last executing test programs: 10m58.676294911s ago: executing program 3 (id=16): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x20) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 10m58.137258926s ago: executing program 3 (id=21): r0 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedreceive(r0, &(0x7f00000001c0)=""/116, 0x74, 0x0, &(0x7f0000000180)={0x77359400}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x69, 0x69, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x2}}, @var={0x9, 0x0, 0x0, 0xe, 0x3}, @datasec={0xe, 0x3, 0x0, 0xf, 0x1, [{0x5, 0xc8b}, {0x5, 0x5, 0x4}, {0x3, 0x6, 0x5}], "1a"}, @int={0x6, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x71, 0x4ef6dea90d4f9dd6}]}, {0x0, [0x2e, 0x0]}}, &(0x7f0000000400)=""/122, 0x88, 0x7a, 0x0, 0x6, 0x10000, @value=r1}, 0x28) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r4, 0xc048aeca, &(0x7f0000000280)={0x1, 0x0, [{0x9be, 0x0, 0x55e}]}) syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x1000000, 0x0, 0x1, 0x0, 0x0) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x1004000, &(0x7f0000000480)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}]}}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) 10m57.719282609s ago: executing program 3 (id=26): mq_open(0x0, 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000140)={{0xffff1000, 0xeeee8000, 0x4, 0xf6, 0x2, 0xf3, 0xd7, 0x8, 0x7, 0x1, 0x9, 0x5}, {0x50000, 0xc0a0c0f0f5000ded, 0xd, 0x5, 0x3, 0x8, 0x5, 0x0, 0x80, 0xfc, 0xfc, 0x4}, {0x200000, 0x25000, 0xb, 0x6, 0xff, 0x3, 0x0, 0x5, 0xef, 0x27, 0xd5, 0x2}, {0x4000, 0x6000, 0x9, 0x9, 0x8f, 0x4, 0x83, 0xfc, 0xb, 0x1, 0x9, 0x3}, {0xffffffff, 0x0, 0x3, 0x2, 0x6, 0x1, 0x9, 0x2, 0x3, 0x3, 0x0, 0xe4}, {0x200000, 0xffff1000, 0xf, 0x0, 0x6, 0x0, 0xde, 0x9, 0x3, 0x0, 0x4, 0x30}, {0xdddd0000, 0x9000, 0xc, 0x1, 0x8, 0x3, 0x2, 0x6, 0x91, 0x8, 0x9, 0x88}, {0x8000000, 0xeeee0000, 0x10, 0x6, 0xc2, 0x8, 0x6, 0x10, 0x7, 0x3, 0x80, 0x87}, {0x6000, 0x8000}, {0x41000, 0x9}, 0x50000, 0x0, 0x0, 0x400408, 0x6, 0x8000, 0xeeef0000, [0x6, 0x5, 0x5, 0xe]}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0x9, 0x0, 0x0, 0x0, 0x10, 0x40, 0x2, 0x7f, 0x9, 0x1, 0x0, 0x0, 0xc, 0x7, 0xff, 0xff, 0x0, '\x00', 0x81, 0x7fff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x8000000, 0x11, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x8, 0x8, 0x40, '\x00', 0xb}, {0xff, 0x7f, 0x9, '\x00', 0x67}, {0x0, 0x5, 0xd4, '\x00', 0xff}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x1, 0x54, '\x00', 0xff}, {0x2, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0xc}, {0x7f, 0xd, 0xb, '\x00', 0xb}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0x5}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x7, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0x9, 0x5, '\x00', 0xc}, {0x7, 0xe1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) 10m56.704421917s ago: executing program 3 (id=29): r0 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0xa40) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f0000000e40)=ANY=[@ANYRES32=0x0, @ANYBLOB="f1d6cc6bbdfd919d87552d77292d0a04813522513669fabed0c433f5fb894bbf30779a615df7d1f91d57030ffe12b8237547cc0e72669c81d2fd141dfe1d09403dae9f30829f539c36b88d03a40ed52ba2a3d5de08ff5d", @ANYRESOCT, @ANYRES8, @ANYRES64, @ANYRES8, @ANYRESHEX=0x0, @ANYRES64, @ANYRESDEC=0x0, @ANYRESOCT=r0], 0x1, 0x5e7, &(0x7f0000000680)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r2, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) chdir(&(0x7f0000000240)='./file0\x00') open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) 10m56.286421901s ago: executing program 3 (id=34): mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./cfg\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cfg/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./ffs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='functionfs\x00', 0x1fa) mount(&(0x7f0000000280)=@filename='usb0\x00', &(0x7f0000000200)='./ffs\x00', &(0x7f0000000240), 0x0, 0x0) rmdir(&(0x7f0000000140)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00') r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 10m55.464360395s ago: executing program 3 (id=39): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0), 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x54}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 10m55.329960229s ago: executing program 32 (id=39): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0), 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x54}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 10m48.471233071s ago: executing program 0 (id=70): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0xfffffffe, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x6, &(0x7f0000000500)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @call={0x85, 0x0, 0x0, 0x34}, @exit], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r1, r2, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000340), &(0x7f0000000380)=@tcp=r0}, 0x20) write(r0, &(0x7f0000000700)='h', 0x1) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x18}}, 0x0) 10m48.277925515s ago: executing program 0 (id=71): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40091}, 0x14) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000040000000000000100060001000200000008000300ac1414"], 0x38}}, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xb, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7d, 0x76, 0x1, 0x0, 0x0, 0x8, 0x10, 0xc, 0x8, 0x0, '\x00', 0x0, 0x7f}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x10000, 0x38, 0x10001, 0xfffffffe, 0x0, [{0x2, 0xc, 0x87, '\x00', 0x8}, {0x9, 0x18, 0x40, '\x00', 0xb}, {0xff, 0x83, 0x9, '\x00', 0x64}, {0x0, 0x5, 0xd4, '\x00', 0xf}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x77}, {0x4, 0x82, 0xc}, {0x7f, 0xd, 0xb, '\x00', 0xb}, {0xd7, 0xd, 0x1, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xee, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x10, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x6, 0x2, 0x7, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0x9, 0x5, '\x00', 0xc}, {0x7, 0x3, 0x7, '\x00', 0xc6}, {0x4, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xa7, 0x80, '\x00', 0x7b}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x56, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x3, 0x4}]}}) 10m47.718012233s ago: executing program 0 (id=77): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000300)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x0, 0x0, 0xffff, 0xa868}, 0x20) r0 = socket$inet(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_buf(r0, 0x0, 0x2e, &(0x7f0000000300)="800001000000000000000001", 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,soft,timeo=1,retrans=1\x00', 0x5e}]}) r1 = accept$inet(r0, 0x0, 0x0) read(r1, &(0x7f0000000100), 0x4) read(r1, &(0x7f0000000304), 0x4) write(r1, &(0x7f0000000300), 0x100) 10m47.309968724s ago: executing program 0 (id=83): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) unshare(0x2000400) unshare(0x4e000280) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) r2 = fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0xa) r4 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) 10m38.777487561s ago: executing program 0 (id=105): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0xa, 0x9, 0x3, 0x2, 0x0, 0x70bd2c, 0x25dfdbff}, 0x10}}, 0xa080) socket$netlink(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x5, 0x9, 0x3, 0x0, 0x4], 0xeeee8000, 0x202}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x4000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1) syz_clone(0x68411, 0x0, 0x17, 0x0, 0x0, 0x0) 10m38.341160137s ago: executing program 0 (id=108): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105c45b24fd", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r1, &(0x7f00000002c0)=[{0x0}, {0x0}, {&(0x7f0000000200)=""/192, 0xc0}], 0x3, 0x1, 0x8) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000000)={0x2, 0x1, 0x3, 0x2, 0x4}) socketpair$unix(0x1, 0x3, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 10m22.666878557s ago: executing program 33 (id=108): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105c45b24fd", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r1, &(0x7f00000002c0)=[{0x0}, {0x0}, {&(0x7f0000000200)=""/192, 0xc0}], 0x3, 0x1, 0x8) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000000)={0x2, 0x1, 0x3, 0x2, 0x4}) socketpair$unix(0x1, 0x3, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 4.522762774s ago: executing program 6 (id=2834): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000003c0)='.\x00', 0x3200cba, &(0x7f0000000400)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRESOCT=r0, @ANYRESHEX, @ANYRESHEX=r0, @ANYRES64, @ANYRESOCT=r0, @ANYRES8=0x0], 0x5, 0x0, &(0x7f0000000000)) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x22014a0, 0x0) 4.337024139s ago: executing program 6 (id=2837): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x8000000}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="3ef2a70f793503000000b8b242714e0f23d00f21f835100000090f23f8b8908a00000f23d00f21f835200000020f23f80f01c4c16a6332c4e1fc5f28b805000000b90e0000000f01d93d8004101fcccc00800000ba000000000f300f801b14032d", 0x61}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.229706948s ago: executing program 6 (id=2838): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRESHEX], 0x3, 0x240, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace(0x10, 0x1) r3 = syz_open_dev$sndpcmc(&(0x7f0000000140), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r3, 0x4144, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020) lseek(r4, 0xfffffffffffffff5, 0x1) inotify_init() mknod$loop(&(0x7f0000001b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) syz_emit_ethernet(0x72, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x0, 0x0, 0x64, 0x65, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@generic={0x88, 0x8, "315dcd4542a9"}]}}, {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "22995ac113fd02e7f376e7d6b2456c7ba350649f5116310d", "968826ce34c5f5d2a37b95275369010d2b4caf20b4ebfdfb61c7b8249315089f"}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x1f0}}, 0x0) 3.468037689s ago: executing program 2 (id=2842): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r1, 0x4068aea3, &(0x7f0000001240)={0xcc, 0x0, 0x1}) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f00000000c0)={0x8f, 0x0, 0xb}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x0, 0xee, 0x3ff, 0x80, 0x2, 0x6, 0x9, 0x0, 0x9, 0x0, 0xbdb], 0x51001, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.386081924s ago: executing program 1 (id=2845): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466383d312c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c38cafa7a9d7503c3c985486cf7fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c677eef7536f8115edae5ef2932cc05f566112668fa4f6844dcf823618a2993da771384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac86815ebe0b9d084d60edf56b15e74589892dce86962f611a4313120b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d0dc1fb3e2646595f1c8b49057d94f10f7b5e35ead0a38", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRESHEX], 0x3, 0x240, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace(0x10, 0x1) ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020) lseek(r3, 0xfffffffffffffff5, 0x1) inotify_init() mknod$loop(&(0x7f0000001b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) syz_emit_ethernet(0x72, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x0, 0x0, 0x64, 0x65, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@generic={0x88, 0x8, "315dcd4542a9"}]}}, {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "22995ac113fd02e7f376e7d6b2456c7ba350649f5116310d", "968826ce34c5f5d2a37b95275369010d2b4caf20b4ebfdfb61c7b8249315089f"}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x1f0}}, 0x0) 3.385982384s ago: executing program 2 (id=2846): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$audio1(0xffffffffffffff9c, 0x0, 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16, @ANYRES16], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000004e40)={0xfb, 0x6, 0x0, 0x98, "4d512c91002a4950676142687108dcd3f82acf5a895bd90fca2bb40bb4fbf29c"}) 2.683999164s ago: executing program 2 (id=2847): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) socket$kcm(0x11, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000880)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x18, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote}}}}}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) 2.455874046s ago: executing program 2 (id=2848): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x7, 0x7ffffffffffffffd, 0xc00010003, 0x10000, 0x9, 0x4, 0x7, 0x0, 0x4, 0x2, 0x2, 0x0, 0x3, 0x5, 0x3, 0xfffffffffffffffc], 0x0, 0x194d40}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.32728158s ago: executing program 1 (id=2850): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000140)=[{r1, 0x3328}], 0x1, 0x0, 0x0, 0x0) 2.27322628s ago: executing program 5 (id=2851): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x5c, 0x100000, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0xecbb, '\x00', @p_u16=0x0}}) syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[], 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r2, &(0x7f0000000c80)={0x2020}, 0x2020) r3 = openat(r2, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x40042, 0x1) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r4, &(0x7f00000000c0)='1', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) ioctl$XFS_IOC_BULKSTAT(r3, 0x8040587f, &(0x7f0000003140)={{0xfffffffffffffff8, 0x0, 0x7fffffff, 0x5, 0xfffffffa}, &(0x7f0000002cc0)=[{}, {}, {}, {}, {}, {}]}) write(r5, &(0x7f00000001c0)='1', 0x1) 2.134795555s ago: executing program 6 (id=2852): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@dev={0xac, 0x14, 0x14, 0x21}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0xfffe}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in=@broadcast, {0x0, 0xfffffffffffffffc, 0x0, 0x4, 0x8, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x10000000000000}, {0x8}, 0x20000, 0x0, 0xa, 0x0, 0x2}}}, 0xf8}, 0x1, 0x0, 0x0, 0x2810}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = epoll_create1(0x80000) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) sched_getscheduler(0x0) sendfile(r4, r5, 0x0, 0x8) 2.113198059s ago: executing program 2 (id=2853): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000008380)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000090}}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x4e5c}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x2, 0x40008004) 1.865549085s ago: executing program 2 (id=2856): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = dup(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r4 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r4, 0x0, 0x0, 0x1000f4) sendfile(r4, r4, 0x0, 0x40000000800) 1.494190714s ago: executing program 5 (id=2857): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000000)="360f7883b81e2626660fc7350ff4650666b95c030010dada32f4656df30f09e3650f01ef66b9720500000f32f8000f0d35", 0x31}], 0x1, 0x2, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x18, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000580)=@vmx={0x108, 0x0, 0x2080, {0x0, 0x8000000}, {'\x00', "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.45917994s ago: executing program 1 (id=2858): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x3fb, 0x10, 0x3, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x2710, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0xe, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.323463956s ago: executing program 5 (id=2859): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, 0x0, &(0x7f0000000140)='syzkaller\x00'}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r0}, &(0x7f0000001780)=0x4, 0x0}, 0x20) 1.323186316s ago: executing program 1 (id=2860): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRESHEX], 0x3, 0x240, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace(0x10, 0x1) ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020}, 0x2020) lseek(r1, 0xfffffffffffffff5, 0x1) inotify_init() mknod$loop(&(0x7f0000001b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) syz_emit_ethernet(0x72, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x0, 0x0, 0x64, 0x65, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@generic={0x88, 0x8, "315dcd4542a9"}]}}, {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "22995ac113fd02e7f376e7d6b2456c7ba350649f5116310d", "968826ce34c5f5d2a37b95275369010d2b4caf20b4ebfdfb61c7b8249315089f"}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x1f0}}, 0x0) 1.105430726s ago: executing program 6 (id=2862): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466383d312c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c38cafa7a9d7503c3c985486cf7fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c677eef7536f8115edae5ef2932cc05f566112668fa4f6844dcf823618a2993da771384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac86815ebe0b9d084d60edf56b15e74589892dce86962f611a4313120b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d0dc1fb3e2646595f1c8b49057d94f10f7b5e35ead0a38", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRESHEX], 0x3, 0x240, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace(0x10, 0x1) r3 = syz_open_dev$sndpcmc(&(0x7f0000000140), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r3, 0x4144, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020) lseek(r4, 0xfffffffffffffff5, 0x1) inotify_init() mknod$loop(&(0x7f0000001b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) syz_emit_ethernet(0x72, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x0, 0x0, 0x64, 0x65, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@generic={0x88, 0x8, "315dcd4542a9"}]}}, {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "22995ac113fd02e7f376e7d6b2456c7ba350649f5116310d", "968826ce34c5f5d2a37b95275369010d2b4caf20b4ebfdfb61c7b8249315089f"}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x1f0}}, 0x0) 1.104447596s ago: executing program 1 (id=2863): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000)={0x4}, 0x4) setsockopt(r0, 0x84, 0x81, &(0x7f0000000040)="0000000001000000", 0x8) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000140)="0000000001000000", 0x8) connect(r1, &(0x7f0000000200)=@in={0x2, 0x4e20, @loopback}, 0x80) 1.066239343s ago: executing program 5 (id=2865): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r2 = fanotify_init(0xf00, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, '\x00', 0x0, 0x84, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @local}}}}, 0x0) fanotify_mark(r2, 0x105, 0x40009975, r1, 0x0) 930.574028ms ago: executing program 4 (id=2866): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.events\x00', 0x0, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) 855.913562ms ago: executing program 5 (id=2867): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x5c, 0x100000, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0xecbb, '\x00', @p_u16=0x0}}) syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[], 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r2, &(0x7f0000000c80)={0x2020}, 0x2020) r3 = openat(r2, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x40042, 0x1) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r4, &(0x7f00000000c0)='1', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) ioctl$XFS_IOC_BULKSTAT(r3, 0x8040587f, &(0x7f0000003140)={{0xfffffffffffffff8, 0x0, 0x7fffffff, 0x5, 0xfffffffa}, &(0x7f0000002cc0)=[{}, {}, {}, {}, {}, {}]}) write(r5, &(0x7f00000001c0)='1', 0x1) 846.796273ms ago: executing program 4 (id=2868): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000100)='./config/cluster/ocfs2\x00', 0x1ff) mkdir(&(0x7f0000000140)='./config/cluster/ocfs2/node/node0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/cluster/ocfs2/node/node0/ipv4_address\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='127.0.0.1', 0x9) openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/cluster/ocfs2/node/node0/ipv4_port\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/cluster/ocfs2/heartbeat/hb0/start_block\x00', 0x1, 0x0) write(r1, &(0x7f0000000480)='1', 0x1) 772.404377ms ago: executing program 4 (id=2869): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x190) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000001dc0)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7ff, {0x5, 0x3, 0xdc, 0x5, 0x2, 0x6, {0x4, 0x638, 0xfffdfffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x1, 0x8000, 0x4, r2, r3, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000008e80)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0xfffffffffffffff5, 0x4, {0x5, 0x0, 0x8000000000000001, 0x4000000000008, 0xfffffffd, 0x6, {0x2, 0x7, 0x8, 0x100000000000, 0x7, 0x81, 0x8, 0x6, 0x2008, 0x8000, 0x3, r2, r3, 0x5, 0xad}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x880cc2, 0x20) 651.881209ms ago: executing program 4 (id=2870): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00070800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c11223344000800000005000500000005e0050007"], 0x4a) 642.366091ms ago: executing program 4 (id=2871): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000022c0)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x4, 0xb, 0xdc}, 0x2, r2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) 379.28966ms ago: executing program 4 (id=2872): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@dev={0xac, 0x14, 0x14, 0x21}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0xfffe}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in=@broadcast, {0x0, 