ffc0000 [ 350.472546][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 350.963582][ T7275] MPTCP: addr_signal error, rm_addr=1 [ 351.212795][ T26] audit: type=1326 audit(2000000109.965:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7281 comm="syz.4.869" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727e59de59 code=0x7ffc0000 [ 351.262426][ T26] audit: type=1326 audit(2000000109.965:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7281 comm="syz.4.869" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727e59de59 code=0x7ffc0000 [ 351.584673][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 351.599248][ T7302] loop0: detected capacity change from 0 to 512 [ 351.689077][ T7302] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 351.911823][ T7326] o2cb: This node has not been configured. [ 351.918273][ T7326] o2cb: Cluster check failed. Fix errors before retrying. [ 351.925743][ T7326] (syz.1.879,7326,1):user_dlm_register:675 ERROR: status = -22 [ 351.933648][ T7326] (syz.1.879,7326,1):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "file0" [ 351.960198][ T7302] EXT4-fs (loop0): 1 truncate cleaned up [ 352.012975][ T7302] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,max_dir_size_kb=0x0000000000000004,block_validity,errors=remount-ro,nombcache,. Quota mode: none. [ 352.696194][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 353.808076][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 356.094077][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 357.229082][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 357.971225][ T7366] loop2: detected capacity change from 0 to 512 [ 358.070970][ T7369] netlink: 64 bytes leftover after parsing attributes in process `syz.0.892'. [ 358.098493][ T7366] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 358.111936][ T7366] System zones: 0-2, 18-18, 34-34 [ 358.118717][ T7366] EXT4-fs (loop2): orphan cleanup on readonly fs [ 358.125945][ T7366] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #15: comm syz.2.891: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 358.147639][ T7366] EXT4-fs error (device loop2): ext4_quota_enable:6447: comm syz.2.891: Bad quota inode: 15, type: 2 [ 358.170231][ T7366] EXT4-fs warning (device loop2): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 358.186384][ T7366] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 358.193399][ T7366] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,noquota,min_batch_time=0x000000000000082f,journal_ioprio=0x0000000000000003,debug,journal_dev=0x0000000000000001,grpid,inode_readahead_blks=0x0000000000002000,,errors=continue. Quota mode: writeback. [ 358.340833][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 359.452971][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 359.986474][ T7395] device bridge0 entered promiscuous mode [ 360.041870][ T7396] futex_wake_op: syz.2.900 tries to shift op by 144; fix this program [ 362.545246][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 362.553039][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 363.579191][ T4684] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 363.643441][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 364.755237][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 366.839535][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 366.995891][ T7440] loop2: detected capacity change from 0 to 2048 [ 367.073996][ T7440] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 367.919628][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 368.130697][ T7456] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.140208][ T7456] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.149219][ T7456] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.158889][ T7456] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.341315][ T7456] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 368.948205][ T7465] netlink: 80 bytes leftover after parsing attributes in process `syz.0.922'. [ 369.004298][ T7465] netlink: 'syz.0.922': attribute type 12 has an invalid length. [ 369.031867][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 370.143612][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 370.331919][ T7477] netlink: 14 bytes leftover after parsing attributes in process `syz.1.925'. [ 370.365790][ T7475] netlink: 'syz.2.924': attribute type 10 has an invalid length. [ 370.385850][ T7475] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 370.607794][ T7486] loop2: detected capacity change from 0 to 4096 [ 371.506766][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 372.266505][ T7495] netlink: 'syz.1.930': attribute type 29 has an invalid length. [ 372.274700][ T7495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.930'. [ 372.287215][ T7495] netlink: 'syz.1.930': attribute type 29 has an invalid length. [ 372.295225][ T7495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.930'. [ 372.623519][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 372.647503][ T7486] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 372.895851][ T26] audit: type=1804 audit(2000000131.639:136): pid=7486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.928" name="/newroot/190/file0/bus" dev="loop2" ino=18 res=1 errno=0 [ 372.919882][ T26] audit: type=1804 audit(2000000131.648:137): pid=7486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.928" name="/newroot/190/file0/bus" dev="loop2" ino=18 res=1 errno=0 [ 372.942500][ T26] audit: type=1804 audit(2000000131.648:138): pid=7486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.928" name="/newroot/190/file0/bus" dev="loop2" ino=18 res=1 errno=0 [ 373.735207][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 374.184834][ T7522] xt_CT: You must specify a L4 protocol and not use inversions on it [ 374.847117][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 375.958835][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 376.086522][ T7547] loop2: detected capacity change