last executing test programs: 47.837917947s ago: executing program 1 (id=94): r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x9, {"0dbad96fff01000008ff002084000100", "3dfab043e15f19d0a639f105b5e9f977", "a7c94700"}, 0x4000c, 0x5}) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/101, 0x65}], 0x1, 0x8, 0xce5) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000080)={0x6, {"7fb13911afb5ea7f027063aa876dd358", "cfe484e50900", "d9ca451d96249a1dee77476cc87f7d0a"}, 0x6}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x0, r1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000000)={0xff01, 0x0, 0x3, 0x1}) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) 46.397251732s ago: executing program 1 (id=99): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000400)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) accept4$alg(r0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x9beb, 0xc000, 0x0, 0xbe}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 45.931070503s ago: executing program 1 (id=101): syz_emit_ethernet(0x4c, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a35f2", 0x16, 0x2c, 0x0, @remote, @local, {[], {{0x2f00, 0xfff5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0xffff}, {"6ae0"}}}}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x501d01, 0x0) write$tun(r0, &(0x7f0000000140)={@void, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x2, @broadcast, @remote, @multicast, @private1}}, 0x34) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='270', 0x3) unshare(0x40000000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x3, &(0x7f0000000000)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x73, 0x11, 0x9a}, [], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1}, 0x94) 45.15329901s ago: executing program 1 (id=103): getpid() mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x85) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='\x00', 0x89901) move_mount(r0, &(0x7f0000000240)='.\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/../file0\x00', 0x81900) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x9801) move_mount(r2, &(0x7f0000000340)='.\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(r1, &(0x7f0000000400)='\x00', 0x89901) 44.944478594s ago: executing program 1 (id=104): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000880)=ANY=[], 0x1e4}, 0x1, 0x0, 0x0, 0x18080}, 0x40) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000002c40)=ANY=[], 0x40c}, 0x1, 0x0, 0x0, 0x90}, 0x8000) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@gcm_256={{0x303}, "f3f18378e513b9a0", "54bbe524a2b4f5d185db3cc1b1a27ff2902b35dede800ac6a9549a6b15404001", "01eef9bb", "dac9cc6cd994174c"}, 0x38) 44.766542778s ago: executing program 1 (id=106): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000000c0)=0xfe, 0x4) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) 43.91390467s ago: executing program 32 (id=106): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000000c0)=0xfe, 0x4) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) 20.658138948s ago: executing program 5 (id=164): socket$inet6(0xa, 0x2, 0x0) socket(0x18, 0x80000, 0x1) socket$key(0xf, 0x3, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/ipc\x00') socket$tipc(0x1e, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040662410800001000000010902"], 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = epoll_create1(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0], 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x20) 16.633178406s ago: executing program 5 (id=171): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000500), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000540), 0x10106, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000005c0)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000600)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) 16.336145659s ago: executing program 3 (id=172): prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0) read$msr(r1, &(0x7f0000000c00)=""/102368, 0x18fe0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x7, 0xf, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6}, {0x27, 0x0, 0x0, 0x10000000}}, [], {{0x4, 0x1, 0x9, 0x3, 0x2}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f00000002c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 14.953749368s ago: executing program 3 (id=173): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb88fb4500003000000020fc0290780000001ce00003020306907800fa00094570fff600650005010400fa09"], 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00203c0024", 0xe}], 0x1}, 0x4005) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07, 0xffc1}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 12.328528069s ago: executing program 5 (id=184): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x200000) pwrite64(r0, &(0x7f00000000c0)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f0000000140)='PRIVHEAD', 0x8, 0xc00) pwrite64(r0, &(0x7f0000000200)="0002000b", 0x4, 0xc0c) pwrite64(r0, &(0x7f0000000240)='12', 0x2, 0xc30) pwrite64(r0, &(0x7f0000000280)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0xd23) pwrite64(r0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0xd2b) r1 = syz_open_dev$loop(&(0x7f0000000480), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 10.87455179s ago: executing program 5 (id=185): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000080)=""/111, 0x6f}], 0x20, 0x7, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 10.873086246s ago: executing program 3 (id=186): connect$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffdcf) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000080), 0x4a) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r2) 7.580460276s ago: executing program 0 (id=189): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000500), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000540), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r3, 0x29, 0x50, 0x0, &(0x7f00000005c0)) 7.522598219s ago: executing program 5 (id=190): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001880)) r2 = eventfd2(0x1, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000400)={0x1, 0x0, 0x0, &(0x7f0000020000), &(0x7f0000018000)}) write(r1, &(0x7f0000018000)="000001", 0x3) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000600)={0x1, r1}) write$tun(r1, &(0x7f0000000800)=ANY=[], 0x10) 6.994706844s ago: executing program 4 (id=192): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000020301dd000000000000000002000000080001000100000009000200f9ffffff01"], 0x28}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000500)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000540)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000100)={@val={0x8, 0x800}, @val={0x1, 0x0, 0x4, 0xfffd, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x22, 0x16, 0x65, 0x0, 0x60, 0x2, 0x0, @empty, @broadcast}, "14f3"}}, 0x24) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$NFT_BATCH(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x15}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x78}, 0x1, 0x0, 0x0, 0x2400c0f0}, 0x10) 6.753419344s ago: executing program 5 (id=193): ptrace$cont(0xffffffffffffffff, 0x0, 0x8, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./debug\x00', 0xac) mount(0x0, &(0x7f0000000480)='./debug\x00', &(0x7f00000004c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/dynamic_debug/control\x00', 0x8002, 0x0) write(r0, &(0x7f0000000540)='+p', 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, 0x0) 6.589418992s ago: executing program 3 (id=194): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) accept4(r2, 0x0, 0x0, 0x800) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r3, 0x40106f52, &(0x7f0000000380)={0xa, &(0x7f00000000c0)=[{0x20, '\x00', @data, 0xfff}]}) 6.49225374s ago: executing program 4 (id=195): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r3, r1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r3, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000280)={0x20, r5, &(0x7f00000002c0)=[{}], 0xdeadbeef, 0x8, 0x1}) ioctl$IOMMU_DESTROY$hwpt(r0, 0x3b80, &(0x7f0000000300)={0x8, r5}) ioctl$IOMMU_DESTROY$hwpt(r0, 0x3b80, &(0x7f0000000340)={0x8, r4}) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f0000000380)={0x24, 0x0, r3, 0x1c, &(0x7f00000003c0)=""/28}) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000400)={0x8, r2}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000440)={0x8, r1}) close(r0) 6.491922029s ago: executing program 0 (id=196): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000004c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000500)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000540)=0xd52, 0x4) connect$inet(r0, &(0x7f0000000580)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="9fd8da8e45bcce079f16b15e72c2bb973672753c8b8d7f0ef25c250e8b631670f8a559c5", 0x24, 0xc0814, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000180)="3938989556e929097dfaefeb5162090d317b8b23b568a7aae0759c1ecc54ada0927753d1133c389ac7e205a8048b831477956f078a1c38830af24445281e8c3be4facff0e29192b67e", 0x49, 0x10, 0x0, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, 0x0, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000600)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r0, &(0x7f0000000680)='<', 0x381, 0x805, 0x0, 0x0) 6.430858958s ago: executing program 2 (id=197): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000380), 0x318, 0x0) recvmmsg(r1, &(0x7f00000003c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000026000200feffffffbd0310000000000095002000000000006916000000000000bf6700000000000004070000b964b01a4607feff00200000540700000ee61e00bf150000000000000f5700000000000065070000d23700002c030000000000001f75000000000000bf54000000000000070000000400f9ffad430100000000007c000000000000000500000000000000950000000000000032ed3c5be95e5db67754bb12dc8c4ed68ecf264e0f84f9f17d3c30e3c7bdd2d17f2f175455000078af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd390700000500000000f18c30907d7bee45a0100000fe9de56c9d05000000c6c60bef0d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cac3f1d5af65727546e7c955ccefa1f6ab689ffffff7f63ede202fa4e0a2127b8b83c71a51445dc8dfd13ff15f852a39e5b2ab7bcb8f512036a5ba6d04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916fcecc8158f0200000000c8fb735fd552bdc268694aeb0743e326c819b6cf5c8ac86f8a297dff0445a13d0045fb3cda30a673a6037ed8c85f21ec2c081bdce431e56723888fb126a19bc1172b84b3ebe174aba210d739a018f9bbec63222d20cecac4d03723f1c921b5bbf7949632cacfdd32b3a6aa57f1ad2e99e0e67a993716dbf580469f0f53acbb400001e3738270b315d362ed834f2af97787f696649a462e7e090000000000000045eac1f2014f720e83b7838e3eede14308d582685e1becd6f35154bcb4000000000000000000000000000000bc3af2b170ad3e2b26539cebca8f4ddc211bc3ccf0bd9d42ca019dd5d022cf74686e9fbe2562979eaed840a7afaab43176e65ec1118d46d1e827f3472f4445d353887a5ad103649afa1769080584f800031e03a651bb04000000ab04871bc47287cd31cc43ea0ffb567b4040c1458d0320ce7d0000413a0000000000000000005f37983f84e98a523d80bd56a57fa82b82f639601ae899a559944cb9a62a29ab028acfc1cb26a0f6a5480a55d624a0c544ba0dc828c22fe30000aa391598000000437d57fcf8295f63a70837f5cd4e5e77964522dc7ca3aa3476b7f2d851d27fd4de6eabb43e0799dc8d9fb7dc6c523ffbd74a6a40e4acb1ac872ade9d1f2ab779b8dbe843aeeda0426c767c00327b8c95b2bb6ddb55117669d9598c0f3598073f3a921c76beceff7e4fbf909a2cabf5b8ea5011db9020823b83abe54346c7af0a99fa077ffe7000feb9e44023a1749eb1d0d572b77d6e0d0fcd74031c8ef2629f5ecff4626746d6abe98a255e92c3c4f79bfcd0d91741380000cfeb73dec68ed56b5d3dfdf0cb8b71ad79000000000000000000000000000000dd434a25e95d0ec29d3adaccf89d0888031ecdfdb4dfbe444673be099ece7e4009c76c7108ef0a7e59fd6d906fbc3c9b412e0478cfee4485f423c63f49db43833c92eeeb647cebd4d7a93a17bcbb6bae5ff876375d4fe39cc2d292691672cc18ca372104ceb83a35ecedd97fc191d8f64d2b1d60c6d12911aada66c26aa4802c3514c3d92ec905000000b13f4a2575fbe943a6c40000000000000000000000000000028026b80c3899543223a6079ee96198b9a326db3be3a48af415ca28ca68c502550044ed8e29af8d763ef9b1f31befcad2ce5394601c7cdc233bff7f0000000000009fb3ad650f77e339768924dfdbeead13b88371154d743544a6091ec93e0d3fd5b4dc42911c1ba322fd4d6fbf19e617d51f964727bfd5cc5ba15370f6e1141d2271eded0b15e4316a1e4623272beb249a0928c417720be14c898f397411c88a7bcf3df46ab3efe7cd5e160c2afd3cc945f75011a102d952c7ad17a58d9be691c334ea35bae71e76e160cc2260bd028162917807ce89e11b5f261052ee0dde18efa1d802af2b7bcf6f8af41933cea0d0343261bccf64ca1c81045153eafbefdb91fbdff9ee3307d4a1837963b2dc2a3698d90e7915b098f19392e792adaea86052f4e948184001b6494e906925a092483adc7e9c8f7a29d226763c100aecae7f00619c36bceb9fb6dd7e55487d8485e498fdfc377fd3d266d21d46ab2f6b2ce22cd0aebba9b0ffbfe8ec3143c3734967c90b16ebbeeae1ce2baaae05aed6bf0f40c8a323f9235dc99698bd0b800067a901a79daada03cc77e74feb98b1586946b452764ff917a8ecc10e529c5bea49cad70e22df522c2803b6ef65df70223c6e22c3433e322d8dbd6e9b040065a9d6b3d5ae276cffe935d559bea88e1aa36b4e6c19e78457904297e77370e013b705a96548d47c609a93c45f4d1382b39c05dcc07d5b49ad75ddb3ce5b5b9416e03995da04647aa5e6fc1a6f5d663380967ccef9de49a90ced031335e3219ebd9d06c257a50497ec523f5ff7361261ccfe239d603364a42e2e81fc068fcbb9792b673827fe7018a988fbce55bb74cdb327ced4b77b8743fb3cb72cc280b9f62e4f92f46a19600b802cba88b7d0a938d9e0e6cfe5d66b874c9a0c6c04b96360d6f499d004179e5b6025c0e1050faec7ecd9de190a975db2f8c06a551236278c4766d7e22e3b85168c9851de6266c791252f919b4f8b257b5a786734e5142e4666c67aef5b7b2f88c6640995434aa8636993089c73f196c54ae829ad4307132655b075ae534fa7f1ea9a17e62357b0bd2bd1d62d34bfc1364640250136729ba4f763ff25c33e8acc806611792add8254e705fefd2a44d5b15e3b36f6b75c97c9c04c511d8cf9e24c61c8284a913a381cb1a5628878040000000000000017b68afd95d4abf7920de9ebe1c89661f4adc3d83d72b1b778e30c2bf2efbbcd054cf51f4205ebf9a98a0d9f18135cb1d8d567c3436fa697b72c3b0200000000000079c0b3339debc78352b2e65299223d7ef2bd540e78167b3ac92a4c4f826f6d0e5c4ebf4f7a70c03e2f5ddbebf168586360c3663531eb5995d228f011a10ffc8b17d716b0c528dab6d0c4fe2ee402348104bc5d4012babedee898c6d3e1017be2e9bc759d3ab4d615f5000000000000000000000000000000000000000000007fff0000000000e693e314adf7dc9f517d04f1e6ca367d30d31d3647c6059db6e1e9529eb1623ef99e2d9ac2ab4872f8e784b07a31110bef6d000000a6f9e89e6d50ee06ce716f94da60f1f22d9669560d296287c13c92070000ee7553eb2df17839542fa88d09f000e88a90cf4406b9000000000000000000000000f441d6a6f516c235c6f5863e7f454ee0e16b9aa2593eb31fa3836703e7765aaeb77a8770e518efaa6d3dd85e03b3b133eb749057cea9af75a0e6f633532f2891b8e263cb6eecea691842827bc7c8c0130187081c8d320642389f5f0c42dba0ff68e84d7b130906f17f6aa075a257310f2d92cb1d1e16468949f5675262ee318e735930b01d8f586e34537bcff7d6196f494cdcf3a712078d745db0f5687a78ee6d000b3d171a0f08299b52d207f32e9da311ca090000003a42732808515eec574f892622c5be497fc3d9ca122d7c18b9e54637812c8debc61f0e42d838e44a819b74bce1a56108bb0fde97a02475920532309c55b2c9ae9f281391ec5cc72a5e94cca1cbf1ff01000000000000bdb537a0c52bd45a9f966c25616cec30c3ea3246cb8e6aac7cf273638e6656a3e4ccadc348f0172028c99cc5f6d5c6d09ed65aa54549e73c28b7c8ad06ad3c5e3c27eec0eff1a6c84f1189919eefcee807fc081e004ffb7d3104af00ac92f1080211c4bee74381a0e31021918f27863fdbafb50f70857d52a1f7df51935a80b1980a4778d35f183ea517f55a98095305701ab3f3ae43f06e91bc7d85e3800b46926944fba9805a985e63e53a62232fcd3f01dbe1728f300e247a7ebe344f9749818ff3961b2a42664ccd680a90bbb6ab400e286acc8f9febef64594777f848ed1cf980a3da2f0f7745760a05887d0c28060d613dd6539d392fc21fee0b5131609664b821d7a994e6c5965a4fa1ec1790c54e54586907dcc5e8bac16e79da9c2444420900000000000000f888a94365b99b72796fca1b922fc9aefaf1546c17cbb1d2d2fd12cb1a49cad501a3ca218c595b667b634606c57987ebfb0783a4948e4561d5cda158fe74453ff4a837beeedba483842c57d6005b544b4f80003386edfd3d4a88a667bd41eefe0d808abed08a29e6bc370a80cc0366fb4080bfbaaa946fd47ab662c794846e403950bbc3a48bb276cbb08a8eab145c06221ef16a238e3d50ad18aea9a2cec97d3c2d0569caabe2bffe02506bc9cb7294c5d020536dd5e7a6351642112df3b55d0215aaec7e45598995e79699e47567e353e68b03f82be860b188554b734e1192f9c1a867b815ef52cdc3307c0cc9be05a40fde69c350e59f11f1d26a4d04d8c8b2c4a4d23ec931d14bc7807db773a614b670acf46f83f7c65a0f8d43c5f64705f0d27c46d4b686e867e9b0be76a7978a8f962bb5a070df97f2bf7612115cfe5ebdc7ad0bc5a5f3ace25347d0e5c347279d55aa67a967380000000000000000000000000000000000000000000000ed0942d980c754c6c69ef65c375ad018824f78b260d5f51bc3feba504408a8c8141d84f3f417603b5081680f346ff0ffbe4ae19e936511966965ce268b6345a0001c0f26a32e0a999fc869292e939dcf89b9bfd794f9c12d41959a00688cca43015a9eec58f647796adea520cd2abeb0b55c22949d10e5a05fee4543fdc1e02554a55b5fef2427a6e5708edc38fac53c2f961945a3f83cdf01979939b49bc6b1aef8c733401bbe473de8d64efbe0d123739f387d1c0d9e74f2175c174ada1678c7db79492e8dd0f34e2ccf419cf7f14ffa408b50a52685b36aed14aa22ad928191d5a2697646edc52a1c0c5d720ae690add2b34aed161f51cc1cb424f76098e1e1921e5a405f9d298a8461f2da30e47b7c6ed7c95c84c745f58723e4cddffae3b53b5b947f9435e589f9ae55b30ecd3827b2de5df31976870823da8058c2538c04e397f3d0ef90c11c74da984fa558697ecb57224ce8fa6f79aadbd7dbf3678e74d790bc2ee72769a3ada1dd504f8e4133ce1effd446bc9a2f139e65cc4bd83912af3122352506c7c2191b3705116b2f4fc20d4e93882bdd6ccea97f3a08d3565b0000000000000000000000000000d35fb97c2d7a9374294dcec3da3df9a13c4fc63b00426682534d894caee0b963a3"], &(0x7f00000013c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001400), 0xfffffffffffffe50}, 0x48) 6.3052009s ago: executing program 3 (id=198): unshare(0x4020400) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x88308411, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x6, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) gettid() timer_create(0x1, 0x0, 0x0) dup(0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f00000000c0), &(0x7f0000000100)=0xfffffebb) setsockopt$inet6_int(r0, 0x3a, 0x7, 0x0, 0x0) 5.042550494s ago: executing program 0 (id=199): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x22000406, &(0x7f0000000180)={[], [], 0x2c}, 0x84, 0x4ba, &(0x7f0000000280)="$eJzs3MtvG0UYAPBvN4++m7SURx9QQ0FEFJImLdADh4JA6gUJCQ7lGNJQlaYtaoJEq4oGhMoR8RcARyQkTlw4gYQQcAJxhTtCqlAvDRxQ0Nq76bqxU8d5GOrfT7Izs571zDe7413vZB1A16pkT0nE1oj4NSIGatn6ApXan7nrlyf+un55Ion5+Zf/TKrlbly/PFEULdbbkmeG0oj0/ST2Nqh3+uKlM+NTU5MX8vzIzNk3R6YvXnri9NnxU5OnJs+NHT165PDo00+NPbkqcWZx3djzzvl9u4+/+tGLE/Px2g+fZ+3dmr9ejqNmcMV1VqIS87mbS/urz4+s+N3/W7aV0klvBxvCsvRERLa5+qrjfyB64ubGG4gX3lvIfNuhBgJrJjs27Vi0tCf/my4cv4A7UWKMQ5cqjvjZ99/isZ7nH5127dnsebIa/1z+qL3SG2n2XXaw9o29p8n6x1ZY/9aIODH798fZIxpehwAAWF1fZ+c/jzc6/0vjnlK57fkcymBEHIyInRFxV0Tsioi7I6pl742I+5ZZf+WW/OLzn583tRVYi7Lzv2fyua368780L5Es5LZV4+9LXj89NXko75Oh6NuQ5UeXqOOb53/5sNlrldL5X/bI6i/OBfN2/NG7oX6dk+Mz4ysIuc61dyP29DaKP1mYCch6YHdE7Gnj/bM+O/3YZ/uy9PYti1+/ffxLWIV5pvlPIx6tbf/ZuCX+QlKrqdn85MjGmJo8NFLsFYv9+NPVl8r5vlK6Lv6NrcW0sd1gG8i2/+aG+38efzEMivna6eXXcfW3D5p+p1m8/ZM4MVsuUdv/09KSbP/vT16ppvvzZW+Pz8xcGI3ozxfULR+7uW6RL8pn8Q8diJgr+r00/ndG/PNJvnhvRGQ78f0R8UBE7M/b/mBEPBQRB6LWj418/9zDbyzdQ23u/6sgi//kUts/YjApz9e3keg5891Xzepv7fPvSDU1lI3XFj//Wm3gSvsPAAAA/g/S6hx0kg4X6dLFqV2xOZ06Pz1zsBJvnTtZm6sejL60uNI1ULoeOppfGy7yY7fkD0fEjup/Gm2q5ocnzk9t62TgQPVenbrxH2k6PFx77fdm//QC3DmWNY9Wvjvwiy9XvzHAunK/JnQv4x+6VzvjP12DdgDrz/Efulej8X8lYq4DTQHWmeM/dC/jH7qX8Q/dy/iHrrT4lvji51Zue/98fyxxa/3O4yv5xYC1T8wPrMk7zy5/rZ41ijTKP9rRNJFERHtVRLp0mf4Wau9YIr1tmWNtdssyEvvzxIaIaHWtK+vWq539XAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFgt/wYAAP//O2jXow==") mount(0x0, &(0x7f0000001640)='./file0\x00', 0x0, 0x108010, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001540)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001740)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001780)='./dev\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001800)='./dev/kmsg\x00', 0x81, 0x0) setxattr$system_posix_acl(&(0x7f0000001580)='./sys\x00', &(0x7f00000015c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x17f) mount(0x0, &(0x7f0000000140)='./proc\x00', 0x0, 0x0, 0x0) mount$fuseblk(0x0, &(0x7f0000000240)='./proc/net/rxrpc/calls\x00', 0x0, 0x800, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rxrpc/calls\x00', 0x0, 0x72) umount2(&(0x7f0000000080)='./proc/net/rxrpc/calls\x00', 0x1) 5.00728721s ago: executing program 4 (id=200): socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000c40), 0x0, 0x10, &(0x7f0000000c80), 0xfffffffffffffe19}, 0x42) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e000000040000000400000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x14, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r0}, &(0x7f0000000700), &(0x7f0000000740)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000007c0)={r1, r3, 0x25, 0x2, @val=@tcx={@void, @value=r1}}, 0x1c) syz_emit_ethernet(0x22, &(0x7f0000000800)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @empty}}}}}}, 0x0) 4.954321148s ago: executing program 2 (id=201): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x121800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x200005, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x4fbee}, 0x13, 0x1, 0x3, 0x7, 0x10, 0x4, 0x1b, 0x18, 0x5, 0x402, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000600)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000680)="05", 0x5dc, 0x4009, &(0x7f00000006c0)={0x11, 0x88a8, r5, 0x1, 0x3, 0x6, @remote}, 0x14) 4.028900358s ago: executing program 0 (id=202): socket$phonet_pipe(0x23, 0x5, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000004300), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000004480), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000004880)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000007600)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000007680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f00000076c0)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000007700)=ANY=[@ANYBLOB="400104"], 