last executing test programs: 4m52.014210921s ago: executing program 0 (id=362): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r3, 0x0, 0x0) syz_fuse_handle_req(r3, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/snmp\x00') read$FUSE(r4, &(0x7f0000000440)={0x2020}, 0x2020) 4m50.912003948s ago: executing program 0 (id=368): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() accept4$unix(0xffffffffffffffff, &(0x7f0000000500), 0x0, 0xcf0be2279761c16b) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0x11, 0x2, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 4m49.910822723s ago: executing program 0 (id=373): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = memfd_create(&(0x7f0000000000)='e\xf4\x00\x18\xad\x04', 0x0) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r1, r2, 0x0, 0x8000fb00) 4m46.007502528s ago: executing program 0 (id=389): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = inotify_init1(0x0) inotify_add_watch(r1, 0x0, 0xa4000160) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x6, @mcast2, 0x2}, 0x1c) sendto$inet6(r4, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) socket$inet6(0xa, 0x3, 0x7) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000200)={0xa0000019}) 4m44.991293792s ago: executing program 0 (id=393): syz_emit_vhci(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2505000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ppoll(0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) getpgid(r1) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(0x0, 0x2) ftruncate(r5, 0xffff) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x8000}) 4m43.47598487s ago: executing program 0 (id=397): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) syz_mount_image$ext4(&(0x7f0000000ac0)='ext2\x00', &(0x7f0000000240)='./file1\x00', 0x1a10704, &(0x7f0000001200)={[], [{@flag='lazytime'}, {@uid_gt}, {@smackfsroot={'smackfsroot', 0x3d, '%]'}}, {@permit_directio}, {@euid_eq}, {@appraise_type}, {@uid_lt}]}, 0x1, 0x46b, &(0x7f0000000b00)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) capget(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x16477ab9, 0xe, 0x6, 0x4, 0xa, 0x55}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000040)={0x3, r4, 0x0, 0x80000001, 0xb, 0x1fd, 0x1}) 4m27.855147362s ago: executing program 32 (id=397): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) syz_mount_image$ext4(&(0x7f0000000ac0)='ext2\x00', &(0x7f0000000240)='./file1\x00', 0x1a10704, &(0x7f0000001200)={[], [{@flag='lazytime'}, {@uid_gt}, {@smackfsroot={'smackfsroot', 0x3d, '%]'}}, {@permit_directio}, {@euid_eq}, {@appraise_type}, {@uid_lt}]}, 0x1, 0x46b, &(0x7f0000000b00)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) capget(&(0x7f0000000280)={0x20080522, 0xffffffffffffffff}, &(0x7f00000002c0)={0x16477ab9, 0xe, 0x6, 0x4, 0xa, 0x55}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000040)={0x3, r4, 0x0, 0x80000001, 0xb, 0x1fd, 0x1}) 17.784862055s ago: executing program 1 (id=1217): socket$kcm(0x10, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) sendmmsg(r2, 0x0, 0x0, 0x40408c1) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) 16.422310969s ago: executing program 1 (id=1222): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) accept(r0, &(0x7f0000000180)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x68}}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 13.203361397s ago: executing program 1 (id=1240): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x22a}], 0x1}, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {}, {0x6, 0xb}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 12.431155066s ago: executing program 1 (id=1242): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb029c7e, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xfe) close(0xffffffffffffffff) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x2000000022, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x101002) 10.070123464s ago: executing program 4 (id=1249): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={0x20, 0x18, 0x229, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x280}, @nested={0x4, 0x9}]}, 0x20}}, 0x0) 9.887093549s ago: executing program 4 (id=1252): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 8.983322401s ago: executing program 4 (id=1255): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@pptp={0x18, 0x2, {0x2, @loopback}}, 0x80, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname(r2, &(0x7f0000000180)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, &(0x7f0000000280)=0x80) r4 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="d7888530a45a9e", 0x7}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(0xffffffffffffffff, &(0x7f0000007700), 0x318, 0xfc0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') 8.18322774s ago: executing program 5 (id=1259): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x40, {0xa, 0x0, 0x0, 0xfd}, [@IFA_CACHEINFO={0x14, 0x6, {0x5, 0xda, 0xb68, 0x6}}, @IFA_CACHEINFO={0x14, 0x6, {0x6, 0x40, 0x74e54031, 0x5}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockname(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, r5, 0x701, 0x2070bd24, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40850}, 0x4000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x20, 0x10, 0x100, 0x4, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x20100, 0x8900}}, 0x20}, 0x1, 0xd, 0x0, 0x20008045}, 0x20000000) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b2620df1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc561a62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x4, 0x26d, &(0x7f00000005c0)="$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") r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r6, 0x0, 0x6, &(0x7f0000000380), 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r6, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) 7.650026853s ago: executing program 5 (id=1260): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file2\x00', 0xa00010, &(0x7f00000001c0), 0x21, 0x4bf, &(0x7f00000009c0)="$eJzs3U9vVF0ZAPDn3nbon7fv26Is1KggomgIM+0AlbDCjcYQEiNx5QJqOzRNZzpNZ4q0sijfwUQSV7rwA7gwcWHCyr073bnBhQkq0VATF2PmzhQKnSlF2s6b3t8vObn33DOd5zyd3HPaM+2cAHLrXERsRcSpiLgXEZPd60m3xM1OaT/u5YtH89svHs0n0Wrd+UeStbevxa6vafuo+5yjEfGD70b8ONkbt7GxuTxXrVbWuvVSs7ZaamxsXl6qzS1WFisr5fLszOz09SvXyoeW69nab55/Z+nWD3//uy89++PWN3/a7tZEt213Hoepk3rhVZy24Yi4dRTBBmCom8+pQXeE/0saEZ+JiPPZ/T8ZQ9mrCQCcZK3WZLQmd9cBgJMuzdbAkrQYUeicp2mx2FnDOxPjabXeaF66X19fWeislU1FIb2/VK1Md9cKp6KQtOsz2fnrevmt+pWIOB0RPxsZy+rF+Xp1YZA/+ABAjn30ev7P3gv490hn/gcATrjRQXcAADh25n8AyB/zPwDkj/kfAPLH/A8A+WP+B4D8Mf8DQK58//btdmltdz//euHBxvpy/cHlhUpjuVhbny/O19dWi4v1+mL2mT21dz1ftV5fnbka6w9LzUqjWWpsbN6t1ddXmnezz/W+WykcS1YAwH5On3365yQitm6MZSV27eVgroaTLR10B4CBGRp0B4CBsdsX5Jff8YEeW/S+ofMnQmN7G54cTX+Ao3fx89b/Ia+s/0N+Wf+H/LL+D/nVaiX2/AeAnLHGDxzs/f8evP8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAjk1kJUmL3b3AJyJNi8WIjyNiKgrJ/aVqZToiPomIP40URtr1mUF3GgD4QOnfku7+XxcnL0y83Xoq+c9IdoyIn/zizs8fzjWbazPt6//sXP/WWMST7vXyIPoPAHk09F6P3pmnd+bxHS9fPJrfKYffx/6ef7uzuWg77na3dFqGYzg7jkYhIsb/lXTrHcl7Z97b1uOI+Fyv/JNsbWSqu/Pp2/HbsT8+1vjpG/HTrK1zbH8vPnsIfYG8edoef272uv/SOJcde9//o9kI9eF2xr/tPeNf+mr8G+oz/p07SICxX0dc/cP3+sZ/HPGF4V7xk1fxkz7xLxwwx7988cvn+7W1fhlxMXrH3x2r1Kytlhobm5eXanOLlcXKSrk8OzM7ff3KtXIpW6Mu7axU7/X3G5c+2S//8T7xR9+R/9cOmP+v/nvvR1/ZJ/43vtr79T+zT/z2nPj1A8afG/9t3+272/EX+uT/rtf/0gHjP/vr5sIBHwoAHIPGxubyXLVaWRv0yU6HPi39ceIk1yeDHZeAo/f6ph90TwAAAAAAAAAAAAAAgH6O49+JBp0jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ9f/AgAA//9gOtV4") r0 = openat(0xffffffffffffff9c, 0x0, 0x42042, 0x1cb) fallocate(r0, 0x10, 0x800, 0x8000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000340)='./file1\x00', 0x20fffbfffc) finit_module(0xffffffffffffffff, 0x0, 0x1) mknodat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xc000, 0xe) 7.622411884s ago: executing program 3 (id=1261): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000003b00)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000480)=[{&(0x7f0000002940)="2e7be370f88e801dcbfd6fc9b169aadf2d788f31060000002c9c1ea0d17dc8387758e4428f3e298ab317415fd80b0cf47466f42c8884034bfe", 0x39}], 0x1}}], 0x2, 0x0) 7.539687256s ago: executing program 3 (id=1262): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={0x30, 0x18, 0x229, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x280}, @nested={0x14, 0x9, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x8, 0x0, 0x0, 0x0, @str='\\[%\x00'}]}]}, 0x30}}, 0x0) 7.500965417s ago: executing program 2 (id=1263): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf32ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x40000, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0) 7.460071128s ago: executing program 3 (id=1264): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) read(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, r1, 0x0, 0x5003) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$802154_dgram(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x181800, 0x0) pread64(r5, 0x0, 0x0, 0x4) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000180)={0x400, 0x2, 0x2, 0x0, 0xfe}) syz_emit_ethernet(0x24, &(0x7f0000000040)=ANY=[], 0x0) 6.400881824s ago: executing program 2 (id=1265): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="120000"], 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(0x0, 0x0, 0x8401) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6.319974686s ago: executing program 2 (id=1266): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000050428bd7000fcdbdf2500200000", @ANYRES32=0x0, @ANYBLOB="4000000004000000240012800b0001006970766c616e0000140002800600010000000000060001000200000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0}) 6.172324139s ago: executing program 4 (id=1267): sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x3}}, @sndinfo={0x20, 0x84, 0x2, {0x3, 0xb, 0xffff7ffe, 0xff}}], 0x38, 0x4014}, 0x2c0408d0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)={0x14c, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x11c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x36}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}]}, @CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, @CTA_EXPECT_NAT={0x1c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0xfffffffd}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x8880}, 0x4) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 6.058247822s ago: executing program 4 (id=1268): sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_open_dev$audion(0x0, 0x2a, 0x600) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x7) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r2, 0x9) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r3, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) readv(r1, &(0x7f0000000b40)=[{&(0x7f0000000cc0)=""/154, 0xfdef}, {0x0}, {0x0}], 0x3) landlock_create_ruleset(0x0, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) 5.367620709s ago: executing program 2 (id=1269): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = syz_clone(0x84008000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) fanotify_init(0xf00, 0x1000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x6) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r3 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_OPEN(r3, &(0x7f0000000080)={0x20, 0x8000000000000009, 0x0, {0x0, 0x8}}, 0x20) clock_gettime(0x3, &(0x7f00000000c0)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000040)={r4, r5+10000000}) 5.211969503s ago: executing program 4 (id=1270): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x40, {0xa, 0x0, 0x0, 0xfd}, [@IFA_CACHEINFO={0x14, 0x6, {0x5, 0xda, 0xb68, 0x6}}, @IFA_CACHEINFO={0x14, 0x6, {0x6, 0x40, 0x74e54031, 0x5}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockname(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, r4, 0x701, 0x2070bd24, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40850}, 0x4000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x20, 0x10, 0x100, 0x4, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x20100, 0x8900}}, 0x20}, 0x1, 0xd, 0x0, 0x20008045}, 0x20000000) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b2620df1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc561a62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x4, 0x26d, &(0x7f00000005c0)="$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") r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r5, 0x0, 0x6, &(0x7f0000000380), 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r5, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) 4.970427729s ago: executing program 2 (id=1271): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) accept(r0, &(0x7f0000000180)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x68}}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.759909124s ago: executing program 5 (id=1272): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000003b00)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000480)=[{&(0x7f0000002940)="2e7be370f88e801dcbfd6fc9b169aadf2d788f31060000002c9c1ea0d17dc8387758e4428f3e298ab317415fd80b0cf47466f42c8884034bfe", 0x39}], 0x1}}], 0x2, 0x0) 4.590287838s ago: executing program 5 (id=1273): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="140000"], 0x18}, 0xc800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() syz_open_dev$usbfs(&(0x7f0000000480), 0x800, 0x20082) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000100)={0x0, 0x2, 0x3}) 4.307971945s ago: executing program 3 (id=1274): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) read$midi(r6, &(0x7f00000001c0)=""/70, 0xffffffd8) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) 3.2835125s ago: executing program 3 (id=1275): socket$inet6(0xa, 0x2, 0x0) socket$inet(0x2, 0x80001, 0x84) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) socket$kcm(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x2277e77d6087ccc6}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 3.175282113s ago: executing program 5 (id=1276): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x40000000, 0x0, 0x0, 0x0, 0x0, 0x80000100], 0x700, 0x0, &(0x7f0000000100)=ANY=[]}, 0x78) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x50000, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x8d, 0x8000, 0x0, 0x11030, 0xffffffffffffffff, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1, 0x9, @void, @value, @value=r1}, 0x50) sendfile(r3, r3, 0x0, 0x1002000ff) 2.131951068s ago: executing program 3 (id=1277): syz_emit_vhci(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2505000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ppoll(0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) 1.876895325s ago: executing program 1 (id=1278): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000146000/0x4000)=nil) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 301.446833ms ago: executing program 1 (id=1279): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) 73.190989ms ago: executing program 2 (id=1280): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) listen(r0, 0x5) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "12"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "12"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) close(r0) 0s ago: executing program 5 (id=1281): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000050428bd7000fcdbdf2500200000", @ANYRES32=0x0, @ANYBLOB="4000000004000000240012800b0001006970766c616e0000140002800600010000000000060001000200000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0}) kernel console output (not intermixed with test programs): 45596][ T4194] device veth1_vlan entered promiscuous mode [ 58.952934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.961689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.969759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.977299][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.987543][ T4193] device veth1_macvtap entered promiscuous mode [ 59.006816][ T4186] device veth1_vlan entered promiscuous mode [ 