from 0 to 8 [ 376.377330][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801fbe5000: rx timeout, send abort [ 376.911934][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801fbe5800: rx timeout, send abort [ 376.922212][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801fbe5000: abort rx timeout. Force session deactivation [ 377.071032][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 377.455061][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801fbe5800: abort rx timeout. Force session deactivation [ 378.182611][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 378.871744][ T7582] device gretap1 entered promiscuous mode [ 379.294648][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 379.496973][ T7599] overlayfs: failed to resolve './bus': -2 [ 380.060861][ T7570] Invalid ELF header magic: != ELF [ 380.297436][ T7612] loop2: detected capacity change from 0 to 512 [ 380.406142][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 380.453306][ T7612] EXT4-fs error (device loop2): ext4_orphan_get:1432: comm syz.2.961: bad orphan inode 15 [ 380.710495][ T7612] ext4_test_bit(bit=14, block=18) = 1 [ 380.744882][ T7612] is_bad_inode(inode)=0 [ 380.835963][ T7612] NEXT_ORPHAN(inode)=1023 [ 380.930302][ T7612] max_ino=32 [ 381.001415][ T7612] i_nlink=0 [ 381.207300][ T7612] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2923: inode #15: comm syz.2.961: corrupted xattr block 19 [ 381.276058][ T7624] netlink: 'syz.3.964': attribute type 1 has an invalid length. [ 381.293757][ T7612] EXT4-fs warning (device loop2): ext4_evict_inode:304: xattr delete (err -117) [ 381.303176][ T7612] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 381.334418][ T7612] ext4 filesystem being mounted at /196/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 381.362035][ T7624] 8021q: adding VLAN 0 to HW filter on device bond1 [ 381.377631][ T7630] netlink: 56 bytes leftover after parsing attributes in process `syz.4.966'. [ 381.475525][ T7630] 9pnet: Insufficient options for proto=fd [ 381.497623][ T7612] EXT4-fs error (device loop2): ext4_search_dir:1549: inode #2: block 3: comm syz.2.961: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=458767, rec_len=0, size=4096 fake=0 [ 381.518074][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 381.533925][ T7631] bond1: (slave geneve2): making interface the new active one [ 381.571202][ T7631] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 381.605903][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 381.716194][ T7639] dns_resolver: Unsupported content type (8) [ 381.870957][ T7618] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 449: padding at end of block bitmap is not set [ 382.617985][ T7638] syz.3.968 (7638): drop_caches: 2 [ 382.657299][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 383.742128][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 384.777113][ T7664] ip6t_srh: unknown srh invflags 4000 [ 384.853434][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 385.965412][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 386.273524][ T7694] loop0: detected capacity change from 0 to 8192 [ 386.317057][ T7695] loop2: detected capacity change from 0 to 512 [ 386.340592][ T7695] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 386.361094][ T7694] REISERFS warning (device loop0): super-6519 read_super_block: Unfinished reiserfsck --rebuild-tree run detected. Please run [ 386.361094][ T7694] reiserfsck --rebuild-tree and wait for a completion. If that fails [ 386.361094][ T7694] get newer reiserfsprogs package [ 387.077073][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 387.747128][ T7710] team0: Port device bridge2 added [ 388.189118][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 388.219824][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.265893][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.632806][ T7735] netlink: 64 bytes leftover after parsing attributes in process `syz.2.999'. [ 390.091927][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 391.183086][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 391.993410][ T7749] loop0: detected capacity change from 0 to 256 [ 392.144551][ T7749] exfat: Unknown parameter '0xffffffffffffffff0x0000000000000000' [ 392.294113][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 392.975900][ T7781] fuse: Bad value for 'fd' [ 393.406142][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 394.382589][ T7801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1018'. [ 394.436952][ T7801] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.517739][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 394.559664][ T7807] tipc: Resetting bearer [ 394.674760][ T7812] device syzkaller0 entered promiscuous mode [ 394.894628][ T7817] tipc: Failed to remove unknown binding: 66,0,0/0:3908014617/3908014618 [ 395.630673][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 395.981116][ C0] vcan0: j1939_tp_rxtimer: 0xffff888061086400: rx timeout, send abort [ 395.990558][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888061086400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 396.171085][ T7846] CIFS mount error: No usable UNC path provided in device string! [ 396.171085][ T7846] [ 396.181405][ T7846] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 396.919579][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 397.061900][ T7855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1036'. [ 397.098475][ T7861] netlink: 'syz.1.1035': attribute type 4 has an invalid length. [ 397.158006][ T7865] vivid-000: disconnect [ 397.185443][ T7856] vivid-000: reconnect [ 398.025261][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 398.451955][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 399.136679][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 399.792636][ T7916] IPVS: sh: FWM 3 0x00000003 - no destination available [ 399.910627][ T7923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1056'. [ 