0x14) r4 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000007740)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r4], 0x14) 3.944134135s ago: executing program 2 (id=203): mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000019740)='./file0\x00', 0x2, 0x0) write(r0, &(0x7f0000019780), 0x0) read$FUSE(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x800001000089}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r1 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000340)=""/102384, 0x18ff0) bpf$PROG_LOAD(0x5, &(0x7f000001bcc0)={0x7, 0x4, &(0x7f000001bd80)=ANY=[@ANYBLOB="850000009e0000006a0a00ff000000006900102700000000950000000000000018100000", @ANYRES32, @ANYBLOB="00000000000000000500a801000000009500000000000000"], &(0x7f000001bdc0)='GPL\x00', 0x2, 0xffa0, &(0x7f000001be00)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) 3.80526128s ago: executing program 4 (id=204): ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000001000)={{0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x0, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0x26000, 0x0, 0xb, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xffff}, {0x0, 0xffff}, 0xc0000025}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000004180)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000041c0)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x40000001, 0x0, 0x0, 0x31237648, 0x0, 0x9}]}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f0000000000)=0x100000001, 0x4) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f0000004240)={0xa3, 0x0, 0x0}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000042c0)={0x1, 0x0, [{0x40000073, 0x0, 0x1001}]}) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000004300)=@vmx={0x4, 0x0, 0x2080, {0x1000, 0xffffffffffffffff}}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.451509573s ago: executing program 2 (id=205): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x0) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000440)='devtmpfs\x00', 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000680), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000006c0), 0x2, 0x141102) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000740)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f0000000800)={0x3ff, 0x80, 0x5, 0x0, 0x101, 0xafc2, 0x5, 0x1}, 0x0, 0x0) ppoll(&(0x7f0000000940), 0x0, 0x0, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000980), 0x8) bind$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) mount(&(0x7f0000000a40)=@filename='./dev/mtdblock0\x00', &(0x7f0000000a80)='./dev/mtdblock0\x00', &(0x7f0000000ac0)='adfs\x00', 0x2008000, 0x0) 3.356390039s ago: executing program 4 (id=206): getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000380), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) bind$bt_sco(r3, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f00000000c0), 0x4) 3.316509636s ago: executing program 3 (id=207): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, 0x0) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x200802, &(0x7f00000000c0)=ANY=[], 0x1, 0x212, &(0x7f00000008c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./file1\x00', 0x40, 0x146) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x4003012, r0, 0x7000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40042, 0x1) r2 = socket$unix(0x1, 0x5, 0x0) utimensat(r1, 0x0, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x4000, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.178418971s ago: executing program 0 (id=208): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x80005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000000280)=""/102392, 0x18ff8) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 2.028141169s ago: executing program 4 (id=209): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0xffffffffffffff34, &(0x7f0000000040)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local}, 0xc) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}}}, 0x24}}, 0x0) 1.092528046s ago: executing program 0 (id=210): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe00}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 992.030818ms ago: executing program 2 (id=211): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000200)=""/102392, 0x18ff8) r2 = io_uring_setup(0x3454, &(0x7f0000019200)={0x0, 0x7170, 0x40, 0x2023, 0x19a}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000019280)=[{&(0x7f00000192c0)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f000001a2c0)={0x0, 0x0, &(0x7f000001a300)=[{0x0}], 0x0, 0x1}, 0x20) 0s ago: executing program 2 (id=212): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r4], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x59) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.124' (ED25519) to the list of known hosts. [ 66.499282][ T5620] cgroup: Unknown subsys name 'net' [ 66.607835][ T5620] cgroup: Unknown subsys name 'cpuset' [ 66.615466][ T5620] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.910088][ T5620] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.306727][ T5639] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.308271][ T5639] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.308867][ T5639] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.329391][ T5644] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.329913][ T5644] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.340625][ T5644] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.342682][ T5644] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.343166][ T5644] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.350977][ T5651] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.352952][ T5651] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.353166][ T5651] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.359877][ T5644] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.360408][ T5644] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.360731][ T5644] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.361067][ T5644] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.363088][ T5650] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.368706][ T5644] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.370154][ T5644] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.370834][ T5644] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.371665][ T5650] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.372239][ T5650] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.387596][ T5646] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.401371][ T5653] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.406237][ T5653] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.406774][ T5653] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.311384][ T5633] rdma_rxe: Failed to create IPv6 UDP tunnel [ 71.319315][ T5635] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.324124][ T5635] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.333375][ T5635] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.348136][ T5632] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 71.362885][ T5634] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 71.389184][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.389262][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.428950][ T5631] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 71.797563][ T5635] infiniband rxe0: set active [ 71.797583][ T5635] infiniband rxe0: added rxe_eth0 [ 71.840308][ T5635] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 71.840345][ T5635] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 71.840379][ T5635] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 71.893433][ T10] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.959726][ T5635] RDS/IB: rxe0: added [ 71.960032][ T5635] smc: adding ib device rxe0 with port count 1 [ 71.960129][ T5635] smc: ib device rxe0 port 1 has no pnetid [ 72.002918][ T10] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.023597][ T5635] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.141730][ T5645] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.167790][ T10] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.335987][ T5635] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.425314][ T5640] Bluetooth: hci0: command tx timeout [ 72.425466][ T5640] Bluetooth: hci2: command tx timeout [ 72.425568][ T5640] Bluetooth: hci1: command tx timeout [ 72.425665][ T5640] Bluetooth: hci3: command tx timeout [ 72.505294][ T5639] Bluetooth: hci4: command tx timeout [ 72.690626][ T5635] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.691433][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.691961][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.692102][ T5632] bridge_slave_0: entered allmulticast mode [ 72.693641][ T5632] bridge_slave_0: entered promiscuous mode [ 72.761945][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.762030][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.762332][ T5632] bridge_slave_1: entered allmulticast mode [ 72.765336][ T5632] bridge_slave_1: entered promiscuous mode [ 72.893945][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.937128][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.937244][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.937321][ T5634] bridge_slave_0: entered allmulticast mode [ 72.938353][ T5634] bridge_slave_0: entered promiscuous mode [ 72.941024][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.941119][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.941492][ T5634] bridge_slave_1: entered allmulticast mode [ 72.942997][ T5634] bridge_slave_1: entered promiscuous mode [ 72.972847][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.999438][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.999533][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.999875][ T5631] bridge_slave_0: entered allmulticast mode [ 73.001454][ T5631] bridge_slave_0: entered promiscuous mode [ 73.003472][ T5635] rxe_eth0 speed is unknown, defaulting to 1000 [ 73.006004][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.006097][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.009053][ T5631] bridge_slave_1: entered allmulticast mode [ 73.012302][ T5631] bridge_slave_1: entered promiscuous mode [ 73.079529][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.125978][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.142207][ T5632] team0: Port device team_slave_0 added [ 73.157981][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.158084][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.158196][ T5633] bridge_slave_0: entered allmulticast mode [ 73.160187][ T5633] bridge_slave_0: entered promiscuous mode [ 73.194556][ T5632] team0: Port device team_slave_1 added [ 73.199751][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.200345][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.200478][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.200585][ T5633] bridge_slave_1: entered allmulticast mode [ 73.205383][ T5633] bridge_slave_1: entered promiscuous mode [ 73.236531][ T5634] team0: Port device team_slave_0 added [ 73.239124][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.278834][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.304673][ T5634] team0: Port device team_slave_1 added [ 73.326531][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.360690][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.360704][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.360733][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.399380][ T5631] team0: Port device team_slave_0 added [ 73.410658][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.410670][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.410693][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.413366][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.413378][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.413401][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.414923][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.414935][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.414957][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.420912][ T5633] team0: Port device team_slave_0 added [ 73.424197][ T5631] team0: Port device team_slave_1 added [ 73.438077][ T5635] rxe_eth0 speed is unknown, defaulting to 1000 [ 73.484193][ T5633] team0: Port device team_slave_1 added [ 73.545334][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.545348][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.545371][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.642497][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.642510][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.642531][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.643424][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.643435][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.643454][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.735640][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.735656][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.735680][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.745589][ T5632] hsr_slave_0: entered promiscuous mode [ 73.748129][ T5632] hsr_slave_1: entered promiscuous mode [ 73.762722][ T5634] hsr_slave_0: entered promiscuous mode [ 73.766745][ T5634] hsr_slave_1: entered promiscuous mode [ 73.767759][ T5634] debugfs: 'hsr0' already exists in 'hsr' [ 73.767788][ T5634] Cannot create hsr debugfs directory [ 73.852875][ T5631] hsr_slave_0: entered promiscuous mode [ 73.853445][ T5631] hsr_slave_1: entered promiscuous mode [ 73.853888][ T5631] debugfs: 'hsr0' already exists in 'hsr' [ 73.853902][ T5631] Cannot create hsr debugfs directory [ 73.883365][ T5633] hsr_slave_0: entered promiscuous mode [ 73.883952][ T5633] hsr_slave_1: entered promiscuous mode [ 73.884337][ T5633] debugfs: 'hsr0' already exists in 'hsr' [ 73.884350][ T5633] Cannot create hsr debugfs directory [ 74.397395][ T5634] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.408201][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.409032][ T5634] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.436336][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.446640][ T5634] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.459867][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.473726][ T5634] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.479028][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.515081][ T5640] Bluetooth: hci1: command tx timeout [ 74.515113][ T5640] Bluetooth: hci2: command tx timeout [ 74.515135][ T5640] Bluetooth: hci0: command tx timeout [ 74.515912][ T5639] Bluetooth: hci3: command tx timeout [ 74.579630][ T5635] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.579735][ T5635] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.579845][ T5635] bridge_slave_0: entered allmulticast mode [ 74.581214][ T5635] bridge_slave_0: entered promiscuous mode [ 74.583393][ T5635] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.583498][ T5635] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.583603][ T5635] bridge_slave_1: entered allmulticast mode [ 74.586005][ T5635] bridge_slave_1: entered promiscuous mode [ 74.599278][ T5639] Bluetooth: hci4: command tx timeout [ 74.616648][ T5635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.619638][ T5635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.649790][ T5635] team0: Port device team_slave_0 added [ 74.652573][ T5635] team0: Port device team_slave_1 added [ 74.690251][ T5631] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.693065][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.693699][ T5631] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.702714][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.710311][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.710321][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.710342][ T5635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.717426][ T5631] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.730240][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.731657][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.731671][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.731694][ T5635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.732922][ T5631] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.761925][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.878918][ T5635] hsr_slave_0: entered promiscuous mode [ 74.879529][ T5635] hsr_slave_1: entered promiscuous mode [ 74.879987][ T5635] debugfs: 'hsr0' already exists in 'hsr' [ 74.880001][ T5635] Cannot create hsr debugfs directory [ 74.928624][ T5632] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.936115][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.936908][ T5632] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.948813][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.985839][ T5632] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.989082][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 75.023540][ T5632] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.030595][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 75.154669][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.167260][ T5633] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.170365][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 75.183905][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.196955][ T5633] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.203579][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 75.224241][ T5633] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.233688][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 75.234565][ T5633] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.252044][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 75.279386][ T1397] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.279469][ T1397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.312199][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.312299][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.388565][ T5635] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.392024][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 75.417586][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.419723][ T5635] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.422373][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 75.422835][ T5635] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.446590][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 75.464252][ T5635] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.474571][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 75.526510][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.547673][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.547729][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.561090][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.561205][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.626660][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.685506][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.741576][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.752367][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.798906][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.799004][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.803298][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.803392][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.843020][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.843124][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.851982][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.852077][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.019879][ T5635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.028619][ T5632] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.131295][ T5635] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.170021][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.170149][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.201411][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.201563][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.358201][ T5635] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.585836][ T5640] Bluetooth: hci0: command tx timeout [ 76.585869][ T5640] Bluetooth: hci2: command tx timeout [ 76.585889][ T5640] Bluetooth: hci1: command tx timeout [ 76.586029][ T5639] Bluetooth: hci3: command tx timeout [ 76.665445][ T5653] Bluetooth: hci4: command tx timeout [ 76.798551][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.012982][ T5634] veth0_vlan: entered promiscuous mode [ 77.038956][ T5634] veth1_vlan: entered promiscuous mode [ 77.102583][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.128027][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.235135][ T5634] veth0_macvtap: entered promiscuous mode [ 77.282237][ T5634] veth1_macvtap: entered promiscuous mode [ 77.311105][ T5631] veth0_vlan: entered