0xfffffffffffffffc, 0x0, 0x4, 0x8, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x10000000000000}, {0x8}, 0x20000, 0x0, 0xa, 0x0, 0x2}}}, 0xf8}, 0x1, 0x0, 0x0, 0x2810}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = epoll_create1(0x80000) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) sched_getscheduler(0x0) sendfile(r4, r5, 0x0, 0x8) 110.11707ms ago: executing program 5 (id=2873): socket(0x2, 0xa, 0x300) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2000, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22008041, &(0x7f0000000200)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x20) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) 103.665851ms ago: executing program 1 (id=2874): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRESHEX], 0x3, 0x240, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace(0x10, 0x1) ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020}, 0x2020) lseek(r1, 0xfffffffffffffff5, 0x1) inotify_init() mknod$loop(&(0x7f0000001b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) syz_emit_ethernet(0x72, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x0, 0x0, 0x64, 0x65, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@generic={0x88, 0x8, "315dcd4542a9"}]}}, {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "22995ac113fd02e7f376e7d6b2456c7ba350649f5116310d", "968826ce34c5f5d2a37b95275369010d2b4caf20b4ebfdfb61c7b8249315089f"}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x1f0}}, 0x0) 0s ago: executing program 6 (id=2875): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000}, 0x38) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x3) kernel console output (not intermixed with test programs): ETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.226558][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.270825][ T4399] device veth0_vlan entered promiscuous mode [ 87.292749][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.312624][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.360173][ T4399] device veth1_vlan entered promiscuous mode [ 87.457565][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.485405][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 87.498754][ T4763] loop2: detected capacity change from 0 to 512 [ 87.520755][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.548309][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.570318][ T4763] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #2: comm syz.2.100: missing EA_INODE flag [ 87.590420][ T4399] device veth0_macvtap entered promiscuous mode [ 87.617259][ T4763] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.100: error while reading EA inode 2 err=-117 [ 87.652808][ T4399] device veth1_macvtap entered promiscuous mode [ 87.703414][ T4763] EXT4-fs (loop2): 1 orphan inode deleted [ 87.741986][ T4763] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,data_err=abort,,errors=continue. Quota mode: writeback. [ 87.756350][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.769498][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.800160][ T4399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.828031][ T25] audit: type=1400 audit(1790667832.518:5): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=4762 comm="syz.2.100" [ 87.882492][ T4399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.921573][ T4399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.958436][ T4399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.980346][ T4399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.990977][ T4399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.004178][ T4399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.015875][ T4399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.032383][ T4399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.046567][ T4399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.058560][ T4399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.072983][ T4399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.089106][ T4399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.103067][ T4399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.153156][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.178919][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.206118][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.325048][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.446333][ T4399] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.509411][ T4399] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.633586][ T4399] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.678473][ T4399] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.029316][ T4788] device syzkaller0 entered promiscuous mode [ 89.030654][ T448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.080746][ T448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.141715][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.198907][ T4691] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.249128][ T4691] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.278871][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.948573][ T4820] tpm_tis pcspkr: no memory resource defined [ 90.248003][ T4828] kvm: pic: level sensitive irq not supported [ 90.781714][ T4849] device syzkaller0 entered promiscuous mode [ 91.078698][ T4831] loop1: detected capacity change from 0 to 32768 [ 91.297895][ T4831] XFS (loop1): Mounting V5 Filesystem [ 91.949441][ T4831] XFS (loop1): Ending clean mount [ 93.251555][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 93.371553][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #102!!! [ 94.756208][ T4184] XFS (loop1): Unmounting Filesystem [ 95.040228][ T4898] loop2: detected capacity change from 0 to 1024 [ 95.468759][ T4910] block device autoloading is deprecated and will be removed. [ 96.447966][ T4927] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 96.471866][ T4927] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 96.577375][ T4935] kvm: pic: non byte write [ 96.624356][ T4937] kvm: vcpu 0: requested 3328 ns lapic timer period limited to 200000 ns [ 96.671430][ T4922] loop2: detected capacity change from 0 to 32768 [ 96.682079][ T4942] netlink: 4 bytes leftover after parsing attributes in process `syz.4.136'. [ 96.787032][ T4946] kvm: pic: non byte write [ 96.981313][ T4922] JBD2: Ignoring recovery information on journal [ 96.996087][ T4954] loop5: detected capacity change from 0 to 4096 [ 97.060377][ T4954] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 97.163845][ T4922] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 97.434757][ T4961] device syzkaller0 entered promiscuous mode [ 97.440911][ T25] audit: type=1800 audit(1790667842.128:6): pid=4922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.133" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 97.490477][ T25] audit: type=1800 audit(1790667842.158:7): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.141" name="attr_allow_any_host" dev="configfs" ino=37492 res=0 errno=0 [ 97.517496][ T25] audit: type=1800 audit(1790667842.168:8): pid=4963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.141" name="addr_trtype" dev="configfs" ino=37498 res=0 errno=0 [ 97.519640][ T4399] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 97.642798][ T13] nvmet: creating controller 1 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:e359e088-79da-4281-afc9-5a2cd11bafcb. [ 97.712698][ T4963] nvme nvme0: creating 2 I/O queues. [ 97.750175][ T4963] nvme nvme0: new ctrl: "testsubsys" [ 97.809672][ T4975] device syzkaller0 entered promiscuous mode [ 97.939959][ T4191] ocfs2: Unmounting device (7,2) on (node local) [ 97.975539][ T4793] x86/PAT: syz.0.105:4793 freeing invalid memtype [mem 0xfe004000-0xfe004fff] [ 97.994810][ T4793] x86/PAT: syz.0.105:4793 freeing invalid memtype [mem 0xfe005000-0xfe005fff] [ 98.637237][ T4431] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 99.483457][ T5004] device batadv_slave_1 entered promiscuous mode [ 99.514693][ T5004] device batadv_slave_1 left promiscuous mode [ 99.575115][ T5004] netlink: 24 bytes leftover after parsing attributes in process `syz.1.150'. [ 99.609590][ T5004] netlink: 24 bytes leftover after parsing attributes in process `syz.1.150'. [ 99.642369][ T5004] Zero length message leads to an empty skb [ 99.714134][ T5015] dccp_invalid_packet: P.Data Offset(90) too large [ 99.721955][ T4431] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 99.753326][ T4431] usb 5-1: config 0 has no interface number 0 [ 99.808172][ T4431] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 100.074860][ T5015] loop5: detected capacity change from 0 to 64 [ 100.102698][ T4431] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 100.145912][ T4431] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.325649][ T4431] usb 5-1: Product: syz [ 100.393015][ T4431] usb 5-1: Manufacturer: syz [ 100.465756][ T4431] usb 5-1: SerialNumber: syz [ 100.691376][ T4431] usb 5-1: config 0 descriptor?? [ 100.824940][ T4431] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 100.869926][ T5015] attempt to access beyond end of device [ 100.869926][ T5015] loop5: rw=2049, want=162, limit=64 [ 100.921228][ T5015] Buffer I/O error on dev loop5, logical block 161, lost async page write [ 100.932483][ T5015] attempt to access beyond end of device [ 100.932483][ T5015] loop5: rw=2049, want=163, limit=64 [ 100.944780][ T5015] Buffer I/O error on dev loop5, logical block 162, lost async page write [ 100.990049][ T5015] attempt to access beyond end of device [ 100.990049][ T5015] loop5: rw=2049, want=164, limit=64 [ 101.024716][ T5015] Buffer I/O error on dev loop5, logical block 163, lost async page write [ 101.047663][ T5030] binder: BINDER_SET_CONTEXT_MGR already set [ 101.050533][ T5015] attempt to access beyond end of device [ 101.050533][ T5015] loop5: rw=2049, want=168, limit=64 [ 101.070974][ T5015] Buffer I/O error on dev loop5, logical block 167, lost async page write [ 101.071837][ T5030] binder: 5029:5030 ioctl 4018620d 200000000240 returned -16 [ 101.080119][ T5015] attempt to access beyond end of device [ 101.080119][ T5015] loop5: rw=2049, want=170, limit=64 [ 101.106568][ T5015] Buffer I/O error on dev loop5, logical block 169, lost async page write [ 101.120179][ T5015] attempt to access beyond end of device [ 101.120179][ T5015] loop5: rw=2049, want=172, limit=64 [ 101.137173][ T5015] Buffer I/O error on dev loop5, logical block 171, lost async page write [ 101.146153][ T5015] attempt to access beyond end of device [ 101.146153][ T5015] loop5: rw=2049, want=173, limit=64 [ 101.159994][ T5015] Buffer I/O error on dev loop5, logical block 172, lost async page write [ 101.182216][ T5030] binder: BINDER_SET_CONTEXT_MGR already set [ 101.188228][ T5030] binder: 5029:5030 ioctl 4018620d 200000000040 returned -16 [ 101.399566][ T5039] loop1: detected capacity change from 0 to 1024 [ 101.499216][ T5039] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 101.516188][ T5038] loop5: detected capacity change from 0 to 4096 [ 101.621799][ T13] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 101.660345][ T5049] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 101.765129][ T5053] loop1: detected capacity change from 0 to 128 [ 101.836648][ T5053] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,nobarrier,,errors=continue. Quota mode: none. [ 101.874475][ T5053] ext4 filesystem being mounted at /41/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 101.911885][ T13] usb 3-1: Using ep0 maxpacket: 32 [ 101.938108][ T5038] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer [ 102.051946][ T13] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 102.068179][ T5053] EXT4-fs (loop1): resizing filesystem from 64 to 1 blocks [ 102.080758][ T13] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.085936][ T5053] EXT4-fs warning (device loop1): ext4_resize_fs:2004: can't shrink FS - resize aborted [ 102.096492][ T13] usb 3-1: config 0 has no interface number 0 [ 102.119559][ T13] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 102.131587][ C1] usb 5-1: yurex_control_callback - control failed: -2 [ 102.185886][ T13] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 102.224278][ T13] usb 3-1: config 0 interface 255 has no altsetting 0 [ 102.278868][ T4428] usb 5-1: USB disconnect, device number 2 [ 102.311783][ T4428] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 102.385950][ T5067] loop1: detected capacity change from 0 to 512 [ 102.451783][ T13] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 102.466357][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.496284][ T13] usb 3-1: Product: syz [ 102.505395][ T5067] EXT4-fs (loop1): Ignoring removed oldalloc option [ 102.523653][ T13] usb 3-1: Manufacturer: syz [ 102.552355][ T13] usb 3-1: SerialNumber: syz [ 102.554555][ T5067] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.161: bg 0: block 5: invalid block bitmap [ 102.595131][ T5067] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 102.621167][ T13] usb 3-1: config 0 descriptor?? [ 102.656001][ T5067] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.161: invalid indirect mapped block 3 (level 2) [ 102.709488][ T5067] EXT4-fs (loop1): 1 orphan inode deleted [ 102.725504][ T5067] EXT4-fs (loop1): 1 truncate cleaned up [ 102.731174][ T5067] EXT4-fs (loop1): mounted filesystem without journal. Opts: oldalloc,,errors=continue. Quota mode: writeback. [ 102.973799][ T5085] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 103.103173][ T5092] overlayfs: failed to clone upperpath [ 104.206432][ T4428] usb 3-1: USB disconnect, device number 3 [ 105.470475][ T5125] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 105.551410][ T5126] netlink: 52 bytes leftover after parsing attributes in process `syz.2.174'. [ 105.715336][ T5126] netlink: 52 bytes leftover after parsing attributes in process `syz.2.174'. [ 105.898636][ T154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.958162][ T154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.966659][ T5134] mount: server 127.0.0.1 not responding, timed out [ 106.024994][ T5131] chnl_net:caif_netlink_parms(): no params data found [ 106.219242][ T154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.287777][ T5162] netlink: 'syz.2.183': attribute type 10 has an invalid length. [ 107.517282][ T5162] device geneve0 entered promiscuous mode [ 108.011533][ C0] sched: RT throttling activated [ 108.017044][ T1109] Bluetooth: hci5: command 0x0409 tx timeout [ 108.414916][ T5162] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 108.534250][ T5131] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.541330][ T5131] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.556849][ T5131] device bridge_slave_0 entered promiscuous mode [ 108.579041][ T5179] loop4: detected capacity change from 0 to 256 [ 108.617299][ T5170] device syzkaller0 entered promiscuous mode [ 108.729156][ T154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.770378][ T5131] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.780589][ T5131] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.819841][ T5131] device bridge_slave_1 entered promiscuous mode [ 108.861376][ T5131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.933908][ T5131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.041031][ T5131] team0: Port device team_slave_0 added [ 109.070644][ T5199] netlink: 12 bytes leftover after parsing attributes in process `syz.2.194'. [ 109.109549][ T5131] team0: Port device team_slave_1 added [ 109.190565][ T5131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.203203][ T5131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.266116][ T5131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.299808][ T5205] bridge1: port 1(erspan0) entered blocking state [ 109.314484][ T5205] bridge1: port 1(erspan0) entered disabled state [ 109.344754][ T5205] device erspan0 entered promiscuous mode [ 109.377627][ T5205] bridge1: port 1(erspan0) entered blocking state [ 109.384176][ T5205] bridge1: port 1(erspan0) entered forwarding state [ 109.459772][ T5131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.484811][ T5131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.551112][ T5131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.594282][ T4203] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:200' [ 109.605113][ T4203] CPU: 0 PID: 4203 Comm: kworker/u5:9 Not tainted syzkaller #0 [ 109.612685][ T4203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 109.622748][ T4203] Workqueue: hci3 hci_rx_work [ 109.627447][ T4203] Call Trace: [ 109.630730][ T4203] [ 109.633663][ T4203] dump_stack_lvl+0x188/0x250 [ 109.638350][ T4203] ? show_regs_print_info+0x20/0x20 [ 109.643559][ T4203] ? load_image+0x410/0x410 [ 109.648086][ T4203] sysfs_create_dir_ns+0x26a/0x290 [ 109.653207][ T4203] ? sysfs_warn_dup+0xa0/0xa0 [ 109.657891][ T4203] ? ret_from_fork+0x1f/0x30 [ 109.662491][ T4203] ? do_raw_spin_unlock+0x11d/0x230 [ 109.667699][ T4203] kobject_add_internal+0x5ba/0xcd0 [ 109.672912][ T4203] kobject_add+0x160/0x230 [ 109.677343][ T4203] ? kobject_init+0x1c0/0x1c0 [ 109.682028][ T4203] ? __raw_spin_lock_init+0x41/0x100 [ 109.687323][ T4203] ? get_device_parent+0x121/0x3e0 [ 109.692438][ T4203] device_add+0x470/0x1050 [ 109.696853][ T4203] hci_conn_add_sysfs+0xd1/0x1e0 [ 109.701787][ T4203] hci_sync_conn_complete_evt+0x647/0x9d0 [ 109.707499][ T4203] ? __rwlock_init+0x140/0x140 [ 109.712256][ T4203] hci_event_packet+0x8cf/0x1310 [ 109.717184][ T4203] ? _raw_spin_unlock+0x40/0x40 [ 109.722021][ T4203] ? rcu_lock_release+0x20/0x20 [ 109.726866][ T4203] ? hci_send_to_monitor+0x9c/0x4a0 [ 109.732052][ T4203] hci_rx_work+0x255/0xa10 [ 109.736474][ T4203] process_one_work+0x867/0xff0 [ 109.741340][ T4203] ? worker_detach_from_pool+0x240/0x240 [ 109.746966][ T4203] ? lockdep_hardirqs_off+0x70/0x100 [ 109.752253][ T4203] ? _raw_spin_lock_irq+0xb7/0xf0 [ 109.757318][ T4203] ? _raw_spin_lock_irqsave+0x100/0x100 [ 109.762852][ T4203] ? wq_worker_running+0x97/0x170 [ 109.767862][ T4203] worker_thread+0xad7/0x12a0 [ 109.772534][ T4203] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 109.778422][ T4203] kthread+0x42e/0x520 [ 109.782471][ T4203] ? rcu_lock_release+0x20/0x20 [ 109.787304][ T4203] ? kthread_blkcg+0xd0/0xd0 [ 109.791877][ T4203] ret_from_fork+0x1f/0x30 [ 109.796289][ T4203] [ 109.806543][ T4203] kobject_add_internal failed for hci3:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 109.820328][ T4203] Bluetooth: hci3: failed to register connection device [ 109.918208][ T5131] device hsr_slave_0 entered promiscuous mode [ 110.092272][ T1109] Bluetooth: hci5: command 0x041b tx timeout [ 110.099055][ T5131] device hsr_slave_1 entered promiscuous mode [ 110.110281][ T5131] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.117930][ T5131] Cannot create hsr debugfs directory [ 110.723692][ T154] tipc: Left network mode [ 110.967600][ T4200] Bluetooth: hci1: unexpected event for opcode 0x0803 [ 111.003741][ T5257] netlink: 20 bytes leftover after parsing attributes in process `syz.5.205'. [ 111.070757][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 111.222441][ T5131] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 111.249937][ T5131] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 111.269178][ T5131] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 111.281801][ T4428] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 111.305467][ T5131] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 111.441603][ T13] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 111.450052][ T5131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.507301][ T5131] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.515409][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 111.524291][ T4428] usb 5-1: Using ep0 maxpacket: 32 [ 111.530706][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 111.557620][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 111.577215][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 111.589238][ T4684] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.596830][ T4684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.612987][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 111.640689][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 111.648817][ T1109] Bluetooth: hci3: command 0x0409 tx timeout [ 111.669531][ T4684] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.676689][ T4684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.681826][ T4428] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 111.701044][ T4428] usb 5-1: config 0 has no interface number 0 [ 111.924644][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 112.123404][ T4428] usb 5-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 112.134080][ T4428] usb 5-1: config 0 interface 1 has no altsetting 0 [ 112.401946][ T4428] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 112.423911][ T4428] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.426614][ T4194] Bluetooth: hci5: command 0x040f tx timeout [ 112.451170][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 112.460538][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 112.468869][ T4428] usb 5-1: Product: syz [ 112.473512][ T4428] usb 5-1: Manufacturer: syz [ 112.478980][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 112.490991][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 112.491653][ T4428] usb 5-1: SerialNumber: syz [ 112.505226][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 112.514518][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 112.533021][ T13] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 112.558736][ T13] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 