400.248181][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 400.880718][ T7933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1058'. [ 401.198777][ T7943] hugetlbfs: syz.3.1060 (7943): Using mlock ulimits for SHM_HUGETLB is deprecated [ 401.359791][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 401.400844][ T7946] loop0: detected capacity change from 0 to 256 [ 401.599711][ T7946] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d) [ 402.417353][ T7948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 402.471722][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 403.200708][ T7967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1069'. [ 403.583387][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 404.695841][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 405.350522][ T7994] netlink: 'syz.4.1075': attribute type 1 has an invalid length. [ 405.807037][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 406.253577][ T7994] device bond1 entered promiscuous mode [ 406.277942][ T7994] 8021q: adding VLAN 0 to HW filter on device bond1 [ 406.484007][ T7996] bond1: (slave erspan1): making interface the new active one [ 406.919124][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 407.104734][ T8013] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1079'. [ 407.832235][ T7996] device erspan1 entered promiscuous mode [ 408.030692][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 408.274067][ T8002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 408.279141][ T7996] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 408.305989][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 409.142778][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 409.994268][ T8031] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1087'. [ 410.254345][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 411.367025][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 412.477976][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 413.589987][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 414.956662][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 417.116623][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 417.399752][ T8098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1101'. [ 417.454070][ T8098] netlink: del zone limit has 4 unknown bytes [ 418.208190][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 419.026968][ T8119] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.034267][ T8119] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.287909][ T8119] bridge1: port 2(veth0_to_bond) entered disabled state [ 419.320659][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 419.402494][ T8119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 419.445008][ T8119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 419.754754][ T8119] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.764357][ T8119] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.773414][ T8119] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.782458][ T8119] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.873538][ T8119] device syzkaller0 left promiscuous mode [ 419.887874][ T8119] device bond1 left promiscuous mode [ 420.010689][ T8119] device gretap1 left promiscuous mode [ 420.120725][ T8141] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 420.431781][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 421.543757][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 422.655435][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 423.767481][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 424.879138][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 425.991375][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 427.102778][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 428.214683][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 429.326408][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 430.438252][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 431.550026][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 432.661912][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 433.773662][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 434.087139][ T8238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1143'. [ 434.126163][ T8238] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.135297][ T8238] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.144377][ T8238] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.153440][ T8238] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.166504][ T8241] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 434.202032][ T8238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1143'. [ 434.885543][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 435.997309][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 437.109130][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 437.555699][ T8282] overlayfs: missing 'lowerdir' [ 438.220958][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 439.332778][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 440.444705][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 440.635687][ T26] audit: type=1326 audit(2000000195.059:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8322 comm="syz.3.1170" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47d11bfe59 code=0x7ffc0000 [ 440.692173][ T8324] sock: sock_set_timeout: `syz.3.1170' (pid 8324) tries to set negative timeout [ 440.725129][ T8318] __sock_release: fasync list not empty! [ 440.752306][ T26] audit: type=1326 audit(2000000195.096:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8322 comm="syz.3.1170" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f47d11bfe59 code=0x7ffc0000 [ 440.844220][ T8326] tipc: Started in network mode [ 440.849324][ T8326] tipc: Node identity 4, cluster identity 4711 [ 440.862867][ T8326] tipc: Node number set to 4 [ 440.868855][ T26] audit: type=1326 audit(2000000195.096:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8322 