promiscuous mode [ 77.321412][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.367682][ T5631] veth1_vlan: entered promiscuous mode [ 77.390019][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.414077][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.479102][ T5635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.553642][ T5633] veth0_vlan: entered promiscuous mode [ 77.571348][ T5631] veth0_macvtap: entered promiscuous mode [ 77.605326][ T5631] veth1_macvtap: entered promiscuous mode [ 77.617789][ T5633] veth1_vlan: entered promiscuous mode [ 77.678842][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.678864][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.736465][ T1397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.736478][ T1397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.741085][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.784051][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.797828][ T5635] veth0_vlan: entered promiscuous mode [ 77.846831][ T5635] veth1_vlan: entered promiscuous mode [ 77.896374][ T5633] veth0_macvtap: entered promiscuous mode [ 77.899478][ T5632] veth0_vlan: entered promiscuous mode [ 77.909677][ T5633] veth1_macvtap: entered promiscuous mode [ 77.931030][ T5632] veth1_vlan: entered promiscuous mode [ 77.995336][ T14] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.016466][ T5634] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 78.020118][ T14] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.020171][ T14] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.020217][ T14] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.020266][ T14] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.020319][ T14] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.020386][ T14] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.029533][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.035883][ T1397] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.105802][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.111251][ T5635] veth0_macvtap: entered promiscuous mode [ 78.171143][ T5635] veth1_macvtap: entered promiscuous mode [ 78.180560][ T1397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.180578][ T1397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.213638][ T5632] veth0_macvtap: entered promiscuous mode [ 78.675576][ T5653] Bluetooth: hci3: command tx timeout [ 78.676142][ T5653] Bluetooth: hci1: command tx timeout [ 78.676828][ T5653] Bluetooth: hci2: command tx timeout [ 78.677859][ T5653] Bluetooth: hci0: command tx timeout [ 78.723479][ T5632] veth1_macvtap: entered promiscuous mode [ 78.750199][ T5653] Bluetooth: hci4: command tx timeout [ 78.803241][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.803255][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.810909][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.831358][ T108] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.831547][ T108] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.846094][ T65] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.846152][ T65] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.890583][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.916744][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.952335][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.056543][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.056563][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.224364][ T1397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.224383][ T1397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.255533][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.256411][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.256450][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.256483][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.256530][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.256562][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.256593][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.256632][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.409840][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.409859][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.464238][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.464255][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.574647][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.574679][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.642371][ T1397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.642391][ T1397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.817478][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 79.976938][ T10] usb 4-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 79.994140][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.994170][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.994190][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 79.994230][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.031652][ T10] usb 4-1: config 0 descriptor?? [ 80.149678][ T5876] loop0: detected capacity change from 0 to 2048 [ 80.194954][ T5876] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 80.212920][ T5878] blk-mq: reduced tag depth (128 -> 64) [ 80.456866][ T5885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12'. [ 80.458471][ T5885] ip_tables: iptables: counters copy to user failed while replacing table [ 80.468685][ T10] plantronics 0003:047F:FFFF.0001: reserved main item tag 0xd [ 80.538139][ T10] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 80.677051][ T5865] loop3: detected capacity change from 0 to 16 [ 80.730135][ T5865] erofs (device loop3): mounted with root inode @ nid 36. [ 80.760832][ T5744] usb 4-1: USB disconnect, device number 2 [ 81.167716][ T5897] loop0: detected capacity change from 0 to 33792 [ 81.191005][ T5897] EXT4-fs: Ignoring removed nomblk_io_submit option [ 81.191055][ T5897] EXT4-fs: Ignoring removed nomblk_io_submit option [ 81.191093][ T5897] EXT4-fs: Ignoring removed nobh option [ 81.664647][ T5897] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 81.680716][ T5897] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.496543][ T5897] EXT4-fs error (device loop0): ext4_map_blocks:946: inode #15: comm syz.0.15: lblock 0 mapped to illegal pblock 0 (length 1) [ 82.532508][ T5897] EXT4-fs (loop0): Remounting filesystem read-only [ 82.626932][ T5907] syz_tun: entered allmulticast mode [ 82.783914][ T5633] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 82.903268][ T5909] mmap: syz.3.20 (5909) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 83.044247][ T5916] netlink: 24 bytes leftover after parsing attributes in process `syz.0.22'. [ 83.103586][ T11] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.356341][ T5924] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 83.785407][ T5906] syz_tun: left allmulticast mode [ 84.483199][ T5953] FAULT_INJECTION: forcing a failure. [ 84.483199][ T5953] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 84.483253][ T5953] CPU: 1 UID: 0 PID: 5953 Comm: syz.3.33 Not tainted syzkaller #0 PREEMPT(full) [ 84.483273][ T5953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 84.483291][ T5953] Call Trace: [ 84.483298][ T5953] [ 84.483305][ T5953] dump_stack_lvl+0xe8/0x150 [ 84.483338][ T5953] should_fail_ex+0x3eb/0x540 [ 84.483364][ T5953] _copy_from_user+0x2d/0xb0 [ 84.483388][ T5953] kvmemdup_bpfptr_noprof+0x86/0xf0 [ 84.483414][ T5953] map_update_elem+0x644/0xa80 [ 84.483444][ T5953] __sys_bpf+0xa2b/0xe70 [ 84.483473][ T5953] ? __pfx___sys_bpf+0x10/0x10 [ 84.483497][ T5953] ? do_futex+0x3e7/0x4e0 [ 84.483545][ T5953] ? rcu_is_watching+0x16/0xb0 [ 84.483570][ T5953] __x64_sys_bpf+0xba/0xd0 [ 84.483590][ T5953] do_syscall_64+0x171/0x540 [ 84.483617][ T5953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.483636][ T5953] ? clear_bhb_loop+0x70/0xc0 [ 84.483658][ T5953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.483676][ T5953] RIP: 0033:0x00007f6c2f7a94d9 [ 84.483701][ T5953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.483717][ T5953] RSP: 002b:00007f6c30641028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 84.483748][ T5953] RAX: ffffffffffffffda RBX: 00007f6c2fa25fa0 RCX: 00007f6c2f7a94d9 [ 84.483762][ T5953] RDX: 0000000000000020 RSI: 0000200000000200 RDI: 0000000000000002 [ 84.483774][ T5953] RBP: 00007f6c2f83804e R08: 0000000000000000 R09: 0000000000000000 [ 84.483786][ T5953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.483797][ T5953] R13: 00007f6c2fa26038 R14: 00007f6c2fa25fa0 R15: 00007ffde590c9c8 [ 84.483828][ T5953] [ 85.027394][ T5961] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 85.268556][ T5966] netlink: 12 bytes leftover after parsing attributes in process `syz.4.37'. [ 85.514994][ T5844] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 85.668572][ T5844] usb 4-1: New USB device found: idVendor=0681, idProduct=0005, bcdDevice=1.00 [ 85.669905][ T5844] usb 4-1: config 0 has no interfaces? [ 85.669930][ T5844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.699856][ T5844] usb 4-1: config 0 descriptor?? [ 85.842481][ T5981] loop2: detected capacity change from 0 to 16 [ 85.884320][ T5981] erofs (device loop2): mounted with root inode @ nid 36. [ 85.946747][ T5968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.947009][ T5968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.966946][ T5981] syz.2.43: attempt to access beyond end of device [ 85.966946][ T5981] loop2: rw=8912896, sector=1342177272, nr_sectors = 32 limit=16 [ 85.967703][ T5981] syz.2.43: attempt to access beyond end of device [ 85.967703][ T5981] loop2: rw=8388608, sector=1342177272, nr_sectors = 8 limit=16 [ 85.973669][ T33] audit: type=1800 audit(1794624482.718:2): pid=5981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.43" name="file1" dev="loop2" ino=86 res=0 errno=-5 [ 86.184372][ T5987] loop4: detected capacity change from 0 to 128 [ 86.188305][ T5987] vfat: Unknown parameter 'ÿÿÿÿTô‰Û\i‡»‰”N<è©×J¥W¾ë¿{ô¡›ì•kqŸ4uW{zÛ1Û° [ 86.188305][ T5987] aJ€þõõÂÝqÄÕ¦ ”5{“+ ' [ 86.282980][ T5987] Bluetooth: MGMT ver 1.23 [ 86.527417][ T5990] loop4: detected capacity change from 0 to 34816 [ 86.586929][ T5990] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.590027][ T5990] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.756631][ T28] cfg80211: failed to load regulatory.db [ 86.804014][ T5632] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.003674][ T11] usb 4-1: USB disconnect, device number 3 [ 87.402415][ T1456] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.523673][ T1456] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.537893][ T5998] loop0: detected capacity change from 0 to 32768 [ 87.616189][ T5998] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 87.642635][ T1456] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.728016][ T1456] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.812664][ T5998] XFS (loop0): Ending clean mount [ 87.857734][ T5998] XFS (loop0): Quotacheck needed: Please wait. [ 87.982135][ T5998] XFS (loop0): Quotacheck: Done. [ 88.188171][ T6021] syz.1.56 uses obsolete (PF_INET,SOCK_PACKET) [ 88.298090][ T1456] bridge_slave_1: left allmulticast mode [ 88.298116][ T1456] bridge_slave_1: left promiscuous mode [ 88.298853][ T1456] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.366961][ T1456] bridge_slave_0: left allmulticast mode [ 88.366993][ T1456] bridge_slave_0: left promiscuous mode [ 88.367193][ T1456] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.561943][ T5633] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 88.570699][ T56] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.593996][ T56] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.596854][ T56] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.599218][ T56] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.603651][ T56] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.181482][ T1456] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.194504][ T1456] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.205811][ T1456] bond0 (unregistering): Released all slaves [ 89.227898][ T5786] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 89.386441][ T5786] usb 3-1: Using ep0 maxpacket: 32 [ 89.420638][ T5786] usb 3-1: unable to get BOS descriptor or descriptor too short [ 89.420685][ T5786] usb 3-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 89.422263][ T5786] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 89.422285][ T5786] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 89.422303][ T5786] usb 3-1: config 14 has no interface number 0 [ 89.422317][ T5786] usb 3-1: config 14 has no interface number 1 [ 89.423164][ T5786] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 89.423190][ T5786] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 89.423212][ T5786] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 89.423235][ T5786] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 89.423260][ T5786] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 89.423283][ T5786] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 89.423306][ T5786] usb 3-1: config 14 interface 57 has no altsetting 0 [ 89.423322][ T5786] usb 3-1: config 14 interface 228 has no altsetting 0 [ 89.614428][ T5786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.614455][ T5786] usb 3-1: Product: syz [ 89.614467][ T5786] usb 3-1: Manufacturer: syz [ 89.614480][ T5786] usb 3-1: SerialNumber: syz [ 90.222328][ T5298] 8021q: adding VLAN 0 to HW filter on device eth1 [ 90.247576][ T5786] legousbtower 3-1:14.57: interrupt endpoints not found [ 90.500676][ T6051] loop1: detected capacity change from 0 to 49152 [ 90.539033][ T6051] EXT4-fs (loop1): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 90.608320][ T5786] legousbtower 3-1:14.228: LEGO USB Tower firmware version is 170.80 build 16178 [ 90.664892][ T5653] Bluetooth: hci1: command tx timeout [ 90.753542][ T6051] EXT4-fs (loop1): mounted filesystem 0c10de2f-4aa9-424d-8048-d8ea5c26e3e0 r/w with writeback data mode. Quota mode: none. [ 90.778864][ T5786] legousbtower 3-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 90.799787][ T6028] rxe_eth0 speed is unknown, defaulting to 1000 [ 90.970025][ T1456] hsr_slave_0: left promiscuous mode [ 90.992800][ T1456] hsr_slave_1: left promiscuous mode [ 91.000881][ T1456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.000912][ T1456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.037651][ T1456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.037671][ T1456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.198030][ T1456] veth1_macvtap: left promiscuous mode [ 91.198132][ T1456] veth0_macvtap: left promiscuous mode [ 91.198491][ T1456] veth1_vlan: left promiscuous mode [ 91.198634][ T1456] veth0_vlan: left promiscuous mode [ 91.254701][ T6057] loop0: detected capacity change from 0 to 40427 [ 91.350414][ T6057] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 91.350441][ T6057] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 91.353754][ T5786] usb 3-1: USB disconnect, device number 2 [ 91.353866][ C0] usb 3-1: tower_interrupt_in_callback: usb_submit_urb failed (-19) [ 91.426987][ T5786] legousbtower 3-1:14.228: LEGO USB Tower #-160 now disconnected [ 91.433039][ T6057] F2FS-fs (loop0): invalid crc value [ 91.482587][ T5634] EXT4-fs (loop1): unmounting filesystem 0c10de2f-4aa9-424d-8048-d8ea5c26e3e0. [ 91.910519][ T33] audit: type=1326 audit(1794624488.648:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6076 comm="syz.3.65" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2f7a94d9 code=0x7ffc0000 [ 91.910777][ T33] audit: type=1326 audit(1794624488.648:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6076 comm="syz.3.65" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2f7a94d9 code=0x7ffc0000 [ 91.979042][ T33] audit: type=1326 audit(1794624488.718:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6076 comm="syz.3.65" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2f7a94d9 code=0x7ffc0000 [ 91.979089][ T33] audit: type=1326 audit(1794624488.718:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6076 comm="syz.3.65" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2f7a94d9 code=0x7ffc0000 [ 92.046281][ T33] audit: type=1326 audit(1794624488.788:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6076 comm="syz.3.65" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2f7a94d9 code=0x7ffc0000 [ 92.048280][ T33] audit: type=1326 audit(1794624488.788:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6076 comm="syz.3.65" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2f7a94d9 code=0x7ffc0000 [ 92.081803][ T33] audit: type=1326 audit(1794624488.788:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6076 comm="syz.3.65" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f6c2f7a94d9 code=0x7ffc0000 [ 92.081847][ T33] audit: type=1326 audit(1794624488.788:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6076 comm="syz.3.65" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2f7a94d9 code=0x7ffc0000 [ 92.081883][ T33] audit: type=1326 audit(1794624488.788:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6076 comm="syz.3.65" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2f7a94d9 code=0x7ffc0000 [ 92.199610][ T33] audit: type=1326 audit(1794624488.938:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6076 comm="syz.3.65" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6c2f7a94d9 code=0x7ffc0000 [ 92.310154][ T6057] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 92.349635][ T6057] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 92.349737][ T6057] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 92.451199][ T6096] Bluetooth: MGMT ver 1.23 [ 92.611667][ T6103] FAULT_INJECTION: forcing a failure. [ 92.611667][ T6103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.611711][ T6103] CPU: 0 UID: 0 PID: 6103 Comm: syz.3.67 Not tainted syzkaller #0 PREEMPT(full) [ 92.611733][ T6103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 92.611744][ T6103] Call Trace: [ 92.611751][ T6103] [ 92.611759][ T6103] dump_stack_lvl+0xe8/0x150 [ 92.611795][ T6103] should_fail_ex+0x3eb/0x540 [ 92.611817][ T6103] _copy_from_user+0x2d/0xb0 [ 92.611839][ T6103] sockptr_to_sockopt+0xc0/0x3a0 [ 92.611875][ T6103] ? __pfx_sockptr_to_sockopt+0x10/0x10 [ 92.611913][ T6103] do_sock_getsockopt+0x36c/0x640 [ 92.611948][ T6103] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 92.611990][ T6103] ? __fget_files+0x37a/0x3f0 [ 92.612011][ T6103] ? __fget_files+0x29/0x3f0 [ 92.612036][ T6103] __x64_sys_getsockopt+0x1a4/0x240 [ 92.612074][ T6103] do_syscall_64+0x171/0x540 [ 92.612100][ T6103] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.612118][ T6103] ? clear_bhb_loop+0x70/0xc0 [ 92.612142][ T6103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.612160][ T6103] RIP: 0033:0x00007f6c2f7a94d9 [ 92.612178][ T6103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.612193][ T6103] RSP: 002b:00007f6c30641028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 92.612214][ T6103] RAX: ffffffffffffffda RBX: 00007f6c2fa25fa0 RCX: 00007f6c2f7a94d9 [ 92.612227][ T6103] RDX: 0000000000000005 RSI: 000000000000010e RDI: 0000000000000003 [ 92.612239][ T6103] RBP: 00007f6c2f83804e R08: 0000000000000000 R09: 0000000000000000 [ 92.612250][ T6103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.612262][ T6103] R13: 00007f6c2fa26038 R14: 00007f6c2fa25fa0 R15: 00007ffde590c9c8 [ 92.612294][ T6103] [ 92.764864][ T5653] Bluetooth: hci1: command tx timeout [ 93.069337][ T6104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.69'. [ 93.312656][ T1456] team0 (unregistering): Port device team_slave_1 removed [ 93.349058][ T1456] team0 (unregistering): Port device team_slave_0 removed [ 93.677905][ T6086] warning: `syz.1.66' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 93.713629][ T5298] 8021q: adding VLAN 0 to HW filter on device eth2 [ 93.799706][ T6109] loop2: detected capacity change from 0 to 33280 [ 93.838654][ T28] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 93.939093][ T6109] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.939162][ T6109] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.998208][ T28] usb 4-1: Using ep0 maxpacket: 16 [ 94.000344][ T28] usb 4-1: New USB device found: idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 94.024076][ T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.024101][ T28] usb 4-1: Product: syz [ 94.024115][ T28] usb 4-1: Manufacturer: syz [ 94.024128][ T28] usb 4-1: SerialNumber: syz [ 94.078782][ T28] r8152-cfgselector 4-1: Unknown version 0x0000 [ 94.078804][ T28] r8152-cfgselector 4-1: config 0 descriptor?? [ 94.454812][ T28] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 94.528614][ T6107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.529291][ T6107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.537754][ T5763] r8152-cfgselector 4-1: USB disconnect, device number 4 [ 94.561193][ T6097] syz.0.61 (6097): drop_caches: 2 [ 94.617377][ T28] usb 2-1: Using ep0 maxpacket: 16 [ 94.619556][ T28] usb 2-1: New USB device found: idVendor=054c, idProduct=03d5, bcdDevice=0.00 [ 94.621059][ T28] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.621086][ T28] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.621107][ T28] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 94.621146][ T28] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.716094][ T28] usb 2-1: config 0 descriptor?? [ 94.718122][ T5635] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.827149][ T5653] Bluetooth: hci1: command tx timeout [ 95.270864][ T6138] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 95.270864][ T6138] [ 95.270985][ T6138] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 95.271144][ T6138] CIFS: Attempting to mount //172.20.20.170/share [ 95.362785][ T28] input: HID 054c:03d5 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:03D5.0002/input/input6 [ 95.421738][ T6138] CIFS: VFS: cifs_mount failed w/return code = -112 [ 95.585143][ T28] sony 0003:054C:03D5.0002: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.1-1/input0 [ 95.635299][ T28] usb 2-1: USB disconnect, device number 2 [ 95.751083][ T5298] 8021q: adding VLAN 0 to HW filter on device eth3 [ 95.768374][ T6028] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.768515][ T6028] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.768638][ T6028] bridge_slave_0: entered allmulticast mode [ 95.768847][ T6147] fido_id[6147]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 95.813818][ T6028] bridge_slave_0: entered promiscuous mode [ 95.831903][ T6028] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.843617][ T6028] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.843700][ T6028] bridge_slave_1: entered allmulticast mode [ 95.887737][ T6028] bridge_slave_1: entered promiscuous mode [ 96.034477][ T6151] ip_tables: iptables: counters copy to user failed while replacing table [ 96.194184][ T6028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.233091][ T6028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.362720][ T6159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.74'. [ 96.400422][ T6157] loop2: detected capacity change from 0 to 8192 [ 96.401934][ T6157] ======================================================= [ 96.401934][ T6157] WARNING: The mand mount option has been deprecated and [ 96.401934][ T6157] and is ignored by this kernel. Remove the mand [ 96.401934][ T6157] option from the mount to silence this warning. [ 96.401934][ T6157] ======================================================= [ 96.503594][ T6161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.74'. [ 96.554400][ T6157] syz.2.78: attempt to access beyond end of device [ 96.554400][ T6157] loop2: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 96.554513][ T6157] Buffer I/O error on dev loop2, logical block 57847, async page read [ 96.620999][ T6157] syz.2.78: attempt to access beyond end of device [ 96.620999][ T6157] loop2: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 96.621034][ T6157] Buffer I/O error on dev loop2, logical block 57847, async page read [ 96.679584][ T6157] syz.2.78: attempt to access beyond end of device [ 96.679584][ T6157] loop2: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 96.679615][ T6157] Buffer I/O error on dev loop2, logical block 57847, async page read [ 96.709944][ T6028] team0: Port device team_slave_0 added [ 96.710023][ T1397] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.715131][ T1456] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.715668][ T1456] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.715747][ T1456] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.761831][ T6167] loop3: detected capacity change from 0 to 32896 [ 96.764199][ T6161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.74'. [ 96.764683][ T6161] Zero length message leads to an empty skb [ 96.798603][ T6028] team0: Port device team_slave_1 added [ 96.893333][ T6167] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 96.916388][ T5653] Bluetooth: hci1: command tx timeout [ 96.920118][ T6167] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.097748][ T6028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.097765][ T6028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.097788][ T6028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.159147][ T6028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.159163][ T6028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.159187][ T6028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.482660][ T6184] netlink: 'syz.2.82': attribute type 1 has an invalid length. [ 97.519916][ T6028] hsr_slave_0: entered promiscuous mode [ 97.532404][ T6028] hsr_slave_1: entered promiscuous mode [ 97.587025][ T6184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.82'. [ 97.952251][ T5631] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 98.087109][ T5298] 8021q: adding VLAN 0 to HW filter on device eth4 [ 98.348527][ T6189] loop0: detected capacity change from 0 to 32768 [ 98.371061][ T6201] loop1: detected capacity change from 0 to 2048 [ 98.371652][ T6201] udf: Bad value for 'anchor' [ 98.559644][ T46] smpboot: CPU 1 is now offline [ 98.720233][ T6189] JBD2: Ignoring recovery information on journal [ 98.851850][ T6189] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 99.140411][ T46] ACPI: \_SB_.CP01: Eject incomplete - status 0xf [ 99.651060][ T5633] ocfs2: Unmounting device (7,0) on (node local) [ 100.963783][ T6028] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 100.993446][ T6028] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.004174][ T6028] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 101.037649][ T6028] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.052304][ T6028] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 101.083534][ T6028] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.102119][ T6028] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 101.135449][ T6028] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.448653][ T6242] netlink: 52 bytes leftover after parsing attributes in process `syz.0.90'. [ 101.489632][ T6242] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.490155][ T6242] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.548907][ T6244] netlink: 76 bytes leftover after parsing attributes in process `syz.0.90'. [ 101.577830][ T6244] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.578031][ T6244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.578247][ T6244] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.578306][ T6244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.636782][ T6244] netlink: 52 bytes leftover after parsing attributes in process `syz.0.90'. [ 101.637691][ T6244] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.638172][ T6244] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.730844][ T6028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.797649][ T6028] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.830800][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.830858][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.866396][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.866456][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.069475][ T6258] loop0: detected capacity change from 0 to 33792 [ 102.072682][ T6258] EXT4-fs: Ignoring removed oldalloc option [ 102.072693][ T6258] EXT4-fs: Ignoring removed oldalloc option [ 102.100391][ T6258] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 102.132260][ T6258] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.064386][ T6283] loop2: detected capacity change from 0 to 8 [ 103.182550][ T6283] SQUASHFS error: lzo decompression failed, data probably corrupt [ 103.182585][ T6283] SQUASHFS error: Failed to read block 0x0: -5 [ 103.182758][ T6283] SQUASHFS error: lzo decompression failed, data probably corrupt [ 103.182775][ T6283] SQUASHFS error: Failed to read block 0x0: -5 [ 103.216477][ T33] kauditd_printk_skb: 3 callbacks suppressed [ 103.216487][ T33] audit: type=1800 audit(1794624499.958:16): pid=6283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.98" name="file2" dev="loop2" ino=3 res=0 errno=-5 [ 103.684451][ T6028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.696149][ T6299] FAULT_INJECTION: forcing a failure. [ 103.696149][ T6299] name failslab, interval 1, probability 0, space 0, times 0 [ 103.696167][ T6299] CPU: 0 UID: 0 PID: 6299 Comm: syz.1.101 Not tainted syzkaller #0 PREEMPT(full) [ 103.696179][ T6299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 103.696186][ T6299] Call Trace: [ 103.696190][ T6299] [ 103.696195][ T6299] dump_stack_lvl+0xe8/0x150 [ 103.696217][ T6299] should_fail_ex+0x3eb/0x540 [ 103.696231][ T6299] should_failslab+0xa8/0x100 [ 103.696246][ T6299] __kmalloc_cache_noprof+0x9e/0x600 [ 103.696263][ T6299] ? addrconf_init_net+0x162/0x790 [ 103.696277][ T6299] ? addrconf_init_net+0x162/0x790 [ 103.696294][ T6299] addrconf_init_net+0x162/0x790 [ 103.696308][ T6299] ? ip6addrlbl_net_init+0x3cd/0x3d0 [ 103.696322][ T6299] ops_init+0x35d/0x5d0 [ 103.696342][ T6299] setup_net+0x112/0x350 [ 103.696358][ T6299] ? __pfx_setup_net+0x10/0x10 [ 103.696372][ T6299] ? down_read_killable+0x1b6/0x3b0 [ 103.696388][ T6299] ? __ns_common_init+0x390/0x560 [ 103.696402][ T6299] copy_net_ns+0x540/0x780 [ 103.696421][ T6299] create_new_namespaces+0x3f0/0x6b0 [ 103.696438][ T6299] ? security_capable+0x7e/0x2c0 [ 103.696456][ T6299] unshare_nsproxy_namespaces+0x144/0x190 [ 103.696473][ T6299] ksys_unshare+0x532/0x890 [ 103.696485][ T6299] ? __pfx_ksys_unshare+0x10/0x10 [ 103.696495][ T6299] ? rcu_is_watching+0x16/0xb0 [ 103.696511][ T6299] __x64_sys_unshare+0x38/0x50 [ 103.696521][ T6299] do_syscall_64+0x171/0x540 [ 103.696534][ T6299] ? trace_irq_disable+0x3b/0x140 [ 103.696543][ T6299] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.696554][ T6299] ? clear_bhb_loop+0x70/0xc0 [ 103.696566][ T6299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.696576][ T6299] RIP: 0033:0x00007f74695a94d9 [ 103.696587][ T6299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.696596][ T6299] RSP: 002b:00007f746a417028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 103.696608][ T6299] RAX: ffffffffffffffda RBX: 00007f7469825fa0 RCX: 00007f74695a94d9 [ 103.696615][ T6299] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 103.696621][ T6299] RBP: 00007f746963804e R08: 0000000000000000 R09: 0000000000000000 [ 103.696627][ T6299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.696632][ T6299] R13: 00007f7469826038 R14: 00007f7469825fa0 R15: 00007fff73b04a58 [ 103.696649][ T6299] [ 104.612496][ T6028] veth0_vlan: entered promiscuous mode [ 104.650219][ T6028] veth1_vlan: entered promiscuous mode [ 104.748749][ T6028] veth0_macvtap: entered promiscuous mode [ 104.769963][ T6028] veth1_macvtap: entered promiscuous mode [ 104.835167][ T6028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.871195][ T6028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.965759][ T1456] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.966215][ T1456] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.966235][ T1456] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.966252][ T1456] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.065778][ T5653] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 105.200760][ T1456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.200774][ T1456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.261783][ T5633] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.339002][ T108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.339015][ T108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.608202][ T6336] FAULT_INJECTION: forcing a failure. [ 105.608202][ T6336] name failslab, interval 1, probability 0, space 0, times 0 [ 105.608223][ T6336] CPU: 0 UID: 0 PID: 6336 Comm: syz.2.110 Not tainted syzkaller #0 PREEMPT(full) [ 105.608246][ T6336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 105.608258][ T6336] Call Trace: [ 105.608266][ T6336] [ 105.608274][ T6336] dump_stack_lvl+0xe8/0x150 [ 105.608296][ T6336] should_fail_ex+0x3eb/0x540 [ 105.608311][ T6336] should_failslab+0xa8/0x100 [ 105.608325][ T6336] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 105.608343][ T6336] ? kasprintf+0xe2/0x140 [ 105.608354][ T6336] ? kasprintf+0xe2/0x140 [ 105.608368][ T6336] kvasprintf+0xeb/0x1a0 [ 105.608378][ T6336] ? __pfx_init_rescuer+0x10/0x10 [ 105.608393][ T6336] ? __pfx_kvasprintf+0x10/0x10 [ 105.608410][ T6336] kasprintf+0xe2/0x140 [ 105.608422][ T6336] ? __is_module_percpu_address+0x28/0x3f0 [ 105.608436][ T6336] ? __pfx_kasprintf+0x10/0x10 [ 105.608447][ T6336] ? __is_module_percpu_address+0x39b/0x3f0 [ 105.608459][ T6336] ? is_module_address+0x17/0xf0 [ 105.608471][ T6336] ? is_module_address+0x17/0xf0 [ 105.608488][ T6336] alloc_workqueue_noprof+0x12e/0x210 [ 105.608501][ T6336] ? persistent_ctr+0x14a/0x3e0 [ 105.608521][ T6336] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 105.608534][ T6336] ? __kmalloc_cache_noprof+0x148/0x600 [ 105.608548][ T6336] ? persistent_ctr+0x5b/0x3e0 [ 105.608561][ T6336] ? persistent_ctr+0x5b/0x3e0 [ 105.608578][ T6336] persistent_ctr+0x198/0x3e0 [ 105.608594][ T6336] dm_exception_store_create+0x5f8/0x920 [ 105.608609][ T6336] ? __pfx_persistent_ctr+0x10/0x10 [ 105.608625][ T6336] ? __pfx_dm_exception_store_create+0x10/0x10 [ 105.608640][ T6336] ? __kmalloc_cache_noprof+0x148/0x600 [ 105.608654][ T6336] ? snapshot_ctr+0x178/0x1340 [ 105.608664][ T6336] ? snapshot_ctr+0x178/0x1340 [ 105.608679][ T6336] snapshot_ctr+0x6ae/0x1340 [ 105.608696][ T6336] ? __pfx_snapshot_ctr+0x10/0x10 [ 105.608706][ T6336] ? skip_spaces+0x8a/0xa0 [ 105.608719][ T6336] ? dm_split_args+0x50b/0x5d0 [ 105.608739][ T6336] dm_table_add_target+0x58d/0xc70 [ 105.608761][ T6336] table_load+0x325/0x8a0 [ 105.608787][ T6336] ? __pfx_table_load+0x10/0x10 [ 105.608804][ T6336] ? __might_fault+0xaf/0x130 [ 105.608821][ T6336] dm_ctl_ioctl+0x9ec/0xe10 [ 105.608840][ T6336] ? __pfx_table_load+0x10/0x10 [ 105.608854][ T6336] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 105.608885][ T6336] ? __fget_files+0x29/0x3f0 [ 105.608898][ T6336] ? bpf_lsm_file_ioctl+0x9/0x20 [ 105.608908][ T6336] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 105.608922][ T6336] __se_sys_ioctl+0xfc/0x170 [ 105.608936][ T6336] do_syscall_64+0x171/0x540 [ 105.608950][ T6336] ? trace_irq_disable+0x3b/0x140 [ 105.608959][ T6336] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.608969][ T6336] ? clear_bhb_loop+0x70/0xc0 [ 105.608981][ T6336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.608992][ T6336] RIP: 0033:0x00007f2fb3ba94d9 [ 105.609003][ T6336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.609011][ T6336] RSP: 002b:00007f2fb4aba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 105.609023][ T6336] RAX: ffffffffffffffda RBX: 00007f2fb3e25fa0 RCX: 00007f2fb3ba94d9 [ 105.609031][ T6336] RDX: 0000200000000380 RSI: 00000000c138fd09 RDI: 0000000000000004 [ 105.609037][ T6336] RBP: 00007f2fb3c3804e R08: 0000000000000000 R09: 0000000000000000 [ 105.609043][ T6336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.609049][ T6336] R13: 00007f2fb3e26038 R14: 00007f2fb3e25fa0 R15: 00007ffe83f71a38 [ 105.609065][ T6336] [ 106.219308][ T6324] loop3: detected capacity change from 0 to 32768 [ 106.241701][ T56] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 106.254027][ T56] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 106.254542][ T56] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 106.272792][ T56] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 106.281006][ T56] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 106.310969][ T6324] XFS (loop3): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 106.407582][ T6324] XFS (loop3): Ending clean mount [ 106.448732][ T6324] XFS (loop3): Quotacheck needed: Please wait. [ 106.710761][ T6364] loop0: detected capacity change from 0 to 40427 [ 106.714096][ T5778] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 106.739574][ T6324] XFS (loop3): Quotacheck: Done. [ 106.752766][ T6364] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 106.752779][ T6364] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 106.770479][ T6364] F2FS-fs (loop0): invalid crc value [ 106.825343][ T6364] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 106.842799][ T6364] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 106.842814][ T6364] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 106.907576][ T6324] No source specified [ 106.919048][ T5778] usb 5-1: Using ep0 maxpacket: 32 [ 106.926475][ T5778] usb 5-1: New USB device found: idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 106.940932][ T5778] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.944138][ T5778] usb 5-1: config 0 descriptor?? [ 106.989729][ T5778] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 107.026081][ T33] audit: type=1800 audit(1794624503.768:17): pid=6364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.111" name=08 dev="loop0" ino=10 res=0 errno=-22 [ 107.062413][ T6364] syz.0.111: attempt to access beyond end of device [ 107.062413][ T6364] loop0: rw=8423425, sector=77824, nr_sectors = 8 limit=40427 [ 107.064481][ T6364] syz.0.111: attempt to access beyond end of device [ 107.064481][ T6364] loop0: rw=524288, sector=77824, nr_sectors = 8 limit=40427 [ 107.064630][ T6364] syz.0.111: attempt to access beyond end of device [ 107.064630][ T6364] loop0: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 107.082529][ T33] audit: type=1800 audit(1794624503.808:18): pid=6364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.111" name=08 dev="loop0" ino=10 res=0 errno=-5 [ 107.172106][ T6374] netlink: 'syz.2.112': attribute type 1 has an invalid length. [ 107.258664][ T5633] syz-executor: attempt to access beyond end of device [ 107.258664][ T5633] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 107.282567][ T5633] CPU: 0 UID: 0 PID: 5633 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 107.282583][ T5633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 107.282590][ T5633] Call Trace: [ 107.282595][ T5633] [ 107.282600][ T5633] dump_stack_lvl+0xe8/0x150 [ 107.282621][ T5633] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 107.282638][ T5633] f2fs_write_end_bio+0xf7d/0x1310 [ 107.282659][ T5633] __submit_merged_bio+0x258/0x6a0 [ 107.282681][ T5633] ? rcu_is_watching+0x16/0xb0 [ 107.282695][ T5633] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 107.282710][ T5633] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 107.282736][ T5633] __f2fs_write_data_pages+0x2abe/0x6dd0 [ 107.282749][ T5633] ? __lock_acquire+0x747/0x2de0 [ 107.282779][ T5633] ? __lock_acquire+0x747/0x2de0 [ 107.282795][ T5633] ? __pfx___f2fs_write_data_pages+0x10/0x10 [ 107.282805][ T5633] ? __lock_acquire+0x747/0x2de0 [ 107.282840][ T5633] ? __lock_acquire+0x747/0x2de0 [ 107.282863][ T5633] ? rcu_is_watching+0x16/0xb0 [ 107.282872][ T5633] ? __kasan_check_byte+0x12/0x40 [ 107.282885][ T5633] ? rcu_is_watching+0x16/0xb0 [ 107.282894][ T5633] ? lock_release+0x4b/0x3c0 [ 107.282906][ T5633] ? lock_release+0x4b/0x3c0 [ 107.282922][ T5633] ? is_bpf_text_address+0x292/0x2b0 [ 107.282934][ T5633] ? is_bpf_text_address+0x26/0x2b0 [ 107.282947][ T5633] ? kernel_text_address+0xa5/0xe0 [ 107.282960][ T5633] ? __kernel_text_address+0xd/0x30 [ 107.282972][ T5633] ? unwind_get_return_address+0x4d/0x90 [ 107.282985][ T5633] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 107.282999][ T5633] ? arch_stack_walk+0xfb/0x150 [ 107.283019][ T5633] ? stack_trace_save+0xa9/0x100 [ 107.283032][ T5633] ? __pfx_stack_trace_save+0x10/0x10 [ 107.283047][ T5633] ? check_path+0x21/0x40 [ 107.283056][ T5633] ? check_noncircular+0xdb/0x150 [ 107.283067][ T5633] ? add_lock_to_list+0xc7/0x100 [ 107.283077][ T5633] ? lockdep_unlock+0x5c/0xd0 [ 107.283088][ T5633] ? __lock_acquire+0x1511/0x2de0 [ 107.283115][ T5633] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 107.283125][ T5633] do_writepages+0x338/0x560 [ 107.283145][ T5633] ? do_raw_spin_unlock+0xf5/0x200 [ 107.283158][ T5633] filemap_fdatawrite+0x1e9/0x2f0 [ 107.283173][ T5633] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 107.283210][ T5633] ? do_raw_spin_unlock+0xf5/0x200 [ 107.283223][ T5633] f2fs_sync_dirty_inodes+0x471/0x970 [ 107.283242][ T5633] f2fs_write_checkpoint+0x867/0x24d0 [ 107.283271][ T5633] kill_f2fs_super+0x2df/0x700 [ 107.283288][ T5633] ? rcu_do_enqueue+0x60d/0x870 [ 107.283300][ T5633] ? lockdep_hardirqs_on+0x7b/0x110 [ 107.283314][ T5633] ? __pfx_kill_f2fs_super+0x10/0x10 [ 107.283337][ T5633] ? __pfx_call_rcu+0x10/0x10 [ 107.283350][ T5633] ? shrinker_free+0x2a7/0x3b0 [ 107.283365][ T5633] deactivate_locked_super+0xbe/0x110 [ 107.283377][ T5633] cleanup_mnt+0x204/0x2a0 [ 107.283392][ T5633] task_work_run+0x1d9/0x260 [ 107.283405][ T5633] ? __pfx_task_work_run+0x10/0x10 [ 107.283423][ T5633] exit_to_user_mode_loop+0x204/0x770 [ 107.283438][ T5633] ? rcu_is_watching+0x16/0xb0 [ 107.283450][ T5633] do_syscall_64+0x336/0x540 [ 107.283463][ T5633] ? trace_irq_disable+0x3b/0x140 [ 107.283472][ T5633] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.283482][ T5633] ? clear_bhb_loop+0x70/0xc0 [ 107.283494][ T5633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.283504][ T5633] RIP: 0033:0x00007f3fd1baa747 [ 107.283516][ T5633] Code: a2 c7 05 ac 2f 25 00 00 