last executing test programs: 13.359260144s ago: executing program 1 (id=627): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd27, 0x0, {{@in6=@mcast2, @in6=@private2, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xff, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0xcdab, 0x2f, 0x5, 0x800000000000002}, 0x1, 0x0, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x4048050) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201ff00ffff1a40d8048200b7ce010282970902120001000000000904000000", @ANYRES16], 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001, 0x8}, 0x8) sendto$inet6(r1, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e25, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f00000014c0)='\x00', 0x1}], 0x1}}], 0x1, 0x400c405) exit(0x0) sendmmsg$inet6(r1, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000600)="f01c", 0x2}], 0x1}}], 0x1, 0x40) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty, 0x400}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e21, 0xb0b, @local, 0x9}, 0x1c) 10.845631315s ago: executing program 4 (id=635): r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01030003000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfffffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) 10.369087457s ago: executing program 3 (id=637): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 10.154749302s ago: executing program 4 (id=640): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'lo\x00'}]}, 0x34}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000400), r0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000a00)={0x38, 0x1401, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r3, &(0x7f0000000b00)={0x2, 0x4e20, @loopback}, 0x10) listen(r3, 0x5) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000c00)={0x2, 0x4e20, @loopback}, 0x10) accept(r3, 0x0, 0x0) 9.897131249s ago: executing program 0 (id=641): socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000800000000000000080000007311a1080000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) semget$private(0x0, 0x4000, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x10003, @loopback, 0x1}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, &(0x7f0000000080)=0x3ff, 0x4) semctl$SETVAL(0x0, 0x2, 0x10, 0x0) 9.798578341s ago: executing program 1 (id=642): socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x9, @loopback, 0x3f}, 0x1c) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newsa={0x158, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x2, 0x4000, 0x20, [0x0]}}]}, 0x158}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1232, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) sendmmsg$inet6(r1, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000008c0)='A', 0x1}], 0x1}}], 0x1, 0x4000801) 9.612740426s ago: executing program 0 (id=644): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x3f) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_address={0x3, 0x6, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x40}}, 0x0) 9.612372006s ago: executing program 1 (id=645): prlimit64(0x0, 0xe, &(0x7f0000000340)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001780)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000017c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001800)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001840)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000018c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000001900), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001940)=0x6) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x8000}, 0xc) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) 9.612110116s ago: executing program 3 (id=646): socket$igmp(0x2, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @remote}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x3c1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x6, 0x4}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 9.491638278s ago: executing program 4 (id=647): mount(0x0, 0x0, 0x0, 0x221000d, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x80000002, 0x88440) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x42, 0x0) write$dsp(r0, &(0x7f0000000240)="5cba91a4", 0xffffffd9) r1 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000300)='./debug\x00', &(0x7f0000000340)='debugfs\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000003c0)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000400), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, 0x0) 8.638471729s ago: executing program 1 (id=648): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000002c0)={@multicast2, @loopback, 0x1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clock_settime(0x75f231f5b1b3ae5a, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) unshare(0x22020600) r1 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0xd) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x2801, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x4}}}}}]}}]}}, 0x0) 8.453056314s ago: executing program 0 (id=649): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)="94", 0xf000}, {0x0}], 0x2) creat(0x0, 0x175) setsockopt(0xffffffffffffffff, 0x84, 0x80, &(0x7f00000002c0), 0x0) acct(0x0) acct(0x0) write(r0, &(0x7f0000000080)='4', 0x1) 8.284249258s ago: executing program 3 (id=651): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x808b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) add_key(&(0x7f0000000680)='asymmetric\x00', 0x0, &(0x7f00000006c0)="308201103081bea00302012b020112300a06082a85030701010302300e310c300a06035504030c0373797a3020170d3232303531383232333234315a180f32313232303432343232333234315a300e310c300a06035504030c0373797a3066301f06082a85030701010101301306072a85030202230106082a850307010102020343000440d5a777f9262f8cbdcce31f0194053d2fecb50034f5516d3b904b23286f1dc836616036ecbbb40b954e544f152105d8526644317e5dc5d126005f60d8f0c727fc300a06082a8503070101030203410041320973a4c138d6637d8bf7503fda9f6848c150e3423a9b2b28122aa7c2753165778c3c9e0d56b2f9dc04333eb09ef9744e59b383f29127da5ec733c0c18f41", 0x114, 0xfffffffffffffffe) 7.469036938s ago: executing program 0 (id=652): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x1c}}, 0x0) nanosleep(&(0x7f0000000380)={0x0, 0x2faf080}, 0x0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x40, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x93, 0x1}, @NL80211_ATTR_REG_RULES={0x28, 0x22, 0x0, 0x1, [{0x24}]}]}, 0x40}}, 0x0) nanosleep(&(0x7f0000000380)={0x0, 0x2faf080}, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0x9b, 0x157c}]}, 0x34}}, 0x0) nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0) 7.39611347s ago: executing program 4 (id=653): prlimit64(0x0, 0xe, &(0x7f0000000900)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000940)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000980)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000a00)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000a80), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000ac0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r3, &(0x7f0000000240), 0x4000000000001c0, 0x0) recvfrom(r4, &(0x7f0000000280)=""/60, 0x3c, 0x40, 0x0, 0x0) 6.925053171s ago: executing program 0 (id=655): mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000000), 0x1000, 0x800}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001000)=0x10, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000001100)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000001200)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000001300)=0x10, 0x4) bind$xdp(r0, &(0x7f0000001400)={0x2c, 0x0, 0x1, 0x0, 0x0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001500)={r1, &(0x7f0000001600)='\x00\x00\x00\x00', &(0x7f0000001700)=@udp=r0}, 0x20) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x6, &(0x7f0000002000)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xb7, 0x2}, @generic={0xb7, 0x3}, @generic={0x85, 0x0, 0x0, 0x0, 0x33}, @generic={0x95}], &(0x7f0000003000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000004000)={r2, 0x0, 0xe, 0x0, &(0x7f0000005000)="00112233445566778899aabbccdd", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.126495401s ago: executing program 4 (id=656): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mkdir(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 5.974447575s ago: executing program 0 (id=658): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1c000000020303000000000000000000022000000800010001"], 0x1c}}, 0x40000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="2000000002038306000000000000000000000000090002000001002102"], 0x20}, 0x1, 0x0, 0x0, 0x40684b5}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000d00)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) syz_emit_ethernet(0xbe, &(0x7f0000001000)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x100, 0x0, 0x9, 0x11, 0x0, @empty, @multicast1}, {0x100, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "c91a5d1ad61de19a476276d0b0abd6dd1b2fb3a979b67bbef0bc195594c6ce68", "959b2e978beb1fdd534cde27d3e259e5e52e01e826f56425b4f57f0b615885d6c8862525170fc83a6ad07d25bdbfb809", "b60814cf57d8256fb447039f4f8ebd2e07b88853da364c02ccbba1b3", {"a282ed319ce9793b9f1df78ae130e84b", "d7bdcf770600fd9380f8f9a5d3e845b3"}}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000001d00)=@newlink={0x28, 0x10, 0x801, 0x70bd2c, 0x80000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x650b1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x80) 5.970927135s ago: executing program 1 (id=659): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800) r1 = syz_io_uring_setup(0xf08, &(0x7f0000000400)={0x0, 0x8000595d, 0x1000, 0x20002, 0x1000051, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x110a}, 0x1}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8) pipe(&(0x7f0000000180)={0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0x3b, 0x9) 5.75823607s ago: executing program 4 (id=660): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40900, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7ff, 0xb, 0x4}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x81}, 0x4000818) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000400)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000500)='\'', 0x1}], 0x1}, 0x20004801) 4.421166382s ago: executing program 2 (id=662): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = mq_open(0x0, 0x42, 0x0, 0x0) readv(r0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsopen(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0xc8) open_by_handle_at(r2, &(0x7f00000002c0)=@ceph_nfs_confh={0x10, 0x2, {0x8, 0x6d1}}, 0x4f0a80) 3.353085489s ago: executing program 2 (id=663): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_connect) 3.306783179s ago: executing program 1 (id=664): r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x2d, 0x0, 0x88) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x40200) r1 = semget(0x2, 0x3, 0x39c) semop(r1, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x100, @local}], 0x10) semop(r1, &(0x7f0000000000)=[{0x2, 0xbbdd}], 0x1) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000280)=[0x6, 0x7fff]) unshare(0x40400) 2.312880144s ago: executing program 2 (id=665): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x2040400) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x20, @loopback, 0x23}, 0x1c) accept(r1, &(0x7f0000000000)=@nfc, &(0x7f0000000080)=0x80) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f00000001c0)=0x7fff, 0x4) sendto$inet(r0, &(0x7f0000000280)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9025a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000440)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 2.312363094s ago: executing program 3 (id=666): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x17, 0x1, 0x70bd26, 0x25dfdbfd, {0x8}, [@typed={0x8, 0x5, 0x0, 0x0, @u32=0x7}]}, 0xff2e}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000000014"], 0x5c}, 0x1, 0x0, 0x0, 0x2000}, 0x40090) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b1", 0x4, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.960393052s ago: executing program 3 (id=667): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() sched_setaffinity(0x0, 0xffffffffffffffe2, &(0x7f00000002c0)=0x20000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@delpolicy={0x50, 0x27, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x2b}}}, 0x50}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast2, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in6=@loopback, 0x4d6, 0x3c}, 0x0, @in, 0x0, 0x0, 0x2}}, 0x132) 1.313162928s ago: executing program 2 (id=668): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x20) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x10000, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 776.911881ms ago: executing program 3 (id=669): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10404, &(0x7f0000000080), 0x1, 0x76a, &(0x7f0000000540)="$eJzs2E9rXFUYB+D33kxi2sZOqi6sm4oVWpBO/rWhqZvWhSAIFgquVAx2koZMmpJJ0WSV4lIXLgQVEbQbFyLNQuhGNCD4AXRjv4IgKrpwIYzcySQN6SSNdeKh6fPAyZxz37n5vWeGucydAB5YTxZ/soi+iBiMiHLreB4RPc1Zb8TS6vNujCxfKkYWjcaFX7PitLg+snxp7X9lrccD0TwljkfEc89n8ejbd+bWFxanx2u16lxrPTA/c2WgvrB4YmpmfLI6Wb08PHz61NjJodHRsY7tdWggXvvuq7MvL527+uXgK7PTRb99rdrGfXRS1uZYKSJe3Y2wBLpa++nacCwrJWwIAIBtFd/zH4mIp5rf4crRFbe/vJXj1rdJmwMAAAA6onGkAQAAAOxxqX9/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/tBoZNEAAAAA9rTUvz8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB/uT6yfGlt/J+5v5yLiP7V/ButsVopxVLzsTe6I2L/H1mUNpyXRcRgB/KXrkXE4+32nzXz+6O3udqcn0fE+cT5r3cgHx5kK8X152y7z1++fv2JNp+/0upp/9na9e/GHde/2/ldW1z/ruww4/MfX3p3y/xrEU+U2uVn6/nZFvlLO8z/5sXDH21Va3wWcSza52/MGpifuTJQX1g8MTUzPlmdrF4eHj59auzk0Ojo2MDEVK06uPq3bcYnX7zz/Xb7379Vfhbbvv7v7XD/Rw89+/Wn2+QfP7r9+9/u9S96Wt5h/u8/HPx7q1qRf3GL/d/t/V/ZYf4LN8/f3OFTAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYI/KI6Issr6zP87xSiTgQEY/F/rw2W59/ZmL26uWLRS2iP7rzialadTAiyqvrrFgPNee318Ob1iMRcSgi3i/va64rb8zWLqbePAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOsORERfZHklIvKI+LOc55VK6q4AAACAjutP3QAAAACw69z/AwAAwN7n/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddujIyq0sIpbO7GuOQk+r1p20M2C35akbAJLpSt0AkEwpdQNAMu7xgewu9d57qAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACw9xw7vHIri4ilM/uao9DTqnUn7QzYbXnqBoBkulI3ACRTSt0AkIx7fCC7S733HioAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7D19zZHllYjIm/M8r1QiHo6I/ujOJqZq1cGIOBgRP5W7HyrWQ6mbBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOPqC4vT47Vadc7ExMRkfZL6ygQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAr1hcXp8VqtOldP3QkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABp5T9nEVGMY+Wn+zZXe7K/ys3HiHjz4wsfvDU+Pz83VBz/bf34/Iet48Mp+gcAAAA2W7tPX7uPBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2Kn6wuL0eK1WndvFSeo9AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/zj8BAAD//5GsoMo=") openat(0xffffffffffffff9c, &(0x7f0000000d00)='./file1\x00', 0x80342, 0x168) msgctl$IPC_SET(0x0, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x80000, &(0x7f0000000140)={[0x76]}, 0x8) r0 = fsopen(&(0x7f0000000180)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f00000001c0), 0x2, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000772904202404019957c201020301090224000100001000090443"], 0x0) write$cgroup_subtree(r2, &(0x7f0000000240)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r2, &(0x7f0000000280)=ANY=[@ANYBLOB='+cpu -pids'], 0xb) 388.912891ms ago: executing program 2 (id=670): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x22, 0x0, 0x0) bind$bt_hci(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x0, 0x1}, 0x6) syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r2) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x0) write$bt_hci(r1, &(0x7f00000000c0)=ANY=[], 0x6) 0s ago: executing program 2 (id=671): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000340)={[0x100000000005, 0x4, 0xe9b, 0x22, 0x20000008, 0x7, 0x1000, 0x7, 0x8, 0x10009c2, 0xd, 0x0, 0xc, 0xb, 0x8000, 0xffffffffffffffff], 0x100000, 0xc2302}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x5, 0xfffffff8, 0x0, 0xff, 0xff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x10200, 0x6, 0xffff1000, 0x2000, &(0x7f0000ff5000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): ready [ 87.031826][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.042930][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.050107][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.090530][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.122071][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.135036][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.143983][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.162335][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.175972][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.190485][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.203135][ T4280] device veth0_macvtap entered promiscuous mode [ 87.243801][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.285361][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.309437][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 87.335702][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.370694][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.381077][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.420271][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.441350][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.473632][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.482481][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.496565][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.506937][ T4280] device veth1_macvtap entered promiscuous mode [ 87.523700][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 