comm="syz.3.1170" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47d11bfe59 code=0x7ffc0000 [ 441.326203][ T26] audit: type=1326 audit(2000000195.096:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8322 comm="syz.3.1170" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47d11bfe59 code=0x7ffc0000 [ 441.556440][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 441.727432][ T26] audit: type=1326 audit(2000000195.096:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8322 comm="syz.3.1170" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47d11bfe59 code=0x7ffc0000 [ 441.802253][ T26] audit: type=1326 audit(2000000195.096:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8322 comm="syz.3.1170" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47d11bfe59 code=0x7ffc0000 [ 441.956086][ T26] audit: type=1326 audit(2000000195.096:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8322 comm="syz.3.1170" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47d11bfe59 code=0x7ffc0000 [ 442.668259][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 443.040482][ T26] audit: type=1326 audit(2000000195.096:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8322 comm="syz.3.1170" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f47d11bfe59 code=0x7ffc0000 [ 443.477303][ T8352] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4188] was attempted by " [ 443.780067][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 444.296650][ T26] audit: type=1326 audit(2000000195.096:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8322 comm="syz.3.1170" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47d11bfe59 code=0x7ffc0000 [ 444.371438][ T26] audit: type=1326 audit(2000000195.096:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8322 comm="syz.3.1170" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47d11bfe59 code=0x7ffc0000 [ 444.408046][ T8362] netlink: 'syz.1.1180': attribute type 5 has an invalid length. [ 444.591076][ T8362] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.600330][ T8362] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.609577][ T8362] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.618614][ T8362] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.626573][ T4230] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 444.638817][ T8362] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.649239][ T8362] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.658410][ T8362] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.667665][ T8362] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.891867][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 445.715599][ T4230] usb 3-1: Using ep0 maxpacket: 16 [ 445.734096][ T8374] loop0: detected capacity change from 0 to 256 [ 445.865404][ T4230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 446.003729][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 446.069525][ T8374] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 446.271403][ T4230] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 446.619654][ T4230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.662913][ T4230] usb 3-1: Product: syz [ 446.667530][ T4230] usb 3-1: Manufacturer: syz [ 446.672233][ T4230] usb 3-1: SerialNumber: syz [ 446.679524][ T4230] usb 3-1: config 0 descriptor?? [ 446.727282][ T4230] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 446.783000][ T4230] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 446.861109][ T8383] tipc: Resetting bearer [ 446.899037][ T8385] bond0: (slave team0): Releasing backup interface [ 446.937886][ T8385] device bridge_slave_0 left promiscuous mode [ 446.955748][ T8385] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.102622][ T8385] device bridge_slave_1 left promiscuous mode [ 447.115528][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 447.127827][ T8385] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.899834][ T4230] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 447.964127][ T8385] device veth0_to_bond left promiscuous mode [ 447.982945][ T8385] bridge1: port 2(veth0_to_bond) entered disabled state [ 448.014108][ T8385] bond0: (slave bond_slave_0): Releasing backup interface [ 448.023463][ T8385] bond0: (slave bond_slave_1): Releasing backup interface [ 448.043327][ T8385] team0: Port device team_slave_0 removed [ 448.055705][ T8385] team0: Port device team_slave_1 removed [ 448.070453][ T8385] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 448.096655][ T8385] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.108607][ T8385] device veth3 left promiscuous mode [ 448.115262][ T8385] bridge1: port 1(veth3) entered disabled state [ 448.137265][ T8393] netlink: 79 bytes leftover after parsing attributes in process `syz.3.1192'. [ 448.163861][ T8394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1192'. [ 448.186126][ T8394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1192'. [ 448.216691][ T8394] netlink: 'syz.3.1192': attribute type 11 has an invalid length. [ 448.227375][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 448.329214][ T8397] netlink: 'syz.0.1193': attribute type 1 has an invalid length. [ 448.366327][ T8397] netlink: 'syz.0.1193': attribute type 2 has an invalid length. [ 448.517218][ T8404] device ip6gre1 entered promiscuous mode [ 448.557236][ T4684] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 448.576813][ T4684] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 448.602188][ T8404] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 448.719432][ T4230] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 448.731346][ T4684] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 448.740458][ T8404] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 448.766439][ T4230] em28xx 3-1:0.0: board has no eeprom [ 449.274196][ T4684] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 449.339158][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 