59.030485][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.041142][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.053520][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.066731][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.077425][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.089783][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.102117][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.113325][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.123483][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.133938][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.145472][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.154156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.162587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.170905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.180050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.188791][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.197285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.206129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.214735][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.223474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.241226][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.249631][ T4208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.258058][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.260365][ T4208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.267011][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.284671][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.299719][ T4194] device veth0_macvtap entered promiscuous mode [ 59.312996][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.323756][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.333866][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.344952][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.356599][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.365534][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.373734][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.382993][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.391630][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.400276][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.409043][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.429064][ T4194] device veth1_macvtap entered promiscuous mode [ 59.455274][ T4193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.464231][ T4193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.474616][ T4193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.483652][ T4193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.536896][ T4247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.546552][ T4247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.555811][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.570920][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.584166][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.594962][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.605604][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.615631][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.626538][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.638177][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.660845][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.669657][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.679486][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.688519][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.722210][ T4186] device veth0_macvtap entered promiscuous mode [ 59.735949][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.757613][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.773180][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.783848][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.794657][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.805824][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.816619][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.850028][ T4186] device veth1_macvtap entered promiscuous mode [ 59.858369][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.872084][ T4208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.876533][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.891052][ T4208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.893454][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.907099][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.928676][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.937418][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.948166][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.955827][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.997078][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.010040][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.021431][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.032446][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.042959][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.055037][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.071548][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.084965][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.100775][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.115015][ T4194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.128476][ T4194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.137639][ T4194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.138507][ T4231] Bluetooth: hci2: command 0x040f tx timeout [ 60.152500][ T4231] Bluetooth: hci0: command 0x040f tx timeout [ 60.158724][ T4231] Bluetooth: hci1: command 0x040f tx timeout [ 60.164838][ T4194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.186324][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.197942][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.205761][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.209415][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.221214][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.228966][ T4231] Bluetooth: hci4: command 0x040f tx timeout [ 60.229285][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.235038][ T4231] Bluetooth: hci3: command 0x040f tx timeout [ 60.245758][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.262027][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.286089][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.396624][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.447745][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.494175][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.530069][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.633123][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.675580][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.739214][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.778115][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.934880][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.950895][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.973756][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.985557][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.001717][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.014065][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.118588][ T4247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.123958][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.134485][ T4247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.144190][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.600251][ T4247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.623850][ T4247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.720419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.740603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.751271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.819550][ T4276] loop4: detected capacity change from 0 to 128 [ 61.899049][ T4208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.906896][ T4208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.928602][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.592196][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 62.599066][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 62.605541][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 62.628284][ T4293] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 62.756636][ T26] Bluetooth: hci4: command 0x0419 tx timeout [ 62.781177][ T4227] Bluetooth: hci3: command 0x0419 tx timeout [ 63.049092][ T4300] dummy_hcd dummy_hcd.0: remove, state 4 [ 63.058060][ T4300] usb usb1: USB disconnect, device number 1 [ 63.101237][ T4300] dummy_hcd dummy_hcd.0: stopped [ 63.106210][ T4300] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 65.073460][ T4324] loop0: detected capacity change from 0 to 128 [ 65.274866][ T4330] loop4: detected capacity change from 0 to 2048 [ 65.947717][ C0] sched: RT throttling activated [ 66.985922][ T4339] netlink: 'syz.2.22': attribute type 39 has an invalid length. [ 66.997262][ T4178] loop4: p1 p2 p3 [ 66.997262][ T4178] p1: [ 67.154491][ T4178] loop4: p1 size 16779263 extends beyond EOD, truncated [ 67.290487][ T4178] loop4: p2 size 458752 extends beyond EOD, truncated [ 67.352093][ T4345] loop1: detected capacity change from 0 to 128 [ 67.361602][ T4178] loop4: p3 start 3036741376 is beyond EOD, truncated [ 67.720584][ T4345] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 67.893347][ T4345] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 67.899486][ T4330] loop4: p1 p2 p3 [ 67.899486][ T4330] p1: [ 67.948965][ T4330] loop4: p1 size 16779263 extends beyond EOD, truncated [ 67.978735][ T4330] loop4: p2 size 458752 extends beyond EOD, truncated [ 68.015479][ T4330] loop4: p3 start 3036741376 is beyond EOD, truncated [ 68.095493][ T4345] overlayfs: missing 'lowerdir' [ 68.531287][ T4365] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 68.946605][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 68.999928][ T4175] udevd[4175]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 69.110444][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 69.130459][ T4175] udevd[4175]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 69.476515][ T4381] loop1: detected capacity change from 0 to 128 [ 69.967730][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 71.817729][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 72.162033][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.170088][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.267730][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #39a!!! [ 73.287736][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 74.535962][ T4420] fuse: root generation should be zero [ 74.605146][ T4426] loop4: detected capacity change from 0 to 512 [ 74.664518][ T4426] EXT4-fs (loop4): Ignoring removed nobh option [ 74.755084][ T4426] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 74.776072][ T4426] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61 [ 74.801249][ T4426] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #13: comm syz.4.47: inode has both inline data and extents flags [ 74.838654][ T4426] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.47: couldn't read orphan inode 13 (err -117) [ 74.877230][ T4426] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue. Quota mode: writeback. [ 74.969330][ T4426] EXT4-fs (loop4): shut down requested (2) [ 74.992259][ T4412] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 75.060665][ T4433] loop1: detected capacity change from 0 to 128 [ 76.269497][ T4447] xt_CT: You must specify a L4 protocol and not use inversions on it [ 78.707726][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 80.217732][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #12!!! [ 80.237731][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #12!!! [ 80.257729][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #12!!! [ 80.277728][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #92!!! [ 80.297731][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #192!!! [ 81.278937][ T4489] loop1: detected capacity change from 0 to 128 [ 81.613696][ T1107] cfg80211: failed to load regulatory.db [ 81.675286][ T4490] loop3: detected capacity change from 0 to 2048 [ 82.465902][ T4499] Zero length message leads to an empty skb [ 82.493093][ T4490] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,auto_da_alloc=0x000000000000ffff,noblock_validity,noinit_itable,max_batch_time=0x00000000000003ff,. Quota mode: none. [ 82.531069][ T4505] loop4: detected capacity change from 0 to 256 [ 82.625183][ T4509] loop1: detected capacity change from 0 to 512 [ 82.654331][ T4490] EXT4-fs (loop3): shut down requested (2) [ 82.693002][ T4505] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 83.012987][ T4509] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 83.243155][ T4509] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.397528][ T4521] device syzkaller0 entered promiscuous mode [ 84.373825][ T25] audit: type=1800 audit(1785281178.613:2): pid=4505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.69" name="file1" dev="loop4" ino=1048590 res=0 errno=0 [ 84.767228][ T25] audit: type=1800 audit(1785281178.663:3): pid=4513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.69" name="file1" dev="loop4" ino=1048590 res=0 errno=0 [ 86.812611][ T4533] loop0: detected capacity change from 0 to 4096 [ 86.833412][ T4538] loop2: detected capacity change from 0 to 128 [ 87.781527][ T4533] fscrypt: Error allocating hmac(sha512): -2 [ 87.827937][ T4533] EXT4-fs (loop0): Error processing option "test_dummy_encryption" [-2] [ 87.877522][ T4558] loop4: detected capacity change from 0 to 128 [ 88.118754][ T4558] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,dioread_lock,nouid32,,errors=continue. Quota mode: none. [ 88.140675][ T4558] ext4 filesystem being mounted at /16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 88.233819][ T4569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.84'. [ 88.248574][ T4569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.84'. [ 88.258455][ T4569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.84'. [ 88.268046][ T4569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.84'. [ 88.277409][ T4569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.84'. [ 88.316800][ T4569] loop3: detected capacity change from 0 to 512 [ 89.054495][ T4577] loop2: detected capacity change from 0 to 256 [ 89.102919][ T4569] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 89.116141][ T4569] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 89.126673][ T4577] ======================================================= [ 89.126673][ T4577] WARNING: The mand mount option has been deprecated and [ 89.126673][ T4577] and is ignored by this kernel. Remove the mand [ 89.126673][ T4577] option from the mount to silence this warning. [ 89.126673][ T4577] ======================================================= [ 89.181058][ T4582] loop0: detected capacity change from 0 to 512 [ 89.196005][ T4569] EXT4-fs error (device loop3): __ext4_iget:4919: inode #11: block 2: comm syz.3.84: invalid block [ 89.207248][ T4569] EXT4-fs (loop3): Remounting filesystem read-only [ 89.213921][ T4569] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.84: couldn't read orphan inode 11 (err -117) [ 89.226093][ T4569] EXT4-fs (loop3): Remounting filesystem read-only [ 89.232668][ T4569] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,block_validity,. Quota mode: none. [ 89.275588][ T4582] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 89.314175][ T4582] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 1024: comm syz.0.86: invalid block [ 89.331190][ T4582] EXT4-fs (loop0): 1 truncate cleaned up [ 89.498710][ T4582] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,abort,mb_optimize_scan=0x0000000000000000,minixdf,jqfmt=vfsv0,usrjquota=.",errors=continue. Quota mode: writeback. [ 89.736160][ T4593] loop3: detected capacity change from 0 to 512 [ 90.527355][ T4605] loop2: detected capacity change from 0 to 1024 [ 90.583651][ T4605] overlayfs: upper fs does not support tmpfile. [ 90.819812][ T4610] loop2: detected capacity change from 0 to 128 [ 90.962546][ T4610] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 90.972089][ T4613] netlink: 28 bytes leftover after parsing attributes in process `syz.4.99'. [ 91.057963][ T4610] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.891704][ T4627] loop4: detected capacity change from 0 to 512 [ 92.053625][ T4627] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 92.168121][ T4627] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 