87.585207][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.594128][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.626282][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.675264][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.695957][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.714837][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.725341][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.734168][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.765325][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.786072][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.793929][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.833355][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.862905][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.889805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.897830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.907961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.916753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.925779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.934573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.943600][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.952619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.964015][ T4279] device veth0_vlan entered promiscuous mode [ 87.976585][ T4280] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.985769][ T4280] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.995020][ T4280] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.003812][ T4280] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.026335][ T4281] device veth0_vlan entered promiscuous mode [ 88.059189][ T4279] device veth1_vlan entered promiscuous mode [ 88.071798][ T4281] device veth1_vlan entered promiscuous mode [ 88.105469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 88.126043][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.141340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 88.150302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.167154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.234694][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.243129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.309823][ T4279] device veth0_macvtap entered promiscuous mode [ 88.323565][ T4271] device veth0_vlan entered promiscuous mode [ 88.342090][ T4281] device veth0_macvtap entered promiscuous mode [ 88.350882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.361152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.369819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.378890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.388867][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.397793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.407243][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.416164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.425250][ T4285] Bluetooth: hci1: command 0x0419 tx timeout [ 88.434885][ T4279] device veth1_macvtap entered promiscuous mode [ 88.450938][ T4271] device veth1_vlan entered promiscuous mode [ 88.496117][ T4281] device veth1_macvtap entered promiscuous mode [ 88.504877][ T4283] Bluetooth: hci2: command 0x0419 tx timeout [ 88.505522][ T4285] Bluetooth: hci0: command 0x0419 tx timeout [ 88.512789][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.528617][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.557237][ T1079] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 88.566031][ T1079] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.574100][ T1079] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.583697][ T1079] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.596141][ T1079] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.604233][ T1079] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.611902][ T1079] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.625398][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.651529][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.662316][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.672696][ T4283] Bluetooth: hci4: command 0x0419 tx timeout [ 88.675293][ T4285] Bluetooth: hci3: command 0x0419 tx timeout [ 88.694301][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.721156][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.730166][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.742668][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.758300][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.770024][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.785573][ T1079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.793522][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.801717][ T1079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.812240][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.822323][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.831896][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.840701][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.851600][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.862627][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.873860][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.884783][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.897091][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.908364][ T4271] device veth0_macvtap entered promiscuous mode [ 88.921735][ T4279] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.931572][ T4279] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.943325][ T4279] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.952221][ T4279] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.963094][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.972652][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.981483][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.993437][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.005395][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.015903][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.030219][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.042301][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.078764][ T4271] device veth1_macvtap entered promiscuous mode [ 89.091372][ T1079] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.101885][ T1079] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.111377][ T1079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.126044][ T1079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.137684][ T1079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.150690][ T4281] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.161210][ T4281] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.170362][ T4281] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.179471][ T4281] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.228360][ T1079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.243999][ T1079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.269396][ T1079] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.286673][ T1079] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.302944][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.315719][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.329879][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.341276][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.351478][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.362059][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.380459][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.389463][ T4275] device veth0_vlan entered promiscuous mode [ 89.419833][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.433707][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.466426][ T4275] device veth1_vlan entered promiscuous mode [ 89.488458][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.505941][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.520584][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.533467][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.550100][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.561064][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.577804][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.590085][ T4409] process 'syz.2.6' launched './file1' with NULL argv: empty string added [ 89.610488][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.619736][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 89.629718][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.648446][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.664046][ T4271] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.691173][ T4271] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.705646][ T4271] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.714398][ T4271] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.733506][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.766565][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.832201][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.845399][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.860224][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.881737][ T4275] device veth0_macvtap entered promiscuous mode [ 89.928964][ T4275] device veth1_macvtap entered promiscuous mode [ 89.944398][ T4395] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.966737][ T4395] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.984986][ T1079] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.001704][ T1079] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 90.010323][ T1079] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.040285][ T4393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.049835][ T4395] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.061211][ T4395] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.072580][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.079045][ T4393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.101382][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.125101][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.141186][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.151404][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.162146][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.175177][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.186751][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.197099][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.208381][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.219950][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.243524][ T4395] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.252227][ T1079] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.262858][ T4395] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.276726][ T1079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.285935][ T1079] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.316205][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.335499][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.347344][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.359183][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.369626][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.381176][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.397124][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.409082][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.433269][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.442403][ T4395] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.452111][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.464192][ T4395] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.474413][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.490095][ T4416] loop1: detected capacity change from 0 to 512 [ 90.501162][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.569500][ T4416] EXT4-fs error (device loop1): ext4_orphan_get:1409: inode #15: comm syz.1.2: iget: bad i_size value: 38620345925642 [ 90.587274][ T4275] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.619129][ T4416] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.2: couldn't read orphan inode 15 (err -117) [ 90.631383][ T4416] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 90.634594][ T4275] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.693617][ T4275] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.714086][ T4275] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.871937][ T4279] EXT4-fs (loop1): unmounting filesystem. [ 90.953557][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.976005][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.999632][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.054076][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.072357][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.088826][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.193505][ T4433] loop0: detected capacity change from 0 to 512 [ 91.334133][ T4433] EXT4-fs (loop0): invalid journal inode [ 91.352926][ T4433] EXT4-fs (loop0): can't get journal size [ 91.399291][ T4433] EXT4-fs (loop0): 1 truncate cleaned up [ 91.410453][ T4433] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 91.580212][ T27] audit: type=1800 audit(1792436426.487:2): pid=4433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.10" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 91.707293][ T955] cfg80211: failed to load regulatory.db [ 91.766555][ T4443] loop0: detected capacity change from 512 to 64 [ 91.801799][ T4433] syz.0.10: attempt to access beyond end of device [ 91.801799][ T4433] loop0: rw=14337, sector=96, nr_sectors = 2 limit=64 [ 91.827028][ T4433] Buffer I/O error on dev loop0, logical block 48, lost sync page write [ 91.884270][ T4433] EXT4-fs error (device loop0): ext4_splice_branch:472: inode #15: block 48: comm syz.0.10: IO error syncing itable block [ 91.940507][ T4433] EXT4-fs error (device loop0): ext4_check_bdev_write_error:218: comm syz.0.10: Error while async write back metadata [ 92.061979][ T4433] EXT4-fs error (device loop0): mb_free_blocks:1839: group 0, inode 15: block 90:freeing already freed block (bit 89); block bitmap corrupt. [ 92.077646][ T4433] EXT4-fs (loop0): pa ffff88807254a9a0: logic 32, phys. 65, len 32 [ 92.085761][ T4433] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4894: group 0, free 7, pa_free 6 [ 92.164189][ T4433] syz.0.10: attempt to access beyond end of device [ 92.164189][ T4433] loop0: rw=14337, sector=96, nr_sectors = 2 limit=64 [ 92.180436][ T4433] Buffer I/O error on dev loop0, logical block 48, lost sync page write [ 92.191054][ T4433] EXT4-fs error (device loop0): ext4_free_data:985: inode #15: block 48: comm syz.0.10: IO error syncing itable block [ 92.218438][ T4433] EXT4-fs error (device loop0): ext4_check_bdev_write_error:218: comm syz.0.10: Error while async write back metadata [ 92.647713][ T4433] syz.0.10: attempt to access beyond end of device [ 92.647713][ T4433] loop0: rw=2049, sector=72, nr_sectors = 24 limit=64 [ 92.884541][ T4433] EXT4-fs warning (device loop0): ext4_end_bio:347: I/O error 10 writing to inode 15 starting block 36) [ 92.974867][ T4433] Buffer I/O error on device loop0, logical block 36 [ 92.981912][ T4433] Buffer I/O error on device loop0, logical block 37 [ 92.988650][ T4433] Buffer I/O error on device loop0, logical block 38 [ 92.995358][ T4433] Buffer I/O error on device loop0, logical block 39 [ 93.006565][ T4433] Buffer I/O error on device loop0, logical block 40 [ 93.013310][ T4433] Buffer I/O error on device loop0, logical block 41 [ 93.020057][ T4433] Buffer I/O error on device loop0, logical block 42 [ 93.026760][ T4433] Buffer I/O error on device loop0, logical block 43 [ 93.033620][ T4433] Buffer I/O error on device loop0, logical block 44 [ 93.040689][ T4433] Buffer I/O error on device loop0, logical block 45 [ 93.058410][ T4433] syz.0.10: attempt to access beyond end of device [ 93.058410][ T4433] loop0: rw=2049, sector=98, nr_sectors = 8 limit=64 [ 93.119923][ T4433] EXT4-fs warning (device loop0): ext4_end_bio:347: I/O error 10 writing to inode 15 starting block 49) [ 93.152252][ T4433] syz.0.10: attempt to access beyond end of device [ 93.152252][ T4433] loop0: rw=2049, sector=418, nr_sectors = 32 limit=64 [ 93.200900][ T4433] EXT4-fs warning (device loop0): ext4_end_bio:347: I/O error 10 writing to inode 15 starting block 209) [ 93.246041][ T4433] syz.0.10: attempt to access beyond end of device [ 93.246041][ T4433] loop0: rw=2049, sector=130, nr_sectors = 48 limit=64 [ 93.289252][ T4433] EXT4-fs warning (device loop0): ext4_end_bio:347: I/O error 10 writing to inode 15 starting block 65) [ 93.350642][ T4466] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.453525][ T4271] syz-executor: attempt to access beyond end of device [ 93.453525][ T4271] loop0: rw=14337, sector=96, nr_sectors = 2 limit=64 [ 93.510988][ T4271] Buffer I/O error on dev loop0, logical block 48, lost sync page write [ 93.526456][ T4271] EXT4-fs error (device loop0): ext4_free_data:985: inode #15: block 48: comm syz-executor: IO error syncing itable block [ 93.541291][ T4271] EXT4-fs error (device loop0): ext4_check_bdev_write_error:218: comm syz-executor: Error while async write back metadata [ 93.592545][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 93.812685][ T4484] netlink: 36 bytes leftover after parsing attributes in process `syz.3.24'. [ 93.948109][ T4283] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 93.958188][ T4283] Bluetooth: hci2: Injecting HCI hardware error event [ 93.976147][ T4276] Bluetooth: hci2: hardware error 0x00 [ 94.733345][ T4489] device syzkaller0 entered promiscuous mode [ 