112.569342][ T4428] usb 5-1: config 0 descriptor?? [ 112.653880][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 112.663411][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 112.682220][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 112.690599][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 112.699664][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 112.768454][ T5131] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 112.811810][ T13] usb 2-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 112.842017][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 112.890163][ T13] usb 2-1: Product: syz [ 112.904852][ T13] usb 2-1: Manufacturer: syz [ 113.004351][ T4428] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 113.023974][ T13] mos7840 2-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 113.053465][ T4428] cx231xx 5-1:0.1: Failed to read PCB config [ 113.257431][ T5314] ODEBUG: Out of memory. ODEBUG disabled [ 113.765678][ T4264] Bluetooth: hci3: command 0x0406 tx timeout [ 113.776104][ T154] device hsr_slave_0 left promiscuous mode [ 113.782822][ T154] device hsr_slave_1 left promiscuous mode [ 113.792020][ T4428] cx231xx: probe of 5-1:0.1 failed with error -71 [ 113.800603][ T4428] usb 5-1: USB disconnect, device number 3 [ 113.829741][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.880139][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.902229][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.909665][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.927569][ T154] device bridge_slave_1 left promiscuous mode [ 113.935065][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.943931][ T154] device bridge_slave_0 left promiscuous mode [ 113.950211][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.964712][ T154] device veth1_macvtap left promiscuous mode [ 113.970821][ T154] device veth0_macvtap left promiscuous mode [ 113.981763][ T154] device veth1_vlan left promiscuous mode [ 113.987814][ T154] device veth0_vlan left promiscuous mode [ 114.171600][ T4428] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 114.181404][ T154] team0 (unregistering): Port device team_slave_1 removed [ 114.196872][ T154] team0 (unregistering): Port device team_slave_0 removed [ 114.211352][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.233481][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.316518][ T154] bond0 (unregistering): Released all slaves [ 114.362966][ T5316] netlink: 'syz.5.218': attribute type 16 has an invalid length. [ 114.374907][ T5316] netlink: 'syz.5.218': attribute type 17 has an invalid length. [ 114.385109][ T5316] netlink: 'syz.5.218': attribute type 27 has an invalid length. [ 114.411762][ T4428] usb 5-1: Using ep0 maxpacket: 32 [ 114.451650][ T4264] Bluetooth: hci5: command 0x0419 tx timeout [ 114.464875][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 114.482700][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 114.667128][ T5131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.695672][ T4428] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 114.734559][ T4428] usb 5-1: config 0 has no interface number 0 [ 114.774641][ T4428] usb 5-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 114.841926][ T4428] usb 5-1: config 0 interface 1 has no altsetting 0 [ 114.847822][ T5343] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 114.881794][ T4428] usb 5-1: string descriptor 0 read error: -71 [ 114.888091][ T4428] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 114.987085][ T5345] capability: warning: `syz.4.225' uses deprecated v2 capabilities in a way that may be insecure [ 115.066573][ T4428] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.088179][ T4428] usb 5-1: config 0 descriptor?? [ 115.112226][ T4428] usb 5-1: can't set config #0, error -71 [ 115.732250][ T4428] usb 5-1: USB disconnect, device number 4 [ 115.829961][ T4328] udevd[4328]: setting mode of /dev/bus/usb/005/004 to 020664 failed: No such file or directory [ 115.847770][ T5345] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 115.859200][ T13] mos7840: probe of ttyUSB0 failed with error -71 [ 115.862410][ T5364] ip_tables: iptables: counters copy to user failed while replacing table [ 115.871107][ T5345] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 115.893979][ T13] usb 2-1: USB disconnect, device number 2 [ 115.914357][ T4328] udevd[4328]: setting owner of /dev/bus/usb/005/004 to uid=0, gid=0 failed: No such file or directory [ 116.750714][ T5381] loop1: detected capacity change from 0 to 512 [ 116.792653][ T5384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.231'. [ 116.918840][ T13] mos7840 2-1:1.0: device disconnected [ 116.960204][ T5381] EXT4-fs (loop1): Ignoring removed oldalloc option [ 117.037057][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 117.085941][ T5381] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 117.106682][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 117.823016][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 117.841282][ T5381] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 117.872110][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 117.902675][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 117.923932][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 117.974231][ T5131] device veth0_vlan entered promiscuous mode [ 118.007851][ T5131] device veth1_vlan entered promiscuous mode [ 118.044278][ T5381] EXT4-fs (loop1): 1 truncate cleaned up [ 118.062745][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 118.141979][ T5381] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 118.189425][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 118.276847][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 118.320227][ T5131] device veth0_macvtap entered promiscuous mode [ 118.356098][ T5131] device veth1_macvtap entered promiscuous mode [ 118.580388][ T5131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.605029][ T5412] loop4: detected capacity change from 0 to 40427 [ 118.664646][ T5131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.711574][ T5131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.747126][ T5131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.787713][ T5131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.828999][ T5131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.902730][ T5131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.939604][ T5131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.962155][ T5131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.997493][ T5412] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 119.005829][ T5412] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 119.034382][ T5131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.101845][ T5131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.120795][ T5412] F2FS-fs (loop4): Found nat_bits in checkpoint [ 119.240339][ T5131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.355152][ T5412] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 119.363188][ T5412] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 119.451901][ T25] audit: type=1804 audit(1790667864.118:9): pid=5412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.236" name="/newroot/49/bus/bus" dev="loop4" ino=10 res=1 errno=0 [ 119.523669][ T5131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.576407][ T5131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.664950][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 119.687219][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 119.700558][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 119.742737][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 119.782654][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 119.811419][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 119.947193][ T5131] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.978039][ T5131] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.987182][ T5131] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.028548][ T5131] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.231428][ T4687] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.311073][ T4687] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.453341][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 121.074044][ C1] net_ratelimit: 32 callbacks suppressed [ 121.088231][ T448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.102512][ T448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.110456][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 121.398364][ T4203] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:200' [ 121.407944][ T4203] CPU: 1 PID: 4203 Comm: kworker/u5:9 Not tainted syzkaller #0 [ 121.415487][ T4203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 121.425535][ T4203] Workqueue: hci3 hci_rx_work [ 121.425593][ T4203] Call Trace: [ 121.425602][ T4203] [ 121.425609][ T4203] dump_stack_lvl+0x188/0x250 [ 121.425630][ T4203] ? show_regs_print_info+0x20/0x20 [ 121.446517][ T4203] ? load_image+0x410/0x410 [ 121.451021][ T4203] sysfs_create_dir_ns+0x26a/0x290 [ 121.456120][ T4203] ? sysfs_warn_dup+0xa0/0xa0 [ 121.460798][ T4203] ? do_raw_spin_unlock+0x11d/0x230 [ 121.465988][ T4203] kobject_add_internal+0x5ba/0xcd0 [ 121.471180][ T4203] kobject_add+0x160/0x230 [ 121.475588][ T4203] ? kobject_init+0x1c0/0x1c0 [ 121.480250][ T4203] ? __raw_spin_lock_init+0x41/0x100 [ 121.485518][ T4203] ? get_device_parent+0x121/0x3e0 [ 121.490614][ T4203] device_add+0x470/0x1050 [ 121.495017][ T4203] hci_conn_add_sysfs+0xd1/0x1e0 [ 121.499940][ T4203] hci_sync_conn_complete_evt+0x647/0x9d0 [ 121.505641][ T4203] ? __rwlock_init+0x140/0x140 [ 121.510392][ T4203] hci_event_packet+0x8cf/0x1310 [ 121.515316][ T4203] ? _raw_spin_unlock+0x40/0x40 [ 121.520149][ T4203] ? rcu_lock_release+0x20/0x20 [ 121.525006][ T4203] ? hci_send_to_monitor+0x9c/0x4a0 [ 121.530190][ T4203] hci_rx_work+0x255/0xa10 [ 121.534611][ T4203] process_one_work+0x867/0xff0 [ 121.539477][ T4203] ? worker_detach_from_pool+0x240/0x240 [ 121.545104][ T4203] ? lockdep_hardirqs_off+0x70/0x100 [ 121.550387][ T4203] ? _raw_spin_lock_irq+0xb7/0xf0 [ 121.555402][ T4203] ? _raw_spin_lock_irqsave+0x100/0x100 [ 121.560939][ T4203] ? wq_worker_running+0x97/0x170 [ 121.565959][ T4203] worker_thread+0xad7/0x12a0 [ 121.570637][ T4203] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 121.576521][ T4203] kthread+0x42e/0x520 [ 121.580575][ T4203] ? rcu_lock_release+0x20/0x20 [ 121.585406][ T4203] ? kthread_blkcg+0xd0/0xd0 [ 121.589982][ T4203] ret_from_fork+0x1f/0x30 [ 121.594394][ T4203] [ 121.603266][ T4203] kobject_add_internal failed for hci3:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 121.617336][ T4203] Bluetooth: hci3: failed to register connection device [ 123.204048][ T5493] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 123.509975][ T5500] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 123.720740][ T4428] Bluetooth: hci3: command 0x0409 tx timeout [ 123.856127][ T5502] jffs2: notice: (5502) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 124.235025][ T5508] loop6: detected capacity change from 0 to 2048 [ 124.318736][ T5508] NILFS (loop6): couldn't find nilfs on the device [ 124.347072][ T4328] udevd[4328]: incorrect nilfs2 checksum on /dev/loop6 [ 124.771647][ T4428] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 124.917762][ T5529] loop4: detected capacity change from 0 to 8 [ 125.442562][ T4428] usb 7-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 125.552279][ T4428] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.798704][ T4428] usb 7-1: Product: syz [ 125.821221][ T5547] loop1: detected capacity change from 0 to 256 [ 125.829751][ T4428] usb 7-1: Manufacturer: syz [ 125.866436][ T4428] usb 7-1: SerialNumber: syz [ 125.909178][ T4428] usb 7-1: config 0 descriptor?? [ 125.973918][ T4428] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 126.056060][ T5552] syz.4.263[5552] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 126.056273][ T5552] syz.4.263[5552] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 126.096886][ T5552] capability: warning: `syz.4.263' uses 32-bit capabilities (legacy support in use) [ 126.179250][ T4428] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 126.241743][ T4237] net_ratelimit: 43 callbacks suppressed [ 126.254564][ T4428] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 126.390682][ T5555] tipc: Started in network mode [ 126.440786][ T5555] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 126.517423][ T5555] tipc: Enabled bearer , priority 10 [ 126.721604][ T25] audit: type=1326 audit(1790667871.388:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5562 comm="syz.4.266" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f472250b159 code=0x0 [ 127.307684][ T4428] usb 7-1: media controller created [ 127.348818][ T4428] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 127.516567][ T4263] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 127.571376][ T7] tipc: Node number set to 4269801488 [ 128.281576][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 128.291563][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 128.301575][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 128.311568][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 128.321564][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 128.331557][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 128.341561][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 128.351561][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 128.587451][ T4428] DVB: Unable to find symbol mt352_attach() [ 128.605841][ T5597] loop6: detected capacity change from 0 to 1024 [ 128.667565][ T4428] DVB: Unable to find symbol nxt6000_attach() [ 128.675434][ T4428] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 128.748017][ T5609] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 128.810814][ T4428] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input6 [ 128.861744][ T4263] usb 2-1: unable to read config index 0 descriptor/all [ 128.873050][ T4263] usb 2-1: can't read configurations, error -71 [ 128.892433][ T4428] dvb-usb: schedule remote query interval to 1000 msecs. [ 128.899484][ T4428] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 128.942727][ T4428] dvb-usb: bulk message failed: -22 (7/0) [ 128.962622][ T4428] dvb-usb: bulk message failed: -22 (7/0) [ 129.018872][ T4428] usb 7-1: USB disconnect, device number 2 [ 129.470794][ T5622] netlink: 40 bytes leftover after parsing attributes in process `syz.2.279'. [ 129.684449][ T4428] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 130.571029][ T5667] netlink: 'syz.6.292': attribute type 1 has an invalid length. [ 130.630441][ T5669] overlayfs: failed to clone upperpath [ 130.674169][ T5667] netlink: 8 bytes leftover after parsing attributes in process `syz.6.292'. [ 131.472489][ T144] net_ratelimit: 35 callbacks suppressed [ 131.740339][ T5705] futex_wake_op: syz.1.300 tries to shift op by 144; fix this program [ 131.977889][ T5716] netlink: 'syz.4.304': attribute type 1 has an invalid length. [ 132.140929][ T5726] binder: BINDER_SET_CONTEXT_MGR already set [ 132.158476][ T5716] device bond1 entered promiscuous mode [ 132.221642][ T5726] binder: 5725:5726 ioctl 4018620d 200000000240 returned -16 [ 132.226900][ T5732] binder: BINDER_SET_CONTEXT_MGR already set [ 132.235409][ T5716] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.292519][ T5732] binder: 5725:5732 ioctl 4018620d 200000000180 returned -16 [ 132.391414][ T5729] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.404036][ T5742] process 'syz.2.308' launched './file0' with NULL argv: empty string added [ 132.481488][ T5729] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 132.493460][ T5729] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 132.511248][ T5729] bond1: (slave wireguard0): making interface the new active one [ 132.580048][ T5729] device wireguard0 entered promiscuous mode [ 132.628082][ T5729] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 132.690944][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.697308][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.775147][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 133.052591][ T5737] device syzkaller0 entered promiscuous mode [ 133.732997][ T5739] syz.1.306 (5739): drop_caches: 2 [ 133.946536][ T5781] autofs4:pid:5781:autofs_fill_super: called with bogus options [ 133.996437][ T5781] loop4: detected capacity change from 0 to 16 [ 134.193481][ T5781] erofs: (device loop4): mounted with root inode @ nid 36. [ 134.485800][ T4200] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress 8524 in[4096, 0] out[9000] [ 134.575910][ T5781] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress 8524 in[4096, 0] out[9000] [ 134.726464][ T25] audit: type=1800 audit(1790667879.408:11): pid=5781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.314" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 134.794818][ T5792] xt_CT: No such helper "pptp" [ 135.769954][ T5812] loop1: detected capacity change from 0 to 1024 [ 136.025134][ T5822] loop6: detected capacity change from 0 to 512 [ 136.109737][ T5822] EXT4-fs (loop6): Ignoring removed oldalloc option [ 136.169962][ T5822] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 136.267416][ T5822] EXT4-fs (loop6): 1 truncate cleaned up [ 136.303302][ T5822] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 136.594044][ T5842] overlayfs: failed to clone upperpath [ 137.091657][ C0] net_ratelimit: 48 callbacks suppressed [ 137.317741][ T5845] syz.4.330 (5845) used greatest stack depth: 17296 bytes left [ 139.810188][ T5849] loop4: detected capacity change from 0 to 32768 [ 140.125750][ T5889] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 140.660901][ T5908] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 140.667919][ T5908] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 140.706090][ T5908] vhci_hcd vhci_hcd.0: Device attached [ 141.626345][ T5922] netlink: 12 bytes leftover after parsing attributes in process `syz.5.346'. [ 141.681945][ T13] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 141.681987][ T7] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 142.222058][ T7] usb 7-1: config 0 has no interfaces? [ 142.228001][ T7] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 142.291611][ C0] net_ratelimit: 36 callbacks suppressed [ 142.370428][ T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.509836][ T5922] 8021q: adding VLAN 0 to HW filter on device bond1 [ 142.609342][ T7] usb 7-1: config 0 descriptor?? [ 142.618921][ T5926] device vlan2 entered promiscuous mode [ 142.653323][ T5926] device bond1 entered promiscuous mode [ 142.899420][ T4194] usb 7-1: USB disconnect, device number 3 [ 142.915650][ T5909] usb 45-1: recv xbuf, 0 [ 142.959033][ T4413] vhci_hcd: stop threads [ 143.001305][ T4413] vhci_hcd: release socket [ 143.071685][ T13] usb 45-1: device descriptor read/64, error -71 [ 143.105338][ T4413] vhci_hcd: disconnect device [ 144.193719][ T5974] loop6: detected capacity change from 0 to 64 [ 145.886724][ T448] attempt to access beyond end of device [ 145.886724][ T448] loop6: rw=1, want=66, limit=64 [ 145.951900][ T448] Buffer I/O error on dev loop6, logical block 65, lost async page write [ 145.960444][ T448] attempt to access beyond end of device [ 145.960444][ T448] loop6: rw=1, want=67, limit=64 [ 145.982696][ T448] Buffer I/O error on dev loop6, logical block 66, lost async page write [ 146.008702][ T448] attempt to access beyond end of device [ 146.008702][ T448] loop6: rw=1, want=68, limit=64 [ 146.033989][ T448] Buffer I/O error on dev loop6, logical block 67, lost async page write [ 146.079626][ T448] attempt to access beyond end of device [ 146.079626][ T448] loop6: rw=1, want=69, limit=64 [ 146.096428][ T448] Buffer I/O error on dev loop6, logical block 68, lost async page write [ 146.138904][ T448] attempt to access beyond end of device [ 146.138904][ T448] loop6: rw=1, want=73, limit=64 [ 146.176837][ T448] Buffer I/O error on dev loop6, logical block 72, lost async page write [ 146.202760][ T448] attempt to access beyond end of device [ 146.202760][ T448] loop6: rw=1, want=74, limit=64 [ 146.243519][ T6018] netlink: 20 bytes leftover after parsing attributes in process `syz.1.371'. [ 146.249130][ T448] Buffer I/O error on dev loop6, logical block 73, lost async page write [ 146.295986][ T448] attempt to access beyond end of device [ 146.295986][ T448] loop6: rw=1, want=77, limit=64 [ 146.319095][ T448] Buffer I/O error on dev loop6, logical block 76, lost async page write [ 146.333286][ T448] attempt to access beyond end of device [ 146.333286][ T448] loop6: rw=1, want=78, limit=64 [ 146.346827][ T448] Buffer I/O error on dev loop6, logical block 77, lost async page write [ 146.368379][ T448] attempt to access beyond end of device [ 146.368379][ T448] loop6: rw=1, want=3230, limit=64 [ 146.387085][ T448] attempt to access beyond end of device [ 146.387085][ T448] loop6: rw=1, want=3270, limit=64 [ 146.476400][ T6021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.372'. [ 147.400794][ C0] net_ratelimit: 41 callbacks suppressed [ 147.745512][ T6043] overlayfs: failed to clone upperpath [ 148.742936][ T6068] device syzkaller0 entered promiscuous mode [ 149.356049][ T6100] loop4: detected capacity change from 0 to 1024 [ 149.581812][ T6100] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 149.639048][ T6100] EXT4-fs (loop4): orphan cleanup on readonly fs [ 149.719071][ T6100] Quota error (device loop4): v2_read_file_info: Can't read info structure [ 149.760389][ T6100] EXT4-fs warning (device