93.145670][ T4650] loop1: detected capacity change from 0 to 128 [ 93.758944][ T25] audit: type=1326 audit(1785281188.003:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4655 comm="syz.2.114" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b297dbe99 code=0x0 [ 93.834272][ T4664] loop9: detected capacity change from 0 to 524287936 [ 94.470661][ T4676] device syzkaller0 entered promiscuous mode [ 94.556605][ T4676] tipc: Started in network mode [ 94.562073][ T4676] tipc: Node identity 3a370db39a3d, cluster identity 4711 [ 94.574011][ T4676] tipc: Enabled bearer , priority 0 [ 94.680534][ T4691] SET target dimension over the limit! [ 94.696188][ T4689] loop1: detected capacity change from 0 to 512 [ 94.738712][ T4674] tipc: Resetting bearer [ 94.782197][ T4689] EXT4-fs (loop1): filesystem is read-only [ 94.783697][ T4674] tipc: Disabling bearer [ 98.464251][ T4708] loop0: detected capacity change from 0 to 128 [ 98.568320][ T4706] capability: warning: `syz.1.131' uses 32-bit capabilities (legacy support in use) [ 98.691871][ T4716] capability: warning: `syz.3.132' uses deprecated v2 capabilities in a way that may be insecure [ 100.250122][ T4746] loop0: detected capacity change from 0 to 128 [ 100.935645][ T4750] loop1: detected capacity change from 0 to 2048 [ 101.039983][ T4750] Alternate GPT is invalid, using primary GPT. [ 101.046234][ T4750] loop1: p1 p2 p3 [ 101.252433][ T4760] loop2: detected capacity change from 0 to 7 [ 101.263077][ T4755] syz.1.141 uses obsolete (PF_INET,SOCK_PACKET) [ 101.271740][ T4760] Dev loop2: unable to read RDB block 7 [ 101.303042][ T3557] Alternate GPT is invalid, using primary GPT. [ 101.323417][ T4760] loop2: AHDI p1 p2 p3 [ 101.327833][ T3557] loop1: p1 p2 p3 [ 101.354356][ T4760] loop2: partition table partially beyond EOD, truncated [ 101.374746][ T4760] loop2: p1 start 1601398130 is beyond EOD, truncated [ 101.399701][ T4760] loop2: p2 start 1702059890 is beyond EOD, truncated [ 101.661283][ T4768] ptrace attach of ""[4769] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[4768] [ 102.480238][ T3850] device veth1_vlan left promiscuous mode [ 102.511093][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 102.535798][ T4771] loop1: detected capacity change from 0 to 512 [ 103.487232][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 103.500132][ T4175] udevd[4175]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 103.512734][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 103.629192][ T4787] loop4: detected capacity change from 0 to 128 [ 103.699605][ T4771] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #2: comm syz.1.145: missing EA_INODE flag [ 103.723828][ T4771] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.145: error while reading EA inode 2 err=-117 [ 103.750256][ T4771] EXT4-fs (loop1): 1 orphan inode deleted [ 103.770617][ T4771] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 105.084865][ T25] audit: type=1326 audit(1785281198.881:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4796 comm="syz.2.152" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b297dbe99 code=0x0 [ 105.252803][ T4810] device bridge1 entered promiscuous mode [ 105.287018][ T4175] udevd[4175]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 105.302804][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 105.322820][ T4534] udevd[4534]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 106.244025][ T4830] fuse: Bad value for 'fd' [ 106.255163][ T4829] overlayfs: failed to clone upperpath [ 106.266461][ T4823] loop2: detected capacity change from 0 to 512 [ 106.350338][ T4832] loop0: detected capacity change from 0 to 128 [ 106.524225][ T4823] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 106.591746][ T4842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.166'. [ 106.820885][ T4823] EXT4-fs (loop2): failed to initialize system zone (-117) [ 106.830392][ T4823] EXT4-fs (loop2): mount failed [ 106.836870][ T4842] team0: Port device team_slave_0 removed [ 107.325328][ T4851] loop0: detected capacity change from 0 to 128 [ 107.503165][ T4854] device syzkaller0 entered promiscuous mode [ 107.582529][ T4851] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 107.675961][ T4859] loop1: detected capacity change from 0 to 512 [ 107.682647][ T4851] FAT-fs (loop0): Filesystem has been set read-only [ 107.744335][ T4851] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 107.830583][ T4851] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 107.848404][ T4859] EXT4-fs error (device loop1): ext4_quota_enable:6440: comm syz.1.170: Bad quota inum: 2, type: 2 [ 107.857784][ T4851] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 107.867514][ T4851] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 107.883173][ T4851] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 107.918182][ T4859] EXT4-fs warning (device loop1): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 107.947176][ T4851] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 107.979382][ T4851] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 108.046778][ T4859] EXT4-fs (loop1): mount failed [ 108.158932][ T4851] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 108.192761][ T4851] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 108.611710][ T4851] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 108.827793][ T4851] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 108.836256][ T4851] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 108.845091][ T4851] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 108.903271][ T4851] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 108.914733][ T4851] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 108.923256][ T4851] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 108.932503][ T4851] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 108.941303][ T4851] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 108.949772][ T4851] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 108.958868][ T4851] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 108.967292][ T4851] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 108.975767][ T4851] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 108.986833][ T4851] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 108.995378][ T4851] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 109.005076][ T4851] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 109.013636][ T4851] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 109.022717][ T4851] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 109.047804][ T4230] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 109.068677][ T4851] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 109.118337][ T4881] netlink: 48 bytes leftover after parsing attributes in process `syz.3.176'. [ 109.125424][ T4851] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 109.236197][ T4851] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 109.407405][ T4851] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 109.458444][ T4230] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 109.543317][ T4230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.592878][ T4851] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 109.724830][ T4851] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 109.735191][ T4851] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 109.746315][ T25] audit: type=1800 audit(1785281203.981:6): pid=4851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.168" name="file1" dev="loop0" ino=1048605 res=0 errno=0 [ 109.763915][ T4851] syz.0.168 (4851) used greatest stack depth: 20496 bytes left [ 109.777130][ T4230] usb 2-1: config 0 descriptor?? [ 109.956087][ T4888] loop2: detected capacity change from 0 to 128 [ 110.112838][ T4859] xt_nfacct: accounting object `syz1' does not exist [ 110.841966][ T4230] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 110.850876][ T4230] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 110.882244][ T4230] [drm:udl_init] *ERROR* Selecting channel failed [ 110.930166][ T4906] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 111.035928][ T4230] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 111.061186][ T4230] [drm] Initialized udl on minor 2 [ 111.937524][ T4230] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 111.962465][ T4930] loop4: detected capacity change from 0 to 512 [ 112.028663][ T4937] loop2: detected capacity change from 0 to 128 [ 112.095465][ T4230] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 112.113745][ T4930] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 112.116783][ T4230] usb 2-1: USB disconnect, device number 2 [ 112.130803][ T4231] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 112.142835][ T4231] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 112.143883][ T4930] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.192: iget: bad i_size value: 360287970189639680 [ 112.151956][ T4231] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 112.335239][ T4187] Bluetooth: Wrong link type (-71) [ 112.529893][ T4930] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.192: couldn't read orphan inode 15 (err -117) [ 112.616187][ T4930] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 112.721937][ T4930] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #2: block 3: comm syz.4.192: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 112.778964][ T4949] loop0: detected capacity change from 0 to 512 [ 112.873219][ T4949] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 112.976826][ T4949] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 112.994886][ T4949] EXT4-fs (loop0): 1 truncate cleaned up [ 113.002921][ T4949] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,nobarrier,debug_want_extra_isize=0x0000000000000068,init_itable=0x0000000000000200,nombcache,max_batch_time=0x0000000000000007,,errors=continue. Quota mode: none. [ 113.140582][ T4959] loop1: detected capacity change from 0 to 1024 [ 114.508667][ T4959] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 115.016520][ T4989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.206'. [ 115.539990][ T4998] loop2: detected capacity change from 0 to 128 [ 117.284111][ T5022] loop2: detected capacity change from 0 to 512 [ 118.176893][ T5022] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 118.244189][ T5022] ext4 filesystem being mounted at /43/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.456080][ T5058] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.215: corrupted xattr block 33 [ 119.632433][ T5055] MPTCP: addr_signal error, add_addr=1, echo=0 [ 120.355982][ T5076] loop1: detected capacity change from 0 to 4096 [ 122.464793][ T5076] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,,errors=continue. Quota mode: writeback. [ 123.075506][ T5106] netlink: 'syz.3.237': attribute type 1 has an invalid length. [ 123.277446][ T5111] loop0: detected capacity change from 0 to 4096 [ 123.341438][ T5111] EXT4-fs (loop0): Test dummy encryption mode enabled [ 123.373962][ T5111] EXT4-fs (loop0): Test dummy encryption mode enabled [ 123.490586][ T5111] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,test_dummy_encryption=v1,noload,test_dummy_encryption=v1,nodiscard,data_err=ignore,usrquota,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 124.648064][ T5111] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 124.835341][ T5154] device syzkaller0 entered promiscuous mode [ 126.713230][ T5155] Process accounting resumed [ 127.477899][ T5186] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 127.786014][ T5202] netlink: 20 bytes leftover after parsing attributes in process `syz.0.262'. [ 128.010911][ T5210] loop0: detected capacity change from 0 to 512 [ 128.154439][ T5217] loop1: detected capacity change from 0 to 512 [ 128.169106][ T5210] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 128.223766][ T5217] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 128.328308][ T5210] ext4 filesystem being mounted at /52/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.416760][ T5217] EXT4-fs (loop1): 1 truncate cleaned up [ 128.618762][ T5217] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,errors=remount-ro,nombcache,. Quota mode: none. [ 130.678703][ T5237] ODEBUG: Out of memory. ODEBUG disabled [ 131.238549][ T5237] syz.0.269 (5237): drop_caches: 2 [ 131.864077][ T5248] loop0: detected capacity change from 0 to 512 [ 132.016335][ T5244] loop2: detected capacity change from 0 to 512 [ 132.659724][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.666047][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.682909][ T5244] EXT4-fs (loop2): Unrecognized mount option "uid>00000000000000000000" or missing value [ 132.759092][ T5248] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 132.967787][ T5248] EXT4-fs error (device loop0): __ext4_iget:4919: inode #11: block 2: comm syz.0.274: invalid block [ 132.980720][ T5248] EXT4-fs (loop0): Remounting filesystem read-only [ 132.987540][ T5248] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.274: couldn't read orphan inode 11 (err -117) [ 133.002875][ T5248] EXT4-fs (loop0): Remounting filesystem read-only [ 133.009523][ T5248] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,block_validity,. Quota mode: none. [ 133.471684][ T5260] device syzkaller0 entered promiscuous mode [ 134.550556][ T5272] dlm: non-version read from control device 0 [ 135.217944][ T5282] binder: BINDER_SET_CONTEXT_MGR already set [ 135.272793][ T5282] binder: 5281:5282 ioctl 4018620d 200000000100 returned -16 [ 135.307541][ T5284] binder: BINDER_SET_CONTEXT_MGR already set [ 135.384631][ T5284] binder: 5281:5284 ioctl 4018620d 200000001000 returned -16 [ 135.533288][ T5114] Set syz1 is full, maxelem 65536 reached [ 136.009814][ T5289] loop2: detected capacity change from 0 to 2048 [ 136.217325][ T5289] EXT4-fs (loop2): Unsupported blocksize for fs-verity [ 136.606067][ T5299] ubi31: attaching mtd0 [ 136.612118][ T5299] ubi31: scanning is finished [ 136.616844][ T5299] ubi31 error: ubi_read_volume_table: the layout volume was not found [ 137.000994][ T5299] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 137.116481][ T5304] loop0: detected capacity change from 0 to 512 [ 137.169940][ T5304] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 137.403294][ T5304] EXT4-fs error (device loop0): __ext4_iget:4919: inode #11: block 2: comm syz.0.287: invalid block [ 137.415361][ T5304] EXT4-fs (loop0): Remounting filesystem read-only [ 137.422619][ T5304] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.287: couldn't read orphan inode 11 (err -117) [ 137.439423][ T5304] EXT4-fs (loop0): Remounting filesystem read-only [ 137.445991][ T5304] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,block_validity,. Quota mode: none. [ 137.735093][ T5310] loop4: detected capacity change from 0 to 1024 [ 138.082381][ T5310] EXT4-fs (loop4): Invalid want_extra_isize 7 [ 139.102502][ T5326] loop4: detected capacity change from 0 to 512 [ 139.158292][ T5326] EXT4-fs (loop4): Unrecognized mount option "uid>00000000000000000000" or missing value [ 139.295303][ T5313] ptrace attach of ""[5328] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5313] [ 140.962706][ T5337] binder: BINDER_SET_CONTEXT_MGR already set [ 141.137807][ T5337] binder: 5336:5337 ioctl 4018620d 200000000100 returned -16 [ 141.171432][ T5337] binder: BINDER_SET_CONTEXT_MGR already set [ 141.837784][ T5337] binder: 5336:5337 ioctl 4018620d 200000001000 returned -16 [ 142.413511][ T5364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.301'. [ 142.423222][ T5364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.301'. [ 142.432327][ T5364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.301'. [ 142.441883][ T5364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.301'. [ 142.450820][ T5364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.301'. [ 143.802024][ T5378] loop0: detected capacity change from 0 to 512 [ 143.881375][ T5378] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 143.949753][ T5378] EXT4-fs (loop0): 1 truncate cleaned up [ 143.986985][ T5378] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,nobarrier,debug_want_extra_isize=0x0000000000000068,init_itable=0x0000000000000200,nombcache,max_batch_time=0x0000000000000007,,errors=continue. Quota