94.928057][ T27] audit: type=1800 audit(1792436429.837:3): pid=4495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.28" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 94.978693][ T27] audit: type=1800 audit(1792436429.837:4): pid=4495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.28" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 95.642909][ T127] rxe_eth0 speed is unknown, defaulting to 1000 [ 96.024977][ T4276] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 97.227113][ T27] audit: type=1326 audit(1792436432.137:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4531 comm="syz.2.35" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd279e559 code=0x7ffc0000 [ 97.324762][ T27] audit: type=1326 audit(1792436432.137:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4531 comm="syz.2.35" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd279e559 code=0x7ffc0000 [ 97.438980][ T27] audit: type=1326 audit(1792436432.137:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4531 comm="syz.2.35" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd279e559 code=0x7ffc0000 [ 97.560312][ T27] audit: type=1326 audit(1792436432.137:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4531 comm="syz.2.35" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd279e559 code=0x7ffc0000 [ 97.659234][ T27] audit: type=1326 audit(1792436432.137:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4531 comm="syz.2.35" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f0fd279e559 code=0x7ffc0000 [ 97.800678][ T27] audit: type=1326 audit(1792436432.137:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4531 comm="syz.2.35" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd279e559 code=0x7ffc0000 [ 97.851580][ T27] audit: type=1326 audit(1792436432.137:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4531 comm="syz.2.35" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd279e559 code=0x7ffc0000 [ 97.906127][ T27] audit: type=1326 audit(1792436432.137:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4531 comm="syz.2.35" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd279e559 code=0x7ffc0000 [ 97.950969][ T27] audit: type=1326 audit(1792436432.137:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4531 comm="syz.2.35" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd279e559 code=0x7ffc0000 [ 97.982095][ T27] audit: type=1326 audit(1792436432.177:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4531 comm="syz.2.35" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f0fd279e559 code=0x7ffc0000 [ 98.089282][ T127] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 98.299051][ T127] usb 1-1: Using ep0 maxpacket: 16 [ 98.311209][ T127] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.340576][ T127] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 98.388970][ T127] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 98.420332][ T127] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.464338][ T127] usb 1-1: Product: syz [ 98.480719][ T127] usb 1-1: Manufacturer: syz [ 98.493019][ T127] usb 1-1: SerialNumber: syz [ 98.670553][ T4553] rxe_eth0 speed is unknown, defaulting to 1000 [ 98.752218][ T127] usb 1-1: 0:2 : does not exist [ 98.777873][ T127] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 98.917059][ T127] usb 1-1: USB disconnect, device number 2 [ 99.263266][ T4287] udevd[4287]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 99.372998][ T4568] device veth1_to_bond entered promiscuous mode [ 99.394599][ T4568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.43'. [ 99.564004][ T4568] device veth1_to_bond left promiscuous mode [ 99.651387][ T4568] bond0: (slave bond_slave_1): Releasing backup interface [ 100.794071][ T4602] loop4: detected capacity change from 0 to 512 [ 100.868071][ T4602] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 100.955610][ T4602] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 100.981358][ T4602] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.137492][ T4610] loop0: detected capacity change from 0 to 512 [ 101.316035][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 101.597932][ T4612] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 101.662074][ T4621] netlink: 'syz.2.57': attribute type 39 has an invalid length. [ 102.030393][ T4630] netlink: 300 bytes leftover after parsing attributes in process `syz.3.59'. [ 103.187807][ T27] kauditd_printk_skb: 46 callbacks suppressed [ 103.187821][ T27] audit: type=1326 audit(1792436444.097:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4642 comm="syz.2.62" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd279e559 code=0x7ffc0000 [ 103.241815][ T4643] netlink: 'syz.4.63': attribute type 10 has an invalid length. [ 103.277171][ T27] audit: type=1326 audit(1792436444.097:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4642 comm="syz.2.62" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd279e559 code=0x7ffc0000 [ 103.391873][ T27] audit: type=1326 audit(1792436444.147:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4642 comm="syz.2.62" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd279e559 code=0x7ffc0000 [ 103.423748][ T27] audit: type=1326 audit(1792436444.147:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4642 comm="syz.2.62" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0fd279e559 code=0x7ffc0000 [ 103.515864][ T27] audit: type=1326 audit(1792436444.187:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4642 comm="syz.2.62" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd279e559 code=0x7ffc0000 [ 103.520305][ T4643] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 103.799173][ T4652] ip_tables: iptables: counters copy to user failed while replacing table [ 103.871665][ T27] audit: type=1326 audit(1792436444.187:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4642 comm="syz.2.62" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd279e559 code=0x7ffc0000 [ 103.968683][ T27] audit: type=1326 audit(1792436444.187:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4642 comm="syz.2.62" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd279e559 code=0x7ffc0000 [ 103.971078][ T4648] netlink: 'syz.4.63': attribute type 4 has an invalid length. [ 104.067268][ T27] audit: type=1326 audit(1792436444.237:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4642 comm="syz.2.62" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd279e559 code=0x7ffc0000 [ 104.101537][ T4654] loop3: detected capacity change from 0 to 256 [ 104.139899][ T4654] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 104.163116][ T4648] netlink: 156 bytes leftover after parsing attributes in process `syz.4.63'. [ 104.182729][ T27] audit: type=1326 audit(1792436444.237:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4642 comm="syz.2.62" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0fd275ed8e code=0x7ffc0000 [ 104.258270][ T4648] wlan1: mtu less than device minimum [ 104.284555][ T27] audit: type=1326 audit(1792436444.237:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4642 comm="syz.2.62" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd279e559 code=0x7ffc0000 [ 104.317994][ T4654] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 104.754916][ T4285] Bluetooth: hci3: command 0x0406 tx timeout [ 106.578921][ T4689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.76'. [ 106.726996][ T4693] loop3: detected capacity change from 0 to 512 [ 106.763710][ T4693] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 106.800414][ T4693] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 106.835081][ T4693] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 106.854833][ T4693] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 not in group (block 0)! [ 106.902036][ T4693] EXT4-fs (loop3): group descriptors corrupted! [ 106.938635][ T4695] device team0 entered promiscuous mode [ 106.960820][ T4695] device team_slave_0 entered promiscuous mode [ 107.023959][ T4695] device team_slave_1 entered promiscuous mode [ 107.035473][ T4695] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 107.057441][ T4695] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 107.153716][ T4696] bridge0: port 3(vlan2) entered blocking state [ 107.178406][ T4696] bridge0: port 3(vlan2) entered disabled state [ 107.196983][ T4696] device vlan2 entered promiscuous mode [ 107.212428][ T4696] device bond0 entered promiscuous mode [ 107.230191][ T4696] device bond_slave_0 entered promiscuous mode [ 107.249994][ T4696] device bond_slave_1 entered promiscuous mode [ 107.259987][ T4696] device macvlan2 entered promiscuous mode [ 108.824505][ C0] net_ratelimit: 25 callbacks suppressed [ 109.664469][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 109.674463][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 109.684453][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 109.694463][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 109.704446][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 109.714467][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 109.724442][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 109.734441][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 109.744439][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 109.754443][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 111.949751][ T4717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.012710][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 113.046790][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 113.086481][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 113.112016][ T4736] device bridge_slave_0 left promiscuous mode [ 113.140701][ T4736] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.203767][ T4736] device bridge_slave_1 left promiscuous mode [ 113.255667][ T4736] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.324799][ T4378] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 113.385852][ T4736] bond0: (slave bond_slave_0): Releasing backup interface [ 113.411326][ T4736] device bond_slave_0 left promiscuous mode [ 113.564501][ T4378] usb 3-1: Using ep0 maxpacket: 16 [ 113.655120][ T4378] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 113.812151][ T4378] usb 3-1: config 0 has no interface number 0 [ 113.943483][ T4378] usb 3-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.093546][ T4378] usb 3-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.114488][ C1] net_ratelimit: 45 callbacks suppressed [ 114.185872][ T4378] usb 3-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 114.237908][ T4378] usb 3-1: config 0 interface 1 has no altsetting 0 [ 114.249440][ T4378] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 114.262370][ T4378] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.304670][ T4736] bond0: (slave bond_slave_1): Releasing backup interface [ 114.328285][ T4378] usb 3-1: config 0 descriptor?? [ 114.348279][ T4378] usbhid 3-1:0.1: fixing wrong optional hid class descriptors count [ 114.389290][ T4736] device bond_slave_1 left promiscuous mode [ 114.429046][ T4736] device team_slave_0 left promiscuous mode [ 114.507650][ T4736] team0: Port device team_slave_0 removed [ 114.533896][ T4736] device team_slave_1 left promiscuous mode [ 114.613184][ T4736] team0: Port device team_slave_1 removed [ 114.623548][ T4736] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.633971][ T4736] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.661327][ T4736] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.684525][ T4736] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.741681][ T4736] bond0: (slave macvlan2): Releasing backup interface [ 114.777799][ T4378] elan 0003:04F3:074D.0001: failed to start in urb: -90 [ 114.844002][ T4736] device macvlan2 left promiscuous mode [ 114.880536][ T4736] device team0 left promiscuous mode [ 114.908546][ T4736] device vlan2 left promiscuous mode [ 114.913923][ T4736] device bond0 left promiscuous mode [ 114.930568][ T4736] bridge0: port 3(vlan2) entered disabled state [ 115.019738][ T4740] team0: Refused to change device type [ 115.087183][ T4740] syz.0.91 (4740) used greatest stack depth: 20496 bytes left [ 115.161787][ T4743] tipc: Started in network mode [ 115.168306][ T4378] elan 0003:04F3:074D.0001: Get report error for parm 6: 0 [ 115.175885][ T4743] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 115.197341][ T4743] tipc: Enabled bearer , priority 0 [ 115.569898][ T4378] elan 0003:04F3:074D.0001: Get report error for parm 7: 0 [ 115.973292][ T4378] elan 0003:04F3:074D.0001: Get report error for parm 8: -32 [ 116.095446][ T4378] elan 0003:04F3:074D.0001: hidraw0: USB HID v0.00 Joystick [HID 04f3:074d] on usb-dummy_hcd.2-1/input1 [ 116.112974][ T4772] mmap: syz.4.102 (4772) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 116.136212][ T4378] elan 0003:04F3:074D.0001: Input device is not registered [ 116.199010][ T4378] elan: probe of 0003:04F3:074D.0001 failed with error -119 [ 116.259734][ T4378] usb 3-1: USB disconnect, device number 2 [ 116.361316][ T955] tipc: Node number set to 11578026 [ 116.806275][ T4778] fido_id[4778]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 116.935564][ T4780] xt_CT: No such helper "pptp" [ 117.020880][ T4788] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 117.295570][ T4794] device lo entered promiscuous mode [ 117.508845][ T4794] device tunl0 entered promiscuous mode [ 117.555086][ T4794] device gre0 entered promiscuous mode [ 117.675298][ T4801] loop4: detected capacity change from 0 to 128 [ 117.762495][ T4801] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 117.814124][ T4794] device gretap0 entered promiscuous mode [ 117.881898][ T4794] device erspan0 entered promiscuous mode [ 117.965026][ T4794] device ip_vti0 entered promiscuous mode [ 118.022411][ T4794] device ip6_vti0 entered promiscuous mode [ 118.116574][ T4794] device sit0 entered promiscuous mode [ 118.232378][ T4794] device ip6tnl0 entered promiscuous mode [ 118.279352][ T4794] device ip6gre0 entered promiscuous mode [ 118.363906][ T4794] device syz_tun entered promiscuous mode [ 119.313008][ T4414] net_ratelimit: 41 callbacks suppressed [ 119.334776][ T4794] device ip6gretap0 entered promiscuous mode [ 119.515353][ T4794] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.523021][ T4794] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.553389][ T4794] device bridge0 entered promiscuous mode [ 119.596985][ T4812] overlayfs: statfs failed on './file0' [ 119.625827][ T4794] device vcan0 entered promiscuous mode [ 119.665632][ T4794] device bond0 entered promiscuous mode [ 119.671245][ T4794] device bond_slave_0 entered promiscuous mode [ 119.689180][ T4794] device bond_slave_1 entered promiscuous mode [ 119.781352][ T4794] device team0 entered promiscuous mode [ 119.787389][ T4794] device team_slave_0 entered promiscuous mode [ 119.802558][ T4794] device team_slave_1 entered promiscuous mode [ 119.874334][ T4794] device dummy0 entered promiscuous mode [ 119.937411][ T4794] device nlmon0 entered promiscuous mode [ 119.973261][ T4794] device caif0 entered promiscuous mode [ 119.982332][ T4794] device batadv0 entered promiscuous mode [ 120.040242][ T4794] device vxcan0 entered promiscuous mode [ 120.083450][ T4794] device vxcan1 entered promiscuous mode [ 120.123165][ T4794] device veth0 entered promiscuous mode [ 120.255524][ T4794] device veth1 entered promiscuous mode [ 120.356945][ T4794] device wg0 entered promiscuous mode [ 120.430687][ T4794] device wg1 entered promiscuous mode [ 120.491198][ T27] kauditd_printk_skb: 48 callbacks suppressed [ 120.491212][ T27] audit: type=1804 audit(1792436461.397:119): pid=4827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.114" name="/newroot/18/file0" dev="fuse" ino=1 res=1 errno=0 [ 120.535009][ T4794] device wg2 entered promiscuous mode [ 120.581702][ T27] audit: type=1804 audit(1792436461.437:120): pid=4827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.114" name="/newroot/18/file0" dev="fuse" ino=1 res=1 errno=0 [ 120.627913][ T4794] device veth0_to_bridge entered promiscuous mode [ 120.771301][ T4794] device veth1_to_bridge entered promiscuous mode [ 120.993347][ T4794] device veth0_to_bond entered promiscuous mode [ 121.470910][ T4834] loop2: detected capacity change from 0 to 164 [ 121.796762][ T4794] device veth1_to_bond entered promiscuous mode [ 121.834284][ T27] audit: type=1326 audit(1792436462.737:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4832 comm="syz.2.116" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd279e559 code=0x7fc00000 [ 121.859545][ T4794] device veth0_to_team entered promiscuous mode [ 121.929570][ T4794] device veth1_to_team entered promiscuous mode [ 121.971850][ T27] audit: type=1326 audit(1792436462.877:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4832 comm="syz.2.116" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f0fd279e559 code=0x7fc00000 [ 122.026481][ T27] audit: type=1326 audit(1792436462.877:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4832 comm="syz.2.116" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd279e559 code=0x7fc00000 [ 122.073798][ T27] audit: type=1326 audit(1792436462.877:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4832 comm="syz.2.116" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd279e559 code=0x7fc00000 [ 122.103859][ T27] audit: type=1326 audit(1792436462.877:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4832 comm="syz.2.116" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd279e559 code=0x7fc00000 [ 122.162184][ T27] audit: type=1326 audit(1792436462.877:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4832 comm="syz.2.116" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd279e559 