00 00 00 eb 96 e8 b1 13 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 107.283524][ T5633] RSP: 002b:00007ffde9b97c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 107.283535][ T5633] RAX: 0000000000000000 RBX: 00007f3fd1c37433 RCX: 00007f3fd1baa747 [ 107.283542][ T5633] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffde9b97d20 [ 107.283548][ T5633] RBP: 00007ffde9b97d20 R08: 00007ffde9b98d20 R09: 00000000ffffffff [ 107.283554][ T5633] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffde9b98db0 [ 107.283560][ T5633] R13: 00007f3fd1c37433 R14: 000000000001a253 R15: 00007ffde9b98df0 [ 107.283577][ T5633] [ 107.450331][ T5633] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 107.727517][ T11] loop0: lost filesystem error report for type 5 error -108 [ 107.763477][ T6324] XFS (loop3): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 107.785730][ T6380] netlink: 28 bytes leftover after parsing attributes in process `syz.2.112'. [ 107.874575][ T6374] bond1 (unregistering): Released all slaves [ 108.346986][ T5653] Bluetooth: hci4: command tx timeout [ 108.552770][ T6390] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 108.802808][ T6347] rxe_eth0 speed is unknown, defaulting to 1000 [ 109.039124][ T6411] FAULT_INJECTION: forcing a failure. [ 109.039124][ T6411] name failslab, interval 1, probability 0, space 0, times 0 [ 109.039145][ T6411] CPU: 0 UID: 0 PID: 6411 Comm: syz.3.117 Not tainted syzkaller #0 PREEMPT(full) [ 109.039157][ T6411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 109.039163][ T6411] Call Trace: [ 109.039168][ T6411] [ 109.039173][ T6411] dump_stack_lvl+0xe8/0x150 [ 109.039195][ T6411] should_fail_ex+0x3eb/0x540 [ 109.039208][ T6411] ? __pfx_dev_uevent_name+0x10/0x10 [ 109.039221][ T6411] should_failslab+0xa8/0x100 [ 109.039236][ T6411] __kmalloc_cache_noprof+0x9e/0x600 [ 109.039253][ T6411] ? kobject_uevent_env+0x289/0x9e0 [ 109.039264][ T6411] ? kobject_uevent_env+0x289/0x9e0 [ 109.039278][ T6411] ? __pfx_dev_uevent_name+0x10/0x10 [ 109.039288][ T6411] kobject_uevent_env+0x289/0x9e0 [ 109.039304][ T6411] gadget_bind_driver+0x599/0x9e0 [ 109.039321][ T6411] ? __pfx_gadget_bind_driver+0x10/0x10 [ 109.039332][ T6411] really_probe+0x254/0xae0 [ 109.039349][ T6411] __driver_probe_device+0x1e8/0x360 [ 109.039365][ T6411] driver_probe_device+0x4f/0x240 [ 109.039381][ T6411] __driver_attach+0x34e/0x630 [ 109.039397][ T6411] bus_for_each_dev+0x23b/0x2c0 [ 109.039408][ T6411] ? __pfx___driver_attach+0x10/0x10 [ 109.039422][ T6411] ? __pfx_bus_for_each_dev+0x10/0x10 [ 109.039435][ T6411] ? do_raw_spin_unlock+0xf5/0x200 [ 109.039449][ T6411] bus_add_driver+0x38f/0x6e0 [ 109.039473][ T6411] driver_register+0x23a/0x320 [ 109.039485][ T6411] usb_gadget_register_driver_owner+0xf9/0x270 [ 109.039498][ T6411] raw_ioctl+0x1541/0x41c0 [ 109.039516][ T6411] ? tomoyo_path_number_perm+0x219/0x5f0 [ 109.039532][ T6411] ? do_vfs_ioctl+0x11d5/0x15a0 [ 109.039547][ T6411] ? __pfx_raw_ioctl+0x10/0x10 [ 109.039579][ T6411] ? __fget_files+0x29/0x3f0 [ 109.039593][ T6411] ? __fget_files+0x29/0x3f0 [ 109.039605][ T6411] ? bpf_lsm_file_ioctl+0x9/0x20 [ 109.039616][ T6411] ? __pfx_raw_ioctl+0x10/0x10 [ 109.039628][ T6411] __se_sys_ioctl+0xfc/0x170 [ 109.039642][ T6411] do_syscall_64+0x171/0x540 [ 109.039655][ T6411] ? trace_irq_disable+0x3b/0x140 [ 109.039664][ T6411] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.039675][ T6411] ? clear_bhb_loop+0x70/0xc0 [ 109.039687][ T6411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.039697][ T6411] RIP: 0033:0x00007f6c2f7a916b [ 109.039709][ T6411] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 109.039717][ T6411] RSP: 002b:00007f6c3063ef00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 109.039728][ T6411] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f6c2f7a916b [ 109.039735][ T6411] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 109.039741][ T6411] RBP: 00007f6c3063ffd0 R08: 0000000000000001 R09: 00000000ffffffff [ 109.039747][ T6411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.039753][ T6411] R13: 0000200000000440 R14: 0000000000000000 R15: 0000000000000000 [ 109.039769][ T6411] [ 109.070450][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 109.340903][ T5778] gspca_vc032x: I2c Bus Busy Wait 00 [ 109.366999][ T11] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 109.415538][ T10] usb 3-1: New USB device found: idVendor=0525, idProduct=a4a7, bcdDevice=1.00 [ 109.416527][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.546377][ T5778] gspca_vc032x: reg_w err -71 [ 109.546389][ T5778] gspca_vc032x: I2c Bus Busy Wait 00 [ 109.546395][ T5778] gspca_vc032x: I2c Bus Busy Wait 00 [ 109.546399][ T5778] gspca_vc032x: I2c Bus Busy Wait 00 [ 109.546403][ T5778] gspca_vc032x: I2c Bus Busy Wait 00 [ 109.546407][ T5778] gspca_vc032x: I2c Bus Busy Wait 00 [ 109.546411][ T5778] gspca_vc032x: I2c Bus Busy Wait 00 [ 109.546416][ T5778] gspca_vc032x: I2c Bus Busy Wait 00 [ 109.546426][ T5778] gspca_vc032x: I2c Bus Busy Wait 00 [ 109.546430][ T5778] gspca_vc032x: I2c Bus Busy Wait 00 [ 109.546434][ T5778] gspca_vc032x: I2c Bus Busy Wait 00 [ 109.546438][ T5778] gspca_vc032x: I2c Bus Busy Wait 00 [ 109.546442][ T5778] gspca_vc032x: I2c Bus Busy Wait 00 [ 109.546462][ T5778] gspca_vc032x: I2c Bus Busy Wait 00 [ 109.546466][ T5778] gspca_vc032x: I2c Bus Busy Wait 00 [ 109.546470][ T5778] gspca_vc032x: I2c Bus Busy Wait 00 [ 109.546474][ T5778] gspca_vc032x: I2c Bus Busy Wait 00 [ 109.546478][ T5778] gspca_vc032x: I2c Bus Busy Wait 00 [ 109.546482][ T5778] gspca_vc032x: Unknown sensor... [ 109.546527][ T5778] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 109.548664][ T5778] usb 5-1: USB disconnect, device number 2 [ 109.567915][ T11] usb 4-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 109.660592][ T11] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.660608][ T11] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 109.660628][ T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.761327][ T11] usb 4-1: config 0 descriptor?? [ 109.772713][ T10] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 110.381559][ T6347] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.383905][ T6347] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.383999][ T6347] bridge_slave_0: entered allmulticast mode [ 110.409006][ T6347] bridge_slave_0: entered promiscuous mode [ 110.421896][ T6347] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.422708][ T6347] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.422800][ T6347] bridge_slave_1: entered allmulticast mode [ 110.427286][ T56] Bluetooth: hci4: command tx timeout [ 110.436168][ T6347] bridge_slave_1: entered promiscuous mode [ 110.486125][ T6443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.119'. [ 110.573887][ T6347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.591738][ T6347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.662111][ T6347] team0: Port device team_slave_0 added [ 110.681145][ T6347] team0: Port device team_slave_1 added [ 110.750747][ T6347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.750758][ T6347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.750771][ T6347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.802411][ T6347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.802422][ T6347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.802436][ T6347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.859495][ T6451] loop4: detected capacity change from 0 to 32896 [ 110.885304][ T6451] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 110.886684][ T6451] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.030511][ T6347] hsr_slave_0: entered promiscuous mode [ 111.031142][ T6347] hsr_slave_1: entered promiscuous mode [ 111.048734][ T6347] debugfs: 'hsr0' already exists in 'hsr' [ 111.048745][ T6347] Cannot create hsr debugfs directory [ 111.286838][ T6028] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 111.496105][ T6460] TC_ACT_REPEAT abuse ? [ 111.748109][ T6347] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 111.770092][ T6347] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 111.770634][ T6347] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 111.792796][ T6347] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 111.805123][ T6347] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 111.830696][ T6347] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 111.831250][ T6347] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 111.861155][ T6347] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 111.908938][ T5653] Bluetooth: hci1: hcon ffff8880346d0000 sent 1 < count 9 [ 111.908967][ T5653] Bluetooth: hci1: hcon ffff88807c670000 sent 0 < count 6 [ 111.908978][ T5653] Bluetooth: hci1: hcon ffff8880346d0000 sent 0 < count 7 [ 112.068986][ T10] usb 4-1: USB disconnect, device number 5 [ 112.153988][ T6347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.193644][ T6347] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.212900][ T1397] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.212966][ T1397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.245146][ T6481] loop0: detected capacity change from 0 to 16 [ 112.277687][ T6481] erofs (device loop0): mounted with root inode @ nid 36. [ 112.301211][ T1397] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.301283][ T1397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.339932][ T5653] erofs (device loop0): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000 [ 112.374402][ T6481] erofs (device loop0): failed to decompress (lz4) unexpected end of stream @ pa 4096 size 4096 => 8192 [ 112.374488][ T6481] erofs (device loop0): read error -117 @ 1 of nid 89 [ 112.374629][ T33] audit: type=1800 audit(1794624509.108:19): pid=6481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.124" name="file2" dev="loop0" ino=89 res=0 errno=-117 [ 112.510122][ T5653] Bluetooth: hci4: command tx timeout [ 114.933218][ T5653] Bluetooth: hci4: command tx timeout [ 116.153374][ T10] usb 3-1: USB disconnect, device number 3 [ 117.481854][ T6523] loop3: detected capacity change from 0 to 256 [ 117.509593][ T6523] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fcb6, chksum : 0x64b39636, utbl_chksum : 0xe619d30d) [ 118.792654][ T6347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.679999][ T6347] veth0_vlan: entered promiscuous mode [ 119.703999][ T6347] veth1_vlan: entered promiscuous mode [ 119.727005][ T6555] loop3: detected capacity change from 0 to 32896 [ 119.756771][ T6555] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 119.759521][ T6555] ext4 filesystem being mounted at /33/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 119.846982][ T6347] veth0_macvtap: entered promiscuous mode [ 119.872415][ T6555] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-lib" [ 119.887807][ T6347] veth1_macvtap: entered promiscuous mode [ 119.941261][ T6347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.980025][ T6347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.013932][ T6555] fscrypt: loop3: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 120.087909][ T1397] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.100649][ T1397] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.100841][ T1397] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.100862][ T1397] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.141029][ T5631] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 120.376756][ T6560] loop4: detected capacity change from 0 to 32768 [ 120.377523][ T6560] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 120.384278][ T6560] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.144 (6560) [ 120.419091][ T6560] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 120.419121][ T6560] BTRFS info (device loop4): using sha256 checksum algorithm [ 120.536299][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.536313][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.033792][ T6560] BTRFS info (device loop4): rebuilding free space tree [ 121.772841][ T6560] BTRFS info (device loop4): disabling free space tree [ 121.772896][ T6560] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 121.772908][ T6560] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 121.802679][ T6560] BTRFS info (device loop4): enabling ssd optimizations [ 121.802698][ T6560] BTRFS info (device loop4): turning on async discard [ 121.802706][ T6560] BTRFS info (device loop4): force clearing of disk cache [ 121.802714][ T6560] BTRFS info (device loop4): enabling auto defrag [ 121.802730][ T6560] BTRFS info (device loop4): force zlib compression, level 3 [ 121.988450][ T1456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.988464][ T1456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.006618][ T33] audit: type=1800 audit(1794624518.738:20): pid=6560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.144" name="file0" dev="loop4" ino=258 res=0 errno=-22 [ 122.072162][ T6560] BTRFS info (device loop4): setting compat-ro feature flag for VERITY (0x4) [ 122.191908][ T6581] syzkaller0: entered promiscuous mode [ 122.191922][ T6581] syzkaller0: entered allmulticast mode [ 122.372765][ T6028] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 122.534649][ T6589] loop3: detected capacity change from 0 to 64 [ 122.680134][ T6589] hfs: inconsistency in B*Tree (-1,0,2,3,0) [ 122.680169][ T6589] hfs: get root inode failed [ 123.729942][ T6602] netlink: 12 bytes leftover after parsing attributes in process `syz.0.153'. [ 123.904018][ T6602] bond1: entered promiscuous mode [ 123.904034][ T6602] bond1: entered allmulticast mode [ 123.917730][ T5778] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 124.076484][ T5778] usb 6-1: New USB device found: idVendor=067b, idProduct=2303, bcdDevice=1.00 [ 124.077319][ T5778] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.077345][ T5778] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 124.077358][ T5778] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 124.077387][ T5778] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.150854][ T6601] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 124.173046][ T5778] pl2303 6-1:1.0: required endpoints missing [ 125.167121][ T33] audit: type=1804 audit(1794624521.908:21): pid=6606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.154" name="/newroot/31/file0" dev="fuse" ino=1 res=1 errno=0 [ 125.371744][ T33] audit: type=1804 audit(1794624522.108:22): pid=6606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.154" name="/newroot/31/file0" dev="fuse" ino=1 res=1 errno=0 [ 125.414652][ T6601] bridge_slave_0: left allmulticast mode [ 125.414668][ T6601] bridge_slave_0: left promiscuous mode [ 125.429313][ T6601] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.529402][ T6601] bridge_slave_1: left allmulticast mode [ 125.529418][ T6601] bridge_slave_1: left promiscuous mode [ 125.529542][ T6601] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.572713][ T6601] bond0: (slave bond_slave_0): Releasing backup interface [ 125.610376][ T6601] bond0: (slave bond_slave_1): Releasing backup interface [ 125.640926][ T6601] team0: Port device team_slave_0 removed [ 125.665694][ T6601] team0: Port device team_slave_1 removed [ 125.666146][ T6601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.666158][ T6601] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.696399][ T6601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.696413][ T6601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.699052][ T6601] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 127.006534][ T5744] usb 6-1: USB disconnect, device number 2 [ 127.150459][ T6626] loop3: detected capacity change from 0 to 33280 [ 127.151005][ T6626] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 127.176791][ T6624] netlink: 'syz.5.159': attribute type 39 has an invalid length. [ 129.191254][ T5744] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 130.186933][ T56] Bluetooth: hci3: command 0x0406 tx timeout [ 131.187313][ T1569] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 131.207199][ T5744] usb 6-1: New USB device found: idVendor=2466, idProduct=8010, bcdDevice=1.00 [ 131.207679][ T5744] usb 6-1: config 0 has no interfaces? [ 131.207699][ T5744] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.224335][ T5744] usb 6-1: config 0 descriptor?? [ 132.575151][ T1569] usb 3-1: Using ep0 maxpacket: 32 [ 132.628759][ T5778] usb 6-1: USB disconnect, device number 3 [ 132.667713][ T1569] usb 3-1: device descriptor read/all, error -71 [ 132.955241][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.955276][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.528115][ T54] IPVS: starting estimator thread 0... [ 134.834838][ T6670] IPVS: using max 56 ests per chain, 134400 per kthread [ 138.255583][ T6697] loop0: detected capacity change from 0 to 4096 [ 138.306160][ T6697] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 138.306178][ T6697] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 138.306184][ T6697] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 138.306218][ T6697] loop0: [ 138.350626][ T6694] EXT4-fs warning (device sda1): ext4_resize_fs:2020: can't read last block, resize aborted [ 141.562259][ T6709] loop2: detected capacity change from 0 to 131072 [ 141.562812][ T6709] xfs: Deprecated parameter 'ikeep' [ 141.562823][ T6709] XFS: ikeep mount option is deprecated. [ 141.655938][ T6709] XFS (loop2): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 141.763989][ T6709] XFS (loop2): Starting recovery (logdev: internal) [ 141.807465][ T6709] XFS (loop2): Ending recovery (logdev: internal) [ 142.349358][ T5635] XFS (loop2): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 142.493963][ T6727] ip_tables: iptables: counters copy to user failed while replacing table [ 142.561076][ T6727] syzkaller1: entered promiscuous mode [ 142.561090][ T6727] syzkaller1: entered allmulticast mode [ 142.932496][ T6738] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 143.035068][ T5778] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 144.226808][ T5778] usb 6-1: New USB device found: idVendor=0525, idProduct=a4a8, bcdDevice=0.41 [ 144.228495][ T5778] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 144.228508][ T5778] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 144.228519][ T5778] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 144.283591][ T5778] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 144.283603][ T5778] usb 6-1: Product: syz [ 144.283610][ T5778] usb 6-1: Manufacturer: syz [ 144.283617][ T5778] usb 6-1: SerialNumber: syz [ 144.542872][ T6752] loop0: detected capacity change from 0 to 33280 [ 144.573885][ T6752] EXT4-fs error (device loop0): ext4_iget_extra_inode:5999: inode #15: comm syz.0.199: corrupted in-inode xattr: invalid ea_ino [ 144.574082][ T6752] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 144.575100][ C0] EXT4-fs (loop0): initial error at time 1794624541: ext4_iget_extra_inode:5999: inode 15 [ 144.575126][ C0] EXT4-fs (loop0): last error at time 1794624541: ext4_iget_extra_inode:5999: inode 15 [ 144.631307][ T6752] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.199: couldn't read orphan inode 15 (err -117) [ 144.631325][ T6752] loop0: lost filesystem error report for type 5 error -117 [ 144.649114][ T6752] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.706895][ T6752] EXT4-fs error (device loop0): ext4_map_blocks:862: inode #2: block 3: comm syz.0.199: lblock 0 mapped to illegal pblock 3 (length 1) [ 144.725720][ T6752] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.199: error -EUCLEAN reading directory block [ 144.748850][ T6751] syzkaller0: entered promiscuous mode [ 144.748862][ T6751] syzkaller0: entered allmulticast mode [ 144.772247][ T6752] EXT4-fs error (device loop0): ext4_map_blocks:862: inode #2: block 3: comm syz.0.199: lblock 0 mapped to illegal pblock 3 (length 1) [ 144.786544][ T6752] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.199: error -EUCLEAN reading directory block [ 144.809716][ T5778] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 144.848016][ T6752] EXT4-fs error (device loop0): ext4_map_blocks:862: inode #2: block 3: comm syz.0.199: lblock 0 mapped to illegal pblock 3 (length 1) [ 144.862901][ T6752] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.199: error -EUCLEAN reading directory block [ 144.885607][ T6752] EXT4-fs error (device loop0): ext4_map_blocks:862: inode #2: block 3: comm syz.0.199: lblock 0 mapped to illegal pblock 3 (length 1) [ 144.899800][ T6752] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.199: error -EUCLEAN reading directory block [ 144.930420][ T6752] EXT4-fs error (device loop0): ext4_map_blocks:862: inode #2: block 3: comm syz.0.199: lblock 0 mapped to illegal pblock 3 (length 1) [ 144.948440][ T6752] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.199: error -EUCLEAN reading directory block [ 144.980709][ T6752] EXT4-fs error (device loop0): ext4_map_blocks:862: inode #2: block 3: comm syz.0.199: lblock 0 mapped to illegal pblock 3 (length 1) [ 145.003382][ T6752] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.199: error -EUCLEAN reading directory block [ 145.030743][ T6752] EXT4-fs