mode: none. [ 144.009281][ C0] vkms_vblank_simulate: vblank timer overrun [ 144.070830][ T5386] loop2: detected capacity change from 0 to 512 [ 144.331049][ T5386] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 144.439585][ T5386] ext4 filesystem being mounted at /62/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.736754][ T5394] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.308: corrupted xattr block 33 [ 145.907298][ T5401] loop0: detected capacity change from 0 to 512 [ 146.153635][ T5401] EXT4-fs (loop0): Unrecognized mount option "uid>00000000000000000000" or missing value [ 150.154787][ T5429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.319'. [ 150.164345][ T5429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.319'. [ 150.173404][ T5429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.319'. [ 150.182425][ T5429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.319'. [ 150.191336][ T5429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.319'. [ 150.205396][ T5429] loop1: detected capacity change from 0 to 512 [ 150.361638][ T5429] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 150.880011][ T5429] EXT4-fs error (device loop1): __ext4_iget:4919: inode #11: block 2: comm syz.1.319: invalid block [ 150.891433][ T5429] EXT4-fs (loop1): Remounting filesystem read-only [ 150.898054][ T5429] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.319: couldn't read orphan inode 11 (err -117) [ 150.920880][ T5429] EXT4-fs (loop1): Remounting filesystem read-only [ 150.927409][ T5429] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,block_validity,. Quota mode: none. [ 151.057716][ C0] hrtimer: interrupt took 39919 ns [ 151.971557][ T5455] loop0: detected capacity change from 0 to 1024 [ 151.987755][ T5435] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 384: padding at end of block bitmap is not set [ 152.006881][ T5435] EXT4-fs (loop1): Remounting filesystem read-only [ 152.040545][ T5455] EXT4-fs (loop0): Invalid want_extra_isize 7 [ 153.744826][ T5487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.334'. [ 153.757547][ T5487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.334'. [ 153.767622][ T5487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.334'. [ 153.777646][ T5487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.334'. [ 153.787199][ T5487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.334'. [ 155.120684][ T5494] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 155.292360][ T5497] loop2: detected capacity change from 0 to 512 [ 155.384915][ T5497] EXT4-fs (loop2): Unrecognized mount option "uid>00000000000000000000" or missing value [ 156.113140][ T5513] device syzkaller0 entered promiscuous mode [ 156.244784][ T5515] binder: BINDER_SET_CONTEXT_MGR already set [ 156.260669][ T5515] binder: 5514:5515 ioctl 4018620d 200000000100 returned -16 [ 156.285334][ T5515] binder: BINDER_SET_CONTEXT_MGR already set [ 156.304397][ T5515] binder: 5514:5515 ioctl 4018620d 200000001000 returned -16 [ 158.593730][ T5540] loop4: detected capacity change from 0 to 512 [ 158.825126][ T5540] EXT4-fs (loop4): Unrecognized mount option "uid>00000000000000000000" or missing value [ 158.928241][ T5546] syz.0.353 (5546): drop_caches: 2 [ 162.768233][ T5604] syz.0.368 (5604): drop_caches: 2 [ 163.784020][ T5616] binder: BINDER_SET_CONTEXT_MGR already set [ 163.814408][ T5616] binder: 5615:5616 ioctl 4018620d 200000001000 returned -16 [ 166.174239][ T5654] loop4: detected capacity change from 0 to 512 [ 166.287354][ T5654] EXT4-fs (loop4): Unrecognized mount option "uid>00000000000000000000" or missing value [ 167.427007][ T5668] binder: BINDER_SET_CONTEXT_MGR already set [ 167.448829][ T5668] binder: 5667:5668 ioctl 4018620d 200000000100 returned -16 [ 167.494217][ T5668] binder: BINDER_SET_CONTEXT_MGR already set [ 167.500355][ T5668] binder: 5667:5668 ioctl 4018620d 200000001000 returned -16 [ 170.174770][ T5706] loop0: detected capacity change from 0 to 512 [ 170.227222][ T5713] loop2: detected capacity change from 0 to 512 [ 170.252724][ T5706] EXT4-fs (loop0): Unrecognized mount option "uid>00000000000000000000" or missing value [ 171.044459][ T5713] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 171.075551][ T5713] ext4 filesystem being mounted at /83/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.616145][ T5725] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.400: corrupted xattr block 33 [ 172.516532][ T5734] binder: BINDER_SET_CONTEXT_MGR already set [ 172.715754][ T5735] binder: BINDER_SET_CONTEXT_MGR already set [ 172.758233][ T5734] binder: 5732:5734 ioctl 4018620d 200000000100 returned -16 [ 172.787725][ T5735] binder: 5732:5735 ioctl 4018620d 200000001000 returned -16 [ 177.566182][ T5777] device syzkaller0 entered promiscuous mode [ 178.595528][ T5795] loop4: detected capacity change from 0 to 256 [ 179.354837][ T5803] loop4: detected capacity change from 0 to 512 [ 179.402505][ T5803] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 179.516479][ T5803] EXT4-fs (loop4): 1 truncate cleaned up [ 179.523352][ T5803] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,nobarrier,debug_want_extra_isize=0x0000000000000068,init_itable=0x0000000000000200,nombcache,max_batch_time=0x0000000000000007,,errors=continue. Quota mode: none. [ 180.809337][ T4227] Bluetooth: hci0: command 0x0406 tx timeout [ 180.815379][ T4227] Bluetooth: hci1: command 0x0406 tx timeout [ 180.991566][ T4227] Bluetooth: hci3: command 0x0406 tx timeout [ 181.001711][ T4227] Bluetooth: hci2: command 0x0406 tx timeout [ 181.011818][ T4227] Bluetooth: hci4: command 0x0406 tx timeout [ 182.876459][ T5839] netlink: 28 bytes leftover after parsing attributes in process `syz.2.433'. [ 184.215129][ T5854] loop2: detected capacity change from 0 to 512 [ 184.273832][ T5854] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 184.349463][ T5854] EXT4-fs (loop2): 1 truncate cleaned up [ 184.355141][ T5854] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,nobarrier,debug_want_extra_isize=0x0000000000000068,init_itable=0x0000000000000200,nombcache,max_batch_time=0x0000000000000007,,errors=continue. Quota mode: none. [ 187.153342][ T5877] loop5: detected capacity change from 0 to 7 [ 187.189450][ T5877] Dev loop5: unable to read RDB block 7 [ 187.195071][ T5877] loop5: AHDI p1 p2 p3 [ 187.224295][ T5877] loop5: partition table partially beyond EOD, truncated [ 187.243189][ T5877] loop5: p1 start 1818582900 is beyond EOD, truncated [ 187.282960][ T5877] loop5: p3 start 335544320 is beyond EOD, truncated [ 187.952220][ T5872] chnl_net:caif_netlink_parms(): no params data found [ 188.292194][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.299655][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.315127][ T5872] device bridge_slave_0 entered promiscuous mode [ 188.887819][ T4535] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.925307][ T5900] loop4: detected capacity change from 0 to 512 [ 188.954317][ T5900] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 188.979714][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.995644][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.003723][ T5872] device bridge_slave_1 entered promiscuous mode [ 189.987936][ T4228] Bluetooth: hci5: command 0x0409 tx timeout [ 190.067462][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.099184][ T5900] EXT4-fs (loop4): 1 truncate cleaned up [ 190.104867][ T5900] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,nobarrier,debug_want_extra_isize=0x0000000000000068,init_itable=0x0000000000000200,nombcache,max_batch_time=0x0000000000000007,,errors=continue. Quota mode: none. [ 190.250992][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.517749][ T5918] ptrace attach of ""[5919] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5918] [ 191.663289][ T4535] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.240151][ T21] Bluetooth: hci5: command 0x041b tx timeout [ 192.261885][ T5872] team0: Port device team_slave_0 added [ 192.269473][ T5872] team0: Port device team_slave_1 added [ 192.288860][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.295864][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.322382][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.334756][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.341793][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.448819][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.515629][ T4535] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.704749][ T5934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.459'. [ 192.725951][ T5934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.459'. [ 192.937086][ T4535] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.621062][ T5872] device hsr_slave_0 entered promiscuous mode [ 193.649164][ T5872] device hsr_slave_1 entered promiscuous mode [ 193.679383][ T5872] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 193.709637][ T5872] Cannot create hsr debugfs directory [ 194.037313][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.054138][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.298105][ T21] Bluetooth: hci5: command 0x040f tx timeout [ 194.901320][ T5963] ptrace attach of ""[5964] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5963] [ 196.260096][ T5976] netlink: 'syz.2.468': attribute type 3 has an invalid length. [ 196.363533][ T5976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.468'. [ 196.457866][ T4230] Bluetooth: hci5: command 0x0419 tx timeout [ 197.652969][ T5987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.472'. [ 197.724730][ T5987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.472'. [ 197.867746][ T5872] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 197.917243][ T5872] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 198.002365][ T6000] syz.1.474 (6000): drop_caches: 2 [ 198.174498][ T5872] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 198.195560][ T6003] loop2: detected capacity change from 0 to 256 [ 198.228191][ T5872] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 198.550190][ T6016] ptrace attach of ""[6017] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6016] [ 199.453838][ T6023] autofs4:pid:6023:autofs_fill_super: called with bogus options [ 199.659841][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.694644][ T5872] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.828413][ T5872] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 200.074820][ T5872] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 200.922676][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 200.932908][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 200.941068][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 200.952685][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 200.962609][ T4459] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.969722][ T4459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.978894][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 200.987917][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 200.996330][ T4459] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.003449][ T4459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.016462][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 201.025544][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 201.034535][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 201.044888][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 201.053957][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 201.063305][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 201.072218][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 201.080841][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 201.090442][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 201.101508][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 201.114815][ T6039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.485'. [ 201.137942][ T6039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.485'. [ 201.241968][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 201.272612][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 201.348997][ T6054] syz.2.487 (6054): drop_caches: 2 [ 201.516396][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 202.627084][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 202.635631][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 202.651592][ T6068] autofs4:pid:6068:autofs_fill_super: called with bogus options [ 202.724605][ T6069] ptrace attach of ""[6070] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6069] [ 203.496389][ T6073] loop2: detected capacity change from 0 to 2048 [ 204.684779][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.770549][ T6073] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 205.212576][ T6099] loop4: detected capacity change from 0 to 128 [ 205.665324][ T6097] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 206.798365][ T6106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.499'. [ 206.807229][ T6106] netlink: 4 bytes leftover after parsing attributes in process `syz.4.499'. [ 207.089562][ T6125] ptrace attach of ""[6126] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6125] [ 207.713221][ T6128] autofs4:pid:6128:autofs_fill_super: called with bogus options [ 209.154894][ T4535] device hsr_slave_0 left promiscuous mode [ 209.297754][ T4535] device hsr_slave_1 left promiscuous mode [ 209.310785][ T4535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.391699][ T6152] binder: BINDER_SET_CONTEXT_MGR already set [ 209.399374][ T4535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.429633][ T6152] binder: 6151:6152 ioctl 4018620d 200000000100 returned -16 [ 209.462239][ T4535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.483971][ T6152] binder: BINDER_SET_CONTEXT_MGR already set [ 209.491186][ T4535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.507566][ T4535] device bridge_slave_1 left promiscuous mode [ 209.515668][ T4535] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.523175][ T6152] binder: 6151:6152 ioctl 4018620d 200000001000 returned -16 [ 209.546064][ T4535] device bridge_slave_0 left promiscuous mode [ 209.571985][ T4535] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.652568][ T4535] device veth1_macvtap left promiscuous mode [ 209.685806][ T4535] device veth0_macvtap left promiscuous mode [ 209.716279][ T4535] device veth0_vlan left promiscuous mode [ 210.810063][ T6165] loop1: detected capacity change from 0 to 512 [ 210.876394][ T6165] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 210.958499][ T6165] EXT4-fs (loop1): 1 truncate cleaned up [ 210.964659][ T6165] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,nobarrier,debug_want_extra_isize=0x0000000000000068,init_itable=0x0000000000000200,nombcache,max_batch_time=0x0000000000000007,,errors=continue. Quota mode: none. [ 212.493463][ T4535] team0 (unregistering): Port device team_slave_1 removed [ 212.946506][ T4535] team0 (unregistering): Port device team_slave_0 removed [ 213.024533][ T4535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.101354][ T4535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.281420][ T4535] bond0 (unregistering): Released all slaves [ 213.364706][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 213.398570][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 213.549095][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 213.568239][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 213.588295][ T5872] device veth0_vlan entered promiscuous mode [ 213.601713][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 213.627313][ T6195] binder: BINDER_SET_CONTEXT_MGR already set [ 213.635656][ T6195] binder: 6194:6195 ioctl 4018620d 200000000100 returned -16 [ 213.652224][ T6195] binder: BINDER_SET_CONTEXT_MGR already set [ 213.652525][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 213.662516][ T6195] binder: 6194:6195 ioctl 4018620d 200000001000 returned -16 [ 213.725492][ T5872] device veth1_vlan entered promiscuous mode [ 213.825317][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 213.842580][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 213.857619][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 213.881460][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 