code=0x7fc00000 [ 122.201996][ T27] audit: type=1326 audit(1792436462.877:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4832 comm="syz.2.116" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd279e559 code=0x7fc00000 [ 122.260531][ T27] audit: type=1326 audit(1792436462.877:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4832 comm="syz.2.116" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd279e559 code=0x7fc00000 [ 122.317735][ T4794] device veth0_to_batadv entered promiscuous mode [ 122.327710][ T4794] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.376318][ T4794] device batadv_slave_0 entered promiscuous mode [ 122.463815][ T4794] device veth1_to_batadv entered promiscuous mode [ 122.490928][ T4794] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.532100][ T4794] device batadv_slave_1 entered promiscuous mode [ 122.556809][ T4847] loop2: detected capacity change from 0 to 128 [ 122.583376][ T4844] 9pnet: p9_errstr2errno: server reported unknown error Àñ'IÓ$íÛ·=¼¼ [ 122.645440][ T4794] device xfrm0 entered promiscuous mode [ 122.771856][ T4794] device veth0_to_hsr entered promiscuous mode [ 123.343217][ T4794] device veth1_to_hsr entered promiscuous mode [ 123.570928][ T4794] device hsr0 entered promiscuous mode [ 123.753858][ T4794] device veth1_virt_wifi entered promiscuous mode [ 124.631388][ T4794] device veth0_virt_wifi entered promiscuous mode [ 124.638496][ C0] net_ratelimit: 40 callbacks suppressed [ 124.648150][ T4794] device virt_wifi0 entered promiscuous mode [ 124.697571][ T4794] device vlan0 entered promiscuous mode [ 124.706620][ T4794] device vlan1 entered promiscuous mode [ 124.856794][ T4794] device macvlan0 entered promiscuous mode [ 124.931688][ T4794] device macvlan1 entered promiscuous mode [ 124.964934][ T4794] device ipvlan0 entered promiscuous mode [ 124.970862][ T4794] device ipvlan1 entered promiscuous mode [ 125.097027][ T4794] device macvtap0 entered promiscuous mode [ 125.134722][ T4794] device macsec0 entered promiscuous mode [ 125.396518][ T4883] ip_tables: iptables: counters copy to user failed while replacing table [ 125.942557][ T4794] device geneve0 entered promiscuous mode [ 126.070875][ T4794] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.082092][ T4794] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.091312][ T4794] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.100400][ T4794] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.116178][ T4794] device geneve1 entered promiscuous mode [ 126.160563][ T4794] device netdevsim0 entered promiscuous mode [ 126.196030][ T4794] device netdevsim1 entered promiscuous mode [ 126.241451][ T4794] device netdevsim2 entered promiscuous mode [ 126.286698][ T4794] device netdevsim3 entered promiscuous mode [ 126.313603][ T4794] device wlan0 entered promiscuous mode [ 126.327047][ T4794] device wlan1 entered promiscuous mode [ 127.000080][ T4885] netlink: 12 bytes leftover after parsing attributes in process `syz.2.130'. [ 127.342706][ T4900] device syzkaller0 entered promiscuous mode [ 129.544704][ T4934] loop0: detected capacity change from 0 to 40427 [ 129.659597][ T4934] F2FS-fs (loop0): Found nat_bits in checkpoint [ 129.865486][ T4934] F2FS-fs (loop0): Start checkpoint disabled! [ 129.919039][ T4953] loop1: detected capacity change from 0 to 128 [ 129.936928][ T4934] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 130.013881][ T4953] ======================================================= [ 130.013881][ T4953] WARNING: The mand mount option has been deprecated and [ 130.013881][ T4953] and is ignored by this kernel. Remove the mand [ 130.013881][ T4953] option from the mount to silence this warning. [ 130.013881][ T4953] ======================================================= [ 130.104562][ C0] net_ratelimit: 40 callbacks suppressed [ 131.292510][ T4970] tipc: Started in network mode [ 131.301807][ T1079] kworker/u4:5: attempt to access beyond end of device [ 131.301807][ T1079] loop0: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 131.321502][ T4970] tipc: Node identity ac14140f, cluster identity 4711 [ 131.360937][ T4970] tipc: New replicast peer: 255.255.255.255 [ 131.396686][ T4970] tipc: Enabled bearer , priority 10 [ 132.245186][ T4980] loop3: detected capacity change from 0 to 2048 [ 132.503336][ T4980] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 132.557213][ T4414] tipc: Node number set to 2886997007 [ 132.596585][ T4980] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.619383][ T4983] loop1: detected capacity change from 0 to 136 [ 132.667514][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.674214][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.719877][ T4983] netlink: 32 bytes leftover after parsing attributes in process `syz.1.160'. [ 133.269834][ T4987] netlink: 32 bytes leftover after parsing attributes in process `syz.1.160'. [ 134.542532][ T5005] sched: RT throttling activated [ 135.120982][ C0] net_ratelimit: 33 callbacks suppressed [ 135.197848][ T5009] netlink: 'syz.3.165': attribute type 10 has an invalid length. [ 135.245446][ T5009] bridge0: port 3(netdevsim0) entered blocking state [ 135.272358][ T5009] bridge0: port 3(netdevsim0) entered disabled state [ 135.320304][ T5009] device netdevsim0 entered promiscuous mode [ 135.340878][ T5015] device bridge_slave_0 left promiscuous mode [ 135.365652][ T5015] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.376923][ T5011] loop1: detected capacity change from 0 to 128 [ 135.438613][ T5011] FAT-fs (loop1): Directory bread(block 32) failed [ 135.449171][ T5018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.167'. [ 135.468777][ T5011] FAT-fs (loop1): Directory bread(block 33) failed [ 135.484620][ T5011] FAT-fs (loop1): Directory bread(block 34) failed [ 135.525366][ T5011] FAT-fs (loop1): Directory bread(block 35) failed [ 135.564618][ T5011] FAT-fs (loop1): Directory bread(block 36) failed [ 135.594640][ T5011] FAT-fs (loop1): Directory bread(block 37) failed [ 135.601333][ T5011] FAT-fs (loop1): Directory bread(block 38) failed [ 135.653084][ T5011] FAT-fs (loop1): Directory bread(block 39) failed [ 135.674321][ T5011] FAT-fs (loop1): Directory bread(block 40) failed [ 135.713642][ T5011] FAT-fs (loop1): Directory bread(block 41) failed [ 137.008722][ T4276] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 137.586480][ T27] kauditd_printk_skb: 62 callbacks suppressed [ 137.586503][ T27] audit: type=1804 audit(1792436478.497:191): pid=5057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.177" name="bus" dev="ramfs" ino=36971 res=1 errno=0 [ 137.626885][ T27] audit: type=1804 audit(1792436478.527:192): pid=5057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.177" name="bus" dev="ramfs" ino=36971 res=1 errno=0 [ 138.050188][ T5063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.178'. [ 138.952820][ T5073] loop0: detected capacity change from 0 to 512 [ 139.618109][ T5073] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 139.631095][ T5073] EXT4-fs (loop0): orphan cleanup on readonly fs [ 139.641405][ T5073] EXT4-fs warning (device loop0): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 139.657310][ T5073] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 139.666404][ T5073] EXT4-fs error (device loop0): __ext4_iget:5102: inode #16: block 127754: comm syz.0.181: invalid block [ 139.680114][ T5073] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.181: couldn't read orphan inode 16 (err -117) [ 139.692527][ T5073] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 139.953232][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 140.082899][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 140.321462][ T5091] netlink: 16 bytes leftover after parsing attributes in process `syz.2.187'. [ 140.474731][ T4285] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 140.674499][ C1] net_ratelimit: 32 callbacks suppressed [ 140.971854][ T5106] fuse: Bad value for 'fd' [ 142.107877][ T5120] FAULT_INJECTION: forcing a failure. [ 142.107877][ T5120] name failslab, interval 1, probability 0, space 0, times 0 [ 142.185005][ T5120] CPU: 0 PID: 5120 Comm: syz.3.198 Not tainted syzkaller #0 [ 142.192329][ T5120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 142.202406][ T5120] Call Trace: [ 142.205697][ T5120] [ 142.208631][ T5120] dump_stack_lvl+0x188/0x24e [ 142.213317][ T5120] ? show_regs_print_info+0x12/0x12 [ 142.218530][ T5120] ? load_image+0x410/0x410 [ 142.223041][ T5120] ? __might_sleep+0xd0/0xd0 [ 142.227658][ T5120] ? __lock_acquire+0x7ea0/0x7ea0 [ 142.232715][ T5120] ? trace_raw_output_percpu_destroy_chunk+0xc0/0xc0 [ 142.239406][ T5120] should_fail_ex+0x390/0x4c0 [ 142.244094][ T5120] should_failslab+0x5/0x20 [ 142.248608][ T5120] slab_pre_alloc_hook+0x59/0x300 [ 142.253641][ T5120] ? percpu_ref_init+0xc0/0x340 [ 142.258496][ T5120] __kmem_cache_alloc_node+0x4f/0x270 [ 142.263879][ T5120] ? percpu_ref_init+0xc0/0x340 [ 142.268748][ T5120] ? blk_timeout_work+0x10/0x10 [ 142.273625][ T5120] kmalloc_trace+0x26/0xe0 [ 142.278059][ T5120] percpu_ref_init+0xc0/0x340 [ 142.282746][ T5120] blk_alloc_queue+0x3fd/0x5b0 [ 142.287538][ T5120] __blk_alloc_disk+0x17/0x80 [ 142.292229][ T5120] dm_create+0x46b/0xf90 [ 142.296507][ T5120] dev_create+0x12e/0x2c0 [ 142.300861][ T5120] ? list_devices+0x820/0x820 [ 142.305566][ T5120] ? __might_fault+0xc2/0x120 [ 142.310286][ T5120] ? __might_fault+0xa6/0x120 [ 142.315043][ T5120] dm_ctl_ioctl+0xa9c/0xec0 [ 142.319622][ T5120] ? list_devices+0x820/0x820 [ 142.324349][ T5120] ? dm_poll+0x120/0x120 [ 142.328656][ T5120] ? bpf_lsm_file_ioctl+0x5/0x10 [ 142.333608][ T5120] ? security_file_ioctl+0x7c/0xa0 [ 142.338750][ T5120] ? dm_poll+0x120/0x120 [ 142.343005][ T5120] __se_sys_ioctl+0xfa/0x170 [ 142.347649][ T5120] do_syscall_64+0x4c/0xa0 [ 142.352080][ T5120] ? clear_bhb_loop+0x60/0xb0 [ 142.356787][ T5120] ? clear_bhb_loop+0x60/0xb0 [ 142.361510][ T5120] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 142.361551][ T5120] RIP: 0033:0x7f3e0019e559 [ 142.367654][ T5120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.367676][ T5120] RSP: 002b:00007f3e010b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.400299][ T5120] RAX: ffffffffffffffda RBX: 00007f3e00425fa0 RCX: 00007f3e0019e559 [ 142.408271][ T5120] RDX: 00002000000004c0 RSI: 00000000c138fd03 RDI: 0000000000000006 [ 142.416247][ T5120] RBP: 00007f3e00235ad8 R08: 0000000000000000 R09: 0000000000000000 [ 142.424230][ T5120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.432225][ T5120] R13: 00007f3e00426038 R14: 00007f3e00425fa0 R15: 00007ffdb633a468 [ 142.440214][ T5120] [ 143.924809][ T4285] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 144.132131][ T5125] loop2: detected capacity change from 0 to 40427 [ 144.348515][ T5125] F2FS-fs (loop2): Found nat_bits in checkpoint [ 144.504668][ T5149] netlink: 300 bytes leftover after parsing attributes in process `syz.1.206'. [ 144.836741][ T5125] F2FS-fs (loop2): Start checkpoint disabled! [ 145.140956][ T5125] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 145.568285][ T27] audit: type=1326 audit(1792436486.477:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5160 comm="syz.4.210" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865e79e559 code=0x7ffc0000 [ 145.654546][ T27] audit: type=1326 audit(1792436486.477:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5160 comm="syz.4.210" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865e79e559 code=0x7ffc0000 [ 145.724585][ T27] audit: type=1326 audit(1792436486.477:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5160 comm="syz.4.210" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865e79e559 code=0x7ffc0000 [ 145.770856][ T27] audit: type=1326 audit(1792436486.477:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5160 comm="syz.4.210" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f865e79e559 code=0x7ffc0000 [ 145.841438][ T27] audit: type=1326 audit(1792436486.477:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5160 comm="syz.4.210" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865e79e559 code=0x7ffc0000 [ 145.886124][ T27] audit: type=1326 audit(1792436486.507:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5160 comm="syz.4.210" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865e79e559 code=0x7ffc0000 [ 145.890295][ C1] net_ratelimit: 36 callbacks suppressed [ 145.981943][ T27] audit: type=1326 audit(1792436486.507:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5160 comm="syz.4.210" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865e79e559 code=0x7ffc0000 [ 146.064856][ T27] audit: type=1326 audit(1792436486.507:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5160 comm="syz.4.210" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f865e75ed8e code=0x7ffc0000 [ 146.161467][ T27] audit: type=1326 audit(1792436486.507:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5160 comm="syz.4.210" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865e79e559 code=0x7ffc0000 [ 146.244530][ T27] audit: type=1326 audit(1792436486.507:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5160 comm="syz.4.210" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865e79e559 code=0x7ffc0000 [ 146.445220][ T4633] kworker/u4:11: attempt to access beyond end of device [ 146.445220][ T4633] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 147.312583][ T5171] loop2: detected capacity change from 0 to 512 [ 148.986089][ T5194] loop1: detected capacity change from 0 to 512 [ 149.065767][ T5197] netlink: 300 bytes leftover after parsing attributes in process `syz.4.218'. [ 149.082297][ T5194] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 149.413628][ T5198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.221'. [ 149.670857][ T5194] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 149.729724][ T5194] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 149.787488][ T5194] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 not in group (block 0)! [ 149.798625][ T5194] EXT4-fs (loop1): group descriptors corrupted! [ 150.255851][ T5210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.544477][ C0] net_ratelimit: 34 callbacks suppressed [ 152.996114][ T5244] netlink: 4 bytes leftover after parsing attributes in process `syz.3.232'. [ 153.410271][ T5248] netlink: 300 bytes leftover after parsing attributes in process `syz.2.233'. [ 155.296895][ T5261] netlink: 4 bytes leftover after parsing attributes in process `syz.3.236'. [ 156.400784][ T27] kauditd_printk_skb: 102 callbacks suppressed [ 156.400798][ T27] audit: type=1804 audit(1792436497.307:305): pid=5268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.242" name="bus" dev="ramfs" ino=38139 res=1 errno=0 [ 156.455210][ T27] audit: type=1804 audit(1792436497.347:306): pid=5268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.242" name="bus" dev="ramfs" ino=38139 res=1 errno=0 [ 156.889740][ C0] net_ratelimit: 34 callbacks suppressed [ 157.984298][ T5276] loop4: detected capacity change from 0 to 136 [ 158.038218][ T5273] loop0: detected capacity change from 0 to 2048 [ 158.670730][ T5273] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 158.766880][ T5276] netlink: 32 bytes leftover after parsing attributes in process `syz.4.245'. [ 158.786998][ T5273] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 158.840741][ T5287] netlink: 32 bytes leftover after parsing attributes in process `syz.4.245'. [ 160.939326][ T5306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.251'. [ 161.614934][ T27] audit: type=1804 audit(1792436502.487:307): pid=5316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.255" name="bus" dev="ramfs" ino=38208 res=1 errno=0 [ 161.708629][ T27] audit: type=1804 audit(1792436502.497:308): pid=5316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.255" name="bus" dev="ramfs" ino=38208 res=1 errno=0 [ 161.954985][ C0] net_ratelimit: 27 callbacks suppressed [ 164.460929][ T5350] loop3: detected capacity change from 0 to 512 [ 164.521324][ T5280] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 164.591239][ T5350] device ip6gre1 entered promiscuous mode [ 164.705490][ T5350] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 164.994031][ T5353] loop3: detected capacity change from 0 to 512 [ 165.385181][ T7] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 165.394063][ T7] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 165.414589][ T7] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 166.217734][ T4365] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 166.226023][ T7] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 166.267927][ T5353] EXT4-fs: Ignoring removed oldalloc option [ 166.273871][ T5353] ext4: Unknown parameter 'fsuuid' [ 166.396136][ T27] audit: type=1326 audit(1792436507.307:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5352 comm="syz.3.266" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0019e559 code=0x7ffc0000 [ 166.465880][ T27] audit: type=1326 audit(1792436507.307:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5352 comm="syz.3.266" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0019e559 code=0x7ffc0000 [ 166.540871][ T27] audit: type=1326 audit(1792436507.337:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5352 comm="syz.3.266" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3e0019e559 code=0x7ffc0000 [ 166.629942][ T27] audit: type=1326 audit(1792436507.337:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5352 comm="syz.3.266" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0019e559 code=0x7ffc0000 [ 166.734465][ T27] audit: type=1326 audit(1792436507.337:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5352 