loop4): ext4_enable_quotas:6488: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 149.842321][ T6100] EXT4-fs (loop4): Cannot turn on quotas: error -5 [ 149.869411][ T6100] EXT4-fs (loop4): 1 truncate cleaned up [ 149.875617][ T6112] device syzkaller0 entered promiscuous mode [ 149.903744][ T6100] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 150.232172][ T6095] EXT4-fs error (device loop4): ext4_search_dir:1551: inode #2: block 16: comm syz.4.388: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 150.269705][ T6095] EXT4-fs error (device loop4): ext4_search_dir:1551: inode #2: block 16: comm syz.4.388: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 150.627938][ T6095] EXT4-fs error (device loop4): ext4_search_dir:1551: inode #2: block 16: comm syz.4.388: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 151.124719][ T6146] tipc: Started in network mode [ 151.151412][ T6146] tipc: Node identity ac1414aa, cluster identity 4711 [ 151.356925][ T6146] tipc: Enabled bearer , priority 10 [ 152.521576][ C0] net_ratelimit: 46 callbacks suppressed [ 152.936312][ T7] tipc: Node number set to 2886997162 [ 153.679256][ T6178] FAULT_INJECTION: forcing a failure. [ 153.679256][ T6178] name fail_futex, interval 1, probability 0, space 0, times 1 [ 153.692245][ T6178] CPU: 1 PID: 6178 Comm: syz.4.406 Not tainted syzkaller #0 [ 153.699547][ T6178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 153.709590][ T6178] Call Trace: [ 153.709599][ T6178] [ 153.709607][ T6178] dump_stack_lvl+0x188/0x250 [ 153.709628][ T6178] ? futex_wait_queue_me+0x2d6/0x440 [ 153.709651][ T6178] ? show_regs_print_info+0x20/0x20 [ 153.709668][ T6178] ? load_image+0x410/0x410 [ 153.709684][ T6178] ? mark_lock+0x94/0x320 [ 153.709702][ T6178] ? __lock_acquire+0x13dc/0x7b50 [ 153.709724][ T6178] should_fail+0x383/0x4b0 [ 153.716351][ T6178] get_futex_key+0x1a1/0x12d0 [ 153.726287][ T6178] ? futex_wait_restart+0x250/0x250 [ 153.726313][ T6178] ? verify_lock_unused+0x140/0x140 [ 153.735991][ T6178] do_futex+0x236/0x12b0 [ 153.745304][ T6178] ? vfs_write+0xaa6/0xd70 [ 153.745334][ T6178] ? futex_exit_release+0x1c0/0x1c0 [ 153.754382][ T6178] ? __context_tracking_exit+0x4c/0x80 [ 153.754410][ T6178] __se_sys_futex+0x389/0x420 [ 153.764756][ T6178] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 153.764784][ T6178] ? __x64_sys_futex+0xf0/0xf0 [ 153.773398][ T6178] ? __x64_sys_futex+0x1d/0xf0 [ 153.773422][ T6178] do_syscall_64+0x4c/0xa0 [ 153.784015][ T6178] ? clear_bhb_loop+0x30/0x80 [ 153.784038][ T6178] ? clear_bhb_loop+0x30/0x80 [ 153.784058][ T6178] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 153.784074][ T6178] RIP: 0033:0x7f472250b159 [ 153.784090][ T6178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.784101][ T6178] RSP: 002b:00007f4720742028 EFLAGS: 00000246 [ 153.795039][ T6178] ORIG_RAX: 00000000000000ca [ 153.795049][ T6178] RAX: ffffffffffffffda RBX: 00007f4722793090 RCX: 00007f472250b159 [ 153.795061][ T6178] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000000 [ 153.795070][ T6178] RBP: 00007f47225a206b R08: 0000000000000000 R09: 0000000000000400 [ 153.795081][ T6178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.795092][ T6178] R13: 00007f4722793128 R14: 00007f4722793090 R15: 00007ffe6400cf28 [ 153.795118][ T6178] [ 155.414327][ T6212] loop4: detected capacity change from 0 to 512 [ 155.459839][ T6212] EXT4-fs (loop4): Ignoring removed oldalloc option [ 155.494602][ T6212] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 155.562506][ T6212] EXT4-fs (loop4): 1 truncate cleaned up [ 155.569908][ T6212] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 156.522633][ T6232] fuse: Bad value for 'fd' [ 157.528169][ T6243] loop4: detected capacity change from 0 to 131072 [ 157.536882][ C1] net_ratelimit: 37 callbacks suppressed [ 157.607740][ T6243] F2FS-fs (loop4): invalid crc value [ 157.647094][ T6243] F2FS-fs (loop4): Found nat_bits in checkpoint [ 157.684068][ T6243] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 157.712050][ T6243] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 157.797368][ T6270] fuse: Bad value for 'fd' [ 157.981248][ T6278] netlink: 44 bytes leftover after parsing attributes in process `syz.4.423'. [ 157.990333][ T6278] tipc: Enabling of bearer rejected, failed to enable media [ 159.292181][ T6239] loop6: detected capacity change from 0 to 32768 [ 159.480406][ T6239] XFS (loop6): Mounting V5 Filesystem [ 159.587628][ T6239] XFS (loop6): Ending clean mount [ 159.888552][ T25] audit: type=1800 audit(1790667904.578:12): pid=6239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.418" name="file1" dev="loop6" ino=4422 res=0 errno=0 [ 160.024746][ T5131] XFS (loop6): Unmounting Filesystem [ 160.728841][ T6330] loop4: detected capacity change from 0 to 1024 [ 160.895121][ T6330] hfsplus: request for non-existent node 33423360 in B*Tree [ 160.926854][ T6330] hfsplus: request for non-existent node 33423360 in B*Tree [ 160.973372][ T6335] hfsplus: request for non-existent node 33423360 in B*Tree [ 161.034066][ T6335] hfsplus: request for non-existent node 33423360 in B*Tree [ 161.062366][ T6338] jffs2: notice: (6338) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 161.081150][ T6330] hfsplus: request for non-existent node 33423360 in B*Tree [ 161.111948][ T6330] hfsplus: request for non-existent node 33423360 in B*Tree [ 161.150480][ T6330] hfsplus: request for non-existent node 33423360 in B*Tree [ 161.180105][ T6330] hfsplus: request for non-existent node 33423360 in B*Tree [ 161.276621][ T6335] hfsplus: request for non-existent node 33423360 in B*Tree [ 161.310312][ T6335] hfsplus: request for non-existent node 33423360 in B*Tree [ 161.448559][ T6330] hfsplus: request for non-existent node 33423360 in B*Tree [ 161.586511][ T6330] hfsplus: request for non-existent node 33423360 in B*Tree [ 161.605480][ T6346] hfsplus: request for non-existent node 33423360 in B*Tree [ 161.624356][ T6346] hfsplus: request for non-existent node 33423360 in B*Tree [ 161.683473][ T6335] hfsplus: request for non-existent node 33423360 in B*Tree [ 161.690793][ T6335] hfsplus: request for non-existent node 33423360 in B*Tree [ 162.261766][ T6330] hfsplus: request for non-existent node 33423360 in B*Tree [ 162.328612][ T6330] hfsplus: request for non-existent node 33423360 in B*Tree [ 162.523512][ T6335] hfsplus: request for non-existent node 33423360 in B*Tree [ 162.596314][ T6335] hfsplus: request for non-existent node 33423360 in B*Tree [ 162.701701][ T6346] hfsplus: request for non-existent node 33423360 in B*Tree [ 162.762666][ C0] net_ratelimit: 46 callbacks suppressed [ 162.807260][ T6346] hfsplus: request for non-existent node 33423360 in B*Tree [ 163.101741][ T6330] hfsplus: request for non-existent node 33423360 in B*Tree [ 163.190541][ T6330] hfsplus: request for non-existent node 33423360 in B*Tree [ 163.903941][ T6377] device ipip0 entered promiscuous mode [ 165.576979][ T4263] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 165.639894][ T4263] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 167.143539][ T6445] loop4: detected capacity change from 0 to 32768 [ 167.288773][ T6445] XFS (loop4): Mounting V5 Filesystem [ 167.366411][ T6445] XFS (loop4): Ending clean mount [ 167.829550][ T6499] loop6: detected capacity change from 0 to 512 [ 167.894404][ T6499] EXT4-fs (loop6): Ignoring removed nobh option [ 167.920676][ T6499] EXT4-fs (loop6): orphan cleanup on readonly fs [ 167.948492][ T6499] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #15: comm syz.6.462: corrupted inode contents [ 167.966445][ T6499] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 167.976639][ T6499] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #15: comm syz.6.462: corrupted inode contents [ 167.989182][ T6499] EXT4-fs error (device loop6): ext4_evict_inode:332: inode #15: comm syz.6.462: mark_inode_dirty error [ 168.011650][ T4263] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 168.052280][ T6499] EXT4-fs (loop6): 1 orphan inode deleted [ 168.090157][ T6499] EXT4-fs (loop6): mounted filesystem without journal. Opts: usrjquota=,acl,debug_want_extra_isize=0x000000000000005c,barrier,nobh,min_batch_time=0x000000000000b656,block_validity,,errors=continue. Quota mode: none. [ 168.281543][ C1] net_ratelimit: 36 callbacks suppressed [ 168.661929][ T4189] XFS (loop4): Unmounting Filesystem [ 168.699455][ T4263] usb 5-1: unable to get BOS descriptor or descriptor too short [ 168.772764][ T4263] usb 5-1: no configurations [ 168.777658][ T4263] usb 5-1: can't read configurations, error -22 [ 169.802607][ T6557] device syzkaller0 entered promiscuous mode [ 171.188259][ T6572] loop4: detected capacity change from 0 to 2048 [ 171.274524][ T6572] UDF-fs: bad mount option "00000000000000000000" or missing value [ 171.369101][ T6569] loop6: detected capacity change from 0 to 8192 [ 171.718472][ T6569] loop6: p1 p2 p3 [ 171.872192][ T6569] loop6: partition table partially beyond EOD, truncated [ 172.000542][ T6569] loop6: p1 start 68157184 is beyond EOD, truncated [ 172.017078][ T6580] loop4: detected capacity change from 0 to 1024 [ 172.028829][ T6580] hfsplus: unable to parse mount options [ 172.100588][ T6580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.483'. [ 173.316691][ C1] net_ratelimit: 43 callbacks suppressed [ 173.450588][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 173.469306][ T4328] udevd[4328]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 175.814883][ T6624] netlink: 'syz.6.499': attribute type 1 has an invalid length. [ 176.928210][ T6643] device syzkaller0 entered promiscuous mode [ 177.601807][ T1107] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 177.901759][ T1107] usb 7-1: Using ep0 maxpacket: 32 [ 178.092874][ T1107] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 178.191355][ T6674] netlink: 16 bytes leftover after parsing attributes in process `syz.4.513'. [ 178.372662][ T1107] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 178.389008][ T1107] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 178.401548][ T1107] usb 7-1: Product: syz [ 178.410766][ T1107] usb 7-1: Manufacturer: syz [ 178.530730][ T1107] usb 7-1: SerialNumber: syz [ 178.762584][ C0] net_ratelimit: 37 callbacks suppressed [ 178.842061][ T1107] usb 7-1: config 0 descriptor?? [ 179.008315][ T6667] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 179.082433][ T1107] hub 7-1:0.0: bad descriptor, ignoring hub [ 179.120774][ T1107] hub: probe of 7-1:0.0 failed with error -5 [ 181.013974][ T7] usb 7-1: USB disconnect, device number 4 [ 181.714982][ T6725] 8021q: adding VLAN 0 to HW filter on device bond1 [ 181.764088][ T6730] FAULT_INJECTION: forcing a failure. [ 181.764088][ T6730] name failslab, interval 1, probability 0, space 0, times 0 [ 181.777364][ T6730] CPU: 1 PID: 6730 Comm: syz.4.528 Not tainted syzkaller #0 [ 181.784661][ T6730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 181.794733][ T6730] Call Trace: [ 181.798010][ T6730] [ 181.798054][ T6730] dump_stack_lvl+0x188/0x250 [ 181.798080][ T6730] ? show_regs_print_info+0x20/0x20 [ 181.798097][ T6730] ? load_image+0x410/0x410 [ 181.798116][ T6730] ? __might_sleep+0xf0/0xf0 [ 181.806236][ T6730] ? __lock_acquire+0x7b50/0x7b50 [ 181.815912][ T6730] should_fail+0x383/0x4b0 [ 181.815940][ T6730] should_failslab+0x5/0x20 [ 181.825520][ T6730] slab_pre_alloc_hook+0x51/0xc0 [ 181.825544][ T6730] ? __kernfs_new_node+0xe3/0x6b0 [ 181.825562][ T6730] kmem_cache_alloc+0x3d/0x280 [ 181.834450][ T6730] __kernfs_new_node+0xe3/0x6b0 [ 181.834476][ T6730] ? kernfs_new_node+0x250/0x250 [ 181.844390][ T6730] ? sysfs_do_create_link_sd+0x75/0x110 [ 181.854000][ T6730] kernfs_new_node+0x148/0x250 [ 181.854027][ T6730] kernfs_create_link+0xa3/0x200 [ 181.864457][ T6730] sysfs_do_create_link_sd+0x83/0x110 [ 181.864479][ T6730] device_add+0x83b/0x1050 [ 181.874137][ T6730] wakeup_source_sysfs_add+0x1cf/0x2b0 [ 181.874159][ T6730] wakeup_source_register+0x15f/0x230 [ 181.883905][ T6730] ep_insert+0xe66/0x1990 [ 181.883935][ T6730] ? ep_loop_check+0x180/0x180 [ 181.894716][ T6730] ? bpf_lsm_capable+0x5/0x10 [ 181.903768][ T6730] ? security_capable+0x85/0xb0 [ 181.903795][ T6730] do_epoll_ctl+0x88b/0xeb0 [ 181.913283][ T6730] __x64_sys_epoll_ctl+0x162/0x1b0 [ 181.913306][ T6730] ? ep_modify+0xa80/0xa80 [ 181.922867][ T6730] ? lockdep_hardirqs_on+0x94/0x140 [ 181.922892][ T6730] do_syscall_64+0x4c/0xa0 [ 181.932461][ T6730] ? clear_bhb_loop+0x30/0x80 [ 181.932483][ T6730] ? clear_bhb_loop+0x30/0x80 [ 181.941534][ T6730] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 181.941555][ T6730] RIP: 0033:0x7f472250b159 [ 181.952074][ T6730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.952090][ T6730] RSP: 002b:00007f4720763028 EFLAGS: 00000246 [ 181.976072][ T6730] ORIG_RAX: 00000000000000e9 [ 181.976082][ T6730] RAX: ffffffffffffffda RBX: 00007f4722792fa0 RCX: 00007f472250b159 [ 181.976096][ T6730] RDX: 0000000000000007 RSI: 0000000000000001 RDI: 0000000000000006 [ 181.986792][ T6730] RBP: 00007f47225a206b R08: 0000000000000000 R09: 0000000000000000 [ 182.002703][ T6730] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 182.002717][ T6730] R13: 00007f4722793038 R14: 00007f4722792fa0 R15: 00007ffe6400cf28 [ 182.002743][ T6730] [ 182.101645][ T7] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 182.126559][ T6725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.527'. [ 182.157033][ T6725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.527'. [ 182.175921][ T6725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.196112][ T6725] bond1: (slave bond0): making interface the new active one [ 182.218467][ T6725] bond1: (slave bond0): Enslaving as an active interface with an up link [ 182.240880][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 182.417725][ T6735] device syzkaller0 entered promiscuous mode [ 183.366830][ T6755] tipc: Enabling of bearer rejected, failed to enable media [ 184.041550][ C1] net_ratelimit: 40 callbacks suppressed [ 184.728318][ T6763] syz.6.536 (6763): drop_caches: 2 [ 184.817660][ T6773] netlink: 12 bytes leftover after parsing attributes in process `syz.5.540'. [ 185.073105][ T6779] bridge1: port 1(erspan0) entered blocking state [ 185.100648][ T6779] bridge1: port 1(erspan0) entered disabled state [ 185.181457][ T6779] device erspan0 entered promiscuous mode [ 185.192653][ T6779] bridge1: port 1(erspan0) entered blocking state [ 185.199138][ T6779] bridge1: port 1(erspan0) entered forwarding state [ 185.961631][ T4237] Bluetooth: hci0: command 0x0406 tx timeout [ 185.986249][ T4237] Bluetooth: hci3: command 0x0406 tx timeout [ 186.029077][ T6789] loop6: detected capacity change from 0 to 1024 [ 186.043125][ T4237] Bluetooth: hci4: command 0x0406 tx timeout [ 186.188543][ T6793] netlink: 20 bytes leftover after parsing attributes in process `syz.1.547'. [ 187.009112][ T6801] device syzkaller0 entered promiscuous mode [ 187.087740][ T6803] overlayfs: failed to clone upperpath [ 188.772945][ T6843] netlink: 12 bytes leftover after parsing attributes in process `syz.6.559'. [ 189.321540][ C1] net_ratelimit: 43 callbacks suppressed [ 190.332304][ T6865] tipc: Enabling of bearer rejected, failed to enable media [ 193.600264][ T6914] netlink: 16 bytes leftover after parsing attributes in process `syz.1.573'. [ 194.709256][ C0] net_ratelimit: 28 callbacks suppressed [ 195.020776][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.027110][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.913086][ T4264] Bluetooth: hci1: command 0x0406 tx timeout [ 197.992742][ T6948] netlink: 4 bytes leftover after parsing attributes in process `syz.6.582'. [ 198.774930][ T4264] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 199.793617][ C0] net_ratelimit: 39 callbacks suppressed [ 200.170977][ T6969] loop6: detected capacity change from 0 to 40427 [ 200.281163][ T6969] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 200.289066][ T6969] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 200.301884][ T6969] F2FS-fs (loop6): invalid crc value [ 200.350264][ T6969] F2FS-fs (loop6): Found nat_bits in checkpoint [ 200.437885][ T6969] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 200.445316][ T6969] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 200.453615][ T4264] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 200.476769][ T4264] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.511532][ T4264] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 200.537227][ T4264] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.193163][ T6979] FAULT_INJECTION: forcing a failure. [ 201.193163][ T6979] name failslab, interval 1, probability 0, space 0, times 0 [ 201.233846][ T6979] CPU: 0 PID: 6979 Comm: syz.4.594 Not tainted syzkaller #0 [ 201.241173][ T6979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 201.251236][ T6979] Call Trace: [ 201.254523][ T6979] [ 201.257462][ T6979] dump_stack_lvl+0x188/0x250 [ 201.262150][ T6979] ? show_regs_print_info+0x20/0x20 [ 201.267358][ T6979] ? load_image+0x410/0x410 [ 201.271875][ T6979] ? __might_sleep+0xf0/0xf0 [ 201.276479][ T6979] ? __lock_acquire+0x7b50/0x7b50 [ 201.281513][ T6979] should_fail+0x383/0x4b0 [ 201.285969][ T6979] should_failslab+0x5/0x20 [ 201.290476][ T6979] slab_pre_alloc_hook+0x51/0xc0 [ 201.295406][ T6979] ? vm_area_dup+0x1e/0xb0 [ 201.295423][ T6979] kmem_cache_alloc+0x3d/0x280 [ 201.295441][ T6979] vm_area_dup+0x1e/0xb0 [ 201.295457][ T6979] __split_vma+0xb1/0x410 [ 201.304600][ T6979] ? find_vma+0xd2/0x230 [ 201.304623][ T6979] __do_munmap+0x38a/0xe10 [ 201.304643][ T6979] ? mremap_userfaultfd_prep+0xd1/0x1b0 [ 201.313184][ T6979] move_vma+0x770/0xbc0 [ 201.313212][ T6979] ? vma_expandable+0x110/0x110 [ 201.313227][ T6979] ? cap_mmap_addr+0x153/0x2c0 [ 201.321837][ T6979] ? bpf_lsm_file_ioctl_compat+0x10/0x10 [ 201.321855][ T6979] ? security_mmap_addr+0x6e/0x90 [ 201.331563][ T6979] ? get_unmapped_area+0x2f0/0x360 [ 201.331586][ T6979] mremap_to+0x556/0x6b0 [ 201.361119][ T6979] __se_sys_mremap+0x412/0x950 [ 201.365912][ T6979] ? __x64_sys_mremap+0xc0/0xc0 [ 201.370775][ T6979] ? lock_chain_count+0x20/0x20 [ 201.375649][ T6979] ? lockdep_hardirqs_on+0x94/0x140 [ 201.380849][ T6979] ? __x64_sys_mremap+0x1c/0xc0 [ 201.385708][ T6979] do_syscall_64+0x4c/0xa0 [ 201.390130][ T6979] ? clear_bhb_loop+0x30/0x80 [ 201.394813][ T6979] ? clear_bhb_loop+0x30/0x80 [ 201.399503][ T6979] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 201.405409][ T6979] RIP: 0033:0x7f472250b159 [ 201.409824][ T6979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.429437][ T6979] RSP: 002b:00007f4720763028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 201.437870][ T6979] RAX: ffffffffffffffda RBX: 00007f4722792fa0 RCX: 00007f472250b159 [ 201.445848][ T6979] RDX: 0000000000003021 RSI: 0000000000003000 RDI: 0000200000001000 [ 201.453827][ T6979] RBP: 00007f47225a206b R08: 0000200000ffd000 R09: 0000000000000000 [ 201.461807][ T6979] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 201.469785][ T6979] R13: 00007f4722793038 R14: 00007f4722792fa0 R15: 00007ffe6400cf28 [ 201.477769][ T6979] [ 201.511827][ T4264] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 201.520898][ T4264] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 201.591964][ T4264] usb 5-1: can't set config #1, error -71 [ 201.630852][ T4264] usb 5-1: USB disconnect, device number 7 [ 202.012740][ T6994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.599'. [ 203.775235][ T7010] mmap: syz.6.604 (7010) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 205.002060][ T144] net_ratelimit: 47 callbacks suppressed [ 207.293660][ T7017] loop6: detected capacity change from 0 to 32768 [ 207.960076][ T7017] (syz.6.604,7017,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 207.992897][ T7017] (syz.6.604,7017,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 208.079616][ T7017] JBD2: Ignoring recovery information on journal [ 208.657305][ T7017] JBD2: recovery failed [ 208.678485][ T7017] (syz.6.604,7017,0):ocfs2_journal_load:1106 ERROR: Failed to load journal! [ 208.688529][ T7048] netlink: 4 bytes leftover after parsing attributes in process `syz.5.611'. [ 208.719911][ T7017] (syz.6.604,7017,0):ocfs2_check_volume:2435 ERROR: ocfs2 journal load failed! -5 [ 208.889101][ T7017] (syz.6.604,7017,0):ocfs2_check_volume:2491 ERROR: status = -5 [ 209.624277][ T13] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 209.711989][ T7017] (syz.6.604,7017,0):ocfs2_mount_volume:1824 ERROR: status = -5 [ 209.922101][ T7017] (syz.6.604,7017,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 210.121556][ C0] net_ratelimit: 33 callbacks suppressed [ 211.253650][ T13] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 212.011534][ T13] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 212.046349][ T7080] loop4: detected capacity change from 0 to 4096 [ 212.071755][ T13] usb 5-1: string descriptor 0 read error: -71 [ 212.203081][ T13] usb 5-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 212.218720][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 212.261789][ T13] usb 5-1: can't set config #1, error -71 [ 213.562884][ T13] usb 5-1: USB disconnect, device number 8 [ 214.754093][ T7111] loop4: detected capacity change from 0 to 164 [ 215.241527][ C1] net_ratelimit: 46 callbacks suppressed [ 220.281534][ C1] net_ratelimit: 41 callbacks suppressed [ 220.314604][ T25] audit: type=1326 audit(1790667965.008:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.1.648" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9c21791159 code=0x0 [ 223.989101][ T7192] loop6: detected capacity change from 0 to 32768 [ 224.968668][ T7192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.062982][ T7216] tipc: Enabling of bearer rejected, failed to enable