error (device loop0): ext4_map_blocks:862: inode #2: block 3: comm syz.0.199: lblock 0 mapped to illegal pblock 3 (length 1) [ 145.045294][ T6752] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.199: error -EUCLEAN reading directory block [ 145.073100][ T6752] EXT4-fs error (device loop0): ext4_map_blocks:862: inode #2: block 3: comm syz.0.199: lblock 0 mapped to illegal pblock 3 (length 1) [ 145.087328][ T6752] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.199: error -EUCLEAN reading directory block [ 145.109478][ T6752] EXT4-fs error (device loop0): ext4_map_blocks:862: inode #2: block 3: comm syz.0.199: lblock 0 mapped to illegal pblock 3 (length 1) [ 145.136603][ T6752] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.199: error -EUCLEAN reading directory block [ 145.153628][ T6752] EXT4-fs error (device loop0): ext4_map_blocks:862: inode #2: block 3: comm syz.0.199: lblock 0 mapped to illegal pblock 3 (length 1) [ 145.169233][ T6752] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.199: error -EUCLEAN reading directory block [ 145.327077][ T5633] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.024760][ C0] net_ratelimit: 10 callbacks suppressed [ 148.279863][ T6784] netlink: 4 bytes leftover after parsing attributes in process `syz.4.209'. [ 148.360429][ T6787] loop3: detected capacity change from 0 to 8 [ 148.424541][ T6784] netlink: 4 bytes leftover after parsing attributes in process `syz.4.209'. [ 149.356824][ T33] audit: type=1800 audit(1794624546.088:23): pid=6787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.207" name="file1" dev="loop3" ino=5 res=0 errno=-5 [ 149.417871][ T6787] SQUASHFS: Entered squashfs_lookup [0:26] [ 149.417890][ T6787] SQUASHFS: Entered get_dir_index_using_name, i_count 0 [ 149.417910][ T6787] SQUASHFS: Entered squashfs_read_metadata [631:26] [ 149.417919][ T6787] SQUASHFS: Got metadata 2, start block 1585, refcount 1, error 0 [ 149.417930][ T6787] SQUASHFS: Entered squashfs_read_metadata [631:32] [ 149.417937][ T6787] SQUASHFS: Got metadata 2, start block 1585, refcount 1, error 0 [ 149.417946][ T6787] SQUASHFS: Entered squashfs_read_metadata [631:3a] [ 149.417953][ T6787] SQUASHFS: Got metadata 2, start block 1585, refcount 1, error 0 [ 149.417962][ T6787] SQUASHFS: Entered squashfs_read_metadata [631:43] [ 149.417969][ T6787] SQUASHFS: Got metadata 2, start block 1585, refcount 1, error 0 [ 149.417977][ T6787] SQUASHFS: Entered squashfs_read_metadata [631:4b] [ 149.417984][ T6787] SQUASHFS: Got metadata 2, start block 1585, refcount 1, error 0 [ 149.417993][ T6787] SQUASHFS: calling squashfs_iget for directory entry file0, inode 0:87, 2 [ 149.418025][ T6787] SQUASHFS: Entered squashfs_iget [ 149.418031][ T6787] SQUASHFS: Entered squashfs_read_inode [ 149.418035][ T6787] SQUASHFS: Entered squashfs_read_metadata [4e8:87] [ 149.418042][ T6787] SQUASHFS: Got metadata 0, start block 1256, refcount 1, error 0 [ 149.418052][ T6787] SQUASHFS: Entered squashfs_read_metadata [6ec:0] [ 149.418058][ T6787] SQUASHFS: Got metadata 1, start block 1772, refcount 1, error 0 [ 149.418068][ T6787] SQUASHFS: Entered squashfs_read_metadata [6ec:0] [ 149.418074][ T6787] SQUASHFS: Got metadata 1, start block 1772, refcount 1, error 0 [ 149.418084][ T6787] SQUASHFS: Entered squashfs_read_metadata [4e8:87] [ 149.418091][ T6787] SQUASHFS: Got metadata 0, start block 1256, refcount 1, error 0 [ 149.418101][ T6787] SQUASHFS error: Unable to read inode 0x87 [ 149.418236][ T6787] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] SMP KASAN PTI [ 149.596410][ T6787] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027] [ 149.604809][ T6787] CPU: 0 UID: 0 PID: 6787 Comm: syz.3.207 Not tainted syzkaller #0 PREEMPT(full) [ 149.613976][ T6787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 149.624006][ T6787] RIP: 0010:security_d_instantiate+0x2f/0x1d0 [ 149.630068][ T6787] Code: 41 57 41 56 53 48 89 f3 49 89 fe e8 bb 2c 20 fd 48 85 db 74 42 4c 8d 7b 04 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 9d 00 00 00 41 8b 2f 89 ee 81 e6 00 02 00 [ 149.649662][ T6787] RSP: 0018:ffffc90004567758 EFLAGS: 00010203 [ 149.655702][ T6787] RAX: 0000000000000004 RBX: 0000000000000020 RCX: dffffc0000000000 [ 149.663648][ T6787] RDX: ffffc90006901000 RSI: 000000000000313d RDI: 000000000000313e [ 149.671592][ T6787] RBP: ffffc900045679b0 R08: ffffffff91bec8bf R09: 1ffffffff237d917 [ 149.679540][ T6787] R10: dffffc0000000000 R11: fffffbfff237d918 R12: 0000000000000000 [ 149.687486][ T6787] R13: dffffc0000000000 R14: ffff888058f88680 R15: 0000000000000024 [ 149.695430][ T6787] FS: 00007f6c306416c0(0000) GS:ffff8881233cd000(0000) knlGS:0000000000000000 [ 149.704329][ T6787] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 149.710885][ T6787] CR2: 00002000000000c0 CR3: 0000000058a40000 CR4: 00000000003526f0 [ 149.718832][ T6787] Call Trace: [ 149.722090][ T6787] [ 149.725113][ T6787] d_splice_alias_ops+0x72/0x440 [ 149.730044][ T6787] ? d_splice_alias+0x12/0x30 [ 149.734700][ T6787] squashfs_lookup+0xc5e/0x14e0 [ 149.739533][ T6787] ? __d_alloc_parallel+0x3a4/0x1740 [ 149.744802][ T6787] ? __d_alloc_parallel+0x3a4/0x1740 [ 149.750064][ T6787] ? __pfx_squashfs_lookup+0x10/0x10 [ 149.755323][ T6787] ? __pfx___d_alloc_parallel+0x10/0x10 [ 149.760847][ T6787] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 149.766980][ T6787] ? mode_strip_sgid+0xa1/0x1b0 [ 149.771809][ T6787] lookup_open+0x816/0x16e0 [ 149.776302][ T6787] path_openat+0x7a5/0x20e0 [ 149.780794][ T6787] do_file_open+0x23e/0x4a0 [ 149.785274][ T6787] ? __pfx_do_file_open+0x10/0x10 [ 149.790278][ T6787] ? _raw_spin_unlock+0x28/0x50 [ 149.795108][ T6787] ? alloc_fd+0x6af/0x760 [ 149.799415][ T6787] do_sys_openat2+0x115/0x200 [ 149.804071][ T6787] ? __se_sys_futex+0x3a8/0x450 [ 149.808912][ T6787] ? __pfx_do_sys_openat2+0x10/0x10 [ 149.814095][ T6787] ? rcu_is_watching+0x16/0xb0 [ 149.818835][ T6787] __x64_sys_openat+0x138/0x170 [ 149.823664][ T6787] do_syscall_64+0x171/0x540 [ 149.828235][ T6787] ? trace_irq_disable+0x3b/0x140 [ 149.833231][ T6787] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.839269][ T6787] ? clear_bhb_loop+0x70/0xc0 [ 149.843923][ T6787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.849787][ T6787] RIP: 0033:0x00007f6c2f7a94d9 [ 149.854539][ T6787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.874116][ T6787] RSP: 002b:00007f6c30641028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 149.882501][ T6787] RAX: ffffffffffffffda RBX: 00007f6c2fa25fa0 RCX: 00007f6c2f7a94d9 [ 149.890443][ T6787] RDX: 0000000000040042 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 149.898399][ T6787] RBP: 00007f6c2f83804e R08: 0000000000000000 R09: 0000000000000000 [ 149.906355][ T6787] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 149.914322][ T6787] R13: 00007f6c2fa26038 R14: 00007f6c2fa25fa0 R15: 00007ffde590c9c8 [ 149.922279][ T6787] [ 149.925276][ T6787] Modules linked in: [ 149.929249][ C0] virtqueue callback for ffff88802a291600 (ffffffff86dc05a0) [ 149.936625][ C0] virtqueue callback for ffff88801df88000 (ffffffff868a2290) [ 149.943992][ C0] sd 0:0:1:0: cmd ffff88802d0ac050 response 0 status 0x0 sense_len 0 [ 149.952039][ C0] sd 0:0:1:0: cmd ffff88802d0acf50 response 0 status 0x0 sense_len 0 [ 149.960074][ C0] sd 0:0:1:0: cmd ffff88802d0ad310 response 0 status 0x0 sense_len 0 [ 149.968110][ C0] No more buffers in queue [ 149.972530][ C0] virtqueue callback for ffff888020711800 (ffffffff857b8bd0) [ 149.979926][ C0] virtqueue interrupt with no work for ffff888020711a00 [ 149.986833][ C0] virtqueue interrupt with no work for ffff888020711c00 [ 149.993913][ C0] wireguard: wg0: Handshake for peer 2 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 7) [ 150.005392][ C0] wireguard: wg0: Handshake for peer 20 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 6) [ 150.018224][ T6787] ---[ end trace 0000000000000000 ]--- [ 150.023814][ C0] No more buffers in queue [ 150.023844][ C0] Receiving skb proto 0x0800 len 332 type 0 [ 150.024025][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 150.024045][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 150.024072][ C0] Receiving skb proto 0x0800 len 332 type 0 [ 150.024081][ C0] No more buffers in queue [ 150.024198][ C0] eth0: xmit ffff88805921a640 42:01:0a:80:00:01 [ 150.024213][ C0] Added buffer head 10 to ffff88802a291200 [ 150.024245][ C0] virtqueue callback for ffff88802a291200 (ffffffff86dc06e0) [ 150.024331][ C0] eth0: xmit ffff88805921a500 42:01:0a:80:00:01 [ 150.024342][ C0] Added buffer head 23 to ffff88802a291200 [ 150.024399][ C0] eth0: xmit ffff88805921a3c0 42:01:0a:80:00:01 [ 150.024409][ C0] Added buffer head 38 to ffff88802a291200 [ 150.024538][ C0] Sent skb ffff88805921a640 [ 150.024558][ C0] Sent skb ffff88805921a500 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 150.024574][ C0] Sent skb ffff88805921a3c0 [ 150.024588][ C0] No more buffers in queue [ 150.025175][ C0] virtqueue interrupt with no work for ffff88802a291200 [ 150.104742][ C0] wireguard: wg0: Retrying handshake with peer 2 ([::1]:20003/0%0) because we stopped hearing back after 15 seconds [ 150.105035][ C0] Dropped {multi|broad}cast of type=[86dd] [ 150.251952][ T5778] Added buffer head 0 to ffff888020711800 [ 150.257849][ T1490] sd 0:0:1:0: cmd ffff88802d0ada90 CDB: 0x2a [ 150.257868][ T1490] Added buffer head 283 to ffff88801df88000 [ 150.257883][ T1490] sd 0:0:1:0: cmd ffff88802d0ade50 CDB: 0x2a [ 150.257892][ T1490] Added buffer head 54 to ffff88801df88000 [ 150.257904][ T1490] sd 0:0:1:0: cmd ffff88802d0ae210 CDB: 0x2a [ 150.257916][ T1490] Added buffer head 121 to ffff88801df88000 [ 150.262784][ T6784] kcov: kcov_task_exit: t = ffff888027753e80, kcov->t = ffff888027753e80 [ 150.270852][ T1490] sd 0:0:1:0: cmd ffff88802d0ae5d0 CDB: 0x2a [ 150.270868][ T1490] Added buffer head 142 to ffff88801df88000 [ 150.270881][ T1490] sd 0:0:1:0: cmd ffff88802d0ae990 CDB: 0x2a [ 150.270891][ T1490] Added buffer head 117 to ffff88801df88000 [ 150.270902][ T1490] sd 0:0:1:0: cmd ffff88802d0aed50 CDB: 0x2a [ 150.270911][ T1490] Added buffer head 154 to ffff88801df88000 [ 150.270923][ T1490] sd 0:0:1:0: cmd ffff88802d0a0110 CDB: 0x2a [ 150.270932][ T1490] Added buffer head 157 to ffff88801df88000 [ 150.270943][ T1490] sd 0:0:1:0: cmd ffff88802d0a04d0 CDB: 0x2a [ 150.270952][ T1490] Added buffer head 74 to ffff88801df88000 [ 150.270962][ T1490] sd 0:0:1:0: cmd ffff88802d0a0890 CDB: 0x2a [ 150.270971][ T1490] Added buffer head 149 to ffff88801df88000 [ 150.270981][ T1490] sd 0:0:1:0: cmd ffff88802d0a0c50 CDB: 0x2a [ 150.270989][ T1490] Added buffer head 115 to ffff88801df88000 [ 150.271000][ T1490] sd 0:0:1:0: cmd ffff88802d0a1010 CDB: 0x2a [ 150.271009][ T1490] Added buffer head 60 to ffff88801df88000 [ 150.271020][ T1490] sd 0:0:1:0: cmd ffff88802d0a13d0 CDB: 0x2a [ 150.271029][ T1490] Added buffer head 159 to ffff88801df88000 [ 150.271039][ T1490] sd 0:0:1:0: cmd ffff88802d0a1790 CDB: 0x2a [ 150.271048][ T1490] Added buffer head 275 to ffff88801df88000 [ 150.271058][ T1490] sd 0:0:1:0: cmd ffff88802d0a1b50 CDB: 0x2a [ 150.271067][ T1490] Added buffer head 229 to ffff88801df88000 [ 150.271077][ T1490] sd 0:0:1:0: cmd ffff88802d0a1f10 CDB: 0x2a [ 150.271086][ T1490] Added buffer head 118 to ffff88801df88000 [ 150.271097][ T1490] sd 0:0:1:0: cmd ffff88802d0a22d0 CDB: 0x2a [ 150.271106][ T1490] Added buffer head 146 to ffff88801df88000 [ 150.271116][ T1490] sd 0:0:1:0: cmd ffff88802d0a2690 CDB: 0x2a [ 150.271125][ T1490] Added buffer head 276 to ffff88801df88000 [ 150.271135][ T1490] sd 0:0:1:0: cmd ffff88802d0a2a50 CDB: 0x2a [ 150.271144][ T1490] Added buffer head 2 to ffff88801df88000 [ 150.271155][ T1490] sd 0:0:1:0: cmd ffff88802d0a2e10 CDB: 0x2a [ 150.271164][ T1490] Added buffer head 242 to ffff88801df88000 [ 150.271175][ T1490] sd 0:0:1:0: cmd ffff88802d0a31d0 CDB: 0x2a [ 150.271184][ T1490] Added buffer head 258 to ffff88801df88000 [ 150.271194][ T1490] sd 0:0:1:0: cmd ffff88802d0a3590 CDB: 0x2a [ 150.271203][ T1490] Added buffer head 6 to ffff88801df88000 [ 150.271213][ T1490] sd 0:0:1:0: cmd ffff88802d0a3950 CDB: 0x2a [ 150.271222][ T1490] Added buffer head 80 to ffff88801df88000 [ 150.271232][ T1490] sd 0:0:1:0: cmd ffff88802d0a3d10 CDB: 0x2a [ 150.271241][ T1490] Added buffer head 134 to ffff88801df88000 [ 150.271252][ T1490] sd 0:0:1:0: cmd ffff88802d0a40d0 CDB: 0x2a [ 150.271261][ T1490] Added buffer head 164 to ffff88801df88000 [ 150.271271][ T1490] sd 0:0:1:0: cmd ffff88802d0a4490 CDB: 0x2a [ 150.271280][ T1490] Added buffer head 19 to ffff88801df88000 [ 150.271290][ T1490] sd 0:0:1:0: cmd ffff88802d0a4850 CDB: 0x2a [ 150.271299][ T1490] Added buffer head 22 to ffff88801df88000 [ 150.271309][ T1490] sd 0:0:1:0: cmd ffff88802d0a4c10 CDB: 0x2a [ 150.271318][ T1490] Added buffer head 296 to ffff88801df88000 [ 150.271329][ T1490] sd 0:0:1:0: cmd ffff88802d0a4fd0 CDB: 0x2a [ 150.271338][ T1490] Added buffer head 236 to ffff88801df88000 [ 150.271349][ T1490] sd 0:0:1:0: cmd ffff88802d0a5390 CDB: 0x2a [ 150.271358][ T1490] Added buffer head 86 to ffff88801df88000 [ 150.271368][ T1490] sd 0:0:1:0: cmd ffff88802d0a5750 CDB: 0x2a [ 150.271377][ T1490] Added buffer head 262 to ffff88801df88000 [ 150.271387][ T1490] sd 0:0:1:0: cmd ffff88802d0a5b10 CDB: 0x2a [ 150.271396][ T1490] Added buffer head 100 to ffff88801df88000 [ 150.271406][ T1490] sd 0:0:1:0: cmd ffff88802d0a5ed0 CDB: 0x2a [ 150.271415][ T1490] Added buffer head 189 to ffff88801df88000 [ 150.272775][ C0] virtqueue callback for ffff88801df88000 (ffffffff868a2290) [ 150.272791][ C0] sd 0:0:1:0: cmd ffff88802d0a2a50 response 0 status 0x0 sense_len 0 [ 150.272805][ C0] No more buffers in queue [ 150.272907][ C0] virtqueue callback for ffff88801df88000 (ffffffff868a2290) [ 150.272919][ C0] sd 0:0:1:0: cmd ffff88802d0ade50 response 0 status 0x0 sense_len 0 [ 150.272931][ C0] sd 0:0:1:0: cmd ffff88802d0a31d0 response 0 status 0x0 sense_len 0 [ 150.272942][ C0] sd 0:0:1:0: cmd ffff88802d0ae5d0 response 0 status 0x0 sense_len 0 [ 150.272952][ C0] sd 0:0:1:0: cmd ffff88802d0a0c50 response 0 status 0x0 sense_len 0 [ 150.272962][ C0] No more buffers in queue [ 150.273105][ C0] virtqueue callback for ffff88801df88000 (ffffffff868a2290) [ 150.273115][ C0] sd 0:0:1:0: cmd ffff88802d0a04d0 response 0 status 0x0 sense_len 0 [ 150.273126][ C0] sd 0:0:1:0: cmd ffff88802d0a13d0 response 0 status 0x0 sense_len 0 [ 150.273136][ C0] No more buffers in queue [ 150.273157][ C0] virtqueue callback for ffff88801df88000 (ffffffff868a2290) [ 150.273167][ C0] sd 0:0:1:0: cmd ffff88802d0a3950 response 0 status 0x0 sense_len 0 [ 150.273176][ C0] No more buffers in queue [ 150.273193][ C0] virtqueue callback for ffff88801df88000 (ffffffff868a2290) [ 150.273202][ C0] sd 0:0:1:0: cmd ffff88802d0ada90 response 0 status 0x0 sense_len 0 [ 150.273212][ C0] sd 0:0:1:0: cmd ffff88802d0a4490 response 0 status 0x0 sense_len 0 [ 150.273221][ C0] No more buffers in queue [ 150.273259][ C0] virtqueue callback for ffff88801df88000 (ffffffff868a2290) [ 150.273269][ C0] sd 0:0:1:0: cmd ffff88802d0a5b10 response 0 status 0x0 sense_len 0 [ 150.273278][ C0] No more buffers in queue [ 150.273533][ C0] virtqueue callback for ffff88801df88000 (ffffffff868a2290) [ 150.273544][ C0] sd 0:0:1:0: cmd ffff88802d0a4850 response 0 status 0x0 sense_len 0 [ 150.273554][ C0] No more buffers in queue [ 150.273592][ C0] virtqueue callback for ffff88801df88000 (ffffffff868a2290) [ 150.273603][ C0] sd 0:0:1:0: cmd ffff88802d0ae210 response 0 status 0x0 sense_len 0 [ 150.273614][ C0] sd 0:0:1:0: cmd ffff88802d0ae990 response 0 status 0x0 sense_len 0 [ 150.273625][ C0] sd 0:0:1:0: cmd ffff88802d0a0110 response 0 status 0x0 sense_len 0 [ 150.273635][ C0] sd 0:0:1:0: cmd ffff88802d0a0890 response 0 status 0x0 sense_len 0 [ 150.273646][ C0] sd 0:0:1:0: cmd ffff88802d0a22d0 response 0 status 0x0 sense_len 0 [ 150.273656][ C0] sd 0:0:1:0: cmd ffff88802d0a3590 response 0 status 0x0 sense_len 0 [ 150.273665][ C0] No more buffers in queue [ 150.273671][ C0] sd 0:0:1:0: cmd ffff88802d0aed50 response 0 status 0x0 sense_len 0 [ 150.273681][ C0] sd 0:0:1:0: cmd ffff88802d0a1010 response 0 status 0x0 sense_len 0 [ 150.273690][ C0] No more buffers in queue [ 150.273721][ C0] virtqueue callback for ffff88801df88000 (ffffffff868a2290) [ 150.273731][ C0] sd 0:0:1:0: cmd ffff88802d0a4c10 response 0 status 0x0 sense_len 0 [ 150.273741][ C0] sd 0:0:1:0: cmd ffff88802d0a5750 response 0 status 0x0 sense_len 0 [ 150.273752][ C0] sd 0:0:1:0: cmd ffff88802d0a5ed0 response 0 status 0x0 sense_len 0 [ 150.273764][ C0] No more buffers in queue [ 150.275373][ C0] virtqueue callback for ffff88801df88000 (ffffffff868a2290) [ 150.275386][ C0] sd 0:0:1:0: cmd ffff88802d0a1790 response 0 status 0x0 sense_len 0 [ 150.275398][ C0] sd 0:0:1:0: cmd ffff88802d0a2e10 response 0 status 0x0 sense_len 0 [ 150.275409][ C0] sd 0:0:1:0: cmd ffff88802d0a2690 response 0 status 0x0 sense_len 0 [ 150.275420][ C0] sd 0:0:1:0: cmd ffff88802d0a1b50 response 0 status 0x0 sense_len 0 [ 150.275431][ C0] sd 0:0:1:0: cmd ffff88802d0a3d10 response 0 status 0x0 sense_len 0 [ 150.275441][ C0] sd 0:0:1:0: cmd ffff88802d0a1f10 response 0 status 0x0 sense_len 0 [ 150.275458][ C0] sd 0:0:1:0: cmd ffff88802d0a40d0 response 0 status 0x0 sense_len 0 [ 150.275469][ C0] sd 0:0:1:0: cmd ffff88802d0a4fd0 response 0 status 0x0 sense_len 0 [ 150.275479][ C0] sd 0:0:1:0: cmd ffff88802d0a5390 response 0 status 0x0 sense_len 0 [ 150.275488][ C0] No more buffers in queue [ 150.284931][ T1490] sd 0:0:1:0: cmd ffff88802d0a6290 CDB: 0x2a [ 150.284947][ T1490] Added buffer head 86 to ffff88801df88000 [ 150.284960][ T1490] sd 0:0:1:0: cmd ffff88802d0a6650 CDB: 0x2a [ 150.284970][ T1490] Added buffer head 236 to ffff88801df88000 [ 150.284981][ T1490] sd 0:0:1:0: cmd ffff88802d0a6a10 CDB: 0x2a [ 150.284990][ T1490] Added buffer head 164 to ffff88801df88000 [ 150.285001][ T1490] sd 0:0:1:0: cmd ffff88802d0a6dd0 CDB: 0x2a [ 150.285010][ T1490] Added buffer head 118 to ffff88801df88000 [ 150.285021][ T1490] sd 0:0:1:0: cmd ffff88802d0a7190 CDB: 0x2a [ 150.285030][ T1490] Added buffer head 134 to ffff88801df88000 [ 150.285041][ T1490] sd 0:0:1:0: cmd ffff88802d0a7550 CDB: 0x2a [ 150.285050][ T1490] Added buffer head 229 to ffff88801df88000 [ 150.285060][ T1490] sd 0:0:1:0: cmd ffff88802d0a7910 CDB: 0x2a [ 150.285070][ T1490] Added buffer head 276 to ffff88801df88000 [ 150.285080][ T1490] sd 0:0:1:0: cmd ffff88802d0a7cd0 CDB: 0x2a [ 150.285089][ T1490] Added buffer head 242 to ffff88801df88000 [ 150.285100][ T1490] sd 0:0:1:0: cmd ffff88802d0a8090 CDB: 0x2a [ 150.285109][ T1490] Added buffer head 275 to ffff88801df88000 [ 150.285120][ T1490] sd 0:0:1:0: cmd ffff88802d0a8450 CDB: 0x2a [ 150.285129][ T1490] Added buffer head 189 to ffff88801df88000 [ 150.285140][ T1490] sd 0:0:1:0: cmd ffff88802d0a8810 CDB: 0x2a [ 150.285149][ T1490] Added buffer head 262 to ffff88801df88000 [ 150.285159][ T1490] sd 0:0:1:0: cmd ffff88802d0a8bd0 CDB: 0x2a [ 150.285168][ T1490] Added buffer head 296 to ffff88801df88000 [ 150.285179][ T1490] sd 0:0:1:0: cmd ffff88802d0a8f90 CDB: 0x2a [ 150.285188][ T1490] Added buffer head 60 to ffff88801df88000 [ 150.285199][ T1490] sd 0:0:1:0: cmd ffff88802d0a9350 CDB: 0x2a [ 150.285207][ T1490] Added buffer head 154 to ffff88801df88000 [ 150.285218][ T1490] sd 0:0:1:0: cmd ffff88802d0a9710 CDB: 0x2a [ 150.285226][ T1490] Added buffer head 6 to ffff88801df88000 [ 150.285236][ T1490] sd 0:0:1:0: cmd ffff88802d0a9ad0 CDB: 0x2a [ 150.285245][ T1490] Added buffer head 146 to ffff88801df88000 [ 150.285255][ T1490] sd 0:0:1:0: cmd ffff88802d0a9e90 CDB: 0x2a [ 150.285264][ T1490] Added buffer head 149 to ffff88801df88000 [ 150.285275][ T1490] sd 0:0:1:0: cmd ffff88802d0aa250 CDB: 0x2a [ 150.285284][ T1490] Added buffer head 157 to ffff88801df88000 [ 150.285294][ T1490] sd 0:0:1:0: cmd ffff88802d0aa610 CDB: 0x2a [ 150.285302][ T1490] Added buffer head 117 to ffff88801df88000 [ 150.285312][ T1490] sd 0:0:1:0: cmd ffff88802d0aa9d0 CDB: 0x2a [ 150.285321][ T1490] Added buffer head 121 to ffff88801df88000 [ 150.285331][ T1490] sd 0:0:1:0: cmd ffff88802d0aad90 CDB: 0x2a [ 150.285340][ T1490] Added buffer head 22 to ffff88801df88000 [ 150.285351][ T1490] sd 0:0:1:0: cmd ffff88802d0ab150 CDB: 0x2a [ 150.285360][ T1490] Added buffer head 100 to ffff88801df88000 [ 150.285370][ T1490] sd 0:0:1:0: cmd ffff88802d0ab510 CDB: 0x2a [ 150.285379][ T1490] Added buffer head 19 to ffff88801df88000 [ 150.285390][ T1490] sd 0:0:1:0: cmd ffff88802d0acb90 CDB: 0x2a [ 150.285399][ T1490] Added buffer head 283 to ffff88801df88000 [ 150.285410][ T1490] sd 0:0:1:0: cmd ffff88802d0ad310 CDB: 0x2a [ 150.285419][ T1490] Added buffer head 135 to ffff88801df88000 [ 150.285429][ T1490] sd 0:0:1:0: cmd ffff88802d0ad6d0 CDB: 0x2a [ 150.285438][ T1490] Added buffer head 3 to ffff88801df88000 [ 150.285456][ T1490] sd 0:0:1:0: cmd ffff88802d0ac410 CDB: 0x2a [ 150.285465][ T1490] Added buffer head 249 to ffff88801df88000 [ 150.285475][ T1490] sd 0:0:1:0: cmd ffff88802d0ac7d0 CDB: 0x2a [ 150.285484][ T1490] Added buffer head 148 to ffff88801df88000 [ 150.285517][ T1490] sd 0:0:1:0: cmd ffff88802d0acf50 CDB: 0x2a [ 150.285531][ T1490] Added buffer head 114 to ffff88801df88000 [ 150.285542][ T1490] sd 0:0:1:0: cmd ffff88802d0ab8d0 CDB: 0x2a [ 150.285550][ T1490] Added buffer head 251 to ffff88801df88000 [ 150.285570][ T1490] sd 0:0:1:0: cmd ffff88802d0abc90 CDB: 0x2a [ 150.285580][ T1490] Added buffer head 254 to ffff88801df88000 [ 150.285591][ T1490] sd 0:0:1:0: cmd ffff88802d0ac050 CDB: 0x2a [ 150.285600][ T1490] Added buffer head 220 to ffff88801df88000 [ 150.286830][ C0] virtqueue callback for ffff88801df88000 (ffffffff868a2290) [ 150.286845][ C0] sd 0:0:1:0: cmd ffff88802d0a8bd0 response 0 status 0x0 sense_len 0 [ 150.286859][ C0] sd 0:0:1:0: cmd ffff88802d0a7910 response 0 status 0x0 sense_len 0 [ 150.286870][ C0] No more buffers in queue [ 150.286991][ C0] virtqueue callback for ffff88801df88000 (ffffffff868a2290) [ 150.287003][ C0] sd 0:0:1:0: cmd ffff88802d0a6dd0 response 0 status 0x0 sense_len 0 [ 150.287014][ C0] sd 0:0:1:0: cmd ffff88802d0a7190 response 0 status 0x0 sense_len 0 [ 150.287025][ C0] sd 0:0:1:0: cmd ffff88802d0a7cd0 response 0 status 0x0 sense_len 0 [ 150.287035][ C0] No more buffers in queue [ 150.287051][ C0] virtqueue callback for ffff88801df88000 (ffffffff868a2290) [ 150.287060][ C0] sd 0:0:1:0: cmd ffff88802d0a6650 response 0 status 0x0 sense_len 0 [ 150.287071][ C0] sd 0:0:1:0: cmd ffff88802d0a8450 response 0 status 0x0 sense_len 0 [ 150.287082][ C0] sd 0:0:1:0: cmd ffff88802d0a7550 response 0 status 0x0 sense_len 0 [ 150.287092][ C0] sd 0:0:1:0: cmd ffff88802d0aa9d0 response 0 status 0x0 sense_len 0 [ 150.287103][ C0] sd 0:0:1:0: cmd ffff88802d0a8f90 response 0 status 0x0 sense_len 0 [ 150.287114][ C0] sd 0:0:1:0: cmd ffff88802d0ab8d0 response 0 status 0x0 sense_len 0 [ 150.287124][ C0] sd 0:0:1:0: cmd ffff88802d0a6290 response 0 status 0x0 sense_len 0 [ 150.287135][ C0] sd 0:0:1:0: cmd ffff88802d0a8810 response 0 status 0x0 sense_len 0 [ 150.287144][ C0] No more buffers in queue [ 150.287463][ C0] virtqueue callback for ffff88801df88000 (ffffffff868a2290) [ 150.287474][ C0] sd 0:0:1:0: cmd ffff88802d0a8090 response 0 status 0x0 sense_len 0 [ 150.287484][ C0] sd 0:0:1:0: cmd ffff88802d0a6a10 response 0 status 0x0 sense_len 0 [ 150.287495][ C0] sd 0:0:1:0: cmd ffff88802d0a9350 response 0 status 0x0 sense_len 0 [ 150.287504][ C0] No more buffers in queue [ 150.287936][ C0] virtqueue callback for ffff88801df88000 (ffffffff868a2290) [ 150.287948][ C0] sd 0:0:1:0: cmd ffff88802d0a9710 response 0 status 0x0 sense_len 0 [ 150.287959][ C0] sd 0:0:1:0: cmd ffff88802d0aa250 response 0 status 0x0 sense_len 0 [ 150.287969][ C0] sd 0:0:1:0: cmd ffff88802d0aad90 response 0 status 0x0 sense_len 0 [ 150.287980][ C0] sd 0:0:1:0: cmd ffff88802d0aa610 response 0 status 0x0 sense_len 0 [ 150.287990][ C0] sd 0:0:1:0: cmd ffff88802d0a9e90 response 0 status 0x0 sense_len 0 [ 150.288000][ C0] sd 0:0:1:0: cmd ffff88802d0a9ad0 response 0 status 0x0 sense_len 0 [ 150.288011][ C0] sd 0:0:1:0: cmd ffff88802d0abc90 response 0 status 0x0 sense_len 0 [ 150.288021][ C0] sd 0:0:1:0: cmd ffff88802d0ab510 response 0 status 0x0 sense_len 0 [ 150.288031][ C0] sd 0:0:1:0: cmd ffff88802d0ac7d0 response 0 status 0x0 sense_len 0 [ 150.288040][ C0] No more buffers in queue [ 150.288111][ C0] virtqueue callback for ffff88801df88000 (ffffffff868a2290) [ 150.288121][ C0] sd 0:0:1:0: cmd ffff88802d0ab150 response 0 status 0x0 sense_len 0 [ 150.288131][ C0] sd 0:0:1:0: cmd ffff88802d0ad310 response 0 status 0x0 sense_len 0 [ 150.288141][ C0] sd 0:0:1:0: cmd ffff88802d0ac410 response 0 status 0x0 sense_len 0 [ 150.288151][ C0] No more buffers in queue [ 150.290585][ C0] virtqueue callback for ffff88801df88000 (ffffffff868a2290) [ 150.290599][ C0] sd 0:0:1:0: cmd ffff88802d0acb90 response 0 status 0x0 sense_len 0 [ 150.290611][ C0] sd 0:0:1:0: cmd ffff88802d0ad6d0 response 0 status 0x0 sense_len 0 [ 150.290622][ C0] sd 0:0:1:0: cmd ffff88802d0acf50 response 0 status 0x0 sense_len 0 [ 150.290632][ C0] sd 0:0:1:0: cmd ffff88802d0ac050 response 0 status 0x0 sense_len 0 [ 150.290642][ C0] No more buffers in queue [ 150.397681][ T1490] sd 0:0:1:0: cmd ffff88802d0ae5d0 CDB: 0x2a [ 150.397701][ T1490] Added buffer head 220 to ffff88801df88000 [ 150.397731][ T1490] sd 0:0:1:0: cmd ffff88802d0ae990 CDB: 0x2a [ 150.409733][ T5619] eth0: xmit ffff8880704714f0 42:01:0a:80:00:01 [ 150.409750][ T5619] Added buffer head 38 to ffff88802a291200 [ 150.409783][ C0] virtqueue callback for ffff88802a291200 (ffffffff86dc06e0) [ 150.409798][ C0] Sent skb ffff8880704714f0 [ 150.409807][ C0] No more buffers in queue [ 150.421974][ C0] virtqueue callback for ffff88802a290e00 (ffffffff86dc05a0) [ 150.422016][ C0] No more buffers in queue [ 150.422165][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 150.422178][ C0] No more buffers in queue [ 150.533065][ T5620] eth0: xmit ffff888070471270 42:01:0a:80:00:01 [ 150.533084][ T5620] Added buffer head 38 to ffff88802a291200 [ 150.533114][ C0] virtqueue callback for ffff88802a291200 (ffffffff86dc06e0) [ 150.533129][ C0] Sent skb ffff888070471270 [ 150.533137][ C0] No more buffers in queue [ 150.533732][ C0] virtqueue callback for ffff88802a291600 (ffffffff86dc05a0) [ 150.533746][ C0] No more buffers in queue [ 150.533893][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 150.533905][ C0] No more buffers in queue [ 150.533913][ C0] Added buffer head 3135 to ffff88802a291600 [ 150.533922][ C0] Added buffer head 3136 to ffff88802a291600 [ 150.533929][ C0] Added buffer head 3137 to ffff88802a291600 [ 150.533937][ C0] Added buffer head 3138 to ffff88802a291600 [ 150.533944][ C0] Added buffer head 3139 to ffff88802a291600 [ 150.533951][ C0] Added buffer head 3140 to ffff88802a291600 [ 150.533959][ C0] Added buffer head 3141 to ffff88802a291600 [ 150.533966][ C0] Added buffer head 3142 to ffff88802a291600 [ 150.533973][ C0] Added buffer head 3143 to ffff88802a291600 [ 150.533980][ C0] Added buffer head 3144 to ffff88802a291600 [ 150.533988][ C0] Added buffer head 3145 to ffff88802a291600 [ 150.533995][ C0] Added buffer head 3146 to ffff88802a291600 [ 150.534002][ C0] Added buffer head 3147 to ffff88802a291600 [ 150.534009][ C0] Added buffer head 3148 to ffff88802a291600 [ 150.534016][ C0] Added buffer head 3149 to ffff88802a291600 [ 150.534023][ C0] Added buffer head 3150 to ffff88802a291600 [ 150.534030][ C0] Added buffer head 3151 to ffff88802a291600 [ 150.534045][ C0] Added buffer head 3152 to ffff88802a291600 [ 150.534053][ C0] Added buffer head 3153 to ffff88802a291600 [ 150.534060][ C0] Added buffer head 3154 to ffff88802a291600 [ 150.534067][ C0] Added buffer head 3155 to ffff88802a291600 [ 150.534074][ C0] Added buffer head 3156 to ffff88802a291600 [ 150.534081][ C0] Added buffer head 3157 to ffff88802a291600 [ 150.534088][ C0] Added buffer head 3158 to ffff88802a291600 [ 150.534106][ C0] Added buffer head 3159 to ffff88802a291600 [ 150.534114][ C0] Added buffer head 3160 to ffff88802a291600 [ 150.534121][ C0] Added buffer head 3161 to ffff88802a291600 [ 150.534128][ C0] Added buffer head 3162 to ffff88802a291600 [ 150.534135][ C0] Added buffer head 3067 to ffff88802a291600 [ 150.534142][ C0] Added buffer head 3068 to ffff88802a291600 [ 150.534150][ C0] Added buffer head 3069 to ffff88802a291600 [ 150.534157][ C0] Added buffer head 3070 to ffff88802a291600 [ 150.534164][ C0] Added buffer head 3071 to ffff88802a291600 [ 150.534384][ T1490] Added buffer head 213 to ffff88801df88000 [ 150.534445][ T1490] sd 0:0:1:0: cmd ffff88802d0aed50 CDB: 0x2a [ 150.534466][ T1490] Added buffer head 215 to ffff88801df88000 [ 150.534479][ T1490] sd 0:0:1:0: cmd ffff88802d0a5390 CDB: 0x2a [ 150.534488][ T1490] Added buffer head 217 to ffff88801df88000 [ 150.534499][ T1490] sd 0:0:1:0: cmd ffff88802d0a5750 CDB: 0x2a [ 150.534508][ T1490] Added buffer head 146 to ffff88801df88000 [ 150.534541][ T1490] sd 0:0:1:0: cmd ffff88802d0ada90 CDB: 0x2a [ 150.534561][ T1490] Added buffer head 149 to ffff88801df88000 [ 150.534579][ T1490] sd 0:0:1:0: cmd ffff88802d0ade50 CDB: 0x2a [ 150.534589][ T1490] Added buffer head 229 to ffff88801df88000 [ 150.534607][ T1490] sd 0:0:1:0: cmd ffff88802d0ae210 CDB: 0x2a [ 150.534617][ T1490] Added buffer head 67 to ffff88801df88000 [ 150.534628][ T1490] sd 0:0:1:0: cmd ffff88802d0a0110 CDB: 0x2a [ 150.534637][ T1490] Added buffer head 70 to ffff88801df88000 [ 150.534648][ T1490] sd 0:0:1:0: cmd ffff88802d0a04d0 CDB: 0x2a [ 150.534657][ T1490] Added buffer head 163 to ffff88801df88000 [ 150.534673][ T1490] sd 0:0:1:0: cmd ffff88802d0a0890 CDB: 0x2a [ 150.534683][ T1490] Added buffer head 276 to ffff88801df88000 [ 150.540634][ C0] virtqueue callback for ffff88801df88000 (ffffffff868a2290) [ 150.540647][ C0] sd 0:0:1:0: cmd ffff88802d0a5750 response 0 status 0x0 sense_len 0 [ 150.540661][ C0] sd 0:0:1:0: cmd ffff88802d0a0110 response 0 status 0x0 sense_len 0 [ 150.540672][ C0] sd 0:0:1:0: cmd ffff88802d0ae5d0 response 0 status 0x0 sense_len 0 [ 150.540683][ C0] sd 0:0:1:0: cmd ffff88802d0a5390 response 0 status 0x0 sense_len 0 [ 150.540694][ C0] sd 0:0:1:0: cmd ffff88802d0ada90 response 0 status 0x0 sense_len 0 [ 150.540703][ C0] No more buffers in queue [ 150.546929][ C0] virtqueue callback for ffff88801df88000 (ffffffff868a2290) [ 150.546942][ C0] sd 0:0:1:0: cmd ffff88802d0ae210 response 0 status 0x0 sense_len 0 [ 150.546954][ C0] sd 0:0:1:0: cmd ffff88802d0ade50 response 0 status 0x0 sense_len 0 [ 150.546965][ C0] sd 0:0:1:0: cmd ffff88802d0a04d0 response 0 status 0x0 sense_len 0 [ 150.546976][ C0] sd 0:0:1:0: cmd ffff88802d0ae990 response 0 status 0x0 sense_len 0 [ 150.546988][ C0] sd 0:0:1:0: cmd ffff88802d0aed50 response 0 status 0x0 sense_len 0 [ 150.546998][ C0] sd 0:0:1:0: cmd ffff88802d0a0890 response 0 status 0x0 sense_len 0 [ 150.547008][ C0] No more buffers in queue [ 150.547859][ T5619] eth0: xmit ffff88803758b770 42:01:0a:80:00:01 [ 150.547874][ T5619] Added buffer head 38 to ffff88802a291200 [ 150.547902][ C0] virtqueue callback for ffff88802a291200 (ffffffff86dc06e0) [ 150.547915][ C0] Sent skb ffff88803758b770 [ 150.547923][ C0] No more buffers in queue [ 150.554155][ C0] virtqueue callback for ffff88802a290e00 (ffffffff86dc05a0) [ 150.554513][ C0] No more buffers in queue [ 150.554643][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 150.554663][ C0] Receiving skb proto 0x0800 len 88 type 0 [ 150.554680][ C0] Receiving skb proto 0x0800 len 112 type 0 [ 150.554716][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 150.554726][ C0] No more buffers in queue [ 150.554733][ C0] Added buffer head 65 to ffff88802a290e00 [ 150.554741][ C0] Added buffer head 64 to ffff88802a290e00 [ 150.554749][ C0] Added buffer head 63 to ffff88802a290e00 [ 150.554756][ C0] Added buffer head 62 to ffff88802a290e00 [ 150.554763][ C0] Added buffer head 61 to ffff88802a290e00 [ 150.554770][ C0] Added buffer head 60 to ffff88802a290e00 [ 150.554778][ C0] Added buffer head 59 to ffff88802a290e00 [ 150.554785][ C0] Added buffer head 58 to ffff88802a290e00 [ 150.554792][ C0] Added buffer head 57 to ffff88802a290e00 [ 150.554799][ C0] Added buffer head 56 to ffff88802a290e00 [ 150.554806][ C0] Added buffer head 55 to ffff88802a290e00 [ 150.554813][ C0] Added buffer head 54 to ffff88802a290e00 [ 150.554820][ C0] Added buffer head 53 to ffff88802a290e00 [ 150.554827][ C0] Added buffer head 52 to ffff88802a290e00 [ 150.554834][ C0] Added buffer head 51 to ffff88802a290e00 [ 150.554841][ C0] Added buffer head 50 to ffff88802a290e00 [ 150.554848][ C0] Added buffer head 49 to ffff88802a290e00 [ 150.554855][ C0] Added buffer head 48 to ffff88802a290e00 [ 150.554862][ C0] Added buffer head 47 to ffff88802a290e00 [ 150.554870][ C0] Added buffer head 46 to ffff88802a290e00 [ 150.554876][ C0] Added buffer head 45 to ffff88802a290e00 [ 150.554883][ C0] Added buffer head 44 to ffff88802a290e00 [ 150.554890][ C0] Added buffer head 43 to ffff88802a290e00 [ 150.554897][ C0] Added buffer head 42 to ffff88802a290e00 [ 150.554904][ C0] Added buffer head 41 to ffff88802a290e00 [ 150.554912][ C0] Added buffer head 40 to ffff88802a290e00 [ 150.554919][ C0] Added buffer head 39 to ffff88802a290e00 [ 150.554927][ C0] Added buffer head 38 to ffff88802a290e00 [ 150.554934][ C0] Added buffer head 37 to ffff88802a290e00 [ 150.554941][ C0] Added buffer head 36 to ffff88802a290e00 [ 150.554948][ C0] Added buffer head 35 to ffff88802a290e00 [ 150.554955][ C0] Added buffer head 34 to ffff88802a290e00 [ 150.554962][ C0] Added buffer head 33 to ffff88802a290e00 [ 150.555097][ C0] eth0: xmit ffff88807675ab40 42:01:0a:80:00:01 [ 150.555109][ C0] Added buffer head 38 to ffff88802a291200 [ 150.555132][ C0] virtqueue callback for ffff88802a291200 (ffffffff86dc06e0) [ 150.555170][ C0] eth0: xmit ffff88802d3f0500 42:01:0a:80:00:01 [ 150.555180][ C0] Added buffer head 23 to ffff88802a291200 [ 150.555226][ C0] Sent skb ffff88807675ab40 [ 150.555242][ C0] Sent skb ffff88802d3f0500 [ 150.555255][ C0] No more buffers in queue [ 150.555925][ C0] virtqueue interrupt with no work for ffff88802a291200 [ 150.604955][ C0] eth0: xmit ffff888076134a00 42:01:0a:80:00:01 [ 150.604973][ C0] Added buffer head 23 to ffff88802a291200 [ 150.605002][ C0] virtqueue callback for ffff88802a291200 (ffffffff86dc06e0) [ 150.605049][ C0] Sent skb ffff888076134a00 [ 150.605068][ C0] No more buffers in queue [ 150.617787][ T5628] kcov: kcov_task_exit: t = ffff888076d3ddc0, kcov->t = ffff888076d3ddc0 [ 150.653043][ T6014] kcov: kcov_task_exit: t = ffff888028fb0000, kcov->t = ffff888028fb0000 [ 150.661401][ T5629] kcov: kcov_task_exit: t = ffff888076d3be80, kcov->t = ffff888076d3be80 [ 150.676389][ T5626] kcov: kcov_task_exit: t = ffff888079a31f40, kcov->t = ffff888079a31f40 [ 150.683716][ T6331] kcov: kcov_task_exit: t = ffff88802f5addc0, kcov->t = ffff88802f5addc0 [ 150.744719][ C0] wireguard: wg2: Handshake for peer 42 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 3) [ 150.779902][ T6792] kcov: kcov_start: t = ffff8880309a3e80, size = 524288, area = ffffc9000f5bf000 [ 150.799011][ C0] virtqueue callback for ffff888020711800 (ffffffff857b8bd0) [ 150.799060][ C0] virtqueue interrupt with no work for ffff888020711a00 [ 150.799067][ C0] virtqueue interrupt with no work for ffff888020711c00 [ 150.799128][ T11] Added buffer head 0 to ffff888020711800 [ 151.589006][ T6793] kcov: kcov_start: t = ffff88802f048000, size = 524288, area = ffffc9001032b000 [ 151.640694][ T5617] eth0: xmit ffff88803758b4f0 42:01:0a:80:00:01 [ 151.640714][ T5617] Added buffer head 23 to ffff88802a291200 [ 151.640743][ C0] virtqueue callback for ffff88802a291200 (ffffffff86dc06e0) [ 151.640762][ C0] Sent skb ffff88803758b4f0 [ 151.640771][ C0] No more buffers in queue [ 151.647000][ C0] virtqueue callback for ffff88802a290e00 (ffffffff86dc05a0) [ 151.647041][ C0] No more buffers in queue [ 151.647174][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 151.647187][ C0] No more buffers in queue [ 151.803947][ C0] virtqueue callback for ffff888020711800 (ffffffff857b8bd0) [ 151.803975][ C0] virtqueue interrupt with no work for ffff888020711a00 [ 151.803982][ C0] virtqueue interrupt with no work for ffff888020711c00 [ 151.804043][ T11] Added buffer head 0 to ffff888020711800 [ 152.027914][ C0] wireguard: wg0: Retrying handshake with peer 20 ([::1]:20003/0%0) because we stopped hearing back after 15 seconds [ 152.798495][ C0] virtqueue callback for ffff888020711800 (ffffffff857b8bd0) [ 152.798537][ C0] virtqueue interrupt with no work for ffff888020711a00 [ 152.798544][ C0] virtqueue interrupt with no work for ffff888020711c00 [ 152.798634][ T11] Added buffer head 0 to ffff888020711800 [ 153.044195][ T6793] kcov: kcov_task_exit: t = ffff88802f048000, kcov->t = ffff88802f048000 [ 153.201496][ T6792] kcov: kcov_task_exit: t = ffff8880309a3e80, kcov->t = ffff8880309a3e80 [ 153.314942][ C0] net_ratelimit: 50 callbacks suppressed [ 153.314953][ C0] wireguard: wg1: Sending keepalive packet to peer 34 (127.0.0.1:20003) [ 153.315085][ C0] wireguard: wg0: Sending keepalive packet to peer 20 ([::1]:20003/0%0) [ 153.315115][ C0] wireguard: wg0: Sending keepalive packet to peer 2 ([::1]:20003/0%0) [ 153.398193][ T6234] wireguard: wg2: Receiving keepalive packet from peer 36 (127.0.0.1:20002) [ 153.454935][ C0] virtqueue callback for ffff88802a290e00 (ffffffff86dc05a0) [ 153.454957][ C0] No more buffers in queue [ 153.455236][ C0] Receiving skb proto 0x0806 len 28 type 1 [ 153.455248][ C0] No more buffers in queue [ 153.455335][ C0] eth0: xmit ffff888065dcb140 42:01:0a:80:00:01 [ 153.455349][ C0] Added buffer head 23 to ffff88802a291200 [ 153.455379][ C0] virtqueue callback for ffff88802a291200 (ffffffff86dc06e0) [ 153.455393][ C0] Sent skb ffff888065dcb140 [ 153.455415][ C0] No more buffers in queue [ 153.464738][ C0] wireguard: wg0: Sending keepalive packet to peer 25 ([::1]:20002/0%0) [ 153.464780][ C0] wireguard: wg0: Sending keepalive packet to peer 7 ([::1]:20002/0%0) [ 153.464810][ C0] wireguard: wg0: Sending keepalive packet to peer 19 ([::1]:20002/0%0) [ 153.464841][ C0] wireguard: wg0: Sending keepalive packet to peer 1 ([::1]:20002/0%0) [ 153.464870][ C0] wireguard: wg0: Sending keepalive packet to peer 37 ([::1]:20002/0%0) [ 153.464899][ C0] wireguard: wg0: Sending keepalive packet to peer 31 ([::1]:20002/0%0) [ 153.656780][ T6731] kcov: kcov_task_exit: t = ffff888027411f40, kcov->t = ffff888027411f40 [ 153.707700][ T6028] ffff888057230000 name hci1 bus 0 [ 153.717445][ T6028] hci1: Updating devcoredump state from IDLE to IDLE. [ 153.717457][ T6028] hci1: err 0x13 [ 153.717467][ T6028] hci1 ffff888057230000 [ 153.717474][ T6028] hci1: [ 153.717566][ T6028] hci1: err 0x13 [ 153.717573][ T6028] hci1: cancelling interleave scan [ 153.717604][ T6028] All LE pending actions cleared [ 153.717609][ T6028] hdev hci1 [ 153.717615][ T6028] hcon ffff8880346d0000 reason 22 [ 153.717622][ T6028] hcon ffff8880346d0000 conn ffff88802dae5000, err 103 [ 153.717636][ T6028] hci1 hcon ffff8880346d0000 chan ffff8880217d5000 [ 153.717675][ T6028] hci1 hcon ffff8880346d0000 handle 200 [ 153.717683][ T6028] hci1: hcon ffff8880346d0000 [ 153.717707][ T6028] hcon ffff8880346d0000 [ 153.717713][ T6028] hci1: conn ffff8880346d0000 [ 153.717720][ T6028] device: 'hci1:200': device_unregister [ 153.717739][ T6028] kernfs runtime_status: removing [ 153.717762][ T6028] kernfs control: removing [ 153.717776][ T6028] kernfs runtime_suspended_time: removing [ 153.717792][ T6028] kernfs runtime_active_time: removing [ 153.717806][ T6028] kernfs autosuspend_delay_ms: removing [ 153.717827][ T6028] kernfs power: removing [ 153.717850][ T6028] kernfs device: removing [ 153.717865][ T6028] kernfs subsystem: removing [ 153.717880][ T6028] kernfs hci1:200: removing [ 153.717896][ T6028] kernfs uevent: removing [ 153.717907][ T6028] PM: Removing info for No Bus:hci1:200 [ 153.717919][ T6028] kobject: 'hci1:200' (ffff8880346d0cf8): kobject_uevent_env [ 153.717974][ T6028] kobject: 'hci1:200' (ffff8880346d0cf8): fill_kobj_path: path = '/devices/virtual/bluetooth/hci1/hci1:200' [ 153.718050][ T6028] kernfs hci1:200: removing [ 153.718060][ T6028] kobject: 'hci1:200' (ffff8880346d0cf8): kobject_cleanup, parent 0000000000000000 [ 153.718069][ T6028] kobject: 'hci1:200' (ffff8880346d0cf8): calling ktype release [ 153.718090][ T6028] kobject: 'hci1:200': free name [ 153.718100][ T6028] hci1 orig refcnt 11 [ 153.718107][ T6028] hcon ffff88807c670000 reason 22 [ 153.718113][ T6028] hcon ffff88807c670000 conn ffff88802b781000, err 103 [ 153.718125][ T6028] hci1 hcon ffff88807c670000 chan ffff88802c24ae00 [ 153.721046][ T6028] hci1 hcon ffff88807c670000 handle 201 [ 153.721057][ T6028] hci1: hcon ffff88807c670000 [ 153.721120][ T6028] hcon ffff88807c670000 [ 153.721127][ T6028] hci1: conn ffff88807c670000 [ 153.721134][ T6028] device: 'hci1:201': device_unregister [ 153.721150][ T6028] kernfs runtime_status: removing [ 153.721171][ T6028] kernfs control: removing [ 153.721186][ T6028] kernfs runtime_suspended_time: removing [ 153.721206][ T6028] kernfs runtime_active_time: removing [ 153.721221][ T6028] kernfs autosuspend_delay_ms: removing [ 153.721243][ T6028] kernfs power: removing [ 153.721262][ T6028] kernfs device: removing [ 153.721277][ T6028] kernfs subsystem: removing [ 153.721291][ T6028] kernfs hci1:201: removing [ 153.721307][ T6028] kernfs uevent: removing [ 153.721317][ T6028] PM: Removing info for No Bus:hci1:201 [ 153.721328][ T6028] kobject: 'hci1:201' (ffff88807c670cf8): kobject_uevent_env [ 153.721350][ T6028] kobject: 'hci1:201' (ffff88807c670cf8): fill_kobj_path: path = '/devices/virtual/bluetooth/hci1/hci1:201' [ 153.721418][ T6028] kernfs hci1:201: removing [ 153.721428][ T6028] kobject: 'hci1:201' (ffff88807c670cf8): kobject_cleanup, parent 0000000000000000 [ 153.721437][ T6028] kobject: 'hci1:201' (ffff88807c670cf8): calling ktype release [ 153.721457][ T6028] kobject: 'hci1:201': free name [ 153.721467][ T6028] hci1 orig refcnt 7 [ 153.721474][ T6028] hdev hci1 event 4 [ 153.721491][ T6028] hdev 0000000000000000 len 8 [ 153.721508][ T6028] hci1: Cleanup of MSFT extension [ 153.721584][ T6028] hdev hci1 event 8 [ 153.721591][ T6028] hci1 orig refcnt 6 [ 153.721610][ T6028] channel 3 len 6 [ 153.721637][ T6028] channel 3 len 8 [ 153.721653][ T6028] hdev hci1 event 2 [ 153.721667][ T6028] hdev 0000000000000000 len 8 [ 153.721693][ T6028] kernfs runtime_status: removing [ 153.721708][ T6028] kernfs control: removing [ 153.721722][ T6028] kernfs runtime_suspended_time: removing [ 153.721736][ T6028] kernfs runtime_active_time: removing [ 153.721750][ T6028] kernfs