comm="syz.3.266" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0019e559 code=0x7ffc0000 [ 166.824804][ T27] audit: type=1326 audit(1792436507.337:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5352 comm="syz.3.266" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f3e0019e559 code=0x7ffc0000 [ 166.874540][ T27] audit: type=1326 audit(1792436507.337:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5352 comm="syz.3.266" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0019e559 code=0x7ffc0000 [ 166.958020][ T27] audit: type=1326 audit(1792436507.337:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5352 comm="syz.3.266" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0019e559 code=0x7ffc0000 [ 167.064476][ C1] net_ratelimit: 35 callbacks suppressed [ 168.558212][ T27] audit: type=1326 audit(1792436507.337:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5352 comm="syz.3.266" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3e0019e559 code=0x7ffc0000 [ 169.225641][ T27] audit: type=1326 audit(1792436507.337:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5352 comm="syz.3.266" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0019e559 code=0x7ffc0000 [ 169.353140][ T27] audit: type=1326 audit(1792436507.337:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5352 comm="syz.3.266" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0019e559 code=0x7ffc0000 [ 169.502912][ T27] audit: type=1326 audit(1792436507.347:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5352 comm="syz.3.266" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3e0019e559 code=0x7ffc0000 [ 169.545424][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 169.587454][ T27] audit: type=1326 audit(1792436507.377:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5352 comm="syz.3.266" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0019e559 code=0x7ffc0000 [ 171.101364][ T5404] capability: warning: `syz.4.276' uses deprecated v2 capabilities in a way that may be insecure [ 171.188723][ T4276] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:200' [ 171.199167][ T4276] CPU: 1 PID: 4276 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 171.206786][ T4276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 171.216879][ T4276] Workqueue: hci4 hci_rx_work [ 171.221604][ T4276] Call Trace: [ 171.224913][ T4276] [ 171.227885][ T4276] dump_stack_lvl+0x188/0x24e [ 171.232644][ T4276] ? show_regs_print_info+0x12/0x12 [ 171.237898][ T4276] ? load_image+0x410/0x410 [ 171.242465][ T4276] sysfs_create_dir_ns+0x26a/0x290 [ 171.247652][ T4276] ? sysfs_warn_dup+0xa0/0xa0 [ 171.252415][ T4276] ? do_raw_spin_unlock+0x11d/0x230 [ 171.257669][ T4276] kobject_add_internal+0x617/0xca0 [ 171.262929][ T4276] kobject_add+0x160/0x230 [ 171.267408][ T4276] ? kobject_init+0x1c0/0x1c0 [ 171.272141][ T4276] ? __raw_spin_lock_init+0x41/0x100 [ 171.277477][ T4276] ? klist_children_get+0x50/0x50 [ 171.282557][ T4276] ? get_device_parent+0x121/0x3e0 [ 171.287726][ T4276] device_add+0x470/0x1050 [ 171.292206][ T4276] hci_conn_add_sysfs+0xd1/0x1e0 [ 171.297197][ T4276] hci_sync_conn_complete_evt+0x707/0xab0 [ 171.302977][ T4276] ? hci_remote_ext_features_evt+0xb50/0xb50 [ 171.309012][ T4276] hci_event_packet+0x806/0x1290 [ 171.314012][ T4276] ? lock_chain_count+0x20/0x20 [ 171.318922][ T4276] ? bis_list+0x280/0x280 [ 171.323309][ T4276] ? lockdep_hardirqs_on+0x94/0x140 [ 171.328558][ T4276] ? hci_send_to_monitor+0x9c/0x4a0 [ 171.333810][ T4276] hci_rx_work+0x3eb/0xd40 [ 171.338278][ T4276] ? _raw_spin_unlock+0x40/0x40 [ 171.343207][ T4276] ? process_one_work+0x7b4/0x1160 [ 171.348374][ T4276] process_one_work+0x8ab/0x1160 [ 171.353381][ T4276] ? worker_detach_from_pool+0x240/0x240 [ 171.359249][ T4276] ? _raw_spin_lock_irq+0xb7/0xf0 [ 171.364316][ T4276] ? _raw_spin_lock_irqsave+0x100/0x100 [ 171.369905][ T4276] ? wq_worker_running+0x97/0x190 [ 171.374976][ T4276] worker_thread+0xaf5/0x12a0 [ 171.379733][ T4276] kthread+0x29d/0x330 [ 171.383838][ T4276] ? worker_clr_flags+0x1a0/0x1a0 [ 171.388944][ T4276] ? kthread_blkcg+0xd0/0xd0 [ 171.393582][ T4276] ret_from_fork+0x1f/0x30 [ 171.398069][ T4276] [ 171.402097][ T4276] kobject_add_internal failed for hci4:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 171.415857][ T4276] Bluetooth: hci4: failed to register connection device [ 172.274450][ C1] net_ratelimit: 26 callbacks suppressed [ 172.789013][ T5414] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 172.910971][ T5414] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 173.107028][ T5414] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 173.585957][ T4285] Bluetooth: hci4: command 0x0409 tx timeout [ 173.653257][ T5414] device bridge_slave_1 left promiscuous mode [ 173.679037][ T5414] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.717862][ T5414] bond0: (slave bond_slave_0): Releasing backup interface [ 173.930691][ T5414] team0: Port device team_slave_0 removed [ 173.971307][ T5414] team0: Port device team_slave_1 removed [ 174.006050][ T5414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.032081][ T5414] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.087433][ T5414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.119409][ T5414] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.171786][ T5414] device netdevsim0 left promiscuous mode [ 174.224615][ T5414] bridge0: port 3(netdevsim0) entered disabled state [ 174.269353][ T5418] team0: Port device xfrm0 added [ 174.304598][ T4423] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 174.648360][ T5424] tipc: Enabled bearer , priority 0 [ 175.065280][ T4423] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 175.318299][ T5454] loop4: detected capacity change from 0 to 2048 [ 175.386257][ T5454] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 175.414121][ T5454] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 175.624528][ T4285] Bluetooth: hci4: command 0x0406 tx timeout [ 176.824544][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 177.072460][ T5488] tipc: Started in network mode [ 177.093932][ T5488] tipc: Node identity 4, cluster identity 4711 [ 177.111566][ T5488] tipc: Node number set to 4 [ 177.304457][ C1] net_ratelimit: 31 callbacks suppressed [ 179.258801][ T5485] Driver unsupported XDP return value 0 on prog (id 43) dev N/A, expect packet loss! [ 179.542037][ T5515] netlink: 27 bytes leftover after parsing attributes in process `syz.3.304'. [ 180.985619][ T5534] loop0: detected capacity change from 0 to 4096 [ 181.386379][ T5534] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 181.873098][ T5546] raw_sendmsg: syz.1.310 forgot to set AF_INET. Fix it! [ 182.584573][ C0] net_ratelimit: 30 callbacks suppressed [ 183.199630][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 184.344136][ T5585] jffs2: notice: (5585) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 184.382378][ T5587] loop1: detected capacity change from 0 to 256 [ 184.421726][ T5587] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 184.531388][ T5587] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 185.020202][ T5596] loop3: detected capacity change from 0 to 512 [ 185.141526][ T5596] EXT4-fs: Ignoring removed mblk_io_submit option [ 185.345067][ T5596] EXT4-fs error (device loop3): ext4_iget_extra_inode:4763: inode #15: comm syz.3.326: corrupted in-inode xattr [ 185.475954][ T5596] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.326: couldn't read orphan inode 15 (err -117) [ 185.500566][ T5601] tipc: Started in network mode [ 185.506982][ T5596] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 185.540643][ T5601] tipc: Node identity 4, cluster identity 4711 [ 185.593214][ T5601] tipc: Node number set to 4 [ 186.777966][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 187.624669][ C1] net_ratelimit: 27 callbacks suppressed [ 188.423126][ T5637] loop1: detected capacity change from 0 to 512 [ 188.442722][ T5639] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 188.828295][ T4423] kernel write not supported for file /sequencer2 (pid: 4423 comm: kworker/0:6) [ 190.351475][ T5661] loop0: detected capacity change from 0 to 512 [ 190.733681][ T5661] EXT4-fs: Ignoring removed mblk_io_submit option [ 191.088344][ T5667] loop4: detected capacity change from 0 to 128 [ 191.161589][ T5667] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 191.190406][ T5667] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 191.324764][ T5661] EXT4-fs error (device loop0): ext4_iget_extra_inode:4763: inode #15: comm syz.0.343: corrupted in-inode xattr [ 191.409972][ T5661] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.343: couldn't read orphan inode 15 (err -117) [ 191.451506][ T5661] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 191.505455][ T4393] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 191.546217][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 191.853927][ T5676] capability: warning: `syz.2.348' uses 32-bit capabilities (legacy support in use) [ 191.906644][ T4414] kernel read not supported for file [userfaultfd] (pid: 4414 comm: kworker/0:5) [ 191.963881][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 192.086229][ T5649] loop1: detected capacity change from 0 to 40427 [ 192.149398][ T5649] F2FS-fs (loop1): invalid crc value [ 192.194868][ T3600] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 192.203524][ T5680] netlink: 'syz.0.349': attribute type 1 has an invalid length. [ 192.261959][ T5649] F2FS-fs (loop1): Found nat_bits in checkpoint [ 192.380358][ T5680] 8021q: adding VLAN 0 to HW filter on device bond1 [ 192.425202][ T3600] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 192.443979][ T5683] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 192.489016][ T3600] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 192.503950][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 192.563971][ T3600] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 192.618602][ T3600] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 192.632927][ T5649] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 192.654611][ T3600] usb 3-1: SerialNumber: syz [ 192.725115][ T3600] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 192.743372][ T3600] usb-storage 3-1:1.0: USB Mass Storage device detected [ 192.753941][ T5649] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 192.816572][ T3600] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 192.874087][ T3600] scsi host1: usb-storage 3-1:1.0 [ 192.925537][ C1] net_ratelimit: 40 callbacks suppressed [ 192.932295][ T5688] device syzkaller0 entered promiscuous mode [ 192.980526][ T3600] usb 3-1: USB disconnect, device number 3 [ 193.859198][ T5703] loop1: detected capacity change from 0 to 512 [ 193.916198][ T5703] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 193.962308][ T5703] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 194.038316][ T5703] EXT4-fs (loop1): 1 truncate cleaned up [ 194.072146][ T5703] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 194.114264][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.124937][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.404066][ T4279] EXT4-fs (loop1): unmounting filesystem. [ 198.040884][ T5723] device syzkaller0 entered promiscuous mode [ 198.424551][ C1] net_ratelimit: 34 callbacks suppressed [ 198.501383][ T5742] loop4: detected capacity change from 0 to 512 [ 198.970496][ T5742] EXT4-fs: Ignoring removed mblk_io_submit option [ 199.285268][ T5742] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.361: corrupted in-inode xattr [ 199.343854][ T5742] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.361: couldn't read orphan inode 15 (err -117) [ 199.434620][ T5742] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 200.699841][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 200.832075][ T5770] device syzkaller0 entered promiscuous mode [ 201.387453][ T5772] device syzkaller0 entered promiscuous mode [ 201.452723][ T5788] netlink: 12 bytes leftover after parsing attributes in process `syz.0.376'. [ 201.501822][ T5789] loop1: detected capacity change from 0 to 256 [ 201.835553][ T5789] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 201.879695][ T5789] FAT-fs (loop1): Filesystem has been set read-only [ 201.940830][ T5791] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 203.624488][ C0] net_ratelimit: 34 callbacks suppressed [ 206.434662][ T4276] Bluetooth: hci0: command 0x0406 tx timeout [ 206.434879][ T4285] Bluetooth: hci1: command 0x0406 tx timeout [ 206.447443][ T4276] Bluetooth: hci4: command 0x0406 tx timeout [ 208.564701][ T5796] rxe_eth0 speed is unknown, defaulting to 1000 [ 208.824481][ C0] net_ratelimit: 29 callbacks suppressed [ 209.099897][ T5819] loop1: detected capacity change from 0 to 512 [ 209.147507][ T4362] lg-g15 0003:046D:0A07.0002: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 209.242640][ T5819] EXT4-fs: Ignoring removed mblk_io_submit option [ 209.334089][ T4362] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0002/input/input6 [ 209.338669][ T5823] netlink: 164 bytes leftover after parsing attributes in process `syz.2.383'. [ 209.987680][ T5819] EXT4-fs error (device loop1): ext4_iget_extra_inode:4763: inode #15: comm syz.1.382: corrupted in-inode xattr [ 210.095352][ T5819] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.382: couldn't read orphan inode 15 (err -117) [ 210.402046][ T5819] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 210.523055][ T5838] loop2: detected capacity change from 0 to 512 [ 210.658715][ T5831] fido_id[5831]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 210.685150][ T5838] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 210.761829][ T5838] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 210.867040][ T5838] System zones: 0-1, 15-15, 18-18, 34-34 [ 210.873736][ T5838] EXT4-fs (loop2): orphan cleanup on readonly fs [ 210.943559][ T5838] __quota_error: 12 callbacks suppressed [ 210.943596][ T5838] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 211.005744][ T5846] loop0: detected capacity change from 0 to 512 [ 211.039672][ T5846] EXT4-fs: Ignoring removed oldalloc option [ 211.104740][ T5838] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 211.141356][ T5848] binder_alloc: 5847: binder_alloc_buf, no vma [ 211.224814][ T5838] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 211.239822][ T5846] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 211.295965][ T5838] EXT4-fs error (device loop2): ext4_orphan_get:1435: comm syz.2.386: bad orphan inode 16 [ 211.312278][ T4279] EXT4-fs (loop1): unmounting filesystem. [ 211.315781][ T5846] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.382635][ T5838] ext4_test_bit(bit=15, block=18) = 1 [ 211.437821][ T5838] is_bad_inode(inode)=0 [ 211.442910][ T5838] NEXT_ORPHAN(inode)=0 [ 211.491554][ T5838] max_ino=32 [ 211.507118][ T5838] i_nlink=2 [ 211.510757][ T5838] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 211.661848][ T5838] tipc: Failed to remove unknown binding: 66,0,0/0:306744150/306744152 [ 211.694301][ T5838] tipc: Failed to remove unknown binding: 66,0,0/0:306744150/306744151 [ 211.786401][ T5857] tipc: Failed to remove unknown binding: 66,0,0/0:306744150/306744151 [ 212.916002][ T5855] device syzkaller0 left promiscuous mode [ 212.957191][ T5857] tipc: Failed to remove unknown binding: 66,0,0/0:306744150/306744152 [ 213.027872][ T5857] tipc: Failed to remove unknown binding: 66,0,0/0:306744150/306744151 [ 213.309563][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 213.613710][ T5864] loop2: detected capacity change from 0 to 512 [ 213.689112][ T5864] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 213.920343][ T5869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.396'. [ 213.930463][ T5869] netlink: 32 bytes leftover after parsing attributes in process `syz.4.396'. [ 213.933742][ C0] net_ratelimit: 29 callbacks suppressed [ 213.966838][ T5864] EXT4-fs (loop2): 1 truncate cleaned up [ 213.973058][ T5864] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 213.995401][ T5869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.396'. [ 214.276190][ T5872] netlink: 16 bytes leftover after parsing attributes in process `syz.4.396'. [ 214.294822][ T5869] netlink: 2 bytes leftover after parsing attributes in process `syz.4.396'. [ 214.358725][ T5869] netlink: 32 bytes leftover after parsing attributes in process `syz.4.396'. [ 214.525113][ T5874] bond0 speed is unknown, defaulting to 1000 [ 214.956615][ T5874] bond0 speed is unknown, defaulting to 1000 [ 215.044855][ T5874] bond0 speed is unknown, defaulting to 1000 [ 215.166497][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 215.357257][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 215.599721][ T5874] infiniband syz2: set down [ 215.608288][ T4868] bond0 speed is unknown, defaulting to 1000 [ 215.629170][ T5874] infiniband syz2: added bond0 [ 215.636511][ T5874] rdma_rxe: unable to create cq [ 215.765588][ T5874] infiniband syz2: Couldn't create ib_mad CQ [ 215.861376][ T5874] infiniband syz2: Couldn't open port 1 [ 216.508258][ T5874] RDS/IB: syz2: added [ 216.512590][ T5874] smc: adding ib device syz2 with port count 1 [ 216.521402][ T5874] smc: ib device syz2 port 1 has pnetid [ 216.528299][ T4414] bond0 speed is unknown, defaulting to 1000 [ 216.538858][ T5892] FAULT_INJECTION: forcing a failure. [ 216.538858][ T5892] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 216.561167][ T5874] bond0 speed is unknown, defaulting to 1000 [ 216.591317][ T5892] CPU: 1 PID: 5892 Comm: syz.2.401 Not tainted syzkaller #0 [ 216.599201][ T5892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 216.612441][ T5892] Call Trace: [ 216.616428][ T5892] [ 216.620049][ T5892] dump_stack_lvl+0x188/0x24e [ 216.626969][ T5892] ? show_regs_print_info+0x12/0x12 [ 216.633172][ T5892] ? load_image+0x410/0x410 [ 216.639222][ T5892] ? __lock_acquire+0x7ea0/0x7ea0 [ 216.646193][ T5892] should_fail_ex+0x390/0x4c0 [ 216.651757][ T5892] _copy_from_iter+0x1c0/0x1130 [ 216.662979][ T5892] ? __lock_acquire+0x7ea0/0x7ea0 [ 216.669147][ T5892] ? rcu_is_watching+0x11/0xa0 [ 216.676320][ T5892] ? __alloc_pages+0x290/0x4f0 [ 216.682007][ T5892] ? copyout_mc+0x110/0x110 [ 216.689482][ T5892] ? __virt_addr_valid+0x188/0x540 [ 216.697795][ T5892] ? __virt_addr_valid+0x188/0x540 [ 216.703195][ T5892] ? __virt_addr_valid+0x467/0x540 [ 216.708554][ T5892] ? __phys_addr_symbol+0x2b/0x70 [ 216.713823][ T5892] ? __check_object_size+0x4f6/0xa70 [ 216.720383][ T5892] af_alg_sendmsg+0x13cb/0x1fa0 [ 216.727396][ T5892] ? af_alg_wait_for_data+0x6c0/0x6c0 [ 216.734644][ T5892] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 216.742283][ T5892] ? wait_woken+0x1c0/0x1c0 [ 216.748251][ T5892] ? apparmor_socket_sendmsg+0x8a/0x330 [ 216.754996][ T5892] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 216.762003][ T5892] ? skcipher_sendmsg+0x22/0xe0 [ 216.767427][ T5892] sock_write_iter+0x2d5/0x3e0 [ 216.772623][ T5892] ? sock_read_iter+0x3a0/0x3a0 [ 216.778046][ T5892] ? common_file_perm+0x171/0x1c0 [ 216.784166][ T5892] vfs_write+0x482/0x9a0 [ 216.788774][ T5892] ? file_end_write+0x250/0x250 [ 216.795275][ T5892] ? __fget_files+0x3fc/0x460 [ 216.800640][ T5892] ? __fdget_pos+0x1d4/0x360 [ 216.805625][ T5892] ? ksys_write+0x70/0x260 [ 216.810673][ T5892] ksys_write+0x14d/0x260 [ 216.815113][ T5892] ? __ia32_sys_read+0x80/0x80 [ 216.819950][ T5892] ? lockdep_hardirqs_on+0x94/0x140 [ 216.825565][ T5892] do_syscall_64+0x4c/0xa0 [ 216.830301][ T5892] ? clear_bhb_loop+0x60/0xb0 [ 216.835170][ T5892] ? clear_bhb_loop+0x60/0xb0 [ 216.839936][ T5892] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.846621][ T5892] RIP: 0033:0x7f0fd279e559 [ 216.851550][ T5892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.871505][ T5892] RSP: 002b:00007f0fd3719028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 216.879982][ T5892] RAX: ffffffffffffffda RBX: 00007f0fd2a25fa0 RCX: 00007f0fd279e559 [ 216.889036][ T5892] RDX: 00000000fffffdef RSI: 0000200000000080 RDI: 0000000000000007 [ 216.903091][ T5892] RBP: 00007f0fd2835ad8 R08: 0000000000000000 R09: 0000000000000000 [ 216.911157][ T5892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.920223][ T5892] R13: 00007f0fd2a26038 R14: 00007f0fd2a25fa0 R15: 00007ffcfa8b4718 [ 216.928369][ T5892] [ 217.097462][ T5874] bond0 speed is unknown, defaulting to 1000 [ 217.298367][ T5874] bond0 speed is unknown, defaulting to 1000 [ 217.423892][ T5900] loop1: detected capacity change from 0 to 512 [ 217.518822][ T5902] sch_tbf: burst 5 is lower than device lo mtu (1550) ! [ 217.553352][ T5900] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 217.584988][ T5900] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.821456][ T5874] bond0 speed is unknown, defaulting to 1000 [ 218.052507][ T5911] loop2: detected capacity change from 0 to 512 [ 218.179942][ T5911] EXT4-fs: Ignoring removed mblk_io_submit option [ 218.204862][ T5911] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.403: corrupted in-inode xattr [ 218.219713][ T5911] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.403: couldn't read orphan inode 15 (err -117) [ 218.441607][ T5911] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 219.021760][ C1] net_ratelimit: 30 callbacks suppressed [ 219.103547][ T5874] bond0 speed is unknown, defaulting to 1000 [ 219.512413][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 221.073107][ T5935] FAULT_INJECTION: forcing a failure. [ 221.073107][ T5935] name failslab, interval 1, probability 0, space 0, times 0 [ 221.093680][ T5935] CPU: 0 PID: 5935 Comm: syz.2.414 Not tainted syzkaller #0 [ 221.101981][ T5935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 221.112209][ T5935] Call Trace: [ 221.115762][ T5935] [ 221.118882][ T5935] dump_stack_lvl+0x188/0x24e [ 221.123837][ T5935] ? show_regs_print_info+0x12/0x12 [ 221.129210][ T5935] ? load_image+0x410/0x410 [ 221.134122][ T5935] ? __might_sleep+0xd0/0xd0 [ 221.138961][ T5935] ? __lock_acquire+0x7ea0/0x7ea0 [ 221.144093][ T5935] should_fail_ex+0x390/0x4c0 [ 221.149205][ T5935] should_failslab+0x5/0x20 [ 221.154053][ T5935] slab_pre_alloc_hook+0x59/0x300 [ 221.159507][ T5935] ? __request_module+0x338/0xa00 [ 221.164714][ T5935] __kmem_cache_alloc_node+0x4f/0x270 [ 221.171159][ T5935] ? __request_module+0x338/0xa00 [ 221.177045][ T5935] __kmalloc_node_track_caller+0xa0/0x240 [ 221.183953][ T5935] kstrdup+0x37/0x70 [ 221.187978][ T5935] __request_module+0x338/0xa00 [ 221.192994][ T5935] ? copy_regset_to_user+0x1f0/0x1f0 [ 221.198561][ T5935] ? up_read+0x20/0x20 [ 221.203176][ T5935] crypto_alg_mod_lookup+0xda/0x570 [ 221.209047][ T5935] crypto_alloc_tfm_node+0x14e/0x360 [ 221.214613][ T5935] ? memcpy+0x3c/0x60 [ 221.218667][ T5935] tls_set_sw_offload+0xaee/0x12e0 [ 221.224466][ T5935] tls_setsockopt+0xe0f/0x14c0 [ 221.229911][ T5935] ? build_proto_ops+0x200/0x200 [ 221.235518][ T5935] ? aa_sock_opt_perm+0x74/0x100 [ 221.240934][ T5935] ? sock_common_setsockopt+0x32/0xb0 [ 221.246417][ T5935] ? sock_common_recvmsg+0x190/0x190 [ 221.251791][ T5935] __sys_setsockopt+0x2bf/0x3d0 [ 221.256827][ T5935] __x64_sys_setsockopt+0xb1/0xc0 [ 221.261964][ T5935] do_syscall_64+0x4c/0xa0 [ 221.266562][ T5935] ? clear_bhb_loop+0x60/0xb0 [ 221.271363][ T5935] ? clear_bhb_loop+0x60/0xb0 [ 221.276402][ T5935] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 221.282719][ T5935] RIP: 0033:0x7f0fd279e559 [ 221.287617][ T5935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.287669][ T5935] RSP: 002b:00007f0fd3719028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 221.287717][ T5935] RAX: ffffffffffffffda RBX: 00007f0fd2a25fa0 RCX: 00007f0fd279e559 [ 221.287741][ T5935] RDX: 0000000000000002 RSI: 000000000000011a RDI: 0000000000000003 [ 221.287775][ T5935] RBP: 00007f0fd2835ad8 R08: 0000000000000028 R09: 0000000000000000 [ 221.344294][ T5935] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000000 [ 221.352438][ T5935] R13: 00007f0fd2a26038 R14: 00007f0fd2a25fa0 R15: 00007ffcfa8b4718 [ 221.360567][ T5935] [ 221.446721][ T4279] EXT4-fs (loop1): unmounting filesystem. [ 222.264833][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 222.863115][ T5968] loop0: detected capacity change from 0 to 256 [ 222.885357][ T4378] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 222.900127][ T5969] loop4: detected capacity change from 0 to 512 [ 222.946496][ T5969] EXT4-fs: Ignoring removed mblk_io_submit option [ 223.029352][ T5969] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.422: corrupted in-inode xattr [ 223.060957][ T5969] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.422: couldn't read orphan inode 15 (err -117) [ 223.081090][ T5968] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 223.104608][ T4378] usb 2-1: Using ep0 maxpacket: 16 [ 223.112883][ T4378] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 223.168524][ T4378] usb 2-1: config 1 has no interface number 0 [ 223.195007][ T5969] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 223.206504][ T4378] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 223.247692][ T4378] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 223.250985][ T4414] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 223.470956][ T4378] usb 2-1: config 1 interface 105 has no altsetting 0 [ 223.506267][ T4378] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 223.534504][ T4378] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 223.544825][ T4378] usb 2-1: Product: syz [ 223.549844][ T4378] usb 2-1: Manufacturer: syz [ 223.575693][ T4414] usb 4-1: unable to get BOS descriptor or descriptor too short [ 223.588881][ T4414] usb 4-1: not running at top speed; connect to a high speed hub [ 223.598710][ T4414] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 223.615676][ T4414] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 223.649997][ T4414] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.690274][ T4378] usb 2-1: SerialNumber: syz [ 223.774883][ T4414] usb 4-1: Product: syz [ 223.780078][ T4414] usb 4-1: Manufacturer: syz [ 224.184575][ C0] net_ratelimit: 32 callbacks suppressed [ 224.222131][ T4414] usb 4-1: SerialNumber: syz [ 224.372199][ T5960] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 224.401949][ T5960] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 224.431328][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 224.476593][ T4414] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 224.685963][ T4414] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 224.703673][ T4414] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 224.884971][ T5960] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 224.892753][ T5960] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 225.104590][ T4414] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 225.128710][ T4414] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 225.317850][ T4414] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 225.416881][ T4414] usb 4-1: USB disconnect, device number 2 [ 225.711983][ T4378] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 225.750584][ T4378] aqc111: probe of 2-1:1.105 failed with error -71 [ 225.781678][ T5818] udevd[5818]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 225.853873][ T4378] usb 2-1: USB disconnect, device number 2 [ 225.934692][ T27] audit: type=1800 audit(1792436566.837:334): pid=6005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.434" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 226.053573][ T6000] loop0: detected capacity change from 0 to 8192 [ 228.454666][ T14] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 228.521330][ T6031] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 228.557132][ T6031] overlayfs: failed to set xattr on upper [ 228.659701][ T6031] overlayfs: ...falling back to index=off,metacopy=off. [ 228.679974][ T14] usb 1-1: config 0 has no interfaces? [ 228.697431][ T14] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 228.739703][ T6031] overlayfs: conflicting lowerdir path [ 228.764761][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.832745][ T14] usb 1-1: config 0 descriptor?? [ 229.304653][ C0] net_ratelimit: 33 callbacks suppressed [ 229.653656][ T14] usb 1-1: USB disconnect, device number 3 [ 229.752988][ T6046] loop2: detected capacity change from 0 to 1024 [ 230.233378][ T6052] hfsplus: cannot replace xattr [ 230.482152][ T6046] hfsplus: b-tree write err: -5, ino 8 [ 231.483651][ T6066] loop0: detected capacity change from 0 to 512 [ 231.597321][ T6066] EXT4-fs: Ignoring removed mblk_io_submit option [ 231.730150][ T6066] EXT4-fs error (device loop0): ext4_iget_extra_inode:4763: inode #15: comm syz.0.452: corrupted in-inode xattr [ 231.894071][ T6066] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.452: couldn't read orphan inode 15 (err -117) [ 231.941693][ T6066] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 232.478593][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 232.932971][ T6101] loop2: detected capacity change from 0 to 128 [ 233.000207][ T27] audit: type=1326 audit(1792436573.907:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.0.467" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2879e559 code=0x7ffc0000 [ 233.112901][ T27] audit: type=1326 audit(1792436573.907:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.0.467" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2879e559 code=0x7ffc0000 [ 233.857934][ T27] audit: type=1326 audit(1792436573.907:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.0.467" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2879e559 code=0x7ffc0000 [ 233.984921][ T27] audit: type=1326 audit(1792436573.907:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.0.467" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fed2879e559 code=0x7ffc0000 [ 234.014662][ T27] audit: type=1326 audit(1792436573.957:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.0.467" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2879e559 code=0x7ffc0000 [ 234.218884][ T27] audit: type=1326 audit(1792436573.957:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.0.467" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2879e559 code=0x7ffc0000 [ 234.424639][ T47] net_ratelimit: 38 callbacks suppressed [ 234.504203][ T27] audit: type=1326 audit(1792436573.957:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.0.467" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2879e559 code=0x7ffc0000 [ 234.714589][ T27] audit: type=1326 audit(1792436573.967:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.0.467" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fed2879e559 code=0x7ffc0000 [ 234.802944][ T27] audit: type=1326 audit(1792436573.967:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.0.467" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2879e559 code=0x7ffc0000 [ 234.903010][ T27] audit: type=1326 audit(1792436573.967:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.0.467" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2879e559 code=0x7ffc0000 [ 235.000124][ T6120] 8021q: adding VLAN 0 to HW filter on device bond1 [ 235.182445][ T6121] md/raid10:md0: not clean -- starting background reconstruction [ 235.211274][ T6124] bond1: (slave geneve2): making interface the new active one [ 235.231423][ T6121] md/raid10:md0: active with 1 out of 2 devices [ 235.249444][ T6121] md0: detected capacity change from 0 to 2048 [ 235.275048][ T6124] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 235.302582][ T6134] md: resync of RAID array md0 [ 235.378486][ T6134] md: md0: resync done. [ 235.395508][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 235.504179][ T6136] md: recovery of RAID array md0 [ 235.581439][ T6136] md: md0: recovery done. [ 237.236343][ T6170] FAULT_INJECTION: forcing a failure. [ 237.236343][ T6170] name failslab, interval 1, probability 0, space 0, times 0 [ 237.263742][ T6170] CPU: 1 PID: 6170 Comm: syz.3.485 Not tainted syzkaller #0 [ 237.271530][ T6170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 237.282062][ T6170] Call Trace: [ 237.285429][ T6170] [ 237.288583][ T6170] dump_stack_lvl+0x188/0x24e [ 237.293304][ T6170] ? show_regs_print_info+0x12/0x12 [ 237.298576][ T6170] ? load_image+0x410/0x410 [ 237.298608][ T6170] ? load_image+0x410/0x410 [ 237.298633][ T6170] ? mark_lock+0x94/0x320 [ 237.308845][ T6170] should_fail_ex+0x390/0x4c0 [ 237.318069][ T6170] should_failslab+0x5/0x20 [ 237.318102][ T6170] slab_pre_alloc_hook+0x59/0x300 [ 237.318133][ T6170] ? nsim_fib_event_nb+0xd8/0x1040 [ 237.327803][ T6170] __kmem_cache_alloc_node+0x4f/0x270 [ 237.327844][ T6170] ? nsim_fib_event_nb+0xd8/0x1040 [ 237.327890][ T6170] kmalloc_trace+0x26/0xe0 [ 237.327915][ T6170] nsim_fib_event_nb+0xd8/0x1040 [ 237.327958][ T6170] atomic_notifier_call_chain+0x17a/0x2b0 [ 237.338958][ T6170] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 237.339006][ T6170] call_fib_notifiers+0x2d/0x60 [ 237.348688][ T6170] call_fib_entry_notifiers+0x155/0x200 [ 237.359686][ T6170] ? fib_find_node+0x2f0/0x2f0 [ 237.359738][ T6170] ? lockdep_rtnl_is_held+0x22/0x30 [ 237.359777][ T6170] ? fib_find_node+0x2ad/0x2f0 [ 237.359816][ T6170] fib_table_insert+0xc9d/0x1af0 [ 237.365881][ T6170] ? fib_new_table+0x106/0x2d0 [ 237.365932][ T6170] ip_rt_ioctl+0x4c6/0x1180 [ 237.377684][ T6170] ? fib_validate_source+0x1330/0x1330 [ 237.377748][ T6170] ? __might_fault+0xc2/0x120 [ 237.377775][ T6170] ? __might_fault+0xa6/0x120 [ 237.377808][ T6170] inet_ioctl+0x391/0x460 [ 237.383468][ T6170] ? inet_shutdown+0x370/0x370 [ 237.393648][ T6170] ? slab_free_freelist_hook+0x133/0x1b0 [ 237.403397][ T6170] ? tomoyo_path_number_perm+0x4fb/0x650 [ 237.413446][ T6170] ? __kmem_cache_free+0xb6/0x200 [ 237.423216][ T6170] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 237.433902][ T6170] sock_do_ioctl+0xfb/0x320 [ 237.449159][ T6170] ? sock_show_fdinfo+0xb0/0xb0 [ 237.449239][ T6170] sock_ioctl+0x48a/0x700 [ 237.460881][ T6170] ? sock_poll+0x420/0x420 [ 237.472219][ T6170] ? bpf_lsm_file_ioctl+0x5/0x10 [ 237.488679][ T6170] ? security_file_ioctl+0x7c/0xa0 [ 237.488724][ T6170] ? sock_poll+0x420/0x420 [ 237.488753][ T6170] __se_sys_ioctl+0xfa/0x170 [ 237.498988][ T6170] do_syscall_64+0x4c/0xa0 [ 237.508308][ T6170] ? clear_bhb_loop+0x60/0xb0 [ 237.513045][ T6170] ? clear_bhb_loop+0x60/0xb0 [ 237.517973][ T6170] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 237.524398][ T6170] RIP: 0033:0x7f3e0019e559 [ 237.528893][ T6170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.549385][ T6170] RSP: 002b:00007f3e010b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 237.557984][ T6170] RAX: ffffffffffffffda RBX: 00007f3e00425fa0 RCX: 00007f3e0019e559 [ 237.558014][ T6170] RDX: 0000200000000140 RSI: 000000000000890b RDI: 0000000000000005 [ 237.574676][ T6170] RBP: 00007f3e00235ad8 R08: 0000000000000000 R09: 0000000000000000 [ 237.574700][ T6170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.591757][ T6170] R13: 00007f3e00426038 R14: 00007f3e00425fa0 R15: 00007ffdb633a468 [ 237.591797][ T6170] [ 239.288477][ T6200] Zero length message leads to an empty skb [ 239.544429][ C1] net_ratelimit: 38 callbacks suppressed [ 240.206661][ T6201] md: couldn't update array info. -22 [ 241.400783][ T6218] loop3: detected capacity change from 0 to 512 [ 241.485624][ T6218] ext4: Unknown parameter 'noacl' [ 241.528042][ T5818] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 243.125521][ T4414] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 243.324507][ T4414] usb 4-1: Using ep0 maxpacket: 8 [ 243.341645][ T4414] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.382836][ T4414] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 243.441208][ T4414] usb 4-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice= 0.40 [ 243.480815][ T4414] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.504580][ T4414] usb 4-1: Product: syz [ 243.519456][ T4414] usb 4-1: Manufacturer: syz [ 243.531112][ T4414] usb 4-1: SerialNumber: syz [ 243.813346][ T4414] usb 4-1: unit 0 not found! [ 243.879139][ T4414] usb 4-1: USB disconnect, device number 3 [ 244.168698][ T5818] udevd[5818]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 244.591523][ T6279] loop0: detected capacity change from 0 to 3904 [ 244.613872][ T6278] binder: BINDER_SET_CONTEXT_MGR already set [ 244.653912][ T6278] binder: 6277:6278 ioctl 4018620d 200000000480 returned -16 [ 244.664415][ C0] net_ratelimit: 26 callbacks suppressed [ 244.680526][ T6279] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 244.715655][ T6279] ldm_validate_privheads(): Disk read failed. [ 244.725491][ T6279] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 244.762071][ T6279] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 244.789937][ T6281] binder: 6277:6281 ioctl c0306201 200000000380 returned -14 [ 244.818019][ T6279] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 2. [ 244.861424][ T6279] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 3. [ 244.902875][ T6279] ldm_validate_tocblocks(): Failed to find a valid TOCBLOCK. [ 244.923417][ T6279] loop0: [ 244.949313][ T6279] loop0: partition table partially beyond EOD, truncated [ 245.282602][ T6290] netlink: 16 bytes leftover after parsing attributes in process `syz.1.522'. [ 245.374167][ T6290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.522'. [ 245.509465][ T6290] device bond0 left promiscuous mode [ 245.656885][ T6293] netlink: 'syz.1.522': attribute type 4 has an invalid length. [ 245.680108][ T6293] netlink: 152 bytes leftover after parsing attributes in process `syz.1.522'. [ 245.837933][ T6293] .