media [ 225.071939][ T25] audit: type=1800 audit(1790667969.758:14): pid=7192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.653" name="file1" dev="loop6" ino=4 res=0 errno=0 [ 225.481527][ C0] net_ratelimit: 39 callbacks suppressed [ 226.026070][ T7191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.314546][ T25] audit: type=1326 audit(1790667971.008:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7237 comm="syz.2.666" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0302a87159 code=0x0 [ 227.435225][ T7252] netlink: 36 bytes leftover after parsing attributes in process `syz.5.674'. [ 229.667072][ T7277] loop4: detected capacity change from 0 to 1024 [ 230.521592][ C1] net_ratelimit: 42 callbacks suppressed [ 232.065090][ T13] Bluetooth: hci5: command 0x0406 tx timeout [ 234.218421][ T7346] loop6: detected capacity change from 0 to 32768 [ 234.282701][ T7346] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.696 (7346) [ 234.312734][ T7346] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 234.321733][ T7346] BTRFS info (device loop6): use zlib compression, level 3 [ 234.328936][ T7346] BTRFS info (device loop6): turning on sync discard [ 234.335710][ T7346] BTRFS info (device loop6): using free space tree [ 234.342266][ T7346] BTRFS info (device loop6): has skinny extents [ 234.577994][ T7346] BTRFS info (device loop6): enabling ssd optimizations [ 235.123604][ T25] audit: type=1800 audit(1790667979.558:16): pid=7381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.696" name="file1" dev="loop6" ino=260 res=0 errno=0 [ 235.485690][ T7388] netlink: 'syz.5.701': attribute type 1 has an invalid length. [ 235.571526][ C0] net_ratelimit: 43 callbacks suppressed [ 235.607997][ T7388] 8021q: adding VLAN 0 to HW filter on device bond2 [ 235.733385][ T7385] netlink: 'syz.4.699': attribute type 16 has an invalid length. [ 235.771698][ T7385] netlink: 'syz.4.699': attribute type 17 has an invalid length. [ 235.779596][ T7385] netlink: 'syz.4.699': attribute type 27 has an invalid length. [ 235.873702][ T7393] netlink: 8 bytes leftover after parsing attributes in process `syz.5.701'. [ 236.420020][ T7398] bond2: (slave bridge2): making interface the new active one [ 236.430007][ T7398] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 236.510052][ T4328] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop6 scanned by udevd (4328) [ 236.545991][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 237.553081][ T7429] futex_wake_op: syz.5.704 tries to shift op by 144; fix this program [ 239.554801][ T7462] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4184] was attempted by ""[7462] [ 240.763513][ C0] net_ratelimit: 39 callbacks suppressed [ 243.073803][ T7514] overlayfs: failed to clone upperpath [ 245.212295][ T7545] netlink: 'syz.5.742': attribute type 1 has an invalid length. [ 245.296694][ T7545] device bond3 entered promiscuous mode [ 245.302594][ T7545] 8021q: adding VLAN 0 to HW filter on device bond3 [ 245.473114][ T7545] 8021q: adding VLAN 0 to HW filter on device bond3 [ 245.479997][ T7545] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 245.564057][ T7545] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 245.589855][ T7545] bond3: (slave wireguard0): making interface the new active one [ 245.598007][ T7545] device wireguard0 entered promiscuous mode [ 245.608321][ T7545] bond3: (slave wireguard0): Enslaving as an active interface with an up link [ 245.617507][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 245.961919][ C0] net_ratelimit: 44 callbacks suppressed [ 246.143833][ T7560] futex_wake_op: syz.4.747 tries to shift op by 144; fix this program [ 247.290082][ T7580] fuse: Bad value for 'fd' [ 248.990861][ T7623] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 250.432559][ T7678] overlayfs: failed to clone upperpath [ 250.525070][ T7680] overlayfs: failed to clone upperpath [ 251.411507][ C1] net_ratelimit: 40 callbacks suppressed [ 252.496713][ T7703] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 253.710714][ T7745] fuse: Bad value for 'fd' [ 255.602174][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.608523][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.611248][ T7768] xt_CT: No such helper "pptp" [ 255.695469][ T7775] netlink: 'syz.6.806': attribute type 1 has an invalid length. [ 255.756190][ T7775] device bond1 entered promiscuous mode [ 255.765953][ T7775] 8021q: adding VLAN 0 to HW filter on device bond1 [ 255.800559][ T7779] 8021q: adding VLAN 0 to HW filter on device bond1 [ 255.809060][ T7779] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 255.819868][ T7779] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 255.836477][ T7779] bond1: (slave wireguard0): making interface the new active one [ 255.866492][ T7779] device wireguard0 entered promiscuous mode [ 255.876686][ T7779] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 255.889045][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 256.601517][ C1] net_ratelimit: 48 callbacks suppressed [ 257.508028][ T7806] netlink: 'syz.1.813': attribute type 1 has an invalid length. [ 258.209606][ T7806] 8021q: adding VLAN 0 to HW filter on device bond2 [ 258.218827][ T7807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.813'. [ 258.331113][ T7810] bond2: (slave bridge1): making interface the new active one [ 258.490756][ T7810] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 259.038795][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 259.335848][ T7831] autofs4:pid:7831:autofs_fill_super: called with bogus options [ 259.482738][ T7834] netlink: 'syz.2.823': attribute type 1 has an invalid length. [ 259.529306][ T7834] device bond1 entered promiscuous mode [ 259.546113][ T7834] 8021q: adding VLAN 0 to HW filter on device bond1 [ 260.200623][ T7838] xt_CT: No such helper "pptp" [ 260.324172][ T7840] 8021q: adding VLAN 0 to HW filter on device bond1 [ 260.331947][ T7840] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 260.342762][ T7840] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 260.358491][ T7840] bond1: (slave wireguard0): making interface the new active one [ 260.366719][ T7840] device wireguard0 entered promiscuous mode [ 260.380935][ T7840] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 260.408758][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 262.121523][ C0] net_ratelimit: 55 callbacks suppressed [ 262.594366][ T7865] netlink: 'syz.4.833': attribute type 1 has an invalid length. [ 262.635184][ T7865] 8021q: adding VLAN 0 to HW filter on device bond2 [ 263.426719][ T7869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.833'. [ 263.510481][ T7865] bond2: (slave bridge1): making interface the new active one [ 263.519713][ T7865] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 263.529093][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 263.734938][ T7880] netlink: 8 bytes leftover after parsing attributes in process `syz.5.848'. [ 264.534194][ T7889] autofs4:pid:7889:autofs_fill_super: called with bogus options [ 266.044667][ T7929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.853'. [ 266.169213][ T7930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.864'. [ 267.481524][ C0] net_ratelimit: 42 callbacks suppressed [ 268.537348][ T7973] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4189] was attempted by ""[7973] [ 270.223251][ T7984] netlink: 8 bytes leftover after parsing attributes in process `syz.5.870'. [ 272.067442][ T8027] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4399] was attempted by ""[8027] [ 272.583323][ T4437] net_ratelimit: 36 callbacks suppressed [ 276.449463][ T8080] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4191] was attempted by ""[8080] [ 277.962042][ C0] net_ratelimit: 36 callbacks suppressed [ 278.912922][ T8105] tmpfs: Unknown parameter 'usrquotþ²êßm"ÌóVK\íßJa_blo' [ 279.604640][ T8119] overlayfs: './file0' not a directory [ 279.667370][ T8105] Error parsing options; rc = [-22] [ 281.323064][ T8159] jffs2: notice: (8159) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 282.907059][ T8200] jffs2: notice: (8200) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 283.001668][ C1] net_ratelimit: 31 callbacks suppressed [ 285.630245][ T8248] tmpfs: Unknown parameter 'usrquotþ²êßm"ÌóVK\íßJa_blo' [ 285.652669][ T8248] overlayfs: './file0' not a directory [ 285.661247][ T8248] Error parsing options; rc = [-22] [ 288.201750][ C1] net_ratelimit: 39 callbacks suppressed [ 293.349139][ T154] net_ratelimit: 31 callbacks suppressed [ 298.282301][ T8405] 8021q: adding VLAN 0 to HW filter on device bond2 [ 298.323056][ T8413] netlink: 8 bytes leftover after parsing attributes in process `syz.6.994'. [ 298.338855][ T8413] netlink: 4 bytes leftover after parsing attributes in process `syz.6.994'. [ 298.423606][ T8413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.451487][ C0] net_ratelimit: 29 callbacks suppressed [ 299.155490][ T8413] bond2: (slave bond0): making interface the new active one [ 299.272055][ T8413] bond2: (slave bond0): Enslaving as an active interface with an up link [ 299.313364][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 300.446604][ T8459] Invalid option length (409) for dns_resolver key [ 303.046270][ T8489] kAFS: No cell specified [ 303.104392][ T8494] bond1: option mode: unable to set because the bond device has slaves [ 303.553481][ T154] net_ratelimit: 29 callbacks suppressed [ 304.190014][ T8513] overlayfs: failed to clone upperpath [ 308.773412][ T4277] net_ratelimit: 31 callbacks suppressed [ 314.250433][ T4687] net_ratelimit: 32 callbacks suppressed [ 314.997469][ T8644] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 315.006891][ T8644] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 315.016578][ T8644] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 315.025262][ T8644] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 315.034032][ T8644] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 315.042576][ T8644] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 315.051206][ T8644] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 316.326579][ T4203] Bluetooth: Frame is too long (len 16, expected len 4) [ 317.710393][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.717290][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.782589][ C0] net_ratelimit: 26 callbacks suppressed [ 323.801008][ T8751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 323.927116][ T8729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 323.943156][ T8729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 326.032183][ C1] net_ratelimit: 32 callbacks suppressed [ 326.994966][ T8773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 330.445459][ T8811] tipc: Enabling of bearer rejected, failed to enable media [ 330.716799][ T8818] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 331.387767][ T8821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 331.479817][ C1] net_ratelimit: 32 callbacks suppressed [ 332.549570][ T8841] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1115'. [ 333.690836][ T8854] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1119'. [ 336.901906][ T4689] net_ratelimit: 29 callbacks suppressed [ 341.074960][ T8930] overlayfs: missing 'lowerdir' [ 341.937728][ T8946] tipc: Enabling of bearer rejected, failed to enable media [ 342.494080][ C0] net_ratelimit: 31 callbacks suppressed [ 342.601241][ T8959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1146'. [ 342.707463][ T8975] overlayfs: failed to clone lowerpath [ 345.277683][ T9008] tipc: Enabling of bearer rejected, failed to enable media [ 345.946287][ T9016] jffs2: notice: (9016) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 347.545454][ T9035] x_tables: unsorted entry at hook 3 [ 348.389273][ C0] net_ratelimit: 38 callbacks suppressed [ 349.586863][ T9056] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1171'. [ 354.285290][ C0] net_ratelimit: 28 callbacks suppressed [ 356.448186][ T9150] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 357.209514][ T9157] 9pnet: Insufficient options for proto=fd [ 358.926848][ T9168] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 359.297021][ T9189] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 359.920790][ C0] net_ratelimit: 24 callbacks suppressed [ 365.556769][ C0] net_ratelimit: 32 callbacks suppressed [ 367.660655][ T9273] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1235'. [ 371.821322][ C0] net_ratelimit: 26 callbacks suppressed [ 374.198662][ T9327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1250'. [ 375.332880][ T9342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1256'. [ 375.333066][ T9342] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 377.317476][ C1] net_ratelimit: 33 callbacks suppressed [ 377.691179][ T9381] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4184] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[9381] [ 382.896801][ C0] net_ratelimit: 26 callbacks suppressed [ 384.799526][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.805942][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.811519][ T9488] 9pnet_virtio: no channels available for device syz [ 388.706181][ C0] net_ratelimit: 25 callbacks suppressed [ 390.481440][ T9527] bond1: option mode: unable to set because the bond device has slaves [ 390.756912][ T9533] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 394.341542][ C0] net_ratelimit: 41 callbacks suppressed [ 394.422107][ T9548] 8021q: adding VLAN 0 to HW filter on device bond2 [ 394.643108][ T9554] device bond_slave_0 entered promiscuous mode [ 394.649991][ T9554] device bond_slave_1 entered promiscuous mode [ 394.677915][ T9554] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 394.689204][ T9554] bond2: (slave macvlan2): Enslaving as a backup interface with an up link [ 394.820044][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 394.866987][ T9561] tipc: Started in network mode [ 394.879459][ T9561] tipc: Node identity 4, cluster identity 4711 [ 394.885804][ T9561] tipc: Node number set to 4 [ 399.803591][ C0] net_ratelimit: 25 callbacks suppressed [ 405.276786][ C1] net_ratelimit: 25 callbacks suppressed [ 405.627622][ T4684] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 406.089099][ T9701] autofs4:pid:9701:autofs_fill_super: called with bogus options [ 406.409846][ T9703] atomic_op ffff88801d1d8198 conn xmit_atomic 0000000000000000 [ 410.901587][ C1] net_ratelimit: 37 callbacks suppressed [ 414.882233][ T9795] tipc: Enabling of bearer rejected, failed to enable media [ 416.970603][ C0] net_ratelimit: 26 callbacks suppressed [ 418.868547][ T9839] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 421.642509][ T9859] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1394'. [ 422.681789][ T4689] net_ratelimit: 28 callbacks suppressed [ 424.008499][ T9873] fuse: Bad value for 'fd' [ 424.727621][ T9885] No source specified [ 427.567230][ T9919] fuse: Bad value for 'fd' [ 428.390422][ C0] net_ratelimit: 26 callbacks suppressed [ 428.599775][ T9931] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1415'. [ 429.686359][ T9928] autofs4:pid:9928:autofs_fill_super: called with bogus options [ 434.224313][ C1] net_ratelimit: 31 callbacks suppressed [ 437.016844][T10044] overlayfs: missing 'lowerdir' [ 437.169869][T10043] overlayfs: failed to clone upperpath [ 437.581450][T10048] tmpfs: Unknown parameter 'quota' [ 439.773309][ C1] net_ratelimit: 28 callbacks suppressed [ 445.322214][ C0] net_ratelimit: 26 callbacks suppressed [ 450.937518][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 450.943830][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 450.957781][ C1] net_ratelimit: 29 callbacks suppressed [ 451.042343][T10190] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1483'. [ 453.334589][T10236] xt_hashlimit: size too large, truncated to 1048576 [ 453.341700][T10236] xt_hashlimit: max too large, truncated to 1048576 [ 455.501640][T10249] overlayfs: failed to clone upperpath [ 456.420724][ C0] net_ratelimit: 28 callbacks suppressed [ 461.893065][ C1] net_ratelimit: 23 callbacks suppressed [ 465.996766][T10361] fuse: Bad value for 'fd' [ 466.042411][T10363] overlayfs: failed to clone lowerpath [ 467.517884][ C0] net_ratelimit: 22 callbacks suppressed [ 468.252097][T10374] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5131] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[10374] [ 468.269309][T10377] xt_hashlimit: size too large, truncated to 1048576 [ 468.276022][T10377] xt_hashlimit: max too large, truncated to 1048576 [ 472.990932][ C1] net_ratelimit: 26 callbacks suppressed [ 478.086185][T10471] overlayfs: failed to clone upperpath [ 478.609119][ C0] net_ratelimit: 25 callbacks suppressed [ 484.294805][ C0] net_ratelimit: 22 callbacks suppressed [ 486.342237][T10548] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1585'. [ 489.820063][T10572] net_ratelimit: 18 callbacks suppressed [ 489.820107][T10572] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 490.780715][T10584] futex_wake_op: syz.6.1594 tries to shift op by 144; fix this program [ 495.349489][ C1] net_ratelimit: 25 callbacks suppressed [ 496.369008][T10629] ip_tables: iptables: counters copy to user failed while replacing table [ 496.390985][T10631] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4191] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[10631] [ 496.409633][ T4203] Bluetooth: Wrong link type (-22) [ 496.415675][T10631] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1609'. [ 496.424904][T10631] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1609'. [ 496.435163][T10631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1609'. [ 496.791411][T10637] overlayfs: failed to clone lowerpath [ 499.084059][T10645] overlayfs: failed to clone upperpath [ 499.406354][T10662] fuse: Bad value for 'fd' [ 500.503807][T10672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 500.898202][ C0] net_ratelimit: 25 callbacks suppressed [ 501.059718][T10666] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 501.059718][T10666] [ 501.073572][T10666] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 501.089208][T10666] CIFS: Attempting to mount \\127.0.0.1\share [ 501.103104][T10666] CIFS: VFS: Error connecting to socket. Aborting operation. [ 501.111628][T10666] CIFS: VFS: cifs_mount failed w/return code = -111 [ 501.241261][T10677] tipc: Enabling of bearer rejected, failed to enable media [ 507.031718][ C0] net_ratelimit: 24 callbacks suppressed [ 507.201795][T10744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1640'. [ 508.190405][T10762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1643'. [ 512.075563][T10807] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4184] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[10807] [ 512.776341][ C1] net_ratelimit: 24 callbacks suppressed [ 513.077607][T10820] atomic_op ffff8880773c4998 conn xmit_atomic 0000000000000000 [ 517.499102][T10863] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4189] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[10863] [ 517.823591][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 517.830150][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 518.196539][T10870] futex_wake_op: syz.2.1673 tries to shift op by 144; fix this program [ 518.209730][ C0] net_ratelimit: 21 callbacks suppressed [ 518.237569][T10870] futex_wake_op: syz.2.1673 tries to shift op by 144; fix this program [ 523.090820][T10922] 8021q: adding VLAN 0 to HW filter on device bond4 [ 523.193687][T10927] device bond_slave_0 entered promiscuous mode [ 523.199879][T10927] device bond_slave_1 entered promiscuous mode [ 523.258717][T10927] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 523.275939][T10927] bond4: (slave macvlan2): Enslaving as a backup interface with an up link [ 523.369944][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 523.682218][T10939] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4399] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[10939] [ 523.804428][ T4679] net_ratelimit: 32 callbacks suppressed [ 529.527029][ T154] net_ratelimit: 43 callbacks suppressed [ 530.337534][ T25] audit: type=1326 audit(1790668262.897:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10975 comm="syz.6.1698" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8a13d159 code=0x7ffc0000 [ 532.186978][ T25] audit: type=1326 audit(1790668262.897:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10975 comm="syz.6.1698" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8a13d159 code=0x7ffc0000 [ 533.209243][ T25] audit: type=1326 audit(1790668262.924:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10975 comm="syz.6.1698" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2b8a0fd98e code=0x7ffc0000 [ 533.449495][ T25] audit: type=1326 audit(1790668262.924:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10975 comm="syz.6.1698" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8a13d159 code=0x7ffc0000 [ 533.473759][ T25] audit: type=1326 audit(1790668262.934:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10975 comm="syz.6.1698" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8a13d159 code=0x7ffc0000 [ 533.500424][ T25] audit: type=1326 audit(1790668262.934:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10975 comm="syz.6.1698" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f2b8a13d159 code=0x7ffc0000 [ 533.524607][ T25] audit: type=1326 audit(1790668262.934:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10975 comm="syz.6.1698" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8a13d159 code=0x7ffc0000 [ 533.643051][ T25] audit: type=1326 audit(1790668262.934:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10975 