213.899871][ T5872] device veth0_macvtap entered promiscuous mode [ 213.952881][ T5872] device veth1_macvtap entered promiscuous mode [ 214.250696][ T5872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.271372][ T5872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.307724][ T5872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.380378][ T5872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.683286][ T5872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.734737][ T5872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.795349][ T5872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.865908][ T5872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.940342][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.949858][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 214.959370][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 214.979911][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 215.008477][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 215.028746][ T6212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.524'. [ 215.109675][ T5872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.170710][ T5872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.213633][ T5872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.237559][ T5872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.267151][ T5872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.298931][ T5872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.326645][ T5872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.347104][ T5872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.384915][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.428208][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 215.458503][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 215.500310][ T5872] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.567739][ T5872] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.590512][ T5872] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.599870][ T5872] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.399996][ T4461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.441211][ T4461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.479648][ T4351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.487591][ T4351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.498024][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 216.594786][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 217.276690][ T6242] loop2: detected capacity change from 0 to 1024 [ 217.437844][ T6242] EXT4-fs (loop2): Invalid want_extra_isize 7 [ 218.989453][ T6270] ptrace attach of ""[6272] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6270] [ 219.035795][ T6271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.535'. [ 219.045379][ T6271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.535'. [ 219.054426][ T6271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.535'. [ 219.063466][ T6271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.535'. [ 219.072385][ T6271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.535'. [ 221.338337][ T6293] xt_CT: You must specify a L4 protocol and not use inversions on it [ 221.650840][ T6303] loop5: detected capacity change from 0 to 128 [ 223.336686][ T6317] netlink: 8 bytes leftover after parsing attributes in process `syz.4.547'. [ 224.606944][ T6317] netlink: 4 bytes leftover after parsing attributes in process `syz.4.547'. [ 225.973401][ T6327] ptrace attach of ""[6328] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6327] [ 227.377937][ T6330] device syzkaller0 entered promiscuous mode [ 228.892238][ T6363] loop1: detected capacity change from 0 to 1024 [ 228.920195][ T6363] EXT4-fs (loop1): Invalid want_extra_isize 7 [ 230.029207][ T6389] xt_CT: You must specify a L4 protocol and not use inversions on it [ 232.191441][ T6420] ptrace attach of ""[6421] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6420] [ 232.698704][ T6413] device syzkaller0 entered promiscuous mode [ 233.891694][ T6427] device syzkaller0 entered promiscuous mode [ 233.908105][ T6432] binder: BINDER_SET_CONTEXT_MGR already set [ 233.937796][ T6432] binder: 6431:6432 ioctl 4018620d 200000000100 returned -16 [ 233.968300][ T6432] binder: BINDER_SET_CONTEXT_MGR already set [ 233.974472][ T6432] binder: 6431:6432 ioctl 4018620d 200000001000 returned -16 [ 234.567440][ T6443] xt_CT: You must specify a L4 protocol and not use inversions on it [ 236.145346][ T6471] netlink: 8 bytes leftover after parsing attributes in process `syz.4.574'. [ 236.314942][ T6476] device syzkaller0 entered promiscuous mode [ 236.495445][ T6483] ptrace attach of ""[6484] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6483] [ 238.979962][ T6514] binder: BINDER_SET_CONTEXT_MGR already set [ 239.040493][ T6514] binder: 6513:6514 ioctl 4018620d 200000000100 returned -16 [ 239.129411][ T6514] binder: BINDER_SET_CONTEXT_MGR already set [ 239.135459][ T6514] binder: 6513:6514 ioctl 4018620d 200000001000 returned -16 [ 239.159422][ T6520] loop5: detected capacity change from 0 to 1024 [ 239.361095][ T6520] EXT4-fs (loop5): Invalid want_extra_isize 7 [ 239.566797][ T6527] netlink: 8 bytes leftover after parsing attributes in process `syz.5.588'. [ 241.468654][ T6553] device syzkaller0 entered promiscuous mode [ 242.543022][ T6572] loop2: detected capacity change from 0 to 1024 [ 242.725020][ T6572] EXT4-fs (loop2): Invalid want_extra_isize 7 [ 245.662852][ T6626] device syzkaller0 entered promiscuous mode [ 247.190242][ T6649] binder: BINDER_SET_CONTEXT_MGR already set [ 247.541611][ T6649] binder: 6647:6649 ioctl 4018620d 200000000100 returned -16 [ 247.564588][ T6655] binder: BINDER_SET_CONTEXT_MGR already set [ 247.576452][ T6655] binder: 6647:6655 ioctl 4018620d 200000001000 returned -16 [ 247.833372][ T6659] ptrace attach of ""[6660] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6659] [ 250.052024][ T6685] device syzkaller0 entered promiscuous mode [ 250.950273][ T6705] xt_CT: You must specify a L4 protocol and not use inversions on it [ 251.641930][ T6721] ptrace attach of ""[6722] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6721] [ 254.542961][ T6755] device syzkaller0 entered promiscuous mode [ 254.628138][ T6762] xt_CT: You must specify a L4 protocol and not use inversions on it [ 255.538836][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.588071][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.043048][ T6782] binder: BINDER_SET_CONTEXT_MGR already set [ 256.057915][ T6782] binder: 6781:6782 ioctl 4018620d 200000000100 returned -16 [ 256.088869][ T6782] binder: BINDER_SET_CONTEXT_MGR already set [ 256.188302][ T6782] binder: 6781:6782 ioctl 4018620d 200000001000 returned -16 [ 256.418525][ T6795] ptrace attach of ""[6796] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6795] [ 258.372978][ T6828] xt_CT: You must specify a L4 protocol and not use inversions on it [ 259.264380][ T6837] netlink: 8 bytes leftover after parsing attributes in process `syz.5.648'. [ 259.273927][ T6837] netlink: 8 bytes leftover after parsing attributes in process `syz.5.648'. [ 259.283436][ T6837] netlink: 8 bytes leftover after parsing attributes in process `syz.5.648'. [ 259.292451][ T6837] netlink: 8 bytes leftover after parsing attributes in process `syz.5.648'. [ 259.301368][ T6837] netlink: 8 bytes leftover after parsing attributes in process `syz.5.648'. [ 259.315298][ T6837] loop5: detected capacity change from 0 to 512 [ 259.421450][ T6837] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 259.574447][ T6837] EXT4-fs error (device loop5): __ext4_iget:4919: inode #11: block 2: comm syz.5.648: invalid block [ 259.587278][ T6837] EXT4-fs (loop5): Remounting filesystem read-only [ 259.593896][ T6837] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.648: couldn't read orphan inode 11 (err -117) [ 259.606647][ T6837] EXT4-fs (loop5): Remounting filesystem read-only [ 259.613225][ T6837] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,block_validity,. Quota mode: none. [ 262.183610][ T6901] xt_CT: You must specify a L4 protocol and not use inversions on it [ 264.461542][ T6932] loop2: detected capacity change from 0 to 1024 [ 264.522675][ T6932] EXT4-fs (loop2): Invalid want_extra_isize 7 [ 264.670994][ T6935] loop1: detected capacity change from 0 to 128 [ 265.898449][ T6947] xt_CT: You must specify a L4 protocol and not use inversions on it [ 268.968130][ T6987] loop4: detected capacity change from 0 to 128 [ 269.650342][ T6998] xt_CT: You must specify a L4 protocol and not use inversions on it [ 269.907320][ T7002] binder: BINDER_SET_CONTEXT_MGR already set [ 270.190440][ T7002] binder: 7001:7002 ioctl 4018620d 200000000100 returned -16 [ 270.395489][ T7002] binder: BINDER_SET_CONTEXT_MGR already set [ 270.424723][ T7002] binder: 7001:7002 ioctl 4018620d 200000001000 returned -16 [ 271.531816][ T7029] loop1: detected capacity change from 0 to 1024 [ 271.570684][ T7029] EXT4-fs (loop1): Invalid want_extra_isize 7 [ 272.579259][ T7052] xt_CT: You must specify a L4 protocol and not use inversions on it [ 273.310380][ T7055] loop5: detected capacity change from 0 to 128 [ 275.131119][ T7069] loop5: detected capacity change from 0 to 512 [ 275.220592][ T7069] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 275.302188][ T7069] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.449886][ T7069] Quota error (device loop5): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 275.501652][ T7080] binder: BINDER_SET_CONTEXT_MGR already set [ 275.507873][ T7080] binder: 7079:7080 ioctl 4018620d 200000000100 returned -16 [ 275.510924][ T7069] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 275.517382][ T7081] netlink: 4 bytes leftover after parsing attributes in process `syz.3.702'. [ 275.551218][ T7080] binder: BINDER_SET_CONTEXT_MGR already set [ 275.561879][ T7080] binder: 7079:7080 ioctl 4018620d 200000001000 returned -16 [ 275.602108][ T7069] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.700: Failed to acquire dquot type 0 [ 275.990252][ T7099] autofs4:pid:7099:autofs_fill_super: called with bogus options [ 276.300584][ T7105] loop1: detected capacity change from 0 to 512 [ 276.462437][ T7105] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 276.527897][ T7112] xt_CT: You must specify a L4 protocol and not use inversions on it [ 277.150733][ T7105] EXT4-fs (loop1): 1 truncate cleaned up [ 277.156411][ T7105] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,nobarrier,debug_want_extra_isize=0x0000000000000068,init_itable=0x0000000000000200,nombcache,max_batch_time=0x0000000000000007,,errors=continue. Quota mode: none. [ 277.179488][ C0] vkms_vblank_simulate: vblank timer overrun [ 277.266395][ T7117] loop2: detected capacity change from 0 to 128 [ 278.482889][ T7134] loop2: detected capacity change from 0 to 4096 [ 278.604993][ T7134] EXT4-fs (loop2): Test dummy encryption mode enabled [ 278.627773][ T7134] EXT4-fs (loop2): Test dummy encryption mode enabled [ 278.671977][ T7134] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,test_dummy_encryption=v1,noload,test_dummy_encryption=v1,nodiscard,data_err=ignore,usrquota,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 279.192785][ T7153] netlink: 4 bytes leftover after parsing attributes in process `syz.2.715'. [ 279.343194][ T7156] loop2: detected capacity change from 0 to 1024 [ 279.386283][ T7159] autofs4:pid:7159:autofs_fill_super: called with bogus options [ 279.424557][ T7156] EXT4-fs (loop2): Invalid want_extra_isize 7 [ 280.624961][ T7173] loop5: detected capacity change from 0 to 1024 [ 280.769523][ T7173] EXT4-fs (loop5): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,journal_dev=0x0000000000000001,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 281.418351][ T7190] xt_CT: You must specify a L4 protocol and not use inversions on it [ 283.220894][ T7216] autofs4:pid:7216:autofs_fill_super: called with bogus options [ 288.593203][ T7255] xt_CT: You must specify a L4 protocol and not use inversions on it [ 288.845789][ T7260] loop2: detected capacity change from 0 to 128 [ 289.208169][ T7269] loop5: detected capacity change from 0 to 128 [ 290.672514][ T4208] Bluetooth: Error in BCSP hdr checksum [ 290.890527][ T7287] autofs4:pid:7287:autofs_fill_super: called with bogus options [ 291.394628][ T7309] loop5: detected capacity change from 0 to 512 [ 291.456107][ T7309] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 291.526868][ T7309] EXT4-fs (loop5): 1 truncate cleaned up [ 291.539424][ T7309] EXT4-fs (loop5): mounted filesystem without journal. Opts: minixdf,nobarrier,debug_want_extra_isize=0x0000000000000068,init_itable=0x0000000000000200,nombcache,max_batch_time=0x0000000000000007,,errors=continue. Quota mode: none. [ 292.766871][ T13] Bluetooth: hci1: command 0x1003 tx timeout [ 292.772947][ T4195] Bluetooth: hci1: sending frame failed (-49) [ 293.177470][ T7338] xt_CT: You must specify a L4 protocol and not use inversions on it [ 293.736743][ T7353] ptrace attach of ""[7354] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7353] [ 294.500262][ T7360] loop2: detected capacity change from 0 to 128 [ 294.983798][ T4237] Bluetooth: hci1: command 0x1001 tx timeout [ 294.991186][ T4195] Bluetooth: hci1: sending frame failed (-49) [ 295.855666][ T7385] device syzkaller0 entered promiscuous mode [ 298.294759][ T13] Bluetooth: hci1: command 0x1009 tx timeout [ 300.023284][ T7406] xt_CT: You must specify a L4 protocol and not use inversions on it [ 303.749315][ T7429] loop4: detected capacity change from 0 to 512 [ 303.950635][ T7429] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 303.984482][ T7429] EXT4-fs (loop4): 1 truncate cleaned up [ 304.091674][ T7429] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,nobarrier,debug_want_extra_isize=0x0000000000000068,init_itable=0x0000000000000200,nombcache,max_batch_time=0x0000000000000007,,errors=continue. Quota mode: none. [ 305.129330][ T7454] loop2: detected capacity change from 0 to 128 [ 305.693100][ T7465] xt_CT: You must specify a L4 protocol and not use inversions on it [ 308.268567][ T7482] ptrace attach of ""[7483] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7482] [ 309.593717][ T7492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.784'. [ 311.234138][ T7516] xt_CT: You must specify a L4 protocol and not use inversions on it [ 311.655255][ T7525] loop5: detected capacity change from 0 to 512 [ 312.031471][ T7527] syz.1.793 (7527): drop_caches: 2 [ 312.421806][ T7525] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 312.470251][ T7532] loop2: detected capacity change from 0 to 128 [ 312.605808][ T7525] EXT4-fs (loop5): 1 truncate cleaned up [ 312.612631][ T7525] EXT4-fs (loop5): mounted filesystem without journal. Opts: minixdf,nobarrier,debug_want_extra_isize=0x0000000000000068,init_itable=0x0000000000000200,nombcache,max_batch_time=0x0000000000000007,,errors=continue. Quota mode: none. [ 313.404164][ T7544] netlink: 28 bytes leftover after parsing attributes in process `syz.3.799'. [ 313.897752][ T4197] Bluetooth: hci5: command 0x0406 tx timeout [ 313.970949][ T7551] loop1: detected capacity change from 0 to 128 [ 315.558412][ T7569] xt_CT: You must specify a L4 protocol and not use inversions on it [ 316.293464][ T7575] device batadv_slave_0 entered promiscuous mode [ 316.331365][ T7574] device batadv_slave_0 left promiscuous mode [ 316.448125][ T7579] autofs4:pid:7579:autofs_fill_super: called with bogus options [ 316.750965][ T7586] ptrace attach of ""[7587] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7586] [ 317.845108][ T7588] erofs: (device loop2): erofs_read_superblock: cannot find valid erofs superblock [ 317.952358][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.958823][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.082053][ T7590] loop5: detected capacity change from 0 to 512 [ 318.139135][ T7590] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 318.269703][ T7590] EXT4-fs (loop5): 1 truncate cleaned up [ 318.277795][ T7590] EXT4-fs (loop5): mounted filesystem without journal. Opts: minixdf,nobarrier,debug_want_extra_isize=0x0000000000000068,init_itable=0x0000000000000200,nombcache,max_batch_time=0x0000000000000007,,errors=continue. Quota mode: none. [ 319.242787][ T7599] netlink: 28 bytes leftover after parsing