449.346229][ T4676] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 450.451081][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 450.725246][ T4230] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 450.733882][ T4230] em28xx 3-1:0.0: dvb set to bulk mode. [ 450.744502][ T13] em28xx 3-1:0.0: Binding DVB extension [ 451.298793][ T8358] em28xx 3-1:0.0: reading from i2c device at 0xe failed (error=-5) [ 451.562862][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 451.978841][ T3520] usb 3-1: USB disconnect, device number 5 [ 451.994656][ T13] em28xx 3-1:0.0: Registering input extension [ 452.014697][ T3520] em28xx 3-1:0.0: Disconnecting em28xx [ 452.047021][ T3520] em28xx 3-1:0.0: Closing input extension [ 452.674662][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 452.820448][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 453.089779][ T3520] em28xx 3-1:0.0: Freeing device [ 453.786442][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 453.878819][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 453.891090][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 454.898351][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 456.010093][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 457.121965][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 458.233726][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 459.345656][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 460.457420][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 461.385610][ T8524] loop0: detected capacity change from 0 to 512 [ 461.435065][ T8524] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 461.484020][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 461.519054][ T8524] EXT4-fs (loop0): 1 truncate cleaned up [ 461.527461][ T8524] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,. Quota mode: none. [ 461.569252][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 461.604252][ T26] kauditd_printk_skb: 26 callbacks suppressed [ 461.604269][ T26] audit: type=1326 audit(2000000214.683:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8527 comm="syz.1.1229" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1449845e59 code=0x7ffc0000 [ 461.701127][ T26] audit: type=1326 audit(2000000214.711:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8527 comm="syz.1.1229" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1449845e59 code=0x7ffc0000 [ 461.743014][ T26] audit: type=1326 audit(2000000214.805:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8527 comm="syz.1.1229" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f1449845e59 code=0x7ffc0000 [ 461.781827][ T26] audit: type=1326 audit(2000000214.805:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8527 comm="syz.1.1229" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1449845e59 code=0x7ffc0000 [ 461.912977][ T26] audit: type=1326 audit(2000000214.805:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8527 comm="syz.1.1229" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1449845e59 code=0x7ffc0000 [ 462.122774][ T26] audit: type=1326 audit(2000000214.805:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8527 comm="syz.1.1229" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1449845e59 code=0x7ffc0000 [ 462.681034][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 462.798963][ T26] audit: type=1326 audit(2000000214.805:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8527 comm="syz.1.1229" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1449845e59 code=0x7ffc0000 [ 462.849798][ T26] audit: type=1326 audit(2000000214.805:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8527 comm="syz.1.1229" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1449845e59 code=0x7ffc0000 [ 462.978907][ T26] audit: type=1326 audit(2000000214.805:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8527 comm="syz.1.1229" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f1449845e59 code=0x7ffc0000 [ 463.125803][ T26] audit: type=1326 audit(2000000214.805:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8527 comm="syz.1.1229" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1449845e59 code=0x7ffc0000 [ 463.792895][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 464.903512][ T8563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1238'. [ 464.904679][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 465.170439][ C1] vcan0: j1939_tp_rxtimer: 0xffff888061b4dc00: rx timeout, send abort [ 466.021231][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 467.128350][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 468.240222][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 469.351972][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 470.463939][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 471.575626][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 472.687481][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 473.799284][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 474.911136][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 475.125776][ T8660] netlink: 'syz.0.1259': attribute type 29 has an invalid length. [ 475.133810][ T8660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1259'. [ 475.145055][ T8660] netlink: 'syz.0.1259': attribute type 29 has an invalid length. [ 475.153106][ T8660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1259'. [ 475.181310][ T8654] overlayfs: failed to clone lowerpath [ 475.766553][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 476.022907][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 477.134834][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 478.246553][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 478.513877][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 479.358658][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 480.470212][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 480.532651][ T8733] loop2: detected capacity change from 0 to 16 [ 