comm="syz.6.1698" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8a13d159 code=0x7ffc0000 [ 534.807361][ T25] audit: type=1326 audit(1790668262.934:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10975 comm="syz.6.1698" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f2b8a13d159 code=0x7ffc0000 [ 534.874649][ T25] audit: type=1326 audit(1790668262.934:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10975 comm="syz.6.1698" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8a13d159 code=0x7ffc0000 [ 535.595447][ T4437] net_ratelimit: 23 callbacks suppressed [ 536.501325][T11019] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1710'. [ 536.555535][T11019] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1710'. [ 536.563487][ T25] audit: type=1326 audit(1790668262.934:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10975 comm="syz.6.1698" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f2b8a13d159 code=0x7ffc0000 [ 537.031155][ T25] audit: type=1326 audit(1790668262.934:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10975 comm="syz.6.1698" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8a13d159 code=0x7ffc0000 [ 537.219369][ T25] audit: type=1326 audit(1790668262.934:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10975 comm="syz.6.1698" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8a13d159 code=0x7ffc0000 [ 537.248060][ T25] audit: type=1326 audit(1790668262.934:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10975 comm="syz.6.1698" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f2b8a13d159 code=0x7ffc0000 [ 537.272105][ T25] audit: type=1326 audit(1790668262.934:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10975 comm="syz.6.1698" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8a13d159 code=0x7ffc0000 [ 537.296250][ T25] audit: type=1326 audit(1790668262.934:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10975 comm="syz.6.1698" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8a13d159 code=0x7ffc0000 [ 537.377106][T11037] futex_wake_op: syz.1.1701 tries to shift op by 144; fix this program [ 538.087222][ T25] audit: type=1326 audit(1790668262.934:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10975 comm="syz.6.1698" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f2b8a13d159 code=0x7ffc0000 [ 538.226678][T11027] jffs2: notice: (11027) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 539.379658][T11057] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1719'. [ 541.648109][ C1] net_ratelimit: 29 callbacks suppressed [ 542.154606][T11085] ipt_REJECT: ECHOREPLY no longer supported. [ 543.578477][T11104] futex_wake_op: syz.2.1731 tries to shift op by 144; fix this program [ 545.193017][T11114] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 545.206121][T11114] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 545.444537][T11117] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 545.485765][T11117] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 545.513251][T11117] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 546.314333][T11132] fuse: Bad value for 'fd' [ 547.205283][ C0] net_ratelimit: 24 callbacks suppressed [ 547.974459][T11153] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4399] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11153] [ 551.545211][T11187] autofs4:pid:11187:autofs_fill_super: called with bogus options [ 551.719264][T11187] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1755'. [ 552.678592][ C1] net_ratelimit: 22 callbacks suppressed [ 554.380139][T11219] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1761'. [ 555.835451][T11250] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1768'. [ 557.144755][T11256] kAFS: No cell specified [ 558.167750][ C0] net_ratelimit: 19 callbacks suppressed [ 561.310053][T11331] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4399] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11331] [ 563.378198][T11359] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4399] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11359] [ 564.199371][ C0] net_ratelimit: 31 callbacks suppressed [ 565.329622][ T25] audit: type=1326 audit(1790668551.160:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11383 comm="syz.4.1820" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f472250b159 code=0x0 [ 566.705890][T11406] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4191] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11406] [ 567.040028][T11407] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4184] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11407] [ 568.137852][T11432] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4399] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11432] [ 568.863068][T11442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1839'. [ 568.872325][T11442] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1839'. [ 569.638811][ T4438] net_ratelimit: 26 callbacks suppressed [ 570.429121][T11462] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4399] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11462] [ 570.455873][T11463] xt_hashlimit: size too large, truncated to 1048576 [ 570.462759][T11463] xt_hashlimit: max too large, truncated to 1048576 [ 570.470926][T11458] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5131] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11458] [ 571.117363][T11480] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4189] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11480] [ 572.617600][T11500] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5131] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11500] [ 573.369310][T11502] tipc: Enabling of bearer rejected, failed to enable media [ 573.439503][T11507] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4399] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11507] [ 573.870769][T11513] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4189] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11513] [ 574.982867][T11535] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4189] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11535] [ 575.432955][ T4684] net_ratelimit: 25 callbacks suppressed [ 575.766891][T11541] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5131] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11541] [ 577.300939][T11569] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4189] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11569] [ 577.550578][T11571] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4399] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11571] [ 578.073704][T11581] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5131] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11581] [ 580.363697][T11621] ipt_ECN: cannot use operation on non-tcp rule [ 580.532688][T11622] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5131] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11622] [ 580.724628][T11624] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4189] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11624] [ 581.067609][ T7415] net_ratelimit: 43 callbacks suppressed [ 581.940881][T11644] netlink: 300 bytes leftover after parsing attributes in process `syz.6.1910'. [ 582.542814][T11660] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4399] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11660] [ 582.953076][T11663] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5131] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11663] [ 583.591433][T11672] netlink: 'syz.1.1921': attribute type 9 has an invalid length. [ 583.936690][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 583.943619][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 585.299528][T11699] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5131] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11699] [ 585.599040][T11700] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4191] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11700] [ 586.281224][T11709] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4184] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11709] [ 586.701558][ C0] net_ratelimit: 39 callbacks suppressed [ 587.461288][T11728] openvswitch: netlink: Message has 16 unknown bytes. [ 588.916215][T11716] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5131] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11716] [ 589.428663][T11753] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4184] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11753] [ 592.881087][ T4438] net_ratelimit: 25 callbacks suppressed [ 595.011221][T11802] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4189] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11802] [ 595.607972][T11811] netlink: 'syz.4.1966': attribute type 9 has an invalid length. [ 595.899586][T11814] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5131] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11814] [ 597.753068][T11826] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4399] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11826] [ 598.621494][ T4679] net_ratelimit: 28 callbacks suppressed [ 599.068555][T11840] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1973'. [ 601.932373][T11862] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4189] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11862] [ 601.981499][T11866] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5131] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11866] [ 602.749114][T11879] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5131] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11879] [ 602.911779][T11881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1990'. [ 604.072388][ T448] net_ratelimit: 27 callbacks suppressed [ 604.899390][T11874] infiniband syz2: set active [ 605.028347][T11874] infiniband syz2: added team_slave_0 [ 605.336882][T11874] infiniband syz2: Couldn't open port 1 [ 605.464208][T11905] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4399] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11905] [ 605.772749][T11874] RDS/IB: syz2: added [ 605.802832][T11874] smc: adding ib device syz2 with port count 1 [ 605.856468][T11874] smc: ib device syz2 port 1 has pnetid [ 606.275753][T11920] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4184] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11920] [ 606.519527][T11922] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4399] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11922] [ 608.284317][T11956] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4191] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11956] [ 608.950551][T11967] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4399] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11967] [ 609.547520][ C0] net_ratelimit: 28 callbacks suppressed [ 610.507694][T11980] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2022'. [ 610.746473][T11988] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4399] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11988] [ 612.126611][T12001] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2025'. [ 612.515240][T12009] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4189] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[12009] [ 615.168393][ C1] net_ratelimit: 20 callbacks suppressed [ 617.338082][T12056] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2045'. [ 617.551310][T12061] libceph: resolve '. [ 617.551310][T12061] #)|.زf͹Ç�²a×ïÅ2sˆoÖw¿úÕ?£'Ê%Ð�KAq‰f»�CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM�¤¨ìó¤h‡E$ [ 617.551310][T12061] ' (ret=-3): failed [ 617.601622][T12066] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2047'. [ 618.112959][T12069] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2051'. [ 619.985442][T12092] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 621.069296][ C1] net_ratelimit: 26 callbacks suppressed [ 623.542776][T12151] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4399] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[12151] [ 625.077741][T12166] netlink: 'syz.4.2085': attribute type 2 has an invalid length. [ 625.134176][T12166] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.2085'. [ 625.225055][T12173] IPv6: NLM_F_CREATE should be specified when creating new route [ 626.511200][ C0] net_ratelimit: 25 callbacks suppressed [ 626.755012][T12198] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4191] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[12198] [ 632.410035][ T4684] net_ratelimit: 24 callbacks suppressed [ 635.847666][T12316] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4191] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[12316] [ 638.224252][ C1] net_ratelimit: 21 callbacks suppressed [ 640.850296][T12365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2152'. [ 640.860269][T12350] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2146'. [ 641.394464][T12385] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4189] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[12385] [ 643.138360][T12403] autofs4:pid:12403:autofs_fill_super: called with bogus options [ 643.241841][T12411] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2169'. [ 643.253367][T12403] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2165'. [ 643.524106][T12417] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4399] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[12417] [ 643.813786][ C0] net_ratelimit: 33 callbacks suppressed [ 644.569081][T12434] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4184] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[12434] [ 644.776045][T12436] netlink: 'syz.2.2174': attribute type 9 has an invalid length. [ 645.894510][T12456] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5131] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[12456] [ 647.048902][T12483] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4189] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[12483] [ 647.262424][T12486] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4184] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[12486] [ 647.892680][T12493] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5131] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[12493] [ 649.128177][T12505] netlink: 'syz.5.2195': attribute type 9 has an invalid length. [ 649.413485][T12517] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4189] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[12517] [ 649.735011][ C0] net_ratelimit: 22 callbacks suppressed [ 650.000076][T12519] netlink: 774 bytes leftover after parsing attributes in process `syz.6.2201'. [ 650.009963][T12519] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2201'. [ 650.436428][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 650.442808][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 650.746838][T12552] netlink: 'syz.6.2218': attribute type 9 has an invalid length. [ 650.759543][T12555] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4184] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[12555] [ 652.217518][T12589] futex_wake_op: syz.6.2227 tries to shift op by 144; fix this program [ 653.148692][T12599] netlink: 'syz.1.2234': attribute type 9 has an invalid length. [ 653.172233][T12601] overlayfs: failed to clone upperpath [ 655.294788][ C0] net_ratelimit: 22 callbacks suppressed [ 655.594729][T12643] netlink: 'syz.1.2251': attribute type 9 has an invalid length. [ 657.205248][T12680] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 657.252781][T12680] CIFS: Attempting to mount \\127.0.0.1\share [ 657.296465][T12680] CIFS: VFS: No username specified [ 658.925790][T12694] netlink: 'syz.5.2264': attribute type 9 has an invalid length. [ 660.575537][T12727] 9pnet: Insufficient options for proto=fd [ 661.386707][ C0] net_ratelimit: 35 callbacks suppressed [ 661.859181][ T25] audit: type=1326 audit(2000000025.881:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12752 comm="syz.1.2289" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9c21791159 code=0x0 [ 662.311770][T12764] unsupported nla_type 35 [ 666.989176][ C0] net_ratelimit: 20 callbacks suppressed [ 668.301531][T12868] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5131] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[12868] [ 668.912617][T12874] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2331'. [ 671.396599][T12909] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2343'. [ 671.667165][T12921] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2350'. [ 672.036074][T12930] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4184] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[12930] [ 672.451113][T10993] net_ratelimit: 29 callbacks suppressed [ 672.879203][T12940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2358'. [ 674.360293][T12975] device wlan0 entered promiscuous mode [ 674.375177][T12975] mac80211_hwsim hwsim4 wlan0: refused to change device tx_queue_len [ 675.318634][T12992] netlink: 'syz.2.2378': attribute type 1 has an invalid length. [ 675.534547][T13009] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 675.690386][T13015] device macvlan1 entered promiscuous mode [ 676.342184][T13024] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2394'. [ 676.477560][T13024] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2394'. [ 676.695288][T13033] jffs2: notice: (13033) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 677.077302][T13046] syz.4.2403[13046] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 677.077463][T13046] syz.4.2403[13046] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 677.643920][T13059] bridge: RTM_NEWNEIGH with invalid ether address [ 677.800669][T13059] bridge: RTM_NEWNEIGH with invalid ether address [ 677.973559][ T7415] net_ratelimit: 24 callbacks suppressed [ 678.274306][T13063] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4191] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[13063] [ 678.391365][T13071] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2412'. [ 679.688044][T13095] IPVS: Scheduler module ip_vs_sip not found [ 681.539440][T13133] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4184] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[13133] [ 682.829653][T13158] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4189] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[13158] [ 683.431852][T13167] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4184] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[13167] [ 683.729597][ T154] net_ratelimit: 30 callbacks suppressed [ 683.853540][T13176] jffs2: notice: (13176) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 684.356446][T13191] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4184] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[13191] [ 685.960367][T13249] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5131] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[13249] [ 687.586207][T13302] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5131] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[13302] [ 688.499742][T13319] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4184] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[13319] [ 688.594219][T13321] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5131] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[13321] [ 689.282761][ C1] net_ratelimit: 23 callbacks suppressed [ 690.401806][T13342] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4184] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[13342] [ 691.018389][T13360] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4189] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[13360] [ 691.568772][T13389] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4191] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[13389] [ 693.336269][T13433] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5131] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[13433] [ 693.770698][T13430] lo speed is unknown, defaulting to 1000 [ 693.778725][T13430] lo speed is unknown, defaulting to 1000 [ 693.798671][T13430] lo speed is unknown, defaulting to 1000 [ 693.861214][T13442] netlink: 'syz.1.2554': attribute type 1 has an invalid length. [ 693.948424][T13442] 8021q: adding VLAN 0 to HW filter on device bond3 [ 694.061328][T13446] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.080067][T13446] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.128093][T13446] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.141444][T13430] infiniband sz1: set active [ 694.146326][T13430] infiniband sz1: added lo [ 694.187953][T13446] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.341736][T13446] bond3: (slave geneve2): making interface the new active one [ 694.358789][T13446] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 694.397974][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 694.415467][T13430] RDS/IB: sz1: added [ 694.425353][T13430] smc: adding ib device sz1 with port count 1 [ 694.432771][T13430] smc: ib device sz1 port 1 has pnetid [ 694.461181][T13460] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4189] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[13460] [ 695.019100][ T4691] net_ratelimit: 24 callbacks suppressed [ 695.059649][ T4428] lo speed is unknown, defaulting to 1000 [ 695.224453][ T7415] lo speed is unknown, defaulting to 1000 [ 695.233119][T13430] lo speed is unknown, defaulting to 1000 [ 695.252683][T13465] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4184] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[13465] [ 