`: renamed from bond0 [ 245.945787][ T6294] netlink: 'syz.0.520': attribute type 12 has an invalid length. [ 247.371111][ T6324] md: couldn't update array info. -22 [ 248.234509][ T6334] CIFS mount error: No usable UNC path provided in device string! [ 248.234509][ T6334] [ 248.246300][ T6334] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 249.027133][ T6336] device syzkaller0 entered promiscuous mode [ 249.362984][ T6342] netlink: 'syz.0.536': attribute type 11 has an invalid length. [ 250.003614][ C1] net_ratelimit: 26 callbacks suppressed [ 250.823303][ T6354] loop1: detected capacity change from 0 to 512 [ 250.867574][ T6354] EXT4-fs: Ignoring removed nomblk_io_submit option [ 250.959337][ T6354] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a003e01c, mo2=0002] [ 250.975284][ T6354] System zones: 1-12 [ 250.986910][ T6354] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 33261: comm syz.1.540: invalid block [ 251.003653][ T6354] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.540: invalid indirect mapped block 8 (level 2) [ 251.051872][ T6354] EXT4-fs (loop1): 1 truncate cleaned up [ 251.064695][ T6354] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 251.511777][ T4279] EXT4-fs (loop1): unmounting filesystem. [ 252.296790][ T6376] loop3: detected capacity change from 0 to 1024 [ 252.713080][ T6376] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 252.797389][ T6382] device syzkaller0 entered promiscuous mode [ 253.025809][ T6376] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 253.079829][ T6376] EXT4-fs (loop3): unmounting filesystem. [ 253.844229][ T6404] binder: 6400:6404 ioctl c0306201 200000000a00 returned -14 [ 253.903604][ T6404] binder: 6400:6404 ioctl c0306201 200000000b00 returned -14 [ 253.968748][ T6407] kvm: emulating exchange as write [ 254.550018][ T27] kauditd_printk_skb: 22 callbacks suppressed [ 254.550057][ T27] audit: type=1326 audit(1792436595.447:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6414 comm="syz.4.559" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865e79e559 code=0x7ffc0000 [ 255.137215][ T27] audit: type=1326 audit(1792436595.497:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6414 comm="syz.4.559" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865e79e559 code=0x7ffc0000 [ 255.194702][ C1] net_ratelimit: 37 callbacks suppressed [ 255.303240][ T27] audit: type=1326 audit(1792436595.517:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6414 comm="syz.4.559" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865e79e559 code=0x7ffc0000 [ 255.374624][ T6424] loop1: detected capacity change from 0 to 8 [ 255.397423][ T6418] loop4: detected capacity change from 0 to 4096 [ 255.405351][ T27] audit: type=1326 audit(1792436595.537:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6414 comm="syz.4.559" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f865e79e559 code=0x7ffc0000 [ 255.456546][ T6418] EXT4-fs: Ignoring removed mblk_io_submit option [ 255.522962][ T6418] EXT4-fs (loop4): Test dummy encryption mode enabled [ 255.529720][ T27] audit: type=1326 audit(1792436595.547:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6414 comm="syz.4.559" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865e79e559 code=0x7ffc0000 [ 255.559622][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.566283][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.597219][ T6418] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 255.641488][ T6424] squashfs image failed sanity check [ 255.671787][ T27] audit: type=1326 audit(1792436595.617:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6414 comm="syz.4.559" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865e79e559 code=0x7ffc0000 [ 255.701026][ T27] audit: type=1326 audit(1792436595.647:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6414 comm="syz.4.559" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865e79e559 code=0x7ffc0000 [ 255.743259][ T27] audit: type=1326 audit(1792436595.657:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6414 comm="syz.4.559" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865e79e559 code=0x7ffc0000 [ 256.044974][ T27] audit: type=1326 audit(1792436595.667:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6414 comm="syz.4.559" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f865e79e559 code=0x7ffc0000 [ 256.045031][ T27] audit: type=1326 audit(1792436595.717:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6414 comm="syz.4.559" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865e79e559 code=0x7ffc0000 [ 257.039157][ T6418] EXT4-fs (loop4): unmounting filesystem. [ 257.398881][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 257.574763][ T6457] device syzkaller0 entered promiscuous mode [ 258.996712][ T6488] bond0 speed is unknown, defaulting to 1000 [ 259.006974][ T6488] bond0 speed is unknown, defaulting to 1000 [ 259.028102][ T6488] bond0 speed is unknown, defaulting to 1000 [ 259.067788][ T6488] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 259.113495][ T6488] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 259.250954][ T6488] bond0 speed is unknown, defaulting to 1000 [ 259.266845][ T6488] bond0 speed is unknown, defaulting to 1000 [ 259.284900][ T6488] bond0 speed is unknown, defaulting to 1000 [ 259.301378][ T6488] bond0 speed is unknown, defaulting to 1000 [ 259.317996][ T6488] bond0 speed is unknown, defaulting to 1000 [ 259.828437][ T6493] loop4: detected capacity change from 0 to 128 [ 260.252006][ T6493] syz.4.578: attempt to access beyond end of device [ 260.252006][ T6493] loop4: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 260.331743][ T6493] syz.4.578: attempt to access beyond end of device [ 260.331743][ T6493] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 260.364914][ T6493] syz.4.578: attempt to access beyond end of device [ 260.364914][ T6493] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 260.506263][ T6493] syz.4.578: attempt to access beyond end of device [ 260.506263][ T6493] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 260.558650][ T6493] syz.4.578: attempt to access beyond end of device [ 260.558650][ T6493] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 260.663935][ T6493] syz.4.578: attempt to access beyond end of device [ 260.663935][ T6493] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 260.665868][ C1] net_ratelimit: 38 callbacks suppressed [ 260.775459][ T6511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.581'. [ 261.254832][ T6493] syz.4.578: attempt to access beyond end of device [ 261.254832][ T6493] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 261.454783][ T6493] syz.4.578: attempt to access beyond end of device [ 261.454783][ T6493] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 261.504848][ T6493] syz.4.578: attempt to access beyond end of device [ 261.504848][ T6493] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 261.576928][ T6493] syz.4.578: attempt to access beyond end of device [ 261.576928][ T6493] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 262.318795][ T27] kauditd_printk_skb: 66 callbacks suppressed [ 262.318816][ T27] audit: type=1800 audit(1792436603.227:443): pid=6528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.586" name="serialnumber" dev="configfs" ino=45242 res=0 errno=0 [ 263.718521][ T6557] loop2: detected capacity change from 0 to 64 [ 263.924657][ T4868] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 264.127111][ T4868] usb 1-1: config 0 has no interfaces? [ 264.139106][ T4868] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 264.187391][ T4868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.262683][ T4868] usb 1-1: config 0 descriptor?? [ 264.656957][ T4868] usb 1-1: USB disconnect, device number 4 [ 265.628948][ T6590] netlink: 12 bytes leftover after parsing attributes in process `syz.0.598'. [ 265.873206][ T6590] 8021q: adding VLAN 0 to HW filter on device bond2 [ 266.025086][ T6592] device macvlan3 entered promiscuous mode [ 266.031517][ T6592] device bond2 entered promiscuous mode [ 266.104418][ C1] net_ratelimit: 24 callbacks suppressed [ 266.145420][ T6592] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 266.182769][ T6592] team0: Port device macvlan3 added [ 266.239788][ T6597] batman_adv: batadv0: Adding interface: veth0 [ 266.260993][ T6597] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.340185][ T6597] batman_adv: batadv0: Interface activated: veth0 [ 266.373967][ T6598] batman_adv: batadv0: Interface deactivated: veth0 [ 266.539894][ T6598] batman_adv: batadv0: Removing interface: veth0 [ 266.868180][ T6607] binder_alloc: 6605: pid 6605 spamming oneway? 1 buffers allocated for a total size of 6144 [ 266.908176][ T6607] binder: 6605:6607 ioctl c0306201 200000000c80 returned -14 [ 267.271753][ T6588] loop2: detected capacity change from 0 to 512 [ 267.311581][ T6629] FAULT_INJECTION: forcing a failure. [ 267.311581][ T6629] name failslab, interval 1, probability 0, space 0, times 0 [ 267.326110][ T6629] CPU: 0 PID: 6629 Comm: syz.4.609 Not tainted syzkaller #0 [ 267.333567][ T6629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 267.343687][ T6629] Call Trace: [ 267.347025][ T6629] [ 267.350017][ T6629] dump_stack_lvl+0x188/0x24e [ 267.354752][ T6629] ? show_regs_print_info+0x12/0x12 [ 267.360815][ T6629] ? load_image+0x410/0x410 [ 267.365712][ T6629] ? skb_crc32c_csum_help+0x510/0x510 [ 267.371146][ T6629] should_fail_ex+0x390/0x4c0 [ 267.377021][ T6629] should_failslab+0x5/0x20 [ 267.381567][ T6629] slab_pre_alloc_hook+0x59/0x300 [ 267.386643][ T6629] kmem_cache_alloc+0x56/0x2f0 [ 267.391753][ T6629] ? skb_clone+0x1e7/0x370 [ 267.396668][ T6629] skb_clone+0x1e7/0x370 [ 267.401430][ T6629] ? dev_queue_xmit_nit+0x223/0xba0 [ 267.406682][ T6629] dev_queue_xmit_nit+0x23b/0xba0 [ 267.412874][ T6629] ? dev_queue_xmit_nit+0x29/0xba0 [ 267.418093][ T6629] dev_hard_start_xmit+0x158/0x8b0 [ 267.423369][ T6629] ? ktime_get_real_ts64+0x440/0x440 [ 267.428719][ T6629] sch_direct_xmit+0x24d/0x4a0 [ 267.433544][ T6629] ? mrp_pdu_append_vecattr_event+0x1670/0x1670 [ 267.440789][ T6629] ? netem_enqueue+0x1771/0x37f0 [ 267.445909][ T6629] __qdisc_run+0xaf9/0x1660 [ 267.450494][ T6629] __dev_queue_xmit+0x1121/0x3810 [ 267.455741][ T6629] ? __dev_queue_xmit+0x281/0x3810 [ 267.461349][ T6629] ? nf_nat_inet_fn+0x5fa/0xb30 [ 267.466596][ T6629] ? netdev_core_pick_tx+0x360/0x360 [ 267.472453][ T6629] ? mark_lock+0x94/0x320 [ 267.479355][ T6629] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 267.485378][ T6629] ? __lock_acquire+0x7ea0/0x7ea0 [ 267.490645][ T6629] ? lock_chain_count+0x20/0x20 [ 267.496426][ T6629] ? ip_finish_output2+0xa2b/0x1220 [ 267.501848][ T6629] ? ip_finish_output2+0x407/0x1220 [ 267.507366][ T6629] ip_finish_output2+0xc20/0x1220 [ 267.512437][ T6629] ? ip_finish_output2+0x407/0x1220 [ 267.518028][ T6629] ? ip_fragment+0x210/0x210 [ 267.523873][ T6629] ? ip_skb_dst_mtu+0x604/0x870 [ 267.528857][ T6629] ? ip_finish_output+0x3e8/0x4b0 [ 267.534149][ T6629] ip_output+0x2f5/0x470 [ 267.538491][ T6629] ? ip_output+0x57/0x470 [ 267.543049][ T6629] __ip_queue_xmit+0x10e6/0x1c10 [ 267.548291][ T6629] ? tcp_push_one+0xf0/0xf0 [ 267.552839][ T6629] ? __ip_queue_xmit+0x59/0x1c10 [ 267.557831][ T6629] __tcp_transmit_skb+0x1cc4/0x31e0 [ 267.563296][ T6629] ? __tcp_send_ack+0x5a0/0x5a0 [ 267.568829][ T6629] ? tcp_small_queue_check+0x1d6/0x3c0 [ 267.574703][ T6629] tcp_write_xmit+0x192a/0x6420 [ 267.579660][ T6629] __tcp_push_pending_frames+0x92/0x330 [ 267.585272][ T6629] tcp_sendmsg_locked+0x324c/0x39e0 [ 267.590577][ T6629] ? tcp_set_state+0x520/0x520 [ 267.595431][ T6629] tcp_sendmsg+0x2b/0x40 [ 267.600433][ T6629] sock_write_iter+0x2d5/0x3e0 [ 267.605263][ T6629] ? sock_read_iter+0x3a0/0x3a0 [ 267.610183][ T6629] ? common_file_perm+0x171/0x1c0 [ 267.615468][ T6629] vfs_write+0x482/0x9a0 [ 267.619920][ T6629] ? file_end_write+0x250/0x250 [ 267.624868][ T6629] ? __fget_files+0x3fc/0x460 [ 267.629718][ T6629] ? __fdget_pos+0x1d4/0x360 [ 267.634541][ T6629] ? ksys_write+0x70/0x260 [ 267.639116][ T6629] ksys_write+0x14d/0x260 [ 267.643560][ T6629] ? __ia32_sys_read+0x80/0x80 [ 267.648412][ T6629] ? lockdep_hardirqs_on+0x94/0x140 [ 267.653679][ T6629] do_syscall_64+0x4c/0xa0 [ 267.658178][ T6629] ? clear_bhb_loop+0x60/0xb0 [ 267.662910][ T6629] ? clear_bhb_loop+0x60/0xb0 [ 267.667754][ T6629] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 267.673704][ T6629] RIP: 0033:0x7f865e79e559 [ 267.678171][ T6629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.698622][ T6629] RSP: 002b:00007f865c9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 267.707183][ T6629] RAX: ffffffffffffffda RBX: 00007f865ea25fa0 RCX: 00007f865e79e559 [ 267.715285][ T6629] RDX: 0000000000000005 RSI: 0000200000000500 RDI: 0000000000000005 [ 267.723300][ T6629] RBP: 00007f865e835ad8 R08: 0000000000000000 R09: 0000000000000000 [ 267.731334][ T6629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.739451][ T6629] R13: 00007f865ea26038 R14: 00007f865ea25fa0 R15: 00007fff7b209d38 [ 267.747622][ T6629] [ 267.924811][ T6588] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 267.933507][ T6588] FAT-fs (loop2): Filesystem has been set read-only [ 269.597261][ T6652] netlink: 28 bytes leftover after parsing attributes in process `syz.1.618'. [ 271.464456][ C1] net_ratelimit: 36 callbacks suppressed [ 273.541964][ T6696] loop2: detected capacity change from 0 to 1024 [ 273.804683][ T6696] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 274.504603][ T4378] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 274.533439][ T6708] netlink: 28 bytes leftover after parsing attributes in process `syz.4.630'. [ 274.587158][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 274.695312][ T4378] usb 2-1: too many configurations: 151, using maximum allowed: 8 [ 274.744251][ T4378] usb 2-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 274.788216][ T4378] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 274.817112][ T4378] usb 2-1: Product: syz [ 274.821413][ T4378] usb 2-1: Manufacturer: syz [ 274.848770][ T6710] loop4: detected capacity change from 0 to 128 [ 274.855272][ T4378] usb 2-1: SerialNumber: syz [ 274.892483][ T4378] usb 2-1: config 0 descriptor?? [ 275.077456][ T6715] bio_check_eod: 1 callbacks suppressed [ 275.077475][ T6715] syz.4.632: attempt to access beyond end of device [ 275.077475][ T6715] loop4: rw=2049, sector=145, nr_sectors = 352 limit=128 [ 275.284124][ T4721] kworker/u4:14: attempt to access beyond end of device [ 275.284124][ T4721] loop4: rw=1, sector=150, nr_sectors = 1 limit=128 [ 275.334447][ T4721] Buffer I/O error on dev loop4, logical block 150, lost async page write [ 275.473121][ T6722] netlink: 12 bytes leftover after parsing attributes in process `syz.4.635'. [ 275.540482][ T6722] device bond1 entered promiscuous mode [ 275.547559][ T6722] 8021q: adding VLAN 0 to HW filter on device bond1 [ 275.753813][ T6727] device erspan1 entered promiscuous mode [ 275.761664][ T6727] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 275.808017][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 275.829970][ T6732] netlink: 12 bytes leftover after parsing attributes in process `syz.3.637'. [ 275.924975][ T6735] bridge1: port 1(veth3) entered blocking state [ 275.939309][ T6735] bridge1: port 1(veth3) entered disabled state [ 275.957994][ T6735] device veth3 entered promiscuous mode [ 276.129464][ T6732] bridge1: port 2(veth5) entered blocking state [ 276.160536][ T6732] bridge1: port 2(veth5) entered disabled state [ 276.185144][ T6732] device veth5 entered promiscuous