480.594512][ T8733] erofs: Unknown parameter 'ãé' [ 481.077453][ T8749] netlink: 'syz.4.1282': attribute type 2 has an invalid length. [ 481.582078][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 482.693856][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 483.805720][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 484.917520][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 486.029413][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 487.141156][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 487.157646][ T8795] loop0: detected capacity change from 0 to 4096 [ 488.253001][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 489.364884][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 490.476661][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 491.588445][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 491.929500][ T8843] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1305'. [ 492.238268][ T8853] (unnamed net_device) (uninitialized): up delay (1073744714) is not a multiple of miimon (100), value rounded to 1073744700 ms [ 492.700311][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 493.113662][ T8860] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1312'. [ 493.222771][ T8860] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 493.295423][ T8860] bond0 (unregistering): Released all slaves [ 493.812175][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 494.923962][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 495.134577][ T8891] sctp: [Deprecated]: syz.1.1319 (pid 8891) Use of struct sctp_assoc_value in delayed_ack socket option. [ 495.134577][ T8891] Use struct sctp_sack_info instead [ 495.182102][ T8891] sctp: [Deprecated]: syz.1.1319 (pid 8891) Use of struct sctp_assoc_value in delayed_ack socket option. [ 495.182102][ T8891] Use struct sctp_sack_info instead [ 495.416552][ T8903] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1323'. [ 496.035891][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 497.095257][ T8924] IPVS: sh: FWM 3 0x00000003 - no destination available [ 497.147595][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 497.983079][ T8925] netlink: 'syz.1.1330': attribute type 1 has an invalid length. [ 498.259385][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 499.096284][ T8925] 8021q: adding VLAN 0 to HW filter on device bond2 [ 499.371253][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 499.402884][ T8929] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.411821][ T8929] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.425961][ T8929] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.435020][ T8929] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.458902][ T8929] bond2: (slave geneve2): making interface the new active one [ 499.475957][ T8959] loop2: detected capacity change from 0 to 512 [ 499.479017][ T8929] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 499.501316][ T1212] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 499.557804][ T8960] loop0: detected capacity change from 0 to 2048 [ 499.594826][ T8959] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 499.646533][ T8959] ext4 filesystem being mounted at /273/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 499.742475][ T8960] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 500.483100][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 501.594901][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 502.205306][ T9025] device syzkaller0 left promiscuous mode [ 502.211532][ T9025] tipc: Resetting bearer [ 502.706769][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 503.818604][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 505.508812][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 506.640999][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 507.752755][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 508.000542][ T26] kauditd_printk_skb: 25 callbacks suppressed [ 508.000560][ T26] audit: type=1800 audit(2000000259.079:210): pid=9080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1367" name="/" dev="fuse" ino=4 res=0 errno=0 [ 508.864980][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 509.705656][ T9109] device syzkaller0 entered promiscuous mode [ 509.725970][ T9109] tipc: Resetting bearer [ 509.987002][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 512.139367][ T1107] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 512.542158][ T1107] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 512.738461][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 512.754891][ T1107] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 512.783989][ T1107] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.836141][ T9133] loop2: detected capacity change from 0 to 8 [ 512.925662][ T1107] usb 1-1: config 0 descriptor?? [ 513.066209][ T9133] SQUASHFS error: zlib decompression failed, data probably corrupt [ 513.074728][ T9133] SQUASHFS error: Failed to read block 0x13e: -5 [ 513.082343][ T9133] SQUASHFS error: Unable to read metadata cache entry [13c] [ 513.089782][ T9133] SQUASHFS error: Unable to read directory block [13c:26] [ 513.397377][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 513.593468][ T1107] usb 1-1: can't set config #0, error -71 [ 513.622165][ T1107] usb 1-1: USB disconnect, device number 3 [ 513.825101][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 514.947993][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 516.059232][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 517.160848][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 518.272206][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 518.434632][ T9209] IPVS: set_ctl: invalid protocol: 136 172.30.0.1:20005 [ 519.384396][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 519.445112][ T9220] netlink: 'syz.2.1404': attribute type 10 has an invalid length. [ 519.453111][ T9220] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1404'. [ 