695.484217][T13430] lo speed is unknown, defaulting to 1000 [ 695.727832][T13474] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4189] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[13474] [ 696.190439][T13430] lo speed is unknown, defaulting to 1000 [ 696.427454][T13430] lo speed is unknown, defaulting to 1000 [ 696.784855][T13430] lo speed is unknown, defaulting to 1000 [ 697.094343][T13502] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4191] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[13502] [ 698.734316][T13568] 9pnet: Insufficient options for proto=fd [ 698.800823][T13570] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2604'. [ 699.315281][T13585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2610'. [ 700.414724][T13611] "syz.6.2619" (13611) uses obsolete ecb(arc4) skcipher [ 701.073787][ T4689] net_ratelimit: 32 callbacks suppressed [ 701.266445][T13645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2634'. [ 703.780636][T13709] jffs2: notice: (13709) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 706.341681][T13766] netlink: 'syz.2.2677': attribute type 1 has an invalid length. [ 706.606461][T13766] 8021q: adding VLAN 0 to HW filter on device bond3 [ 706.614428][ T4413] net_ratelimit: 36 callbacks suppressed [ 706.777386][T13769] bond3: (slave geneve2): making interface the new active one [ 706.829259][T13769] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 706.885243][T10993] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 707.443014][T13786] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4189] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[13786] [ 708.315684][T13803] Illegal XDP return value 4294967294, expect packet loss! [ 709.467457][T13825] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 709.940061][T13839] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4399] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[13839] [ 710.361374][ C1] hrtimer: interrupt took 36338 ns [ 710.797976][T13871] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2719'. [ 710.812378][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 710.907328][T13878] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2720'. [ 710.975916][T13874] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2720'. [ 711.037147][T13874] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2720'. [ 711.088821][T13874] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2720'. [ 711.134891][T13874] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2720'. [ 711.552553][T13892] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 711.584895][T13892] FAT-fs (loop5): unable to read boot sector [ 712.005274][ T25] audit: type=1326 audit(2000000072.155:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13915 comm="syz.6.2736" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2b8a13d159 code=0x0 [ 712.160570][ T4413] net_ratelimit: 39 callbacks suppressed [ 712.235589][T13923] Invalid auth_tok structure returned from key query [ 712.263301][T13923] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 712.311790][T13923] One or more global auth toks could not properly register; rc = [-22] [ 712.347940][T13923] Error parsing options; rc = [-22] [ 713.598011][T13969] device veth0_macvtap left promiscuous mode [ 714.249379][T13989] fuse: Bad value for 'fd' [ 714.475976][T13999] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2766'. [ 714.520171][T14005] overlayfs: failed to clone upperpath [ 714.627242][ T3849] device veth0_macvtap entered promiscuous mode [ 715.904069][T14037] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 715.970563][T14037] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 716.006367][T14037] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 716.547715][T14049] lo speed is unknown, defaulting to 1000 [ 717.076768][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 717.083170][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 717.805716][ C1] net_ratelimit: 25 callbacks suppressed [ 717.869787][T14090] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4191] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[14090] [ 718.447780][T14103] af_packet: packet size is too long (1701719923 > 1484) [ 718.818421][T14111] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 720.226974][T14138] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4191] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[14138] [ 720.307668][T14140] netlink: 'syz.1.2806': attribute type 8 has an invalid length. [ 723.258534][ C0] net_ratelimit: 31 callbacks suppressed [ 724.479658][T14258] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4184] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[14258] [ 725.032330][T14262] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5131] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[14262] [ 726.340570][T14294] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4184] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[14294] [ 726.494815][T14302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2864'. [ 726.960259][T14320] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5131] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[14320] [ 727.572428][ C1] [ 727.574792][ C1] ============================================ [ 727.580933][ C1] WARNING: possible recursive locking detected [ 727.587150][ C1] syzkaller #0 Not tainted [ 727.591564][ C1] -------------------------------------------- [ 727.597705][ C1] syz.6.2875/14338 is trying to acquire lock: [ 727.599546][T14337] kcov: kcov_start: t = ffff88801f6d0000, size = 524288, area = ffffc900143dc000 [ 727.603757][ C1] ffff888066a24108 (&sch->q.lock){+.-.}-{2:2}, at: __dev_queue_xmit+0xa2b/0x2e50 [ 727.622058][ C1] [ 727.622058][ C1] but task is already holding lock: [ 727.624314][ C0] virtqueue callback for ffff888148640900 (ffffffff85491a80) [ 727.629415][ C1] ffff888066a24108 (&sch->q.lock){+.-.}-{2:2}, at: __dev_queue_xmit+0xa2b/0x2e50 [ 727.636813][ C0] No more buffers in queue [ 727.645877][ C1] [ 727.645877][ C1] other info that might help us debug this: [ 727.645883][ C1] Possible unsafe locking scenario: [ 727.645883][ C1] [ 727.650316][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 727.658298][ C1] CPU0 [ 727.658303][ C1] ---- [ 727.658307][ C1] lock(&sch->q.lock [ 727.665758][ C0] No more buffers in queue [ 727.671512][ C1] ); [ 727.671518][ C1] lock(&sch->q.lock); [ 727.671530][ C1] [ 727.671530][ C1] *** DEADLOCK *** [ 727.671530][ C1] [ 727.671534][ C1] May be due to missing lock nesting notation [ 727.671534][ C1] [ 727.674846][ C0] tcp_in_window: START [ 727.678084][ C1] 7 locks held by syz.6.2875/14338: [ 727.682089][ C0] tcp_in_window: [ 727.686431][ C1] #0: ffff88802c27c728 ( [ 727.688918][ C0] seq=1394302461 ack=2775483070+(0) sack=2775483070+(0) win=21378 end=1394302462 [ 727.693046][ C1] &mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2bb/0xc90 [ 727.701212][ C0] tcp_in_window: sender end=1394302461 maxend=1395485565 maxwin=2736384 scale=7 receiver end=2775483070 maxend=2778219454 maxwin=1183232 scale=7 [ 727.709501][ C1] #1: ffffc90000dd0bc0 ((&in_dev->mr_ifc_timer)){+.-.}-{0:0}, at: call_timer_fn+0xca/0x540 [ 727.713599][ C0] tcp_in_window: [ 727.718751][ C1] #2: ffffffff8c31ef60 [ 727.722359][ C0] seq=1394302461 ack=2775483070+(0) sack=2775483070+(0) win=21378 end=1394302462 [ 727.726660][ C1] (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 727.735775][ C0] tcp_in_window: sender end=1394302461 maxend=1395485565 maxwin=2736384 scale=7 receiver end=2775483070 maxend=2778219454 maxwin=1183232 scale=7 [ 727.743534][ C1] #3: ffffffff8c31efc0 [ 727.758186][ C0] tcp_in_window: I=1 II=1 III=1 IV=1 [ 727.768198][ C1] (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 727.771827][ C0] tcp_in_window: res=1 sender end=1394302462 maxend=1395485565 maxwin=2736384 receiver end=2775483070 maxend=2778219454 maxwin=1183232 [ 727.775951][ C1] #4: ffffffff8c31efc0 [ 727.785047][ C0] tcp_conntracks: [ 727.792456][ C1] (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 727.807248][ C0] syn=0 ack=1 fin=1 rst=0 old=3 new=4 [ 727.811351][ C1] #5: ffff888066a24108 (&sch->q.lock [ 727.817120][ C0] nf_conntrack: new packet for ffff88801e862f00 [ 727.824313][ C1] ){+.-.}-{2:2}, at: __dev_queue_xmit+0xa2b/0x2e50 [ 727.824349][ C1] #6: ffffffff8c31efc0 [ 727.838157][ C0] nf_nat: Already setup manip DST for ct ffff88801e862f00 (status bits 0x188) [ 727.842254][ C1] (rcu_read_lock_bh [ 727.842259][ C0] virtqueue callback for ffff888148640900 (ffffffff85491a80) [ 727.842265][ C1] ){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 727.842293][ C1] [ 727.842293][ C1] stack backtrace: [ 727.846016][ C0] nf_nat: Already setup manip SRC for ct ffff88801e862f00 (status bits 0x188) [ 727.853667][ C1] CPU: 1 PID: 14338 Comm: syz.6.2875 Not tainted syzkaller #0 [ 727.853691][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 727.859185][ C0] nf_conntrack: new packet for ffff88801e862a80 [ 727.864445][ C1] Call Trace: [ 727.870616][ C0] nf_nat: Already setup manip DST for ct ffff88801e862a80 (status bits 0x188) [ 727.877082][ C1] [ 727.877091][ C1] dump_stack_lvl+0x188/0x250 [ 727.881261][ C0] nf_nat: Already setup manip SRC for ct ffff88801e862a80 (status bits 0x188) [ 727.890056][ C1] ? show_regs_print_info+0x20/0x20 [ 727.890074][ C1] ? load_image+0x410/0x410 [ 727.894023][ C0] nf_nat: Already setup manip SRC for ct ffff88801e862a80 (status bits 0x188) [ 727.901297][ C1] __lock_acquire+0x1247/0x7b50 [ 727.908088][ C0] nf_conntrack: normal packet for ffff888077c9e480 [ 727.913319][ C1] ? ktime_get+0x7b/0x270 [ 727.922157][ C0] tcp_in_window: START [ 727.929561][ C1] ? verify_lock_unused+0x140/0x140 [ 727.929594][ C1] ? __lock_acquire+0x7b50/0x7b50 [ 727.939645][ C0] tcp_in_window: [ 727.945853][ C1] ? hrtimer_interrupt+0x4c1/0x8b0 [ 727.945877][ C1] ? ktime_get+0x7b/0x270 [ 727.949135][ C0] seq=2775483070 ack=1394302462+(0) sack=1394302462+(0) win=9244 end=2775483070 [ 727.957951][ C1] ? ktime_get+0x7b/0x270 [ 727.957971][ C1] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 727.960804][ C0] tcp_in_window: sender end=2775483070 maxend=2778219454 maxwin=1183232 scale=7 receiver end=1394302462 maxend=1395485565 maxwin=2736384 scale=7 [ 727.965454][ C1] ? ktime_get_real_ts64+0x440/0x440 [ 727.965472][ C1] lock_acquire+0x19e/0x400 [ 727.974308][ C0] tcp_in_window: [ 727.979461][ C1] ? __dev_queue_xmit+0xa2b/0x2e50 [ 727.983949][ C0] seq=2775483070 ack=1394302462+(0) sack=1394302462+(0) win=9244 end=2775483070 [ 727.992752][ C1] ? read_lock_is_recursive+0x10/0x10 [ 727.997587][ C0] tcp_in_window: sender end=2775483070 maxend=2778219454 maxwin=1183232 scale=7 receiver end=1394302462 maxend=1395485565 maxwin=2736384 scale=7 [ 728.004040][ C1] ? rcu_read_lock_bh_held+0x76/0xf0 [ 728.008360][ C0] tcp_in_window: I=1 II=1 III=1 IV=1 [ 728.012383][ C1] ? rcu_read_lock_held+0x40/0x40 [ 728.017569][ C0] tcp_in_window: res=1 sender end=2775483070 maxend=2778219454 maxwin=1183232 receiver end=1394302462 maxend=1395485694 maxwin=2736384 [ 728.022547][ C1] ? mark_lock+0x94/0x320 [ 728.026161][ C0] tcp_conntracks: [ 728.031236][ C1] _raw_spin_lock+0x2a/0x40 [ 728.035551][ C0] syn=0 ack=1 fin=0 rst=0 old=4 new=5 [ 728.044537][ C1] ? __dev_queue_xmit+0xa2b/0x2e50 [ 728.044556][ C1] __dev_queue_xmit+0xa2b/0x2e50 [ 728.048948][ C0] No more buffers in queue [ 728.055076][ C1] ? lock_chain_count+0x20/0x20 [ 728.069772][ C0] virtqueue callback for ffff888148640900 (ffffffff85491a80) [ 728.074992][ C1] ? dev_queue_xmit+0x20/0x20 [ 728.079491][ C0] eth0: xmit ffff88806139a640 42:01:0a:80:00:01 [ 728.083067][ C1] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 728.088171][ C0] Added buffer head 6 to ffff888148640a00 [ 728.097156][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 728.097176][ C1] ? _raw_spin_unlock+0x40/0x40 [ 728.097183][ C0] virtqueue callback for ffff888148640a00 (ffffffff85491b70) [ 728.097195][ C1] ? stack_trace_save+0xa6/0xf0 [ 728.102910][ C0] Sent skb ffff88806139a640 [ 728.117181][ C1] ? netdev_core_pick_tx+0x300/0x300 [ 728.117204][ C1] sch_frag_xmit_hook+0x2d8/0x1be0 [ 728.122484][ C0] No more buffers in queue [ 728.127727][ C1] ? __kasan_slab_alloc+0xa9/0xc0 [ 728.132780][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 728.146516][ C1] ? __kasan_slab_alloc+0x92/0xc0 [ 728.146547][ C1] ? slab_post_alloc_hook+0x4c/0x380 [ 728.150935][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 728.154597][ C1] ? kmem_cache_alloc+0x15d/0x280 [ 728.159178][ C0] No more buffers in queue [ 728.164464][ C1] ? skb_clone+0x1bd/0x350 [ 728.169748][ C0] tcp_in_window: START [ 728.174601][ C1] ? tcf_mirred_act+0x5b0/0x1640 [ 728.179018][ C0] tcp_in_window: [ 728.183816][ C1] ? tcf_action_exec+0x177/0x570 [ 728.191200][ C0] seq=1394302461 ack=2775483070+(0) sack=2775483070+(0) win=21378 end=1394302462 [ 728.195832][ C1] ? basic_classify+0x1ae/0x2c0 [ 728.202099][ C0] tcp_in_window: sender end=1394302462 maxend=1395485694 maxwin=2736384 scale=7 receiver end=2775483070 maxend=2778219454 maxwin=1183232 scale=7 [ 728.207932][ C1] ? tcf_classify+0x218/0xad0 [ 728.213684][ C0] tcp_in_window: [ 728.219516][ C1] ? qfq_enqueue+0x31b/0x1310 [ 728.224392][ C0] seq=1394302461 ack=2775483070+(0) sack=2775483070+(0) win=21378 end=1394302462 [ 728.231706][ C1] ? dev_qdisc_enqueue+0x48/0x210 [ 728.236590][ C0] tcp_in_window: sender end=1394302462 maxend=1395485694 maxwin=2736384 scale=7 receiver end=2775483070 maxend=2778219454 maxwin=1183232 scale=7 [ 728.241017][ C1] ? __dev_queue_xmit+0xbde/0x2e50 [ 728.246323][ C0] tcp_in_window: I=1 II=1 III=1 IV=1 [ 728.251378][ C1] ? ip_finish_output2+0xc77/0x10e0 [ 728.255792][ C0] tcp_in_window: res=1 sender end=1394302462 maxend=1395485694 maxwin=2736384 receiver end=2775483070 maxend=2778219454 maxwin=1183232 [ 728.260882][ C1] ? mq_dump_class_stats+0x430/0x430 [ 728.266703][ C0] tcp_conntracks: [ 728.271679][ C1] ? __run_timers+0x56c/0x810 [ 728.276960][ C0] syn=0 ack=1 fin=1 rst=0 old=5 new=6 [ 728.282719][ C1] ? run_timer_softirq+0x63/0xf0 [ 728.287757][ C0] tcp_in_window: START [ 728.292113][ C1] ? handle_softirqs+0x336/0x830 [ 728.296505][ C0] tcp_in_window: [ 728.300542][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 728.300559][ C1] ? irq_exit_rcu+0x5/0x20 [ 728.305471][ C0] seq=1394302461 ack=2775483070+(0) sack=2775483070+(0) win=21378 end=1394302462 [ 728.309081][ C1] ? sysvec_apic_timer_interrupt+0xa0/0xc0 [ 728.314041][ C0] tcp_in_window: sender end=1394302462 maxend=1395485694 maxwin=2736384 scale=7 receiver end=2775483070 maxend=2778219454 maxwin=1183232 scale=7 [ 728.323120][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 728.327986][ C0] tcp_in_window: [ 728.342622][ C1] ? percpu_up_read+0xb5/0x1b0 [ 728.347305][ C0] seq=1394302461 ack=2775483070+(0) sack=2775483070+(0) win=21378 end=1394302462 [ 728.350913][ C1] ? ext4_page_mkwrite+0x1012/0x1250 [ 728.355593][ C0] tcp_in_window: sender end=1394302462 maxend=1395485694 maxwin=2736384 scale=7 receiver end=2775483070 maxend=2778219454 maxwin=1183232 scale=7 [ 728.364640][ C1] ? do_page_mkwrite+0x168/0x3c0 [ 728.369659][ C0] tcp_in_window: I=1 II=1 III=1 IV=1 [ 728.384293][ C1] ? handle_mm_fault+0x1e47/0x4440 [ 728.384313][ C1] ? do_user_addr_fault+0x494/0xc90 [ 728.384332][ C1] ? exc_page_fault+0x60/0x100 [ 728.389446][ C0] tcp_in_window: res=1 sender end=1394302462 maxend=1395485694 maxwin=2736384 receiver end=2775483070 maxend=2778219454 maxwin=1183232 [ 728.394677][ C1] ? asm_exc_page_fault+0x22/0x30 [ 728.399868][ C0] tcp_conntracks: [ 728.413628][ C1] ? __copy_skb_header+0x3ba/0x4f0 [ 728.413649][ C1] ? memcpy+0x3c/0x60 [ 728.413655][ C0] virtqueue callback for ffff88801e152400 (ffffffff8444ab50) [ 728.413667][ C1] ? __copy_skb_header+0x3ba/0x4f0 [ 728.413683][ C1] ? __skb_clone+0x446/0x6c0 [ 728.413699][ C1] ? skb_clone+0x1f1/0x350 [ 728.413711][ C0] virtqueue interrupt with no work for ffff88801e152300 [ 728.413712][ C1] ? tcf_mirred_act+0x59a/0x1640 [ 728.413722][ C0] virtqueue interrupt with no work for ffff88801e152200 [ 728.413733][ C1] tcf_mirred_act+0xc5a/0x1640 [ 728.413753][ C1] tcf_action_exec+0x177/0x570 [ 728.419023][ C0] syn=0 ack=1 fin=1 rst=0 old=6 new=6 [ 728.422709][ C1] basic_classify+0x1ae/0x2c0 [ 728.427682][ T4171] nf_conntrack: normal packet for ffff888077c9e480 [ 728.432841][ C1] tcf_classify+0x218/0xad0 [ 728.432873][ C1] qfq_enqueue+0x31b/0x1310 [ 728.441080][T14087] Added buffer head 0 to ffff88801e152400 [ 728.441833][ C1] ? sch_tree_lock+0x110/0x110 [ 728.471860][ T4171] tcp_in_window: START [ 728.474466][ C1] ? do_raw_spin_lock+0x128/0x2f0 [ 728.489164][ T4171] tcp_in_window: [ 728.495240][ C1] ? __rwlock_init+0x140/0x140 [ 728.498863][ T4171] seq=2775483070 ack=1394302462+(0) sack=1394302462+(0) win=9244 end=2775483070 [ 728.503602][ C1] dev_qdisc_enqueue+0x48/0x210 [ 728.512709][ T4171] tcp_in_window: sender end=2775483070 maxend=2778219454 maxwin=1183232 scale=7 receiver end=1394302462 maxend=1395485694 maxwin=2736384 scale=7 [ 728.517949][ C1] __dev_queue_xmit+0xbde/0x2e50 [ 728.517976][ C1] ? dev_queue_xmit+0x20/0x20 [ 728.532648][ T4171] tcp_in_window: [ 728.537528][ C1] ? mark_lock+0x94/0x320 [ 728.537556][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 728.542821][ T4171] seq=2775483070 ack=1394302462+(0) sack=1394302462+(0) win=9244 end=2775483070 [ 728.547917][ C1] ? lock_chain_count+0x20/0x20 [ 728.547943][ C1] ? rcu_lock_acquire+0x30/0x30 [ 728.553124][ T4171] tcp_in_window: sender end=2775483070 maxend=2778219454 maxwin=1183232 scale=7 receiver end=1394302462 maxend=1395485694 maxwin=2736384 scale=7 [ 728.557862][ C1] ? ip_finish_output2+0x8c1/0x10e0 [ 728.571666][ T4171] tcp_in_window: I=1 II=1 III=1 IV=1 [ 728.576636][ C1] ? ip_finish_output2+0xa77/0x10e0 [ 728.580353][ T4171] tcp_in_window: res=1 sender end=2775483070 maxend=2778219454 maxwin=1183232 receiver end=1394302462 maxend=1395485694 maxwin=2736384 [ 728.585415][ C1] ip_finish_output2+0xc77/0x10e0 [ 728.589372][ T4171] tcp_conntracks: [ 728.596716][ C1] ? __ip_local_out+0x5e0/0x5e0 [ 728.596734][ C1] ? ip_fragment+0x210/0x210 [ 728.601834][ T4171] syn=0 ack=1 fin=0 rst=0 old=6 new=7 [ 728.606388][ C1] ? ip_mc_finish_output+0x260/0x260 [ 728.640561][ T4171] No more buffers in queue [ 728.644353][ C1] ? rcu_lock_release+0x5/0x20 [ 728.644381][ C1] ? ip_finish_output+0x3e5/0x4b0 [ 728.649064][ T4171] eth0: xmit ffff88806139a8c0 42:01:0a:80:00:01 [ 728.655518][ C1] ip_output+0x2ba/0x3e0 [ 728.655538][ C1] igmp_ifc_timer_expire+0xa97/0xbf0 [ 728.660018][ T4171] Added buffer head 6 to ffff888148640a00 [ 728.664491][ C0] virtqueue callback for ffff888148640a00 (ffffffff85491b70) [ 728.664488][ C1] ? igmp_gq_timer_expire+0xe0/0xe0 [ 728.664512][ C1] call_timer_fn+0x17b/0x540 [ 728.670944][ T4171] nf_conntrack: normal packet for ffff888077c9e480 [ 728.674943][ C1] ? igmp_gq_timer_expire+0xe0/0xe0 [ 728.679013][ T4171] tcp_in_window: START [ 728.683981][ C1] ? __run_timers+0x810/0x810 [ 728.684006][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 728.687613][ T4171] tcp_in_window: [ 728.687621][ T4171] seq=2775483070 ack=1394302462+(0) sack=1394302462+(0) win=9244 end=2775483070 [ 728.692350][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 728.692370][ C1] ? igmp_gq_timer_expire+0xe0/0xe0 [ 728.701388][ T4171] tcp_in_window: sender end=2775483070 maxend=2778219454 maxwin=1183232 scale=7 receiver end=1394302462 maxend=1395485694 maxwin=2736384 scale=7 [ 728.706197][ C1] __run_timers+0x56c/0x810 [ 728.720867][ T4171] tcp_in_window: [ 728.725765][ C1] ? detach_timer+0x2b0/0x2b0 [ 728.730409][ T4171] seq=2775483070 ack=1394302462+(0) sack=1394302462+(0) win=9244 end=2775483070 [ 728.734014][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 728.734040][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 728.738336][ T4171] tcp_in_window: sender end=2775483070 maxend=2778219454 maxwin=1183232 scale=7 receiver end=1394302462 maxend=1395485694 maxwin=2736384 scale=7 [ 728.744290][ C1] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 728.744311][ C1] run_timer_softirq+0x63/0xf0 [ 728.753314][ T4171] tcp_in_window: I=1 II=1 III=1 IV=1 [ 728.758124][ C1] handle_softirqs+0x336/0x830 [ 728.762943][ T4171] tcp_in_window: res=1 sender end=2775483070 maxend=2778219454 maxwin=1183232 receiver end=1394302462 maxend=1395485694 maxwin=2736384 [ 728.777576][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 728.777596][ C1] ? do_softirq+0x210/0x210 [ 728.782762][ T4171] tcp_conntracks: [ 728.788018][ C1] ? hrtimer_interrupt+0x6a2/0x8b0 [ 728.788042][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 728.793206][ T4171] syn=0 ack=1 fin=0 rst=0 old=7 new=7 [ 728.806976][ C1] __irq_exit_rcu+0x13b/0x230 [ 728.807003][ C1] ? irq_exit_rcu+0x20/0x20 [ 728.807023][ C1] irq_exit_rcu+0x5/0x20 [ 728.814232][ C0] tcp_in_window: START [ 728.815724][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 728.820587][ C0] tcp_in_window: [ 728.825194][ C1] [ 728.825205][ C1] [ 728.825210][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 728.825264][ C1] RIP: 0010:percpu_up_read+0xb5/0x1b0 [ 728.830623][ C0] seq=1067100799 ack=0+(0) sack=0+(0) win=65504 end=1067100800 [ 728.835847][ C1] Code: 85 ab 00 00 00 e8 2b 1f 6d ff 48 83 c3 68 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 08 48 89 df e8 d1 52 b2 ff 48 8b 03 65 ff 08 01 00 00 00 e8 f1 63 46 ff 65 8b 1d 22 7a f6 7d 31 ff 89 de e8 [ 728.840259][ C0] tcp_in_window: sender end=1067100800 maxend=1067100800 maxwin=65504 scale=7 receiver end=1067100800 maxend=1067100800 maxwin=65504 scale=7 [ 728.844978][ C1] RSP: 0018:ffffc9000359fb00 EFLAGS: 00000282 [ 728.849984][ C0] tcp_in_window: [ 728.856209][ C1] [ 728.856216][ C1] RAX: 0000607f46c2579c RBX: ffff88814d3604f0 