attributes in process `syz.3.811'. [ 319.324945][ T7601] loop5: detected capacity change from 0 to 512 [ 319.398770][ T7601] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 319.411625][ T7601] ext4 filesystem being mounted at /63/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 319.642265][ T7610] EXT4-fs error (device loop5): ext4_xattr_block_get:543: inode #15: comm syz.5.814: corrupted xattr block 33 [ 319.658609][ T7612] loop1: detected capacity change from 0 to 128 [ 320.233426][ T7619] netlink: 12 bytes leftover after parsing attributes in process `syz.2.820'. [ 320.997701][ T7632] ptrace attach of ""[7634] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7632] [ 321.428376][ T7631] xt_CT: You must specify a L4 protocol and not use inversions on it [ 321.476523][ T7635] autofs4:pid:7635:autofs_fill_super: called with bogus options [ 321.873448][ T7640] device syzkaller0 entered promiscuous mode [ 322.023631][ T7644] netlink: 28 bytes leftover after parsing attributes in process `syz.2.826'. [ 322.232378][ T7647] loop2: detected capacity change from 0 to 512 [ 322.318942][ T7647] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 322.390027][ T7647] EXT4-fs (loop2): 1 truncate cleaned up [ 322.395754][ T7647] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,nobarrier,debug_want_extra_isize=0x0000000000000068,init_itable=0x0000000000000200,nombcache,max_batch_time=0x0000000000000007,,errors=continue. Quota mode: none. [ 326.162818][ T7663] loop2: detected capacity change from 0 to 512 [ 326.283942][ T7663] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 326.309861][ T7663] ext4 filesystem being mounted at /182/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 326.591119][ T7666] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.831: corrupted xattr block 33 [ 328.043788][ T7681] loop2: detected capacity change from 0 to 128 [ 328.356897][ T7686] netlink: 28 bytes leftover after parsing attributes in process `syz.3.837'. [ 328.703968][ T7688] device syzkaller0 entered promiscuous mode [ 329.815070][ T7707] loop5: detected capacity change from 0 to 512 [ 329.844253][ T7709] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 331.386158][ T7707] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 331.420846][ T7707] ext4 filesystem being mounted at /68/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 332.378235][ T7721] EXT4-fs error (device loop5): ext4_xattr_block_get:543: inode #15: comm syz.5.844: corrupted xattr block 33 [ 332.949473][ T7725] netlink: 28 bytes leftover after parsing attributes in process `syz.2.848'. [ 333.179873][ T7729] ptrace attach of ""[7730] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7729] [ 334.421657][ T7737] device syzkaller0 entered promiscuous mode [ 334.757003][ T7743] xt_CT: You must specify a L4 protocol and not use inversions on it [ 334.930925][ T7746] loop1: detected capacity change from 0 to 128 [ 336.046257][ T7762] program syz.5.858 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 336.185025][ T7765] netlink: 28 bytes leftover after parsing attributes in process `syz.5.860'. [ 336.187512][ T7766] loop4: detected capacity change from 0 to 512 [ 336.324113][ T7766] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 336.345792][ T7766] ext4 filesystem being mounted at /165/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.641872][ T7776] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #15: comm syz.4.859: corrupted xattr block 33 [ 336.785689][ T7780] device syzkaller0 entered promiscuous mode [ 337.248337][ T7786] ptrace attach of ""[7787] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7786] [ 338.458182][ T7793] loop5: detected capacity change from 0 to 128 [ 339.064756][ T7811] netlink: 28 bytes leftover after parsing attributes in process `syz.1.873'. [ 339.189115][ T7814] xt_CT: You must specify a L4 protocol and not use inversions on it [ 339.761345][ T7822] device syzkaller0 entered promiscuous mode [ 340.738426][ T7838] syz.2.877 (7838): drop_caches: 2 [ 341.370584][ T7857] loop1: detected capacity change from 0 to 128 [ 343.963504][ T7892] loop2: detected capacity change from 0 to 512 [ 344.029597][ T7892] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 344.084500][ T7892] EXT4-fs (loop2): 1 truncate cleaned up [ 344.099710][ T7892] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,nobarrier,debug_want_extra_isize=0x0000000000000068,init_itable=0x0000000000000200,nombcache,max_batch_time=0x0000000000000007,,errors=continue. Quota mode: none. [ 344.675996][ T7903] loop4: detected capacity change from 0 to 128 [ 346.270114][ T7905] FAULT_INJECTION: forcing a failure. [ 346.270114][ T7905] name fail_page_alloc, interval 1, probability 10, space 0, times 1 [ 346.297102][ T7917] FAULT_INJECTION: forcing a failure. [ 346.297102][ T7917] name fail_page_alloc, interval 1, probability 10, space 0, times 1 [ 346.297184][ T7908] FAULT_INJECTION: forcing a failure. [ 346.297184][ T7908] name fail_page_alloc, interval 1, probability 10, space 0, times 1 [ 346.328030][ T7908] CPU: 0 PID: 7908 Comm: syz.1.898 Not tainted syzkaller #0 [ 346.335661][ T7908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 346.345729][ T7908] Call Trace: [ 346.349005][ T7908] [ 346.351933][ T7908] dump_stack_lvl+0x188/0x250 [ 346.356619][ T7908] ? show_regs_print_info+0x20/0x20 [ 346.361816][ T7908] ? load_image+0x410/0x410 [ 346.366325][ T7908] ? prandom_u32+0x217/0x250 [ 346.370923][ T7908] should_fail+0x383/0x4b0 [ 346.375344][ T7908] prepare_alloc_pages+0x1e3/0x5b0 [ 346.380465][ T7908] __alloc_pages+0x11b/0x480 [ 346.385062][ T7908] ? zone_statistics+0x170/0x170 [ 346.390010][ T7908] ? mark_lock+0x94/0x320 [ 346.394344][ T7908] alloc_pages_vma+0x2bc/0x790 [ 346.399108][ T7908] ? mpol_shared_policy_lookup+0x147/0x1e0 [ 346.404914][ T7908] shmem_alloc_and_acct_page+0x47f/0xbe0 [ 346.410556][ T7908] ? shmem_swapin_page+0x22f0/0x22f0 [ 346.415890][ T7908] ? __lock_acquire+0x7b50/0x7b50 [ 346.420929][ T7908] ? xas_descend+0x210/0x3b0 [ 346.425529][ T7908] ? xas_load+0x127/0x140 [ 346.429861][ T7908] ? pagecache_get_page+0xc32/0xf20 [ 346.435061][ T7908] ? page_cache_prev_miss+0x380/0x380 [ 346.440443][ T7908] ? mark_lock+0x94/0x320 [ 346.444774][ T7908] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 346.450760][ T7908] shmem_getpage_gfp+0x14be/0x2c10 [ 346.455900][ T7908] shmem_write_begin+0xcd/0x1a0 [ 346.460755][ T7908] generic_perform_write+0x2b6/0x550 [ 346.466036][ T7908] ? atime_needs_update+0x770/0x770 [ 346.471254][ T7908] ? grab_cache_page_write_begin+0xa0/0xa0 [ 346.477066][ T7908] ? file_remove_privs+0x5d0/0x5d0 [ 346.482194][ T7908] ? rwsem_write_trylock+0x135/0x1c0 [ 346.487498][ T7908] ? clear_nonspinnable+0x60/0x60 [ 346.492972][ T7908] __generic_file_write_iter+0x261/0x4e0 [ 346.498609][ T7908] ? generic_write_checks+0x3be/0x460 [ 346.503992][ T7908] generic_file_write_iter+0xa6/0x1b0 [ 346.506768][ T6252] FAULT_INJECTION: forcing a failure. [ 346.506768][ T6252] name fail_page_alloc, interval 1, probability 10, space 0, times 1 [ 346.509364][ T7908] __kernel_write+0x522/0x980 [ 346.509419][ T7908] ? vfs_read+0xd50/0xd50 [ 346.509447][ T7908] ? get_dump_page+0xee/0x670 [ 346.536667][ T7908] ? down_read_killable+0x1ce/0x340 [ 346.541879][ T7908] __dump_emit+0x258/0x380 [ 346.546301][ T7908] ? wait_for_dump_helpers+0x3e0/0x3e0 [ 346.551746][ T7908] ? __sanitizer_cov_trace_pc+0x4/0x60 [ 346.557199][ T7908] ? dump_emit+0x145/0x3d0 [ 346.561609][ T7908] dump_user_range+0x84/0x340 [ 346.566292][ T7908] elf_core_dump+0x2fe0/0x3530 [ 346.571084][ T7908] ? load_elf_library+0x980/0x980 [ 346.576104][ T7908] ? verify_lock_unused+0x140/0x140 [ 346.581301][ T7908] ? dump_vma_snapshot+0xaf1/0xe40 [ 346.586434][ T7908] ? rcu_read_lock_any_held+0xb0/0x130 [ 346.591907][ T7908] ? do_raw_spin_unlock+0x11d/0x230 [ 346.597118][ T7908] do_coredump+0x14e8/0x2a40 [ 346.601729][ T7908] ? nfs_stat_to_errno+0x170/0x170 [ 346.606850][ T7908] ? lock_chain_count+0x20/0x20 [ 346.611695][ T7908] ? _raw_spin_unlock_irq+0x1f/0x40 [ 346.616879][ T7908] ? lockdep_hardirqs_on+0x94/0x140 [ 346.622068][ T7908] get_signal+0x531/0x12e0 [ 346.626491][ T7908] arch_do_signal_or_restart+0xe6/0x12a0 [ 346.632117][ T7908] ? _raw_spin_unlock+0x40/0x40 [ 346.636960][ T7908] ? force_sig_info_to_task+0x318/0x3c0 [ 346.642495][ T7908] ? get_sigframe_size+0x10/0x10 [ 346.647426][ T7908] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 346.653402][ T7908] ? exit_to_user_mode_loop+0x3b/0x130 [ 346.658852][ T7908] exit_to_user_mode_loop+0x9e/0x130 [ 346.664124][ T7908] exit_to_user_mode_prepare+0xee/0x180 [ 346.669660][ T7908] irqentry_exit_to_user_mode+0x5/0x30 [ 346.675106][ T7908] exc_page_fault+0x88/0x100 [ 346.679688][ T7908] asm_exc_page_fault+0x22/0x30 [ 346.684533][ T7908] RIP: 0033:0x7fbe6157fb27 [ 346.688941][ T7908] Code: e8 8e fa ff ff 89 f2 48 8d 3d c5 3e 1b 00 48 8d 35 fe f9 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 346.708533][ T7908] RSP: 002b:00007fbe5f903120 EFLAGS: 00010202 [ 346.714587][ T7908] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fbe616c9e99 [ 346.722544][ T7908] RDX: 00007fbe5f903140 RSI: 00007fbe5f903270 RDI: 000000000000000b [ 346.730499][ T7908] RBP: 00007fbe6175feaf R08: 0000000000000000 R09: 0000000000000000 [ 346.738455][ T7908] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 346.746411][ T7908] R13: 00007fbe61952038 R14: 00007fbe61951fa0 R15: 00007ffc1141b8d8 [ 346.754379][ T7908] [ 346.757387][ T6252] CPU: 1 PID: 6252 Comm: kworker/1:8 Not tainted syzkaller #0 [ 346.759439][ T4232] FAULT_INJECTION: forcing a failure. [ 346.759439][ T4232] name fail_page_alloc, interval 1, probability 10, space 0, times 1 [ 346.764843][ T6252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 346.764855][ T6252] Workqueue: events nsim_dev_trap_report_work [ 346.764877][ T6252] Call Trace: [ 346.797682][ T6252] [ 346.800607][ T6252] dump_stack_lvl+0x188/0x250 [ 346.805279][ T6252] ? show_regs_print_info+0x20/0x20 [ 346.810467][ T6252] ? load_image+0x410/0x410 [ 346.814957][ T6252] ? stack_trace_save+0xa6/0xf0 [ 346.819794][ T6252] ? prandom_u32+0x217/0x250 [ 346.824377][ T6252] should_fail+0x383/0x4b0 [ 346.828784][ T6252] prepare_alloc_pages+0x1e3/0x5b0 [ 346.833887][ T6252] __alloc_pages+0x11b/0x480 [ 346.838465][ T6252] ? zone_statistics+0x170/0x170 [ 346.843389][ T6252] ? __lock_acquire+0x7b50/0x7b50 [ 346.848409][ T6252] new_slab+0xc0/0x4b0 [ 346.852475][ T6252] ___slab_alloc+0x807/0xdd0 [ 346.857052][ T6252] ? nsim_dev_trap_report_work+0x25c/0xab0 [ 346.862864][ T6252] __kmalloc_node_track_caller+0x13d/0x3a0 [ 346.868673][ T6252] ? nsim_dev_trap_report_work+0x25c/0xab0 [ 346.874482][ T6252] ? __alloc_skb+0xf4/0x750 [ 346.878983][ T6252] ? nsim_dev_trap_report_work+0x25c/0xab0 [ 346.884784][ T6252] __alloc_skb+0x22c/0x750 [ 346.889191][ T6252] nsim_dev_trap_report_work+0x25c/0xab0 [ 346.894824][ T6252] process_one_work+0x867/0xff0 [ 346.899678][ T6252] ? worker_detach_from_pool+0x240/0x240 [ 346.905295][ T6252] ? lockdep_hardirqs_off+0x70/0x100 [ 346.910572][ T6252] ? _raw_spin_lock_irq+0xb7/0xf0 [ 346.915584][ T6252] ? _raw_spin_lock_irqsave+0x100/0x100 [ 346.921114][ T6252] ? wq_worker_running+0x97/0x170 [ 346.926124][ T6252] worker_thread+0xad7/0x12a0 [ 346.930801][ T6252] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 346.936687][ T6252] kthread+0x42e/0x520 [ 346.940739][ T6252] ? rcu_lock_release+0x20/0x20 [ 346.945572][ T6252] ? kthread_blkcg+0xd0/0xd0 [ 346.950150][ T6252] ret_from_fork+0x1f/0x30 [ 346.954566][ T6252] [ 346.957571][ T4232] CPU: 0 PID: 4232 Comm: kworker/0:6 Not tainted syzkaller #0 [ 346.965031][ T4232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 346.975087][ T4232] Workqueue: events nsim_dev_trap_report_work [ 346.981166][ T4232] Call Trace: [ 346.984443][ T4232] [ 346.987368][ T4232] dump_stack_lvl+0x188/0x250 [ 346.992127][ T4232] ? show_regs_print_info+0x20/0x20 [ 346.997355][ T4232] ? load_image+0x410/0x410 [ 347.001863][ T4232] ? stack_trace_save+0xa6/0xf0 [ 347.006718][ T4232] ? prandom_u32+0x217/0x250 [ 347.011319][ T4232] should_fail+0x383/0x4b0 [ 347.015741][ T4232] prepare_alloc_pages+0x1e3/0x5b0 [ 347.020861][ T4232] __alloc_pages+0x11b/0x480 [ 347.025456][ T4232] ? zone_statistics+0x170/0x170 [ 347.030414][ T4232] ? __lock_acquire+0x7b50/0x7b50 [ 347.035448][ T4232] new_slab+0xc0/0x4b0 [ 347.039519][ T4232] ___slab_alloc+0x807/0xdd0 [ 347.044109][ T4232] ? nsim_dev_trap_report_work+0x25c/0xab0 [ 347.049921][ T4232] __kmalloc_node_track_caller+0x13d/0x3a0 [ 347.055732][ T4232] ? nsim_dev_trap_report_work+0x25c/0xab0 [ 347.061533][ T4232] ? __alloc_skb+0xf4/0x750 [ 347.066035][ T4232] ? nsim_dev_trap_report_work+0x25c/0xab0 [ 347.071844][ T4232] __alloc_skb+0x22c/0x750 [ 347.076262][ T4232] nsim_dev_trap_report_work+0x25c/0xab0 [ 347.081907][ T4232] process_one_work+0x867/0xff0 [ 347.086770][ T4232] ? worker_detach_from_pool+0x240/0x240 [ 347.092396][ T4232] ? lockdep_hardirqs_off+0x70/0x100 [ 347.097684][ T4232] ? _raw_spin_lock_irq+0xb7/0xf0 [ 347.102705][ T4232] ? _raw_spin_lock_irqsave+0x100/0x100 [ 347.108250][ T4232] ? wq_worker_running+0x97/0x170 [ 347.113276][ T4232] worker_thread+0xad7/0x12a0 [ 347.117982][ T4232] kthread+0x42e/0x520 [ 347.122050][ T4232] ? rcu_lock_release+0x20/0x20 [ 347.126894][ T4232] ? kthread_blkcg+0xd0/0xd0 [ 347.131485][ T4232] ret_from_fork+0x1f/0x30 [ 347.135915][ T4232] [ 347.298039][ T7905] CPU: 0 PID: 7905 Comm: syz.3.897 Not tainted syzkaller #0 [ 347.305360][ T7905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 347.315412][ T7905] Call Trace: [ 347.318691][ T7905] [ 347.321617][ T7905] dump_stack_lvl+0x188/0x250 [ 347.326303][ T7905] ? show_regs_print_info+0x20/0x20 [ 347.331505][ T7905] ? load_image+0x410/0x410 [ 347.336011][ T7905] ? prandom_u32+0x217/0x250 [ 347.340612][ T7905] should_fail+0x383/0x4b0 [ 347.345038][ T7905] prepare_alloc_pages+0x1e3/0x5b0 [ 347.350158][ T7905] __alloc_pages+0x11b/0x480 [ 347.354756][ T7905] ? zone_statistics+0x170/0x170 [ 347.359697][ T7905] ? psi_task_switch+0x4c3/0x810 [ 347.364637][ T7905] ? __lock_acquire+0x7b50/0x7b50 [ 347.369663][ T7905] alloc_pages_vma+0x2bc/0x790 [ 347.374430][ T7905] ? mpol_shared_policy_lookup+0x147/0x1e0 [ 347.380241][ T7905] shmem_alloc_and_acct_page+0x47f/0xbe0 [ 347.385882][ T7905] ? shmem_swapin_page+0x22f0/0x22f0 [ 347.391206][ T7905] ? __lock_acquire+0x7b50/0x7b50 [ 347.396232][ T7905] ? xas_descend+0x210/0x3b0 [ 347.400826][ T7905] ? xas_load+0x127/0x140 [ 347.405157][ T7905] ? pagecache_get_page+0xc32/0xf20 [ 347.410359][ T7905] ? page_cache_prev_miss+0x380/0x380 [ 347.415748][ T7905] ? sync_rcu_exp_done_unlocked+0x140/0x140 [ 347.421639][ T7905] ? mark_lock+0x94/0x320 [ 347.425981][ T7905] shmem_getpage_gfp+0x14be/0x2c10 [ 347.431125][ T7905] shmem_fault+0x1ac/0x550 [ 347.435552][ T7905] ? shmem_fallocate+0xec0/0xec0 [ 347.440504][ T7905] ? filemap_read_page+0x4b0/0x4b0 [ 347.445618][ T7905] ? count_memcg_event_mm+0x324/0x370 [ 347.451003][ T7905] __do_fault+0x141/0x330 [ 347.455342][ T7905] handle_mm_fault+0x2982/0x4440 [ 347.460289][ T7905] ? get_page+0xe0/0xe0 [ 347.464452][ T7905] ? follow_page_mask+0xa51/0x12b0 [ 347.469575][ T7905] __get_user_pages+0x952/0x11e0 [ 347.474528][ T7905] ? populate_vma_page_range+0x290/0x290 [ 347.480162][ T7905] ? read_lock_is_recursive+0x10/0x10 [ 347.485547][ T7905] populate_vma_page_range+0x213/0x290 [ 347.491010][ T7905] __mm_populate+0x275/0x3b0 [ 347.495606][ T7905] ? check_vma_flags+0x470/0x470 [ 347.500665][ T7905] ? up_write+0x1b6/0x410 [ 347.505010][ T7905] vm_mmap_pgoff+0x212/0x2d0 [ 347.509607][ T7905] ? account_locked_vm+0xe0/0xe0 [ 347.514548][ T7905] ? __context_tracking_exit+0x4c/0x80 [ 347.520018][ T7905] ? __lock_acquire+0x7b50/0x7b50 [ 347.525053][ T7905] ksys_mmap_pgoff+0x140/0x790 [ 347.529830][ T7905] ? mmap_region+0x1730/0x1730 [ 347.534604][ T7905] ? lockdep_hardirqs_on+0x94/0x140 [ 347.539809][ T7905] do_syscall_64+0x4c/0xa0 [ 347.544222][ T7905] ? clear_bhb_loop+0x30/0x80 [ 347.548899][ T7905] ? clear_bhb_loop+0x30/0x80 [ 347.553584][ T7905] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 347.559479][ T7905] RIP: 0033:0x7f49dba87e99 [ 347.563894][ T7905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.583501][ T7905] RSP: 002b:00007f49d9ce0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 347.591925][ T7905] RAX: ffffffffffffffda RBX: 00007f49dbd0ffa0 