519.462844][ T9220] device team0 entered promiscuous mode [ 519.468457][ T9220] device team_slave_0 entered promiscuous mode [ 519.475906][ T9220] device team_slave_1 entered promiscuous mode [ 519.483245][ T9220] 8021q: adding VLAN 0 to HW filter on device team0 [ 519.493700][ T9220] bridge0: port 4(team0) entered blocking state [ 519.500111][ T9220] bridge0: port 4(team0) entered disabled state [ 519.557531][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 519.613594][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 520.495855][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 521.594292][ T9242] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1410'. [ 521.607823][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 522.719487][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 523.831842][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 524.450293][ T9224] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.458284][ T9224] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.778952][ T9224] device bond0 left promiscuous mode [ 524.953826][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 525.392221][ T9224] device bond_slave_0 left promiscuous mode [ 525.425263][ T9224] device bond_slave_1 left promiscuous mode [ 526.055149][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 526.380768][ T9282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1418'. [ 527.166775][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 527.681829][ T9224] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 528.127989][ T9224] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 528.278798][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 529.403327][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 530.502772][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 530.568641][ T9302] binder: BINDER_SET_CONTEXT_MGR already set [ 530.642409][ T9302] binder: 9301:9302 ioctl 4018620d 200000004a80 returned -16 [ 531.614118][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 532.736824][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 533.805248][ T9224] device bridge1 left promiscuous mode [ 533.833424][ T9224] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.842977][ T9224] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.852260][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 533.859971][ T9224] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.869006][ T9224] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.960468][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 536.061365][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 537.184416][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 538.285017][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 538.288113][ T9351] syz.0.1436 (9351) used greatest stack depth: 17784 bytes left [ 538.334268][ T9348] loop2: detected capacity change from 0 to 1024 [ 538.527817][ T9361] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1439'. [ 541.491477][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 542.571953][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 543.317086][ T9375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 543.426528][ T9397] tipc: Enabled bearer , priority 0 [ 543.444879][ T9397] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1452'. [ 543.683911][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 544.795609][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 545.740633][ T9429] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1461'. [ 546.227205][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 547.350652][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 548.462683][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 549.128463][ T9463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1476'. [ 549.402957][ T9464] loop2: detected capacity change from 0 to 512 [ 549.420129][ T9469] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 549.574312][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 550.686293][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 551.808646][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 551.849130][ T9489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1481'. [ 552.920964][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 554.021651][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 555.133664][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 556.255936][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 557.367858][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 558.469024][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 559.591482][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 560.692662][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 561.804529][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 562.926866][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 564.028059][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 565.150508][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 566.262400][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 567.363604][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 568.486029][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 569.587237][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 570.709685][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 571.821449][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 572.933328][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 574.045100][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 575.146305][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 576.268754][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 577.380612][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 578.481830][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 579.604266][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 579.764637][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 580.705471][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 