autosuspend_delay_ms: removing [ 153.721769][ T6028] kernfs power: removing [ 153.721784][ T6028] kernfs device: removing [ 153.721798][ T6028] kernfs subsystem: removing [ 153.721813][ T6028] kernfs rfkill20: removing [ 153.721828][ T6028] kernfs uevent: removing [ 153.721840][ T6028] kernfs name: removing [ 153.721854][ T6028] kernfs type: removing [ 153.721868][ T6028] kernfs index: removing [ 153.721882][ T6028] kernfs persistent: removing [ 153.721895][ T6028] kernfs state: removing [ 153.721909][ T6028] kernfs soft: removing [ 153.721922][ T6028] kernfs hard: removing [ 153.721936][ T6028] kernfs hard_block_reasons: removing [ 153.721949][ T6028] PM: Removing info for No Bus:rfkill20 [ 153.721958][ T6028] kobject: 'rfkill20' (ffff888028d19118): kobject_uevent_env [ 153.721977][ T6028] kobject: 'rfkill20' (ffff888028d19118): fill_kobj_path: path = '/devices/virtual/bluetooth/hci1/rfkill20' [ 153.722034][ T6028] kernfs rfkill20: removing [ 153.740801][ T6028] kobject: 'rfkill20' (ffff888028d19118): kobject_cleanup, parent 0000000000000000 [ 153.740815][ T6028] kobject: 'rfkill20' (ffff888028d19118): calling ktype release [ 153.740841][ T6028] kobject: 'rfkill20': free name [ 153.740862][ T6028] kernfs runtime_status: removing [ 153.740882][ T6028] kernfs control: removing [ 153.740897][ T6028] kernfs runtime_suspended_time: removing [ 153.740911][ T6028] kernfs runtime_active_time: removing [ 153.740925][ T6028] kernfs autosuspend_delay_ms: removing [ 153.740945][ T6028] kernfs power: removing [ 153.740963][ T6028] kernfs subsystem: removing [ 153.740977][ T6028] kernfs hci1: removing [ 153.740993][ T6028] kernfs uevent: removing [ 153.741004][ T6028] kernfs reset: removing [ 153.741019][ T6028] PM: Removing info for No Bus:hci1 [ 153.741049][ T6028] kobject: 'hci1' (ffff8880572315d8): kobject_uevent_env [ 153.741069][ T6028] kobject: 'hci1' (ffff8880572315d8): fill_kobj_path: path = '/devices/virtual/bluetooth/hci1' [ 153.741138][ T6028] kernfs hci1: removing [ 153.741148][ T6028] hci1 orig refcnt 2 [ 153.741154][ T6028] kobject: 'hci1' (ffff8880572315d8): kobject_cleanup, parent 0000000000000000 [ 153.741163][ T6028] kobject: 'hci1' (ffff8880572315d8): calling ktype release [ 153.741242][ T6028] All LE connection parameters were removed [ 153.741249][ T6028] hci1: Unregister MSFT extension [ 153.801210][ C0] virtqueue callback for ffff888020711800 (ffffffff857b8bd0) [ 153.801251][ C0] virtqueue interrupt with no work for ffff888020711a00 [ 153.801258][ C0] virtqueue interrupt with no work for ffff888020711c00 [ 153.842685][ T11] Added buffer head 0 to ffff888020711800 [ 153.883746][ T6028] kobject: 'hci1': free name [ 154.085859][ T5633] ffff88807f1b0000 name hci2 bus 0 [ 154.110184][ T5633] hci2: Updating devcoredump state from IDLE to IDLE. [ 154.110199][ T5633] hci2: err 0x13 [ 154.110210][ T5633] hci2 ffff88807f1b0000 [ 154.110218][ T5633] hci2: [ 154.137802][ T5633] hci2: err 0x13 [ 154.137813][ T5633] hci2: cancelling interleave scan [ 154.137901][ T5633] All LE pending actions cleared [ 154.137907][ T5633] hdev hci2 [ 154.137913][ T5633] hcon ffff888076dec000 reason 22 [ 154.137921][ T5633] hcon ffff888076dec000 conn ffff88803528e000, err 103 [ 154.137935][ T5633] hci2 hcon ffff888076dec000 chan ffff888032bf8300 [ 154.137979][ T5633] hci2 hcon ffff888076dec000 handle 200 [ 154.137987][ T5633] hci2: hcon ffff888076dec000 [ 154.138012][ T5633] hcon ffff888076dec000 [ 154.138019][ T5633] hci2: conn ffff888076dec000 [ 154.138025][ T5633] device: 'hci2:200': device_unregister [ 154.138044][ T5633] kernfs runtime_status: removing [ 154.138067][ T5633] kernfs control: removing [ 154.138082][ T5633] kernfs runtime_suspended_time: removing [ 154.138097][ T5633] kernfs runtime_active_time: removing [ 154.138112][ T5633] kernfs autosuspend_delay_ms: removing [ 154.138134][ T5633] kernfs power: removing [ 154.138166][ T5633] kernfs device: removing [ 154.138181][ T5633] kernfs subsystem: removing [ 154.138197][ T5633] kernfs hci2:200: removing [ 154.138212][ T5633] kernfs uevent: removing [ 154.138223][ T5633] PM: Removing info for No Bus:hci2:200 [ 154.138236][ T5633] kobject: 'hci2:200' (ffff888076deccf8): kobject_uevent_env [ 154.138258][ T5633] kobject: 'hci2:200' (ffff888076deccf8): fill_kobj_path: path = '/devices/virtual/bluetooth/hci2/hci2:200' [ 154.138328][ T5633] kernfs hci2:200: removing [ 154.138337][ T5633] kobject: 'hci2:200' (ffff888076deccf8): kobject_cleanup, parent 0000000000000000 [ 154.138346][ T5633] kobject: 'hci2:200' (ffff888076deccf8): calling ktype release [ 154.138366][ T5633] kobject: 'hci2:200': free name [ 154.138377][ T5633] hci2 orig refcnt 11 [ 154.138383][ T5633] hcon ffff888076de8000 reason 22 [ 154.138390][ T5633] hcon ffff888076de8000 conn ffff88803528d800, err 103 [ 154.138402][ T5633] hci2 hcon ffff888076de8000 chan ffff888034d9ae00 [ 154.188642][ T5633] hci2 hcon ffff888076de8000 handle 201 [ 154.188655][ T5633] hci2: hcon ffff888076de8000 [ 154.193046][ T5633] hcon ffff888076de8000 [ 154.193054][ T5633] hci2: conn ffff888076de8000 [ 154.193062][ T5633] device: 'hci2:201': device_unregister [ 154.193080][ T5633] kernfs runtime_status: removing [ 154.193103][ T5633] kernfs control: removing [ 154.193118][ T5633] kernfs runtime_suspended_time: removing [ 154.193133][ T5633] kernfs runtime_active_time: removing [ 154.193154][ T5633] kernfs autosuspend_delay_ms: removing [ 154.193176][ T5633] kernfs power: removing [ 154.193197][ T5633] kernfs device: removing [ 154.193211][ T5633] kernfs subsystem: removing [ 154.193226][ T5633] kernfs hci2:201: removing [ 154.193242][ T5633] kernfs uevent: removing [ 154.193252][ T5633] PM: Removing info for No Bus:hci2:201 [ 154.193266][ T5633] kobject: 'hci2:201' (ffff888076de8cf8): kobject_uevent_env [ 154.193288][ T5633] kobject: 'hci2:201' (ffff888076de8cf8): fill_kobj_path: path = '/devices/virtual/bluetooth/hci2/hci2:201' [ 154.193364][ T5633] kernfs hci2:201: removing [ 154.193374][ T5633] kobject: 'hci2:201' (ffff888076de8cf8): kobject_cleanup, parent 0000000000000000 [ 154.193383][ T5633] kobject: 'hci2:201' (ffff888076de8cf8): calling ktype release [ 154.193404][ T5633] kobject: 'hci2:201': free name [ 154.193414][ T5633] hci2 orig refcnt 7 [ 154.193421][ T5633] hdev hci2 event 4 [ 154.193438][ T5633] hdev 0000000000000000 len 8 [ 154.193455][ T5633] hci2: Cleanup of MSFT extension [ 154.193529][ T5633] hdev hci2 event 8 [ 154.193535][ T5633] hci2 orig refcnt 6 [ 154.193553][ T5633] channel 3 len 6 [ 154.193578][ T5633] channel 3 len 8 [ 154.193593][ T5633] hdev hci2 event 2 [ 154.193607][ T5633] hdev 0000000000000000 len 8 [ 154.193632][ T5633] kernfs runtime_status: removing [ 154.193648][ T5633] kernfs control: removing [ 154.193661][ T5633] kernfs runtime_suspended_time: removing [ 154.193675][ T5633] kernfs runtime_active_time: removing [ 154.193689][ T5633] kernfs autosuspend_delay_ms: removing [ 154.193709][ T5633] kernfs power: removing [ 154.193724][ T5633] kernfs device: removing [ 154.193737][ T5633] kernfs subsystem: removing [ 154.193752][ T5633] kernfs rfkill8: removing [ 154.193767][ T5633] kernfs uevent: removing [ 154.193777][ T5633] kernfs name: removing [ 154.193791][ T5633] kernfs type: removing [ 154.193805][ T5633] kernfs index: removing [ 154.193819][ T5633] kernfs persistent: removing [ 154.193832][ T5633] kernfs state: removing [ 154.193846][ T5633] kernfs soft: removing [ 154.193859][ T5633] kernfs hard: removing [ 154.193872][ T5633] kernfs hard_block_reasons: removing [ 154.193886][ T5633] PM: Removing info for No Bus:rfkill8 [ 154.193895][ T5633] kobject: 'rfkill8' (ffff888032502118): kobject_uevent_env [ 154.193913][ T5633] kobject: 'rfkill8' (ffff888032502118): fill_kobj_path: path = '/devices/virtual/bluetooth/hci2/rfkill8' [ 154.193969][ T5633] kernfs rfkill8: removing [ 154.222665][ T5633] kobject: 'rfkill8' (ffff888032502118): kobject_cleanup, parent 0000000000000000 [ 154.222679][ T5633] kobject: 'rfkill8' (ffff888032502118): calling ktype release [ 154.222704][ T5633] kobject: 'rfkill8': free name [ 154.222725][ T5633] kernfs runtime_status: removing [ 154.222745][ T5633] kernfs control: removing [ 154.222759][ T5633] kernfs runtime_suspended_time: removing [ 154.222774][ T5633] kernfs runtime_active_time: removing [ 154.222787][ T5633] kernfs autosuspend_delay_ms: removing [ 154.222808][ T5633] kernfs power: removing [ 154.222828][ T5633] kernfs subsystem: removing [ 154.222843][ T5633] kernfs hci2: removing [ 154.222858][ T5633] kernfs uevent: removing [ 154.222869][ T5633] kernfs reset: removing [ 154.222883][ T5633] PM: Removing info for No Bus:hci2 [ 154.222913][ T5633] kobject: 'hci2' (ffff88807f1b15d8): kobject_uevent_env [ 154.308142][ T5633] kobject: 'hci2' (ffff88807f1b15d8): fill_kobj_path: path = '/devices/virtual/bluetooth/hci2' [ 154.308233][ T5633] kernfs hci2: removing [ 154.308252][ T5633] hci2 orig refcnt 2 [ 154.308259][ T5633] kobject: 'hci2' (ffff88807f1b15d8): kobject_cleanup, parent 0000000000000000 [ 154.308268][ T5633] kobject: 'hci2' (ffff88807f1b15d8): calling ktype release [ 154.308337][ T5633] All LE connection parameters were removed [ 154.308343][ T5633] hci2: Unregister MSFT extension [ 154.308388][ T5633] kobject: 'hci2': free name [ 154.314083][ T5633] syz_tun: bond_netdev_event received NETDEV_GOING_DOWN [ 154.314104][ T5633] net syz_tun: siw: event 10 [ 154.335270][ T5633] In tnode_resize ffff88807eb16720 inflate_threshold=50 threshold=25 [ 154.335288][ T5633] In tnode_resize ffff88802471c820 inflate_threshold=50 threshold=25 [ 154.398146][ T5633] In tnode_resize ffff888057134420 inflate_threshold=50 threshold=25 [ 154.398162][ T5633] In tnode_resize ffff88807877d820 inflate_threshold=50 threshold=25 [ 154.398172][ T5633] In tnode_resize ffff888033fc6320 inflate_threshold=50 threshold=25 [ 154.398180][ T5633] In tnode_resize ffff88801d32cca0 inflate_threshold=50 threshold=25 [ 154.398188][ T5633] In tnode_resize ffff88801d32cda0 inflate_threshold=50 threshold=25 [ 154.398196][ T5633] trie_flush found=1 [ 154.398241][ T5633] In tnode_resize ffff88807eb16720 inflate_threshold=50 threshold=25 [ 154.398256][ T5633] In tnode_resize ffff88802471c820 inflate_threshold=50 threshold=25 [ 154.398269][ T5633] In tnode_resize ffff888057134420 inflate_threshold=50 threshold=25 [ 154.398277][ T5633] In tnode_resize ffff88807877d820 inflate_threshold=50 threshold=25 [ 154.398285][ T5633] In tnode_resize ffff888033fc6320 inflate_threshold=50 threshold=25 [ 154.398293][ T5633] In tnode_resize ffff88801d32cca0 inflate_threshold=50 threshold=25 [ 154.398301][ T5633] In tnode_resize ffff88801d32cda0 inflate_threshold=50 threshold=25 [ 154.398309][ T5633] trie_flush found=1 [ 154.398385][ T5633] IPv6: walker ffffc900043b7140 adjusted by unlink of ffff888037d2a400 [ 154.398466][ T5633] IPv6: walker ffffc900043b7140 adjusted by unlink of ffff88805884fc00 [ 154.497867][ T5633] IPv6: walker ffffc900043b7140 adjusted by unlink of ffff888037d29000 [ 154.497882][ T5633] IPv6: fixing tree: plen=128 iter=0 [ 154.497889][ T5633] IPv6: W ffffc900043b7140 adjusted by delnode 1, s=4/2 [ 154.497912][ T5633] IPv6: fixing tree: plen=120 iter=1 [ 154.497918][ T5633] IPv6: W ffffc900043b7140 adjusted by delnode 2, s=2 [ 154.497931][ T5633] IPv6: fixing tree: plen=97 iter=2 [ 154.498036][ T5633] IPv6: walker ffffc900043b7140 adjusted by unlink of ffff888037d2ac00 [ 154.498045][ T5633] IPv6: fixing tree: plen=128 iter=0 [ 154.498050][ T5633] IPv6: W ffffc900043b7140 adjusted by delnode 1, s=4/2 [ 154.498064][ T5633] IPv6: fixing tree: plen=120 iter=1 [ 154.498069][ T5633] IPv6: W ffffc900043b7140 adjusted by delnode 2, s=2 [ 154.498082][ T5633] IPv6: fixing tree: plen=70 iter=2 [ 154.498142][ T5633] IPv6: walker ffffc900043b7140 adjusted by unlink of ffff888037d2bc00 [ 154.498776][ T5633] syz_tun: bond_netdev_event received NETDEV_DOWN [ 154.498794][ T5633] net syz_tun: siw: event 2 [ 154.611590][ T5633] Deleting ac141400/24 dsfield=0x00 t=ffff88802bac0538 [ 154.611615][ T5633] Deleting ac1414ff/32 dsfield=0x00 t=ffff88802bac0538 [ 154.611633][ T5633] Deleting ac1414aa/32 dsfield=0x00 t=ffff88802bac0538 [ 154.611711][ T5633] In tnode_resize ffff88807877d820 inflate_threshold=50 threshold=25 [ 154.611721][ T5633] In tnode_resize ffff88801d32cda0 inflate_threshold=50 threshold=25 [ 154.612280][ T5633] syz_tun (unregistering): bond_netdev_event received NETDEV_UNREGISTER [ 154.612299][ T5633] net syz_tun: siw: event 6 [ 154.612443][ T5633] syz_tun (unregistering): bond_netdev_event received NETDEV_PRE_UNINIT [ 154.612455][ T5633] net syz_tun: siw: event 18 [ 154.638964][ T5633] kernfs rps_cpus: removing [ 154.639000][ T5633] kernfs rps_flow_cnt: removing [ 154.639015][ T5633] kobject: 'rx-0' (ffff88807fc31850): kobject_cleanup, parent ffff88802abead50 [ 154.639026][ T5633] kobject: 'rx-0' (ffff88807fc31850): auto cleanup kobject_del [ 154.639033][ T5633] kobject: 'rx-0' (ffff88807fc31850): auto cleanup 'remove' event [ 154.639040][ T5633] kobject: 'rx-0' (ffff88807fc31850): kobject_uevent_env [ 154.639062][ T5633] kobject: 'rx-0' (ffff88807fc31850): fill_kobj_path: path = '/devices/virtual/net/syz_tun/queues/rx-0' [ 154.639118][ T5633] kernfs rx-0: removing [ 154.639139][ T5633] kobject: 'rx-0' (ffff88807fc31850): calling ktype release [ 154.639151][ T5633] kobject: 'rx-0': free name [ 154.639167][ T5633] kernfs tx_timeout: removing [ 154.639187][ T5633] kernfs traffic_class: removing [ 154.639202][ T5633] kernfs xps_cpus: removing [ 154.639216][ T5633] kernfs xps_rxqs: removing [ 154.639229][ T5633] kernfs tx_maxrate: removing [ 154.639243][ T5633] kobject: 'tx-0' (ffff888034f4c420): kobject_cleanup, parent ffff88802abead50 [ 154.639252][ T5633] kobject: 'tx-0' (ffff888034f4c420): auto cleanup kobject_del [ 154.639258][ T5633] kobject: 'tx-0' (ffff888034f4c420): auto cleanup 'remove' event [ 154.639265][ T5633] kobject: 'tx-0' (ffff888034f4c420): kobject_uevent_env [ 154.639283][ T5633] kobject: 'tx-0' (ffff888034f4c420): fill_kobj_path: path = '/devices/virtual/net/syz_tun/queues/tx-0' [ 154.639336][ T5633] kernfs tx-0: removing [ 154.639350][ T5633] kobject: 'tx-0' (ffff888034f4c420): calling ktype release [ 154.639360][ T5633] kobject: 'tx-0': free name [ 154.639371][ T5633] kernfs queues: removing [ 154.639385][ T5633] kobject: 'queues' (ffff88802abead50): kobject_cleanup, parent 0000000000000000 [ 154.639393][ T5633] kobject: 'queues' (ffff88802abead50): calling ktype release [ 154.639400][ T5633] kobject: 'queues' (ffff88802abead50): kset_release [ 154.730202][ T5633] kobject: 'queues': free name [ 154.730226][ T5633] kernfs runtime_status: removing [ 154.730248][ T5633] kernfs control: removing [ 154.730263][ T5633] kernfs runtime_suspended_time: removing [ 154.730278][ T5633] kernfs runtime_active_time: removing [ 154.730292][ T5633] kernfs autosuspend_delay_ms: removing [ 154.730314][ T5633] kernfs power: removing [ 154.730333][ T5633] kernfs subsystem: removing [ 154.730350][ T5633] kernfs syz_tun: removing [ 154.730366][ T5633] kernfs uevent: removing [ 154.730384][ T5633] kernfs tun_flags: removing [ 154.730400][ T5633] kernfs owner: removing [ 154.730415][ T5633] kernfs group: removing [ 154.730431][ T5633] kernfs rx_packets: removing [ 154.730445][ T5633] kernfs tx_packets: removing [ 154.730459][ T5633] kernfs rx_bytes: removing [ 154.730473][ T5633] kernfs tx_bytes: removing [ 154.730487][ T5633] kernfs rx_errors: removing [ 154.730501][ T5633] kernfs tx_errors: removing [ 154.730515][ T5633] kernfs rx_dropped: removing [ 154.730529][ T5633] kernfs tx_dropped: removing [ 154.730543][ T5633] kernfs multicast: removing [ 154.730557][ T5633] kernfs collisions: removing [ 154.730571][ T5633] kernfs rx_length_errors: removing [ 154.730586][ T5633] kernfs rx_over_errors: removing [ 154.730600][ T5633] kernfs rx_crc_errors: removing [ 154.730614][ T5633] kernfs rx_frame_errors: removing [ 154.730628][ T5633] kernfs rx_fifo_errors: removing [ 154.730641][ T5633] kernfs rx_missed_errors: removing [ 154.730656][ T5633] kernfs tx_aborted_errors: removing [ 154.730670][ T5633] kernfs tx_carrier_errors: removing [ 154.730684][ T5633] kernfs tx_fifo_errors: removing [ 154.730698][ T5633] kernfs tx_heartbeat_errors: removing [ 154.730712][ T5633] kernfs tx_window_errors: removing [ 154.730726][ T5633] kernfs rx_compressed: removing [ 154.730740][ T5633] kernfs tx_compressed: removing [ 154.730754][ T5633] kernfs rx_nohandler: removing [ 154.730768][ T5633] kernfs statistics: removing [ 154.730785][ T5633] kernfs netdev_group: removing [ 154.730799][ T5633] kernfs type: removing [ 154.730813][ T5633] kernfs dev_id: removing [ 154.730827][ T5633] kernfs dev_port: removing [ 154.730841][ T5633] kernfs iflink: removing [ 154.730855][ T5633] kernfs ifindex: removing [ 154.730869][ T5633] kernfs name_assign_type: removing [ 154.730883][ T5633] kernfs addr_assign_type: removing [ 154.730897][ T5633] kernfs addr_len: removing [ 154.730912][ T5633] kernfs link_mode: removing [ 154.730926][ T5633] kernfs address: removing [ 154.730940][ T5633] kernfs broadcast: removing [ 154.730954][ T5633] kernfs speed: removing [ 154.730968][ T5633] kernfs duplex: removing [ 154.730981][ T5633] kernfs dormant: removing [ 154.730995][ T5633] kernfs testing: removing [ 154.731009][ T5633] kernfs operstate: removing [ 154.731023][ T5633] kernfs carrier_changes: removing [ 154.731037][ T5633] kernfs ifalias: removing [ 154.731050][ T5633] kernfs carrier: removing [ 154.731064][ T5633] kernfs mtu: removing [ 154.731078][ T5633] kernfs flags: removing [ 154.731092][ T5633] kernfs tx_queue_len: removing [ 154.731107][ T5633] kernfs gro_flush_timeout: removing [ 154.731126][ T5633] kernfs napi_defer_hard_irqs: removing [ 154.731141][ T5633] kernfs proto_down: removing [ 154.731155][ T5633] kernfs carrier_up_count: removing [ 154.731170][ T5633] kernfs carrier_down_count: removing [ 154.731184][ T5633] kernfs threaded: removing [ 154.731205][ T5633] PM: Removing info for No Bus:syz_tun [ 154.731218][ T5633] kobject: 'syz_tun' (ffff8880588607e0): kobject_uevent_env [ 154.731240][ T5633] kobject: 'syz_tun' (ffff8880588607e0): fill_kobj_path: path = '/devices/virtual/net/syz_tun' [ 154.731298][ T5633] kernfs syz_tun: removing [ 154.742063][ T5635] ffff88805a810000 name hci3 bus 0 [ 154.778898][ T5635] hci3: Updating devcoredump state from IDLE to IDLE. [ 154.778911][ T5635] hci3: err 0x13 [ 154.778921][ T5635] hci3 ffff88805a810000 [ 154.778928][ T5635] hci3: [ 154.796945][ C0] virtqueue callback for ffff888020711800 (ffffffff857b8bd0) [ 154.796975][ C0] virtqueue interrupt with no work for ffff888020711a00 [ 154.796982][ C0] virtqueue interrupt with no work for ffff888020711c00 [ 154.815117][ T4965] sd 0:0:1:0: cmd ffff88802d0a0c50 CDB: 0x2a [ 154.815146][ T4965] Added buffer head 276 to ffff88801df88000 [ 154.815199][ T5778] Added buffer head 0 to ffff888020711800 [ 154.816588][ C0] virtqueue callback for ffff88801df88000 (ffffffff868a2290) [ 154.816604][ C0] sd 0:0:1:0: cmd ffff88802d0a0c50 response 0 status 0x0 sense_len 0 [ 154.816617][ C0] No more buffers in queue [ 154.831033][ T54] kernfs bonding_masters: removing [ 154.841515][ T4968] sd 0:0:1:0: cmd ffff888028edf110 CDB: 0x35 [ 154.841533][ T4968] Added buffer head 276 to ffff88801df88000 [ 154.845366][ C0] virtqueue callback for ffff88801df88000 (ffffffff868a2290) [ 154.845380][ C0] sd 0:0:1:0: cmd ffff888028edf110 response 0 status 0x0 sense_len 0 [ 154.845392][ C0] No more buffers in queue [ 154.845503][ T4968] sd 0:0:1:0: cmd ffff88802d0a1010 CDB: 0x2a [ 154.845516][ T4968] Added buffer head 276 to ffff88801df88000 [ 154.845548][ T5635] hci3: err 0x13 [ 154.845555][ T5635] hci3: cancelling interleave scan [ 154.849679][ C0] virtqueue callback for ffff88801df88000 (ffffffff868a2290) [ 154.849694][ C0] sd 0:0:1:0: cmd ffff88802d0a1010 response 0 status 0x0 sense_len 0 [ 154.849706][ C0] No more buffers in queue [ 154.850395][ T5633] kobject: 'syz_tun' (ffff8880588607e0): kobject_cleanup, parent 0000000000000000 [ 154.850409][ T5633] kobject: 'syz_tun' (ffff8880588607e0): calling ktype release [ 154.850435][ T5633] kobject: 'syz_tun': free name [ 154.897371][ T6787] RIP: 0010:security_d_instantiate+0x2f/0x1d0 [ 154.897397][ T6787] Code: 41 57 41 56 53 48 89 f3 49 89 fe e8 bb 2c 20 fd 48 85 db 74 42 4c 8d 7b 04 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 9d 00 00 00 41 8b 2f 89 ee 81 e6 00 02 00 [ 154.897407][ T6787] RSP: 0018:ffffc90004567758 EFLAGS: 00010203 [ 154.897416][ T6787] RAX: 0000000000000004 RBX: 0000000000000020 RCX: dffffc0000000000 [ 154.897424][ T6787] RDX: ffffc90006901000 RSI: 000000000000313d RDI: 000000000000313e [ 154.897431][ T6787] RBP: ffffc900045679b0 R08: ffffffff91bec8bf R09: 1ffffffff237d917 [ 154.897438][ T6787] R10: dffffc0000000000 R11: fffffbfff237d918 R12: 0000000000000000 [ 154.897445][ T6787] R13: dffffc0000000000 R14: ffff888058f88680 R15: 0000000000000024 [ 154.897452][ T6787] FS: 00007f6c306416c0(0000) GS:ffff8881233cd000(0000) knlGS:0000000000000000 [ 154.897461][ T6787] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 154.897467][ T6787] CR2: 00007f50e8998945 CR3: 0000000058a40000 CR4: 00000000003526f0 [ 154.897479][ T6787] Kernel panic - not syncing: Fatal exception [ 156.215834][ T6787] Kernel Offset: disabled [ 156.220144][ T6787] Rebooting in 86400 seconds..