RCX: 00007f49dba87e99 [ 347.599909][ T7905] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 347.607885][ T7905] RBP: 00007f49dbb1deaf R08: ffffffffffffffff R09: 00000000f32ce000 [ 347.615855][ T7905] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 347.623825][ T7905] R13: 00007f49dbd10038 R14: 00007f49dbd0ffa0 R15: 00007ffc13e74898 [ 347.631812][ T7905] [ 347.775896][ T7917] CPU: 0 PID: 7917 Comm: syz.5.902 Not tainted syzkaller #0 [ 347.783221][ T7917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 347.793278][ T7917] Call Trace: [ 347.796557][ T7917] [ 347.799486][ T7917] dump_stack_lvl+0x188/0x250 [ 347.804172][ T7917] ? show_regs_print_info+0x20/0x20 [ 347.809380][ T7917] ? load_image+0x410/0x410 [ 347.813889][ T7917] ? prandom_u32+0x217/0x250 [ 347.818487][ T7917] should_fail+0x383/0x4b0 [ 347.822909][ T7917] prepare_alloc_pages+0x1e3/0x5b0 [ 347.828030][ T7917] __alloc_pages+0x11b/0x480 [ 347.832626][ T7917] ? zone_statistics+0x170/0x170 [ 347.837571][ T7917] ? alloc_pages+0x452/0x560 [ 347.842166][ T7917] __get_free_pages+0x8/0x30 [ 347.846757][ T7917] kasan_populate_vmalloc_pte+0x21/0xc0 [ 347.852307][ T7917] __apply_to_page_range+0x987/0xd10 [ 347.857606][ T7917] ? kasan_populate_vmalloc+0x70/0x70 [ 347.862979][ T7917] alloc_vmap_area+0x19e8/0x1b30 [ 347.867940][ T7917] ? vm_map_ram+0xba0/0xba0 [ 347.872447][ T7917] __get_vm_area_node+0x14f/0x2d0 [ 347.877482][ T7917] vmap+0xd4/0x290 [ 347.881202][ T7917] ? bpf_ringbuf_alloc+0x30e/0x4d0 [ 347.886315][ T7917] bpf_ringbuf_alloc+0x30e/0x4d0 [ 347.891258][ T7917] ringbuf_map_alloc+0x1d1/0x300 [ 347.896199][ T7917] map_create+0x481/0x2330 [ 347.900616][ T7917] ? bpf_lsm_bpf+0x5/0x10 [ 347.904946][ T7917] __sys_bpf+0x30a/0x6f0 [ 347.909192][ T7917] ? bpf_link_show_fdinfo+0x380/0x380 [ 347.914584][ T7917] __x64_sys_bpf+0x78/0x90 [ 347.919003][ T7917] do_syscall_64+0x4c/0xa0 [ 347.923417][ T7917] ? clear_bhb_loop+0x30/0x80 [ 347.928098][ T7917] ? clear_bhb_loop+0x30/0x80 [ 347.932779][ T7917] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 347.938669][ T7917] RIP: 0033:0x7f173e294e99 [ 347.943081][ T7917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.962686][ T7917] RSP: 002b:00007f173c4ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 347.971105][ T7917] RAX: ffffffffffffffda RBX: 00007f173e51cfa0 RCX: 00007f173e294e99 [ 347.979076][ T7917] RDX: 0000000000000048 RSI: 00002000000000c0 RDI: 0000000000000000 [ 347.987044][ T7917] RBP: 00007f173e32aeaf R08: 0000000000000000 R09: 0000000000000000 [ 347.995013][ T7917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 348.002981][ T7917] R13: 00007f173e51d038 R14: 00007f173e51cfa0 R15: 00007fff99ff8fa8 [ 348.010965][ T7917] [ 349.063279][ T7924] syz.4.901 (7924): drop_caches: 2 [ 349.128011][ T7926] netlink: 28 bytes leftover after parsing attributes in process `syz.5.905'. [ 349.979175][ T7947] loop1: detected capacity change from 0 to 128 [ 351.870526][ T7961] netlink: 28 bytes leftover after parsing attributes in process `syz.2.916'. [ 352.810707][ T7974] syz.1.918 (7974): drop_caches: 2 [ 352.998252][ T7985] loop4: detected capacity change from 0 to 512 [ 353.053448][ T7985] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 353.156929][ T7985] EXT4-fs (loop4): 1 truncate cleaned up [ 353.167715][ T7985] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,nobarrier,debug_want_extra_isize=0x0000000000000068,init_itable=0x0000000000000200,nombcache,max_batch_time=0x0000000000000007,,errors=continue. Quota mode: none. [ 356.563324][ T8000] loop4: detected capacity change from 0 to 128 [ 357.409027][ T8002] loop5: detected capacity change from 0 to 128 [ 357.976390][ T8008] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 358.077254][ T8008] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 358.144702][ T8013] netlink: 28 bytes leftover after parsing attributes in process `syz.1.929'. [ 358.507000][ T8020] CIFS: bad ip= option (127®0.0.1) [ 358.621983][ T8026] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 360.309297][ T8045] loop2: detected capacity change from 0 to 128 [ 361.017136][ T8047] netlink: 28 bytes leftover after parsing attributes in process `syz.2.941'. [ 363.013600][ T8074] loop1: detected capacity change from 0 to 512 [ 363.135283][ T8074] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 363.235814][ T8074] EXT4-fs (loop1): 1 truncate cleaned up [ 363.252717][ T8074] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,nobarrier,debug_want_extra_isize=0x0000000000000068,init_itable=0x0000000000000200,nombcache,max_batch_time=0x0000000000000007,,errors=continue. Quota mode: none. [ 365.319578][ T8091] ptrace attach of ""[8092] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8091] [ 366.391942][ T8090] loop1: detected capacity change from 0 to 128 [ 366.727058][ T8106] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.012964][ T8114] netlink: 4 bytes leftover after parsing attributes in process `syz.4.959'. [ 368.520861][ T8131] syz.2.961 (8131): drop_caches: 2 [ 368.861580][ T8137] ptrace attach of ""[8138] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8137] [ 371.455888][ T8151] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.870715][ T8161] device syzkaller0 entered promiscuous mode [ 372.086152][ T8170] loop2: detected capacity change from 0 to 512 [ 372.138674][ T4232] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 372.235307][ T8170] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 372.275860][ T8170] EXT4-fs (loop2): 1 truncate cleaned up [ 372.291681][ T8170] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,nobarrier,debug_want_extra_isize=0x0000000000000068,init_itable=0x0000000000000200,nombcache,max_batch_time=0x0000000000000007,,errors=continue. Quota mode: none. [ 373.027483][ T4232] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 373.040490][ T4232] usb 6-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00 [ 373.050026][ T4232] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.088595][ T4232] usb 6-1: config 0 descriptor?? [ 373.559311][ T4232] hid (null): unknown global tag 0xc [ 373.610786][ T4232] lg-g15 0003:046D:C22D.0001: unknown main item tag 0x1 [ 373.677688][ T4232] lg-g15 0003:046D:C22D.0001: unknown main item tag 0x0 [ 373.713069][ T4232] lg-g15 0003:046D:C22D.0001: unknown main item tag 0x0 [ 373.751122][ T4232] lg-g15 0003:046D:C22D.0001: unknown main item tag 0x0 [ 373.793171][ T4232] lg-g15 0003:046D:C22D.0001: unknown main item tag 0x0 [ 373.837775][ T4232] lg-g15 0003:046D:C22D.0001: unknown main item tag 0x0 [ 373.866662][ T4232] lg-g15 0003:046D:C22D.0001: unknown main item tag 0x0 [ 373.919223][ T4232] lg-g15 0003:046D:C22D.0001: unknown main item tag 0x0 [ 373.945247][ T4232] lg-g15 0003:046D:C22D.0001: unknown main item tag 0xe [ 374.003338][ T4232] lg-g15 0003:046D:C22D.0001: unknown main item tag 0xe [ 374.036144][ T4232] lg-g15 0003:046D:C22D.0001: unknown global tag 0xc [ 374.082057][ T4232] lg-g15 0003:046D:C22D.0001: item 0 0 1 12 parsing failed [ 374.118126][ T4232] lg-g15: probe of 0003:046D:C22D.0001 failed with error -22 [ 374.292324][ T4232] usb 6-1: USB disconnect, device number 2 [ 374.606840][ T8200] device syzkaller0 entered promiscuous mode [ 375.382139][ T8221] loop4: detected capacity change from 0 to 512 [ 375.436916][ T8221] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 375.494757][ T8221] EXT4-fs (loop4): 1 truncate cleaned up [ 375.533406][ T8221] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,nobarrier,debug_want_extra_isize=0x0000000000000068,init_itable=0x0000000000000200,nombcache,max_batch_time=0x0000000000000007,,errors=continue. Quota mode: none. [ 376.538474][ T8234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.997'. [ 376.875186][ T8244] device syzkaller0 entered promiscuous mode [ 378.364955][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.371712][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.787877][ T4230] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 379.936358][ T8286] loop5: detected capacity change from 0 to 512 [ 380.013050][ T8286] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 380.251498][ T8286] EXT4-fs (loop5): 1 truncate cleaned up [ 380.257448][ T8286] EXT4-fs (loop5): mounted filesystem without journal. Opts: minixdf,nobarrier,debug_want_extra_isize=0x0000000000000068,init_itable=0x0000000000000200,nombcache,max_batch_time=0x0000000000000007,,errors=continue. Quota mode: none. [ 381.087796][ T4230] usb 3-1: Using ep0 maxpacket: 8 [ 381.307973][ T4230] usb 3-1: config 0 has an invalid descriptor of length 112, skipping remainder of the config [ 381.347779][ T4230] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 381.387422][ T4230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.422138][ T4230] usb 3-1: config 0 descriptor?? [ 381.567742][ T4230] usb 3-1: string descriptor 0 read error: -71 [ 381.702580][ T4230] usb 3-1: Found UVC 0.00 device (2833:0201) [ 381.853920][ T4230] usb 3-1: No valid video chain found. [ 381.943765][ T4230] usb 3-1: USB disconnect, device number 2 [ 382.230935][ T8301] syz.5.1013 (8301): drop_caches: 2 [ 383.528514][ T8308] device syzkaller0 entered promiscuous mode [ 383.677689][ T26] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 383.957650][ T26] usb 5-1: Using ep0 maxpacket: 16 [ 384.574677][ T26] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 384.602366][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.620776][ T26] usb 5-1: config 0 descriptor?? [ 384.748493][ T26] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 384.987793][ T26] gspca_sonixj: reg_w1 err -71 [ 384.992654][ T26] sonixj: probe of 5-1:0.0 failed with error -71 [ 385.000917][ T26] usb 5-1: USB disconnect, device number 2 [ 385.066588][ T8334] loop5: detected capacity change from 0 to 128 [ 386.086195][ T8354] loop6: detected capacity change from 0 to 7 [ 386.095794][ T8354] Dev loop6: unable to read RDB block 7 [ 386.142472][ T8354] loop6: unable to read partition table [ 386.148621][ T8354] loop6: partition table beyond EOD, truncated [ 386.167496][ T8354] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 386.191858][ T3557] Dev loop6: unable to read RDB block 7 [ 386.199831][ T3557] loop6: unable to read partition table [ 386.205691][ T3557] loop6: partition table beyond EOD, truncated [ 386.851924][ T8364] xt_CT: You must specify a L4 protocol and not use inversions on it [ 387.605743][ T8372] loop2: detected capacity change from 0 to 128 [ 387.687155][ T8376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1040'. [ 387.708675][ T8376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1040'. [ 387.804707][ T8376] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.813951][ T8376] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.822717][ T8376] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.831473][ T8376] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.938285][ T8377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1040'. [ 387.947322][ T8377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1040'. [ 388.053897][ T8388] loop5: detected capacity change from 0 to 128 [ 388.567807][ T4174] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 388.991231][ T8397] xt_CT: You must specify a L4 protocol and not use inversions on it [ 389.127708][ T4174] usb 2-1: Using ep0 maxpacket: 8 [ 389.747865][ T4174] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 389.919401][ T4174] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.927428][ T4174] usb 2-1: Product: syz [ 389.932580][ T4174] usb 2-1: Manufacturer: syz [ 389.937195][ T4174] usb 2-1: SerialNumber: syz [ 389.955212][ T4174] usb 2-1: config 0 descriptor?? [ 389.968868][ T8419] loop4: detected capacity change from 0 to 128 [ 390.029608][ T8422] loop8: detected capacity change from 0 to 8 [ 390.046461][ T8422] Dev loop8: unable to read RDB block 8 [ 390.056412][ T8422] loop8: unable to read partition table [ 390.072853][ T8422] loop8: partition table beyond EOD, truncated [ 390.092194][ T8422] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 390.217892][ T4174] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 391.227958][ T4174] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 391.417865][ T8436] xt_CT: You must specify a L4 protocol and not use inversions on it [ 391.738148][ T4174] usb 2-1: USB disconnect, device number 3 [ 391.945774][ T8448] loop1: detected capacity change from 0 to 128 [ 393.428228][ T8464] device syzkaller0 entered promiscuous mode [ 393.896241][ T8490] loop2: detected capacity change from 0 to 128 [ 393.999554][ T8493] xt_CT: You must specify a L4 protocol and not use inversions on it [ 394.899089][ T8506] syz.4.1080 (8506): drop_caches: 2 [ 395.613118][ T8513] device syzkaller0 entered promiscuous mode [ 396.660641][ T8534] xt_CT: You must specify a L4 protocol and not use inversions on it [ 396.924790][ T8537] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 397.675376][ T8542] loop1: detected capacity change from 0 to 128 [ 399.662153][ T8560] device syzkaller0 entered promiscuous mode [ 401.527772][ T4174] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 401.798080][ T4174] usb 3-1: Using ep0 maxpacket: 32 [ 401.917853][ T4174] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 401.957058][ T4174] usb 3-1: config 0 has no interface number 0 [ 402.081499][ T4174] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 402.245669][ T4174] usb 3-1: config 0 interface 89 has no altsetting 0 [ 402.463031][ T8585] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 402.498394][ T4174] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 402.531906][ T4174] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.666968][ T4174] usb 3-1: Product: syz [ 402.772273][ T4174] usb 3-1: Manufacturer: syz [ 402.814759][ T4174] usb 3-1: SerialNumber: syz [ 402.928013][ T4174] usb 3-1: config 0 descriptor?? [ 403.071801][ T4174] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 403.190147][ T4174] em28xx 3-1:0.89: Video interface 89 found: [ 403.812003][ T8585] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 403.958136][ T4174] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 404.219708][ T8603] loop2: detected capacity change from 0 to 128 [ 404.257823][ T4174] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 404.290647][ T4174] em28xx 3-1:0.89: board has no eeprom [ 405.268579][ T4174] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 405.275825][ T4174] em28xx 3-1:0.89: analog set to bulk mode. [ 405.361710][ T4174] usb 3-1: USB disconnect, device number 3 [ 405.368219][ T4174] em28xx 3-1:0.89: Disconnecting em28xx [ 405.427732][ T8595] em28xx 3-1:0.89: Registering V4L2 extension [ 405.696024][ T8628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1111'. [ 405.708183][ T8628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1111'. [ 405.718520][ T8628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1111'. [ 405.728629][ T8628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1111'. [ 405.738107][ T8628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1111'. [ 405.774194][ T8628] loop1: detected capacity change from 0 to 512 [ 406.233408][ T8595] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 406.247621][ T8595] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 406.254665][ T8595] em28xx 3-1:0.89: No AC97 audio processor [ 406.266266][ T8628] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 406.267697][ T8595] usb 3-1: Decoder not found [ 406.280717][ T8595] em28xx 3-1:0.89: failed to create media graph [ 406.287020][ T8595] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 406.323874][ T8595] em28xx 3-1:0.89: Registering snapshot button... [ 406.328993][ T8628] EXT4-fs error (device loop1): __ext4_iget:4919: inode #11: block 2: comm syz.1.1111: invalid block [ 406.347508][ T8628] EXT4-fs (loop1): Remounting filesystem read-only [ 406.354534][ T8628] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.1111: couldn't read orphan inode 11 (err -117) [ 406.361886][ T8595] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input5 [ 406.386757][ T8628] EXT4-fs (loop1): Remounting filesystem read-only [ 406.393309][ T8628] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,block_validity,. Quota mode: none. [ 406.455863][ T8595] em28xx 3-1:0.89: Remote control support is not available for this card. [ 