581.817227][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 582.939677][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 584.041009][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 585.152633][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 586.275217][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 587.376413][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 588.498842][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 589.599950][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 590.722599][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 667.919270][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 667.926263][ C1] (detected by 1, t=10502 jiffies, g=29333, q=32) [ 667.932852][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10502 (4295001142-4294990640), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 667.946407][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g29333 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 667.957620][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 667.967598][ C1] rcu: RCU grace-period kthread stack dump: [ 667.973502][ C1] task:rcu_preempt state:R running task stack:28016 pid: 15 ppid: 2 flags:0x00004000 [ 667.984576][ C1] Call Trace: [ 667.987893][ C1] [ 667.990851][ C1] __schedule+0x11ef/0x43c0 [ 667.995385][ C1] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 668.001040][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 668.006256][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 668.012166][ C1] ? _raw_spin_unlock+0x40/0x40 [ 668.017139][ C1] ? release_firmware_map_entry+0x190/0x190 [ 668.023056][ C1] ? __mod_timer+0x91e/0xd00 [ 668.027842][ C1] schedule+0x11b/0x1e0 [ 668.032028][ C1] schedule_timeout+0x184/0x2d0 [ 668.036890][ C1] ? console_conditional_schedule+0x40/0x40 [ 668.042886][ C1] ? update_process_times+0x200/0x200 [ 668.048403][ C1] ? prepare_to_swait_event+0x331/0x350 [ 668.054057][ C1] rcu_gp_fqs_loop+0x2be/0x11d0 [ 668.059024][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 668.064351][ C1] ? rcu_gp_init+0xd6c/0x10f0 [ 668.069072][ C1] ? rcu_gp_init+0x10f0/0x10f0 [ 668.073946][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 668.079684][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 668.084988][ C1] rcu_gp_kthread+0x9b/0x370 [ 668.089727][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 668.095743][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 668.100905][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 668.106829][ C1] ? __kthread_parkme+0x157/0x1b0 [ 668.111882][ C1] kthread+0x436/0x520 [ 668.115967][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 668.121089][ C1] ? kthread_blkcg+0xd0/0xd0 [ 668.125694][ C1] ret_from_fork+0x1f/0x30 [ 668.130141][ C1] [ 668.133176][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 668.139778][ C1] NMI backtrace for cpu 1 [ 668.144179][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 668.151232][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 668.161434][ C1] Call Trace: [ 668.164833][ C1] [ 668.167763][ C1] dump_stack_lvl+0x188/0x250 [ 668.172583][ C1] ? show_regs_print_info+0x20/0x20 [ 668.177897][ C1] ? load_image+0x400/0x400 [ 668.182442][ C1] nmi_cpu_backtrace+0x3a2/0x3d0 [ 668.187400][ C1] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 668.193652][ C1] ? _printk+0xda/0x130 [ 668.197824][ C1] ? cpu_online+0x1d/0x30 [ 668.202168][ C1] ? load_image+0x400/0x400 [ 668.206906][ C1] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 668.213194][ C1] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 668.219191][ C1] rcu_check_gp_kthread_starvation+0x1cd/0x250 [ 668.225369][ C1] print_other_cpu_stall+0x1110/0x1270 [ 668.231121][ C1] ? print_cpu_stall+0x5f0/0x5f0 [ 668.236256][ C1] ? timekeeping_advance+0x7f6/0xac0 [ 668.241720][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 668.246785][ C1] rcu_sched_clock_irq+0x843/0x1120 [ 668.252009][ C1] ? rcutree_dead_cpu+0x20/0x20 [ 668.256887][ C1] ? account_process_tick+0x22a/0x3a0 [ 668.262468][ C1] update_process_times+0x193/0x200 [ 668.267927][ C1] tick_sched_timer+0x37d/0x560 [ 668.272819][ C1] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 668.278513][ C1] __hrtimer_run_queues+0x4b4/0xb70 [ 668.283767][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 668.288903][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 668.295106][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 668.300373][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 668.306373][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 668.312027][ C1] [ 668.314968][ C1] [ 668.317913][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 668.324005][ C1] RIP: 0010:default_idle+0xb/0x10 [ 668.329136][ C1] Code: b7 48 89 df e8 f6 3a f8 f7 eb ad e8 4f af f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 00 cc 66 90 0f 00 2d 97 b5 5f 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 668.348777][ C1] RSP: 0018:ffffc90000d67d48 EFLAGS: 000002c2 [ 668.354954][ C1] RAX: 40ffaf299ee90900 RBX: ffff888016e98000 RCX: 40ffaf299ee90900 [ 668.363128][ C1] RDX: 0000000000000001 RSI: ffffffff8a2b3100 RDI: ffffffff8a7a0700 [ 668.371198][ C1] RBP: ffffc90000d67e80 R08: ffff8880b913b30b R09: 1ffff11017227661 [ 668.379186][ C1] R10: dffffc0000000000 R11: ffffed1017227662 R12: 1ffff920001acfb4 [ 668.387455][ C1] R13: dffffc0000000000 R14: 1ffff11002dd3000 R15: 0000000000000000 [ 668.395556][ C1] default_idle_call+0x81/0xc0 [ 668.400424][ C1] do_idle+0x3a1/0x650 [ 668.404513][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 668.409729][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 668.414946][ C1] ? asm_sysvec_apic_timer_interrupt+0x10/0x20 [ 668.421130][ C1] ? schedule_idle+0x57/0x90 [ 668.425740][ C1] cpu_startup_entry+0x14/0x20 [ 668.430704][ C1] start_secondary+0x330/0x430 [ 668.435488][ C1] ? arch_scale_freq_tick+0x120/0x120 [ 668.440893][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 668.446815][ C1]