mode [ 276.235046][ T6739] smc: net device lo applied user defined pnetid SYZ0 [ 276.273757][ T4378] usb 2-1: USB disconnect, device number 3 [ 277.224413][ C1] net_ratelimit: 24 callbacks suppressed [ 277.506491][ T6760] Bluetooth: MGMT ver 1.22 [ 277.914511][ T4414] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 278.794509][ T4414] usb 2-1: Using ep0 maxpacket: 16 [ 278.816014][ T4414] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.884518][ T4414] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.905767][ T4414] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 279.114653][ T4414] usb 2-1: config 0 interface 0 has no altsetting 0 [ 279.122432][ T4414] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 279.132195][ T4414] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.155551][ T4414] usb 2-1: config 0 descriptor?? [ 280.140604][ T4414] usbhid 2-1:0.0: can't add hid device: -71 [ 280.164695][ T4414] usbhid: probe of 2-1:0.0 failed with error -71 [ 280.195063][ T4414] usb 2-1: USB disconnect, device number 4 [ 280.212233][ T6798] loop0: detected capacity change from 0 to 4096 [ 280.360946][ T6798] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 280.384699][ T6798] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 280.400165][ T6798] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 280.430598][ T6798] loop0: [ 282.434621][ T57] net_ratelimit: 19 callbacks suppressed [ 282.960380][ T6832] hub 8-0:1.0: USB hub found [ 282.969542][ T6832] hub 8-0:1.0: 1 port detected [ 284.127679][ T6801] tipc: Resetting bearer [ 285.486198][ T6853] loop3: detected capacity change from 0 to 2048 [ 285.526264][ T6853] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 285.542318][ T6853] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.848975][ T4378] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 285.998863][ T6801] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.013474][ T6801] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.022951][ T6801] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.059887][ T6801] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.074482][ T4378] usb 4-1: Using ep0 maxpacket: 32 [ 286.087919][ T4378] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 286.098815][ T4378] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.111592][ T4378] usb 4-1: config 0 has no interface number 0 [ 286.141929][ T4378] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 286.161829][ T4378] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.170842][ T4378] usb 4-1: Product: syz [ 286.175548][ T4378] usb 4-1: Manufacturer: syz [ 286.180302][ T4378] usb 4-1: SerialNumber: syz [ 286.205562][ T4378] usb 4-1: config 0 descriptor?? [ 286.223037][ T4378] smsc95xx v2.0.0 [ 286.228182][ T4378] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 286.238948][ T4378] smsc95xx: probe of 4-1:0.67 failed with error -22 [ 286.264697][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 286.371184][ T6801] ------------[ cut here ]------------ [ 286.377664][ T6801] WARNING: CPU: 0 PID: 6801 at net/mac80211/iface.c:532 ieee80211_do_stop+0x1b35/0x2060 [ 286.387974][ T6801] Modules linked in: [ 286.392357][ T6801] CPU: 0 PID: 6801 Comm: syz.0.658 Not tainted syzkaller #0 [ 286.400396][ T6801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 286.411384][ T6801] RIP: 0010:ieee80211_do_stop+0x1b35/0x2060 [ 286.417883][ T6801] Code: f7 49 81 c4 98 06 00 00 4c 89 e0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 ef 04 00 00 41 ff 0c 24 e9 f9 f5 ff ff e8 fb 17 d4 f7 <0f> 0b e9 f0 e8 ff ff e8 ef 17 d4 f7 48 c7 c7 c0 21 a7 8b 89 de e8 [ 286.437842][ T6801] RSP: 0018:ffffc900048f6960 EFLAGS: 00010246 [ 286.444008][ T6801] RAX: ffffffff89ae2e85 RBX: 0000000000000001 RCX: 0000000000080000 [ 286.452188][ T6801] RDX: ffffc90004ec9000 RSI: 000000000007ffff RDI: 0000000000080000 [ 286.460320][ T6801] RBP: ffffc900048f6b48 R08: ffffc900048f6807 R09: 1ffff9200091ed00 [ 286.468767][ T6801] R10: dffffc0000000000 R11: fffff5200091ed01 R12: ffffc900048f6ab0 [ 286.476894][ T6801] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff888078322760 [ 286.485338][ T6801] FS: 00007fed2974c6c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 286.494581][ T6801] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 286.501791][ T6801] CR2: 000000110c3a8efb CR3: 000000001efa7000 CR4: 00000000003506f0 [ 286.509987][ T6801] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 286.519489][ T6801] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 286.527848][ T6801] Call Trace: [ 286.531194][ T6801] [ 286.534177][ T6801] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 286.540765][ T6801] ? rcu_is_watching+0x11/0xa0 [ 286.545679][ T6801] ? __mutex_lock+0x1ab/0xae0 [ 286.550433][ T6801] ? ieee80211_sdata_stop+0x80/0x80 [ 286.555763][ T6801] ? mutex_lock_nested+0x10/0x10 [ 286.560779][ T6801] ? __local_bh_enable_ip+0x136/0x1c0 [ 286.566458][ T6801] ? dev_deactivate_many+0xb49/0xcd0 [ 286.572300][ T6801] ieee80211_stop+0x41f/0x490 [ 286.577351][ T6801] ? dev_deactivate_many+0x242/0xcd0 [ 286.583083][ T6801] ? ieee80211_open+0x200/0x200 [ 286.588091][ T6801] __dev_close_many+0x1d1/0x2b0 [ 286.593203][ T6801] ? dev_close_many+0x400/0x400 [ 286.598184][ T6801] __dev_change_flags+0x2c9/0x6a0 [ 286.603692][ T6801] ? kernel_text_address+0x9c/0xd0 [ 286.609428][ T6801] ? dev_get_flags+0x1c0/0x1c0 [ 286.614755][ T6801] ? netdev_state_change+0xa4/0x170 [ 286.620798][ T6801] ? netdev_features_change+0xd0/0xd0 [ 286.626864][ T6801] dev_change_flags+0x78/0x1a0 [ 286.632071][ T6801] do_setlink+0xbc7/0x29c0 [ 286.636648][ T6801] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 286.644453][ T6801] ? __nla_validate_parse+0x1f67/0x2970 [ 286.650250][ T6801] ? __nla_validate+0x50/0x50 [ 286.655093][ T6801] ? validate_linkmsg+0x3db/0x4c0 [ 286.660659][ T6801] rtnl_newlink+0x10bc/0x1f90 [ 286.665664][ T6801] ? rtnl_newlink+0xae1/0x1f90 [ 286.670528][ T6801] ? rtnl_setlink+0x510/0x510 [ 286.675777][ T6801] ? trace_raw_output_contention_end+0xd0/0xd0 [ 286.682048][ T6801] ? rcu_is_watching+0x11/0xa0 [ 286.687344][ T6801] ? trace_contention_end+0x5f/0x170 [ 286.692699][ T6801] ? __mutex_lock+0x1ab/0xae0 [ 286.697520][ T6801] ? rcu_read_unlock+0x8c/0xa0 [ 286.702373][ T6801] ? rtnl_setlink+0x510/0x510 [ 286.707184][ T6801] rtnetlink_rcv_msg+0x863/0xfb0 [ 286.712330][ T6801] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 286.717680][ T6801] ? rtnetlink_bind+0x80/0x80 [ 286.722463][ T6801] ? __local_bh_enable_ip+0x136/0x1c0 [ 286.728522][ T6801] ? lockdep_hardirqs_on+0x94/0x140 [ 286.734009][ T6801] ? __local_bh_enable_ip+0x136/0x1c0 [ 286.739879][ T6801] ? _local_bh_enable+0xa0/0xa0 [ 286.745150][ T6801] ? __dev_queue_xmit+0x281/0x3810 [ 286.750434][ T6801] ? __dev_queue_xmit+0x281/0x3810 [ 286.756217][ T6801] ? __dev_queue_xmit+0x1d84/0x3810 [ 286.761869][ T6801] ? __dev_queue_xmit+0x281/0x3810 [ 286.768202][ T6801] ? ref_tracker_free+0x682/0x830 [ 286.774295][ T6801] ? refcount_inc+0x70/0x70 [ 286.774450][ T6801] ? memcpy+0x3c/0x60 [ 286.774477][ T6801] ? __copy_skb_header+0x3ba/0x4f0 [ 286.780918][ T6801] ? __skb_clone+0x446/0x6c0 [ 286.780960][ T6801] netlink_rcv_skb+0x1ef/0x440 [ 286.803186][ T6801] ? rtnetlink_bind+0x80/0x80 [ 286.808350][ T6801] ? netlink_ack+0x1160/0x1160 [ 286.813369][ T6801] ? netlink_deliver_tap+0x2e/0x1b0 [ 286.818910][ T6801] netlink_unicast+0x7ad/0x920 [ 286.824194][ T6801] netlink_sendmsg+0x8ad/0xbd0 [ 286.829067][ T6801] ? netlink_getsockopt+0x550/0x550 [ 286.834323][ T6801] ? apparmor_socket_sendmsg+0x8a/0x330 [ 286.834411][ T6801] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 286.834442][ T6801] ? security_socket_sendmsg+0x7c/0xa0 [ 286.851469][ T6801] ? netlink_getsockopt+0x550/0x550 [ 286.856749][ T6801] ____sys_sendmsg+0x5ed/0x9a0 [ 286.861939][ T6801] ? __sys_sendmsg_sock+0x30/0x30 [ 286.861970][ T6801] ? __import_iovec+0x306/0x510 [ 286.872348][ T6801] ? import_iovec+0x6f/0xa0 [ 286.877665][ T6801] ___sys_sendmsg+0x2a2/0x360 [ 286.882678][ T6801] ? __sys_sendmsg+0x2a0/0x2a0 [ 286.887599][ T6801] __se_sys_sendmsg+0x1c3/0x2b0 [ 286.892519][ T6801] ? __x64_sys_sendmsg+0x80/0x80 [ 286.897564][ T6801] ? lockdep_hardirqs_on+0x94/0x140 [ 286.902851][ T6801] do_syscall_64+0x4c/0xa0 [ 286.907387][ T6801] ? clear_bhb_loop+0x60/0xb0 [ 286.912255][ T6801] ? clear_bhb_loop+0x60/0xb0 [ 286.917081][ T6801] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 286.923227][ T6801] RIP: 0033:0x7fed2879e559 [ 286.927762][ T6801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.948275][ T6801] RSP: 002b:00007fed2974c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.957133][ T6801] RAX: ffffffffffffffda RBX: 00007fed28a25fa0 RCX: 00007fed2879e559 [ 286.965268][ T6801] RDX: 0000000000000080 RSI: 0000200000001cc0 RDI: 0000000000000003 [ 286.973826][ T6801] RBP: 00007fed28835ad8 R08: 0000000000000000 R09: 0000000000000000 [ 286.981959][ T6801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.990465][ T6801] R13: 00007fed28a26038 R14: 00007fed28a25fa0 R15: 00007ffcb69bf188 [ 286.998660][ T6801] [ 287.001769][ T6801] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 287.009182][ T6801] CPU: 0 PID: 6801 Comm: syz.0.658 Not tainted syzkaller #0 [ 287.017038][ T6801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 287.027679][ T6801] Call Trace: [ 287.031012][ T6801] [ 287.033987][ T6801] dump_stack_lvl+0x188/0x24e [ 287.038763][ T6801] ? memcpy+0x3c/0x60 [ 287.042806][ T6801] ? show_regs_print_info+0x12/0x12 [ 287.048062][ T6801] ? load_image+0x410/0x410 [ 287.052628][ T6801] panic+0x2d3/0x710 [ 287.056594][ T6801] ? bpf_jit_dump+0xd0/0xd0 [ 287.061171][ T6801] __warn+0x2f8/0x4f0 [ 287.065227][ T6801] ? ieee80211_do_stop+0x1b35/0x2060 [ 287.070601][ T6801] ? ieee80211_do_stop+0x1b35/0x2060 [ 287.076122][ T6801] report_bug+0x2ba/0x4f0 [ 287.080520][ T6801] ? ieee80211_do_stop+0x1b35/0x2060 [ 287.085924][ T6801] handle_bug+0x3a/0x70 [ 287.090146][ T6801] exc_invalid_op+0x16/0x40 [ 287.094801][ T6801] asm_exc_invalid_op+0x16/0x20 [ 287.099711][ T6801] RIP: 0010:ieee80211_do_stop+0x1b35/0x2060 [ 287.105149][ T6864] kcov: kcov_start: t = ffff888028153c00, size = 524288, area = ffffc9000f713000 [ 287.114812][ T6801] Code: f7 49 81 c4 98 06 00 00 4c 89 e0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 ef 04 00 00 41 ff 0c 24 e9 f9 f5 ff ff e8 fb 17 d4 f7 <0f> 0b e9 f0 e8 ff ff e8 ef 17 d4 f7 48 c7 c7 c0 21 a7 8b 89 de e8 [ 287.114826][ C1] nf_conntrack: normal packet for ffff888073a7c300 [ 287.114908][ C1] tcp_conntracks: [ 287.114944][ C1] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 287.115708][ C1] No more buffers in queue [ 287.115738][ C1] eth0: xmit ffff88807b114af0 42:01:0a:80:00:01 [ 287.115812][ C1] Added buffer head 18 to ffff888140190a00 [ 287.115875][ C1] virtqueue callback for ffff888140190a00 (ffffffff858ab890) [ 287.118298][ C1] Sent skb ffff88807b114af0 [ 287.118348][ C1] No more buffers in queue [ 287.145908][ T6866] kcov: kcov_start: t = ffff88802f08da00, size = 524288, area = ffffc9000cdb1000 [ 287.198625][ T6801] RSP: 0018:ffffc900048f6960 EFLAGS: 00010246 [ 287.204844][ T6801] RAX: ffffffff89ae2e85 RBX: 0000000000000001 RCX: 0000000000080000 [ 287.213207][ T6801] RDX: ffffc90004ec9000 RSI: 000000000007ffff RDI: 0000000000080000 [ 287.221211][ T6801] RBP: ffffc900048f6b48 R08: ffffc900048f6807 R09: 1ffff9200091ed00 [ 287.229391][ T6801] R10: dffffc0000000000 R11: fffff5200091ed01 R12: ffffc900048f6ab0 [ 287.237424][ T6801] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff888078322760 [ 287.245547][ T6867] kcov: kcov_start: t = ffff88802b3bbc00, size = 524288, area = ffffc9000ef11000 [ 287.245555][ T6801] ? ieee80211_do_stop+0x1b35/0x2060 [ 287.260522][ T6801] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 287.266844][ T6801] ? rcu_is_watching+0x11/0xa0 [ 287.271691][ T6801] ? __mutex_lock+0x1ab/0xae0 [ 287.276442][ T6801] ? ieee80211_sdata_stop+0x80/0x80 [ 287.281730][ T6801] ? mutex_lock_nested+0x10/0x10 [ 287.287247][ T6801] ? __local_bh_enable_ip+0x136/0x1c0 [ 287.292725][ T6801] ? dev_deactivate_many+0xb49/0xcd0 [ 287.298076][ T6801] ieee80211_stop+0x41f/0x490 [ 287.302812][ T6801] ? dev_deactivate_many+0x242/0xcd0 [ 287.308142][ T6801] ? ieee80211_open+0x200/0x200 [ 287.313239][ T6801] __dev_close_many+0x1d1/0x2b0 [ 287.318408][ T6801] ? dev_close_many+0x400/0x400 [ 287.323331][ T6801] __dev_change_flags+0x2c9/0x6a0 [ 287.328421][ T6801] ? kernel_text_address+0x9c/0xd0 [ 287.333586][ T6801] ? dev_get_flags+0x1c0/0x1c0 [ 287.334955][ C1] nf_conntrack: normal packet for ffff888073a7c300 [ 287.335032][ C1] tcp_conntracks: [ 287.335055][ C1] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 287.335428][ C1] No more buffers in queue [ 287.335461][ C1] eth0: xmit ffff88807b114870 42:01:0a:80:00:01 [ 287.335530][ C1] Added buffer head 18 to ffff888140190a00 [ 287.335605][ C1] virtqueue callback for ffff888140190a00 (ffffffff858ab890) [ 287.336149][ C1] Sent skb ffff88807b114870 [ 287.336193][ C1] No more buffers in queue [ 287.374760][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888024c8c6d8 is addr:fc00:: for cmd:0 at entry:ffff88801df59380 [ 287.374916][ C1] sctp: sctp_addr_wq_timeout_handler: this is on DAD, trying 500 sec later [ 287.410962][ T6801] ? netdev_state_change+0xa4/0x170 [ 287.416577][ T6801] ? netdev_features_change+0xd0/0xd0 [ 287.422031][ T6801] dev_change_flags+0x78/0x1a0 [ 287.426888][ T6801] do_setlink+0xbc7/0x29c0 [ 287.432060][ T6801] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 287.439538][ T6801] ? __nla_validate_parse+0x1f67/0x2970 [ 287.446178][ T6801] ? __nla_validate+0x50/0x50 [ 287.452800][ T6801] ? validate_linkmsg+0x3db/0x4c0 [ 287.461033][ T6801] rtnl_newlink+0x10bc/0x1f90 [ 287.466985][ T6801] ? rtnl_newlink+0xae1/0x1f90 [ 287.471836][ T6801] ? rtnl_setlink+0x510/0x510 [ 287.478596][ T6801] ? trace_raw_output_contention_end+0xd0/0xd0 [ 287.487083][ T6801] ? rcu_is_watching+0x11/0xa0 [ 287.496783][ T6801] ? trace_contention_end+0x5f/0x170 [ 287.505798][ T6801] ? __mutex_lock+0x1ab/0xae0 [ 287.511110][ T6801] ? rcu_read_unlock+0x8c/0xa0 [ 287.518462][ T6801] ? rtnl_setlink+0x510/0x510 [ 287.524884][ T6801] rtnetlink_rcv_msg+0x863/0xfb0 [ 287.530672][ T6801] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 287.536149][ T6801] ? rtnetlink_bind+0x80/0x80 [ 287.542341][ T6801] ? __local_bh_enable_ip+0x136/0x1c0 [ 287.547900][ T6801] ? lockdep_hardirqs_on+0x94/0x140 [ 287.557027][ T6801] ? __local_bh_enable_ip+0x136/0x1c0 [ 287.563298][ T6801] ? _local_bh_enable+0xa0/0xa0 [ 287.569450][ T6801] ? __dev_queue_xmit+0x281/0x3810 [ 287.574737][ T6801] ? __dev_queue_xmit+0x281/0x3810 [ 287.584274][ T6801] ? __dev_queue_xmit+0x1d84/0x3810 [ 287.591028][ T6801] ? __dev_queue_xmit+0x281/0x3810 [ 287.597407][ T6801] ? ref_tracker_free+0x682/0x830 [ 287.604430][ T6801] ? refcount_inc+0x70/0x70 [ 287.610164][ T6801] ? memcpy+0x3c/0x60 [ 287.615011][ T6801] ? __copy_skb_header+0x3ba/0x4f0 [ 287.620823][ T6801] ? __skb_clone+0x446/0x6c0 [ 287.625755][ T6801] netlink_rcv_skb+0x1ef/0x440 [ 287.631111][ T6801] ? rtnetlink_bind+0x80/0x80 [ 287.636554][ T6801] ? netlink_ack+0x1160/0x1160 [ 287.642814][ T6801] ? netlink_deliver_tap+0x2e/0x1b0 [ 287.648187][ T6801] netlink_unicast+0x7ad/0x920 [ 287.657273][ T6801] netlink_sendmsg+0x8ad/0xbd0 [ 287.665262][ T6801] ? netlink_getsockopt+0x550/0x550 [ 287.670529][ T6801] ? apparmor_socket_sendmsg+0x8a/0x330 [ 287.679655][ T6801] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 287.686020][ T6801] ? security_socket_sendmsg+0x7c/0xa0 [ 287.693564][ T6801] ? netlink_getsockopt+0x550/0x550 [ 287.699413][ T6801] ____sys_sendmsg+0x5ed/0x9a0 [ 287.704601][ T6801] ? __sys_sendmsg_sock+0x30/0x30 [ 287.709895][ T6801] ? __import_iovec+0x306/0x510 [ 287.715754][ T6801] ? import_iovec+0x6f/0xa0 [ 287.720825][ T6801] ___sys_sendmsg+0x2a2/0x360 [ 287.726254][ T6801] ? __sys_sendmsg+0x2a0/0x2a0 [ 287.732619][ T6801] __se_sys_sendmsg+0x1c3/0x2b0 [ 287.737834][ T6801] ? __x64_sys_sendmsg+0x80/0x80 [ 287.744647][ T6801] ? lockdep_hardirqs_on+0x94/0x140 [ 287.750488][ T6801] do_syscall_64+0x4c/0xa0 [ 287.755194][ T6801] ? clear_bhb_loop+0x60/0xb0 [ 287.760215][ T6801] ? clear_bhb_loop+0x60/0xb0 [ 287.764829][ C1] nf_conntrack: normal packet for ffff888073a7c300 [ 287.764907][ C1] tcp_conntracks: [ 287.764929][ C1] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 287.765420][ C1] No more buffers in queue [ 287.765453][ C1] eth0: xmit ffff88807b114870 42:01:0a:80:00:01 [ 287.765534][ C1] Added buffer head 18 to ffff888140190a00 [ 287.765599][ C1] virtqueue callback for ffff888140190a00 (ffffffff858ab890) [ 287.765959][ C1] Sent skb ffff88807b114870 [ 287.766010][ C1] No more buffers in queue [ 287.816382][ T6801] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 287.825071][ T6801] RIP: 0033:0x7fed2879e559 [ 287.831540][ T6801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.852204][ T6801] RSP: 002b:00007fed2974c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 287.861837][ T6801] RAX: ffffffffffffffda RBX: 00007fed28a25fa0 RCX: 00007fed2879e559 [ 287.870906][ T6801] RDX: 0000000000000080 RSI: 0000200000001cc0 RDI: 0000000000000003 [ 287.880255][ T6801] RBP: 00007fed28835ad8 R08: 0000000000000000 R09: 0000000000000000 [ 287.884854][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888024c8c6d8 is addr:fc00:: for cmd:0 at entry:ffff88801df59380 [ 287.885009][ C1] sctp: sctp_addr_wq_timeout_handler: this is on DAD, trying 500 sec later [ 287.911821][ T6801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 287.920833][ T6801] R13: 00007fed28a26038 R14: 00007fed28a25fa0 R15: 00007ffcb69bf188 [ 287.928913][ T6801] [ 287.932653][ T6801] Kernel Offset: disabled [ 287.937245][ T6801] Rebooting in 86400 seconds..