406.590232][ T4174] em28xx 3-1:0.89: Closing input extension [ 406.599552][ T4174] em28xx 3-1:0.89: Deregistering snapshot button [ 407.759483][ T4174] em28xx 3-1:0.89: Freeing device [ 407.856315][ T25] audit: type=1326 audit(1785281502.091:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8647 comm="syz.1.1116" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe616c9e99 code=0x7ffc0000 [ 407.944737][ T25] audit: type=1326 audit(1785281502.141:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8647 comm="syz.1.1116" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe616c9e99 code=0x7ffc0000 [ 408.207728][ T25] audit: type=1326 audit(1785281502.141:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8647 comm="syz.1.1116" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe616c9e99 code=0x7ffc0000 [ 408.235884][ T25] audit: type=1326 audit(1785281502.141:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8647 comm="syz.1.1116" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbe6168a6ce code=0x7ffc0000 [ 408.260447][ T25] audit: type=1326 audit(1785281502.141:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8647 comm="syz.1.1116" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbe616c9b2b code=0x7ffc0000 [ 408.557070][ T1110] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 408.577808][ T8648] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 408.640949][ T25] audit: type=1326 audit(1785281502.141:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8647 comm="syz.1.1116" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbe616c9b2b code=0x7ffc0000 [ 408.710928][ T25] audit: type=1326 audit(1785281502.141:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8647 comm="syz.1.1116" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbe616c9b2b code=0x7ffc0000 [ 409.468213][ T1110] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 409.578565][ T1110] usb 2-1: config 0 interface 0 has no altsetting 0 [ 409.915076][ T1110] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 410.018725][ T25] audit: type=1326 audit(1785281502.141:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8647 comm="syz.1.1116" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbe616c9b2b code=0x7ffc0000 [ 410.078990][ T1110] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.313762][ T1110] usb 2-1: Product: syz [ 410.483392][ T1110] usb 2-1: Manufacturer: syz [ 410.672375][ T1110] usb 2-1: SerialNumber: syz [ 410.815825][ T25] audit: type=1326 audit(1785281502.901:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8647 comm="syz.1.1116" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbe616c9b2b code=0x7ffc0000 [ 410.932070][ T25] audit: type=1326 audit(1785281502.931:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8647 comm="syz.1.1116" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbe616c9b2b code=0x7ffc0000 [ 410.947439][ T1110] usb 2-1: config 0 descriptor?? [ 411.032113][ T8667] device syzkaller0 entered promiscuous mode [ 411.118735][ T1110] usb 2-1: can't set config #0, error -71 [ 411.177792][ T1110] usb 2-1: USB disconnect, device number 4 [ 414.269430][ T8730] device syzkaller0 entered promiscuous mode [ 414.317085][ T8733] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 414.342126][ T8733] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 414.931521][ T8753] loop2: detected capacity change from 0 to 512 [ 415.700086][ T8753] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 415.888800][ T8753] EXT4-fs (loop2): 1 truncate cleaned up [ 415.894487][ T8753] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,nobarrier,debug_want_extra_isize=0x0000000000000068,init_itable=0x0000000000000200,nombcache,max_batch_time=0x0000000000000007,,errors=continue. Quota mode: none. [ 416.106311][ T8777] overlayfs: failed to clone lowerpath [ 419.337885][ T7497] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 419.607909][ T7497] usb 3-1: Using ep0 maxpacket: 8 [ 419.727895][ T7497] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 419.937848][ T7497] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 419.987909][ T7497] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.023123][ T7497] usb 3-1: Product: syz [ 420.043929][ T7497] usb 3-1: Manufacturer: syz [ 420.083510][ T7497] usb 3-1: SerialNumber: syz [ 420.114819][ T8801] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 420.156007][ T7497] usb 3-1: config 0 descriptor?? [ 420.220812][ T7497] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 421.296206][ T7497] gspca_zc3xx: reg_w_i err -110 [ 421.649725][ T8826] syz.4.1160 (8826): drop_caches: 2 [ 422.111587][ T8827] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 422.131589][ T7497] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 422.139058][ T7497] gspca_zc3xx: probe of 3-1:0.0 failed with error -110 [ 422.441788][ T8824] loop5: detected capacity change from 0 to 512 [ 422.479634][ T21] usb 3-1: USB disconnect, device number 4 [ 422.541278][ T8824] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 422.721914][ T8824] EXT4-fs (loop5): 1 truncate cleaned up [ 422.742085][ T8824] EXT4-fs (loop5): mounted filesystem without journal. Opts: minixdf,nobarrier,debug_want_extra_isize=0x0000000000000068,init_itable=0x0000000000000200,nombcache,max_batch_time=0x0000000000000007,,errors=continue. Quota mode: none. [ 422.777910][ T8833] device syzkaller0 entered promiscuous mode [ 423.192349][ T8847] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1169'. [ 425.627105][ T8865] loop1: detected capacity change from 0 to 512 [ 425.823083][ T8865] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 425.916584][ T8865] ext4 filesystem being mounted at /226/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 426.467772][ T8877] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #15: comm syz.1.1174: corrupted xattr block 33 [ 426.894113][ T8888] loop4: detected capacity change from 0 to 512 [ 427.016970][ T8888] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 427.065174][ T8888] EXT4-fs (loop4): 1 truncate cleaned up [ 427.071631][ T8888] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,nobarrier,debug_want_extra_isize=0x0000000000000068,init_itable=0x0000000000000200,nombcache,max_batch_time=0x0000000000000007,,errors=continue. Quota mode: none. [ 427.418010][ T8898] xt_CT: You must specify a L4 protocol and not use inversions on it [ 428.445437][ T4195] Bluetooth: hci4: unknown advertising packet type: 0xaa [ 429.236880][ T8923] loop4: detected capacity change from 0 to 512 [ 429.393337][ T8925] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[8928] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8925] [ 429.415829][ T8929] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1188'. [ 429.511523][ T8923] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 429.552653][ T8923] ext4 filesystem being mounted at /237/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 430.730832][ T8946] loop8: detected capacity change from 0 to 8 [ 430.757777][ T8946] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 430.950892][ T8946] loop8: partition table partially beyond EOD, truncated [ 431.001718][ T8946] loop8: p1 size 2645487272 extends beyond EOD, truncated [ 431.390319][ T8966] device syzkaller0 entered promiscuous mode [ 431.629712][ T4534] udevd[4534]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 432.137643][ T8994] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[8995] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8994] [ 432.616011][ T8999] loop5: detected capacity change from 0 to 512 [ 432.654688][ T8999] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 432.850437][ T8999] EXT4-fs (loop5): 1 truncate cleaned up [ 432.876501][ T8999] EXT4-fs (loop5): mounted filesystem without journal. Opts: minixdf,nobarrier,debug_want_extra_isize=0x0000000000000068,init_itable=0x0000000000000200,nombcache,max_batch_time=0x0000000000000007,,errors=continue. Quota mode: none. [ 433.887157][ T9029] loop2: detected capacity change from 0 to 512 [ 434.465068][ T9029] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 434.510973][ T9029] ext4 filesystem being mounted at /263/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 434.577691][ T26] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 435.377790][ T26] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 435.406494][ T26] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 435.465991][ T26] usb 5-1: config 0 has no interfaces? [ 435.490946][ T26] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 435.527798][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.609285][ T26] usb 5-1: config 0 descriptor?? [ 435.632214][ T9058] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.1212: corrupted xattr block 33 [ 436.129659][ T9072] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[9073] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[9072] [ 436.429943][ T9077] dlm: non-version read from control device 0 [ 437.094548][ T7497] usb 5-1: USB disconnect, device number 3 [ 438.102724][ T9096] device syzkaller0 entered promiscuous mode [ 438.745901][ T9106] loop2: detected capacity change from 0 to 128 [ 439.926401][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.933358][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.950876][ T9120] loop5: detected capacity change from 0 to 512 [ 440.084667][ T9134] binder: BINDER_SET_CONTEXT_MGR already set [ 440.091868][ T9134] binder: 9133:9134 ioctl 4018620d 200000001000 returned -16 [ 440.105458][ T9120] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 440.118957][ T9120] ext4 filesystem being mounted at /145/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 440.281172][ T9137] device syzkaller0 entered promiscuous mode [ 441.054832][ T4291] Bluetooth: hci1: Frame reassembly failed (-84) [ 441.474348][ T9152] dlm: non-version read from control device 0 [ 441.575323][ T9150] EXT4-fs error (device loop5): ext4_xattr_block_get:543: inode #15: comm syz.5.1236: corrupted xattr block 33 [ 442.835098][ T9158] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[9162] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[9158] [ 443.255903][ T9168] loop4: detected capacity change from 0 to 128 [ 443.291695][ T1110] Bluetooth: hci1: command 0x1003 tx timeout [ 443.311353][ T146] Bluetooth: hci1: sending frame failed (-49) [ 444.585790][ T9188] device syzkaller0 entered promiscuous mode [ 445.184965][ T9197] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[9200] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[9197] [ 445.367791][ T9203] loop5: detected capacity change from 0 to 128 [ 445.673516][ T21] Bluetooth: hci1: command 0x1001 tx timeout [ 445.680293][ T146] Bluetooth: hci1: sending frame failed (-49) [ 445.908542][ T9206] loop5: detected capacity change from 0 to 512 [ 446.251322][ T9206] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 446.284695][ T9206] ext4 filesystem being mounted at /151/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 447.164726][ T9223] binder: BINDER_SET_CONTEXT_MGR already set [ 447.185632][ T9223] binder: 9222:9223 ioctl 4018620d 200000001000 returned -16 [ 447.319221][ T9227] EXT4-fs error (device loop5): ext4_xattr_block_get:543: inode #15: comm syz.5.1260: corrupted xattr block 33 [ 448.062981][ T26] Bluetooth: hci1: command 0x1009 tx timeout [ 448.284890][ T9237] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[9243] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[9237] [ 448.629281][ T9248] loop4: detected capacity change from 0 to 128 [ 453.495285][ T9278] rxrpc: Assertion failed - 5(0x5) == 11(0xb) is false [ 453.546487][ T9278] ------------[ cut here ]------------ [ 453.617699][ T9278] kernel BUG at net/rxrpc/call_object.c:689! [ 453.627672][ T9278] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 453.633753][ T9278] CPU: 0 PID: 9278 Comm: syz.2.1280 Not tainted syzkaller #0 [ 453.641121][ T9278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 453.651171][ T9278] RIP: 0010:rxrpc_cleanup_call+0x1cf/0x1f0 [ 453.656981][ T9278] Code: e8 46 08 75 f8 41 b8 0b 00 00 00 41 b9 0b 00 00 00 48 c7 c7 e0 8d 34 8b 4c 89 f6 4c 89 f2 48 c7 c1 60 8e 34 8b e8 d1 78 b1 00 <0f> 0b e8 1a 08 75 f8 48 c7 c7 c0 8e 34 8b e8 be 78 b1 00 0f 0b 66 [ 453.676592][ T9278] RSP: 0018:ffffc9000549f7d8 EFLAGS: 00010246 [ 453.682658][ T9278] RAX: 0000000000000034 RBX: ffff8880627a64c0 RCX: ea7634de3576fd00 [ 453.690625][ T9278] RDX: ffffc90005689000 RSI: 0000000000004b56 RDI: 0000000000004b57 [ 453.698593][ T9278] RBP: ffff8880627a64c0 R08: ffff8880b9133d7f R09: 1ffff110172267af [ 453.706561][ T9278] R10: dffffc0000000000 R11: ffffed10172267b0 R12: ffff8880627a6198 [ 453.714527][ T9278] R13: 0000000000000012 R14: 0000000000000005 R15: dffffc0000000000 [ 453.722493][ T9278] FS: 00007f4b27a346c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 453.731422][ T9278] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 453.738000][ T9278] CR2: 0000200000089000 CR3: 00000000677f7000 CR4: 00000000003506f0 [ 453.745977][ T9278] Call Trace: [ 453.749259][ T9278] [ 453.752188][ T9278] rxrpc_service_prealloc_one+0xa1a/0xef0 [ 453.757910][ T9278] ? rxrpc_user_charge_accept+0xb4/0xe0 [ 453.763458][ T9278] rxrpc_user_charge_accept+0xb4/0xe0 [ 453.768833][ T9278] rxrpc_do_sendmsg+0x7c3/0x10c0 [ 453.773778][ T9278] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 453.779764][ T9278] ? rcu_lock_release+0x20/0x20 [ 453.784616][ T9278] ? __local_bh_enable_ip+0x136/0x1c0 [ 453.789983][ T9278] ? _local_bh_enable+0xa0/0xa0 [ 453.794839][ T9278] ? rxrpc_sendmsg+0x36b/0x890 [ 453.799601][ T9278] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 453.804884][ T9278] ? rxrpc_getsockopt+0x150/0x150 [ 453.809907][ T9278] ____sys_sendmsg+0x5be/0x8f0 [ 453.814680][ T9278] ? __sys_sendmsg_sock+0x30/0x30 [ 453.819706][ T9278] ? import_iovec+0x6f/0xa0 [ 453.824209][ T9278] ___sys_sendmsg+0x236/0x2e0 [ 453.828887][ T9278] ? __sys_sendmsg+0x290/0x290 [ 453.833664][ T9278] __se_sys_sendmsg+0x1b7/0x2a0 [ 453.838516][ T9278] ? __x64_sys_sendmsg+0x80/0x80 [ 453.843452][ T9278] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 453.849439][ T9278] ? lockdep_hardirqs_on+0x94/0x140 [ 453.854636][ T9278] do_syscall_64+0x4c/0xa0 [ 453.859048][ T9278] ? clear_bhb_loop+0x30/0x80 [ 453.863722][ T9278] ? clear_bhb_loop+0x30/0x80 [ 453.868398][ T9278] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 453.874292][ T9278] RIP: 0033:0x7f4b297dbe99 [ 453.878702][ T9278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.898304][ T9278] RSP: 002b:00007f4b27a34028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 453.906716][ T9278] RAX: ffffffffffffffda RBX: 00007f4b29a63fa0 RCX: 00007f4b297dbe99 [ 453.914683][ T9278] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 453.922651][ T9278] RBP: 00007f4b29871eaf R08: 0000000000000000 R09: 0000000000000000 [ 453.930621][ T9278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 453.938589][ T9278] R13: 00007f4b29a64038 R14: 00007f4b29a63fa0 R15: 00007ffc41cef4e8 [ 453.946563][ T9278] [ 453.949586][ T9278] Modules linked in: [ 453.964867][ T9278] ---[ end trace 3273c7ab10eb0810 ]--- [ 453.970392][ T9278] RIP: 0010:rxrpc_cleanup_call+0x1cf/0x1f0 [ 453.976270][ T9278] Code: e8 46 08 75 f8 41 b8 0b 00 00 00 41 b9 0b 00 00 00 48 c7 c7 e0 8d 34 8b 4c 89 f6 4c 89 f2 48 c7 c1 60 8e 34 8b e8 d1 78 b1 00 <0f> 0b e8 1a 08 75 f8 48 c7 c7 c0 8e 34 8b e8 be 78 b1 00 0f 0b 66 [ 453.996001][ T9278] RSP: 0018:ffffc9000549f7d8 EFLAGS: 00010246 [ 454.002130][ T9278] RAX: 0000000000000034 RBX: ffff8880627a64c0 RCX: ea7634de3576fd00 [ 454.010204][ T9278] RDX: ffffc90005689000 RSI: 0000000000004b56 RDI: 0000000000004b57 [ 454.018277][ T9278] RBP: ffff8880627a64c0 R08: ffff8880b9133d7f R09: 1ffff110172267af [ 454.036966][ T9278] R10: dffffc0000000000 R11: ffffed10172267b0 R12: ffff8880627a6198 [ 454.060529][ T9278] R13: 0000000000000012 R14: 0000000000000005 R15: dffffc0000000000 [ 454.070248][ T9278] FS: 00007f4b27a346c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 454.080365][ T9278] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 454.086997][ T9278] CR2: 0000562ecace6d28 CR3: 00000000677f7000 CR4: 00000000003506f0 [ 454.096363][ T9278] Kernel panic - not syncing: Fatal exception [ 454.102619][ T9278] Kernel Offset: disabled [ 454.106927][ T9278] Rebooting in 86400 seconds..