RCX: ffff88807da5d940 [ 728.856228][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 728.856239][ C1] RBP: 0000000000000000 R08: ffffffff8d8b1eef R09: 1ffffffff1b163dd [ 728.860453][ C0] seq=1067100799 ack=1067100800+(0) sack=1067100800+(0) win=65504 end=1067100800 [ 728.865714][ C1] R10: dffffc0000000000 R11: fffffbfff1b163de R12: dffffc0000000000 [ 728.865728][ C1] R13: 000000000000000e R14: dffffc0000000000 R15: 0000000000000200 [ 728.871419][ C0] tcp_in_window: sender end=1067100800 maxend=1067100800 maxwin=65504 scale=7 receiver end=1067100800 maxend=1067100800 maxwin=65504 scale=7 [ 728.878768][ C1] ext4_page_mkwrite+0x1012/0x1250 [ 728.883960][ C0] tcp_in_window: I=1 II=1 III=1 IV=1 [ 728.888517][ C1] ? mapping_seek_hole_data+0x1300/0x1300 [ 728.895006][ C0] tcp_in_window: res=1 sender end=1067100800 maxend=1067100800 maxwin=65504 receiver end=1067100800 maxend=1067166304 maxwin=65504 [ 728.900154][ C1] ? ext4_change_inode_journal_flag+0x710/0x710 [ 728.904203][ C0] tcp_conntracks: [ 728.908845][ C1] ? __rwlock_init+0x140/0x140 [ 728.908864][ C1] ? count_memcg_event_mm+0x324/0x370 [ 728.914030][ C0] syn=1 ack=0 fin=0 rst=0 old=9 new=9 [ 728.917641][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 728.917661][ C1] do_page_mkwrite+0x168/0x3c0 [ 728.926955][ C0] tcp_in_window: START [ 728.931943][ C1] handle_mm_fault+0x1e47/0x4440 [ 728.937123][ C0] tcp_in_window: [ 728.951755][ C1] ? get_page+0xe0/0xe0 [ 728.951776][ C1] ? vmacache_find+0x4e3/0x590 [ 728.956256][ C0] seq=1067100799 ack=0+(0) sack=0+(0) win=65504 end=1067100800 [ 728.959866][ C1] ? vmacache_update+0xa0/0x100 [ 728.959884][ C1] ? find_vma+0x1df/0x230 [ 728.959902][ C1] do_user_addr_fault+0x494/0xc90 [ 728.964543][ C0] tcp_in_window: sender end=1067100800 maxend=1067100800 maxwin=65504 scale=7 receiver end=1067100800 maxend=1067166304 maxwin=65504 scale=7 [ 728.973536][ C1] exc_page_fault+0x60/0x100 [ 728.979498][ C0] tcp_in_window: [ 728.984326][ C1] ? clear_bhb_loop+0x30/0x80 [ 728.984350][ C1] asm_exc_page_fault+0x22/0x30 [ 728.998993][ C0] seq=1067100799 ack=1067100800+(0) sack=1067100800+(0) win=65504 end=1067100800 [ 729.005193][ C1] RIP: 0033:0x7f2b8a00aaa3 [ 729.005213][ C1] Code: 80 00 00 00 8b b4 24 c0 00 00 00 89 30 e9 a0 fa ff ff 48 89 c2 48 8d 35 14 a3 1c 00 48 8d 3d ca a3 1c 00 31 c0 e8 5d 79 fe ff <89> 32 e9 58 ef ff ff 48 8d 05 57 4c 37 00 48 8d 3d 68 9c ee 00 c6 [ 729.009939][ C0] tcp_in_window: sender end=1067100800 maxend=1067100800 maxwin=65504 scale=7 receiver end=1067100800 maxend=1067166304 maxwin=65504 scale=7 [ 729.015197][ C1] RSP: 002b:00007ffd4481c240 EFLAGS: 00010246 [ 729.015215][ C1] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b2cd64000 [ 729.019949][ C0] tcp_in_window: I=1 II=1 III=1 IV=1 [ 729.033710][ C1] RDX: 0000001b2cd24000 RSI: 0000000000400000 RDI: 00007f2b8a37f708 [ 729.033724][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 729.033734][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 729.038570][ C0] tcp_in_window: res=1 sender end=1067100800 maxend=1067100800 maxwin=65504 receiver end=1067100800 maxend=1067166304 maxwin=65504 [ 729.043029][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd4481c4d0 [ 729.046748][ C0] tcp_conntracks: [ 729.051822][ C1] [ 729.057052][ C0] syn=1 ack=0 fin=0 rst=0 old=9 new=9 [ 729.252003][ C0] virtqueue callback for ffff888148640900 (ffffffff85491a80) [ 729.409545][ C0] virtqueue callback for ffff88801e152400 (ffffffff8444ab50) [ 729.409592][ C0] virtqueue interrupt with no work for ffff88801e152300 [ 729.409598][ C0] virtqueue interrupt with no work for ffff88801e152200 [ 729.514821][ C0] net_ratelimit: 16 callbacks suppressed [ 729.514833][ C0] wireguard: wg1: Sending keepalive packet to peer 16 (127.0.0.1:20003) [ 729.528887][ C0] nf_conntrack: new packet for ffff88801e862a80 [ 729.535121][ C0] nf_nat: Already setup manip DST for ct ffff88801e862a80 (status bits 0x188) [ 729.543952][ C0] nf_nat: Already setup manip SRC for ct ffff88801e862a80 (status bits 0x188) [ 729.552844][ C0] nf_nat: Already setup manip SRC for ct ffff88801e862a80 (status bits 0x188) [ 729.561828][ C0] nf_conntrack: new packet for ffff88801e862f00 [ 729.568064][ C0] nf_nat: Already setup manip DST for ct ffff88801e862f00 (status bits 0x188) [ 729.576914][ C0] nf_nat: Already setup manip SRC for ct ffff88801e862f00 (status bits 0x188) [ 729.585799][ C0] wireguard: wireguard0: No peer has allowed IPs matching 224.0.0.2 [ 729.593906][ C0] wireguard: wg0: Sending keepalive packet to peer 26 ([::1]:20003/0%0) [ 729.602261][ C0] wireguard: wg1: Sending keepalive packet to peer 28 (127.0.0.1:20003) [ 729.610663][ C0] nf_nat: Already setup manip DST for ct ffff88801e862a80 (status bits 0x188) [ 729.619551][ C0] nf_nat: Already setup manip DST for ct ffff88801e862a80 (status bits 0x188) [ 729.628419][ C0] Sent skb ffff88806139a8c0 [ 729.632944][ C0] No more buffers in queue [ 729.637495][ C0] No more buffers in queue [ 729.641926][ C0] Receiving skb proto 0x0806 len 28 type 1 [ 729.647715][ C0] No more buffers in queue [ 729.652202][ C0] No more buffers in queue [ 729.656631][ C0] eth0: xmit ffff888076460b40 42:01:0a:80:00:01 [ 729.662869][ C0] Added buffer head 6 to ffff888148640a00 [ 729.668592][ C0] virtqueue callback for ffff888148640a00 (ffffffff85491b70) [ 729.676558][ T4413] wireguard: wg1: Sending handshake initiation to peer 16 (127.0.0.1:20003) [ 729.685297][ T7415] Added buffer head 0 to ffff88801e152400 [ 729.693291][ T3518] sd 0:0:1:0: cmd ffff888023863128 CDB: 0x2a [ 729.699290][ T3518] Added buffer head 96 to ffff888147f51800 [ 729.706707][ C1] virtqueue callback for ffff888147f51800 (ffffffff85068310) [ 729.708792][ T7] nf_conntrack: normal packet for ffff888022b44c00 [ 729.714091][ C1] sd 0:0:1:0: cmd ffff888023863128 response 0 status 0x0 sense_len 0 [ 729.721030][ T4413] wireguard: wg1: No route to 127.0.0.1:20003, error -101 [ 729.728596][ C1] No more buffers in queue [ 729.743681][ T4171] Sent skb ffff888076460b40 [ 729.748195][ T4171] No more buffers in queue [ 729.752639][ T4171] eth0: xmit ffff8880256f4000 42:01:0a:80:00:01 [ 729.758874][ T4171] Added buffer head 6 to ffff888148640a00 [ 729.764587][ C0] virtqueue callback for ffff888148640a00 (ffffffff85491b70) [ 729.772466][ C0] Sent skb ffff8880256f4000 [ 729.776969][ C0] No more buffers in queue [ 729.781355][ C0] No more buffers in queue [ 729.785768][ C0] No more buffers in queue [ 729.790540][ C0] No more buffers in queue [ 729.826058][T14284] kcov: kcov_task_exit: t = ffff888032325940, kcov->t = ffff888032325940 [ 729.890788][ T3849] Insert table=255 a9fe8473/32 [ 729.895824][ T3849] AT ffff88807c6b9a80 s=40 16 [ 729.900687][ T3849] In tnode_resize ffff88807c6b9aa0 inflate_threshold=50 threshold=25 [ 729.909547][ T3849] In inflate [ 729.912959][ T3849] AT ffff888022e27000 s=40 32 [ 729.917693][ T3849] In tnode_resize ffff8880249ab120 inflate_threshold=50 threshold=25 [ 729.927119][ T3849] In tnode_resize ffff88801bf1c8a0 inflate_threshold=50 threshold=25 [ 729.935801][ T4413] sd 0:0:1:0: cmd ffff888023863528 CDB: 0x2a [ 729.941814][ T4413] Added buffer head 96 to ffff888147f51800 [ 729.948289][ T3849] In tnode_resize ffff8880252ecb20 inflate_threshold=50 threshold=25 [ 729.956763][ T3849] Insert table=255 a9feffff/32 [ 729.961707][ T3849] Insert table=255 a9feffff/32 [ 729.966539][ T3849] sctp: sctp_addr_wq_mgmt: add new entry for cmd:0, addr:169.254.132.115 in wq:ffffffff966b5cd8 [ 729.978690][ T3849] Insert table=254 a9fe0000/16 [ 729.982099][ C1] virtqueue callback for ffff888147f51800 (ffffffff85068310) [ 729.990811][ C1] sd 0:0:1:0: cmd ffff888023863528 response 0 status 0x0 sense_len 0 [ 729.998881][ C1] No more buffers in queue [ 730.010276][ C0] nf_conntrack: new packet for ffff888021bb2300 [ 730.016576][ C0] nf_nat: Already setup manip DST for ct ffff888021bb2300 (status bits 0x188) [ 730.025474][ C0] nf_nat: Already setup manip SRC for ct ffff888021bb2300 (status bits 0x188) [ 730.107937][ C0] tcp_in_window: START [ 730.112059][ C0] tcp_in_window: [ 730.112067][ C0] seq=1067100799 ack=0+(0) sack=0+(0) win=65504 end=1067100800 [ 730.123218][ C0] tcp_in_window: sender end=1067100800 maxend=1067100800 maxwin=65504 scale=7 receiver end=1067100800 maxend=1067166304 maxwin=65504 scale=7 [ 730.137560][ C0] tcp_in_window: [ 730.137570][ C0] seq=1067100799 ack=1067100800+(0) sack=1067100800+(0) win=65504 end=1067100800 [ 730.150283][ C0] tcp_in_window: sender end=1067100800 maxend=1067100800 maxwin=65504 scale=7 receiver end=1067100800 maxend=1067166304 maxwin=65504 scale=7 [ 730.164640][ C0] tcp_in_window: I=1 II=1 III=1 IV=1 [ 730.169903][ C0] tcp_in_window: res=1 sender end=1067100800 maxend=1067100800 maxwin=65504 receiver end=1067100800 maxend=1067166304 maxwin=65504 [ 730.183616][ C0] tcp_conntracks: [ 730.183630][ C0] syn=1 ack=0 fin=0 rst=0 old=9 new=9 [ 730.192777][ C0] tcp_in_window: START [ 730.196837][ C0] tcp_in_window: [ 730.196844][ C0] seq=1067100799 ack=0+(0) sack=0+(0) win=65504 end=1067100800 [ 730.208003][ C0] tcp_in_window: sender end=1067100800 maxend=1067100800 maxwin=65504 scale=7 receiver end=1067100800 maxend=1067166304 maxwin=65504 scale=7 [ 730.222316][ C0] tcp_in_window: [ 730.222324][ C0] seq=1067100799 ack=1067100800+(0) sack=1067100800+(0) win=65504 end=1067100800 [ 730.235022][ C0] tcp_in_window: sender end=1067100800 maxend=1067100800 maxwin=65504 scale=7 receiver end=1067100800 maxend=1067166304 maxwin=65504 scale=7 [ 730.249332][ C0] tcp_in_window: I=1 II=1 III=1 IV=1 [ 730.254603][ C0] tcp_in_window: res=1 sender end=1067100800 maxend=1067100800 maxwin=65504 receiver end=1067100800 maxend=1067166304 maxwin=65504 [ 730.268049][ C0] tcp_conntracks: [ 730.268057][ C0] syn=1 ack=0 fin=0 rst=0 old=9 new=9 [ 730.277372][ C0] wireguard: wg1: Handshake for peer 15 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 9) [ 730.288949][ C0] wireguard: wg2: Handshake for peer 41 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 13) [ 730.301247][T11957] wireguard: wg1: Sending handshake initiation to peer 15 ([::1]:20001/0%0) [ 730.310992][ T4413] wireguard: wg2: Sending handshake initiation to peer 41 ([::1]:20001/0%0) [ 730.321642][T11957] nf_conntrack: new packet for ffff888053c7cf00 [ 730.327915][T11957] nf_nat: Already setup manip DST for ct ffff888053c7cf00 (status bits 0x188) [ 730.336787][T11957] nf_nat: Already setup manip SRC for ct ffff888053c7cf00 (status bits 0x188) [ 730.346800][ T4413] nf_conntrack: new packet for ffff888055aae780 [ 730.353063][ T4413] nf_nat: Already setup manip DST for ct ffff888055aae780 (status bits 0x188) [ 730.361940][ T4413] nf_nat: Already setup manip SRC for ct ffff888055aae780 (status bits 0x188) [ 730.402833][ C0] virtqueue callback for ffff88801e152400 (ffffffff8444ab50) [ 730.410249][ C0] virtqueue interrupt with no work for ffff88801e152300 [ 730.417165][ C0] virtqueue interrupt with no work for ffff88801e152200 [ 730.424519][ T7] Added buffer head 0 to ffff88801e152400 [ 730.519596][ C0] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffffffff966b5cd8 is addr:169.254.132.115 for cmd:0 at entry:ffff88802a021c00 [ 730.627995][ C0] nf_conntrack: new packet for ffff88801e862a80 [ 730.634444][ C0] nf_nat: Already setup manip DST for ct ffff88801e862a80 (status bits 0x188) [ 730.643315][ C0] nf_nat: Already setup manip SRC for ct ffff88801e862a80 (status bits 0x188) [ 730.652215][ C0] nf_nat: Already setup manip SRC for ct ffff88801e862a80 (status bits 0x188) [ 730.661263][ C0] nf_nat: Already setup manip DST for ct ffff88801e862a80 (status bits 0x188) [ 730.703001][T14336] kcov: kcov_task_exit: t = ffff888074560000, kcov->t = ffff888074560000 [ 730.714794][ C0] nf_conntrack: new packet for ffff88801e862f00 [ 730.721071][ C0] nf_nat: Already setup manip DST for ct ffff88801e862f00 (status bits 0x188) [ 730.729942][ C0] nf_nat: Already setup manip SRC for ct ffff88801e862f00 (status bits 0x188) [ 730.738847][ C0] wireguard: wireguard0: No peer has allowed IPs matching 224.0.0.2 [ 730.888074][ C0] wireguard: wg1: Handshake for peer 40 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 6) [ 730.899711][ C0] wireguard: wg2: Handshake for peer 42 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 7) [ 730.911499][ C0] tcp_in_window: START [ 730.915555][ C0] tcp_in_window: [ 730.915562][ C0] seq=1067100799 ack=0+(0) sack=0+(0) win=65504 end=1067100800 [ 730.926812][ C0] tcp_in_window: sender end=1067100800 maxend=1067100800 maxwin=65504 scale=7 receiver end=1067100800 maxend=1067166304 maxwin=65504 scale=7 [ 730.941136][ C0] tcp_in_window: [ 730.941146][ C0] seq=1067100799 ack=1067100800+(0) sack=1067100800+(0) win=65504 end=1067100800 [ 730.953875][ C0] tcp_in_window: sender end=1067100800 maxend=1067100800 maxwin=65504 scale=7 receiver end=1067100800 maxend=1067166304 maxwin=65504 scale=7 [ 730.968184][ C0] tcp_in_window: I=1 II=1 III=1 IV=1 [ 730.973445][ C0] tcp_in_window: res=1 sender end=1067100800 maxend=1067100800 maxwin=65504 receiver end=1067100800 maxend=1067166304 maxwin=65504 [ 730.986881][ C0] tcp_conntracks: [ 730.986889][ C0] syn=1 ack=0 fin=0 rst=0 old=9 new=9 [ 730.996036][ C0] tcp_in_window: START [ 731.000095][ C0] tcp_in_window: [ 731.000101][ C0] seq=1067100799 ack=0+(0) sack=0+(0) win=65504 end=1067100800 [ 731.011231][ C0] tcp_in_window: sender end=1067100800 maxend=1067100800 maxwin=65504 scale=7 receiver end=1067100800 maxend=1067166304 maxwin=65504 scale=7 [ 731.025566][ C0] tcp_in_window: [ 731.025574][ C0] seq=1067100799 ack=1067100800+(0) sack=1067100800+(0) win=65504 end=1067100800 [ 731.038271][ C0] tcp_in_window: sender end=1067100800 maxend=1067100800 maxwin=65504 scale=7 receiver end=1067100800 maxend=1067166304 maxwin=65504 scale=7 [ 731.052577][ C0] tcp_in_window: I=1 II=1 III=1 IV=1 [ 731.057840][ C0] tcp_in_window: res=1 sender end=1067100800 maxend=1067100800 maxwin=65504 receiver end=1067100800 maxend=1067166304 maxwin=65504 [ 731.071286][ C0] tcp_conntracks: [ 731.071294][ C0] syn=1 ack=0 fin=0 rst=0 old=9 new=9 [ 731.081526][T14332] kcov: kcov_task_exit: t = ffff888078301dc0, kcov->t = ffff888078301dc0 [ 731.091228][T14337] kcov: kcov_task_exit: t = ffff88801f6d0000, kcov->t = ffff88801f6d0000 [ 731.099926][ T4413] wireguard: wg2: Sending handshake initiation to peer 42 (127.0.0.1:20002) [ 731.110527][ T4277] nf_conntrack: normal packet for ffff88807707bc80 [ 731.402763][ C0] virtqueue callback for ffff88801e152400 (ffffffff8444ab50) [ 731.410189][ C0] virtqueue interrupt with no work for ffff88801e152300 [ 731.417105][ C0] virtqueue interrupt with no work for ffff88801e152200 [ 731.424177][ T7] Added buffer head 0 to ffff88801e152400 [ 731.755120][ C0] nf_conntrack: new packet for ffff88801e862a80 [ 731.761404][ C0] nf_nat: Already setup manip DST for ct ffff88801e862a80 (status bits 0x188) [ 731.770301][ C0] nf_nat: Already setup manip SRC for ct ffff88801e862a80 (status bits 0x188) [ 731.779208][ C0] nf_nat: Already setup manip SRC for ct ffff88801e862a80 (status bits 0x188) [ 731.788844][ C0] nf_nat: Already setup manip DST for ct ffff88801e862a80 (status bits 0x188) [ 731.841886][ C0] nf_conntrack: new packet for ffff88801e862f00 [ 731.848182][ C0] nf_nat: Already setup manip DST for ct ffff88801e862f00 (status bits 0x188) [ 731.857064][ C0] nf_nat: Already setup manip SRC for ct ffff88801e862f00 (status bits 0x188) [ 732.188649][ C0] wireguard: wg0: Handshake for peer 13 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2) [ 732.200596][ T4413] nf_conntrack: new packet for ffff888021bb2c00 [ 732.206872][ T4413] nf_nat: Already setup manip DST for ct ffff888021bb2c00 (status bits 0x188) [ 732.215765][ T4413] nf_nat: Already setup manip SRC for ct ffff888021bb2c00 (status bits 0x188) [ 732.402706][ C0] virtqueue callback for ffff88801e152400 (ffffffff8444ab50) [ 732.410119][ C0] virtqueue interrupt with no work for ffff88801e152300 [ 732.417033][ C0] virtqueue interrupt with no work for ffff88801e152200 [ 732.424795][ T7] Added buffer head 0 to ffff88801e152400 [ 732.882246][ C0] nf_conntrack: new packet for ffff88801e862a80 [ 732.888545][ C0] nf_nat: Already setup manip DST for ct ffff88801e862a80 (status bits 0x188) [ 732.897408][ C0] nf_nat: Already setup manip SRC for ct ffff88801e862a80 (status bits 0x188) [ 732.906295][ C0] nf_nat: Already setup manip SRC for ct ffff88801e862a80 (status bits 0x188) [ 732.915220][ C0] wireguard: wg1: Handshake for peer 33 (127.0.0.1:20001) did not complete after 5 seconds, retrying (try 5) [ 732.927746][ C0] nf_nat: Already setup manip DST for ct ffff88801e862a80 (status bits 0x188) [ 732.969020][ C0] nf_conntrack: new packet for ffff88801e862f00 [ 732.975312][ C0] nf_nat: Already setup manip DST for ct ffff88801e862f00 (status bits 0x188) [ 732.984184][ C0] nf_nat: Already setup manip SRC for ct ffff88801e862f00 (status bits 0x188) [ 733.402591][ C0] virtqueue callback for ffff88801e152400 (ffffffff8444ab50) [ 733.409995][ C0] virtqueue interrupt with no work for ffff88801e152300 [ 733.416907][ C0] virtqueue interrupt with no work for ffff88801e152200 [ 733.424774][ T7] Added buffer head 0 to ffff88801e152400 [ 733.662537][ C0] wireguard: wg0: Handshake for peer 38 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2) [ 733.675574][ T4413] nf_conntrack: new packet for ffff88807ae1b680 [ 733.681839][ T4413] nf_nat: Already setup manip DST for ct ffff88807ae1b680 (status bits 0x188) [ 733.690720][ T4413] nf_nat: Already setup manip SRC for ct ffff88807ae1b680 (status bits 0x188) [ 734.009373][ C0] nf_conntrack: new packet for ffff88801e862a80 [ 734.015669][ C0] nf_nat: Already setup manip DST for ct ffff88801e862a80 (status bits 0x188) [ 734.024543][ C0] nf_nat: Already setup manip SRC for ct ffff88801e862a80 (status bits 0x188) [ 734.033439][ C0] nf_nat: Already setup manip SRC for ct ffff88801e862a80 (status bits 0x188) [ 734.043058][ C0] nf_nat: Already setup manip DST for ct ffff88801e862a80 (status bits 0x188) [ 734.096132][ C0] nf_conntrack: new packet for ffff88801e862f00 [ 734.102403][ C0] nf_nat: Already setup manip DST for ct ffff88801e862f00 (status bits 0x188) [ 734.111305][ C0] nf_nat: Already setup manip SRC for ct ffff88801e862f00 (status bits 0x188) [ 734.402565][ C0] virtqueue callback for ffff88801e152400 (ffffffff8444ab50) [ 734.409979][ C0] virtqueue interrupt with no work for ffff88801e152300 [ 734.416899][ C0] virtqueue interrupt with no work for ffff88801e152200 [ 734.423969][ T7] Added buffer head 0 to ffff88801e152400 [ 735.136523][ C0] nf_conntrack: new packet for ffff88801e862a80 [ 735.142791][ C0] nf_nat: Already setup manip DST for ct ffff88801e862a80 (status bits 0x188) [ 735.151656][ C0] nf_nat: Already setup manip SRC for ct ffff88801e862a80 (status bits 0x188) [ 735.160556][ C0] nf_nat: Already setup manip SRC for ct ffff88801e862a80 (status bits 0x188) [ 735.171360][ C0] nf_nat: Already setup manip DST for ct ffff88801e862a80 (status bits 0x188) [ 735.223346][ C0] nf_conntrack: new packet for ffff88801e862f00 [ 735.229657][ C0] nf_nat: Already setup manip DST for ct ffff88801e862f00 (status bits 0x188) [ 735.238536][ C0] nf_nat: Already setup manip SRC for ct ffff88801e862f00 (status bits 0x188) [ 735.247398][ C0] net_ratelimit: 9 callbacks suppressed [ 735.247408][ C0] wireguard: wireguard0: No peer has allowed IPs matching 224.0.0.2 [ 735.252934][ C0] virtqueue callback for ffff888148640900 (ffffffff85491a80) [ 735.268999][ C0] No more buffers in queue [ 735.273437][ C0] Receiving skb proto 0x0806 len 28 type 1 [ 735.279244][ C0] No more buffers in queue [ 735.283719][ C0] No more buffers in queue [ 735.288127][ C0] eth0: xmit ffff88801f33e8c0 42:01:0a:80:00:01 [ 735.294383][ C0] Added buffer head 6 to ffff888148640a00 [ 735.300093][ C0] virtqueue callback for ffff888148640a00 (ffffffff85491b70) [ 735.307666][ C0] Sent skb ffff88801f33e8c0 [ 735.312177][ C0] No more buffers in queue [ 735.402476][ C0] virtqueue callback for ffff88801e152400 (ffffffff8444ab50) [ 735.409884][ C0] virtqueue interrupt with no work for ffff88801e152300 [ 735.416823][ C0] virtqueue interrupt with no work for ffff88801e152200 [ 735.424906][ T7] Added buffer head 0 to ffff88801e152400 [ 735.743449][ C0] wireguard: wg1: Handshake for peer 16 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 2) [ 735.755126][ T4277] wireguard: wg1: Sending handshake initiation to peer 16 (127.0.0.1:20003) [ 735.763970][ T4277] wireguard: wg1: No route to 127.0.0.1:20003, error -101 [ 736.263630][ C0] nf_conntrack: new packet for ffff88801e862a80 [ 736.269915][ C0] nf_nat: Already setup manip DST for ct ffff88801e862a80 (status bits 0x188) [ 736.278807][ C0] nf_nat: Already setup manip SRC for ct ffff88801e862a80 (status bits 0x188) [ 736.287698][ C0] nf_nat: Already setup manip SRC for ct ffff88801e862a80 (status bits 0x188) [ 736.298350][ C0] nf_nat: Already setup manip DST for ct ffff88801e862a80 (status bits 0x188) [ 736.350370][ C0] nf_conntrack: new packet for ffff88801e862f00 [ 736.356657][ C0] nf_nat: Already setup manip DST for ct ffff88801e862f00 (status bits 0x188) [ 736.365531][ C0] nf_nat: Already setup manip SRC for ct ffff88801e862f00 (status bits 0x188) [ 736.374408][ C0] wireguard: wireguard0: No peer has allowed IPs matching 224.0.0.2 [ 736.402394][ C0] virtqueue callback for ffff88801e152400 (ffffffff8444ab50) [ 736.409850][ C0] virtqueue interrupt with no work for ffff88801e152300 [ 736.416802][ C0] virtqueue interrupt with no work for ffff88801e152200 [ 736.423906][ T7] Added buffer head 0 to ffff88801e152400 [ 736.436989][ C0] wireguard: wg2: Handshake for peer 41 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 14) [ 736.448708][ C0] wireguard: wg1: Handshake for peer 15 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 10) [ 736.461844][ T4413] wireguard: wg1: Sending handshake initiation to peer 15 ([::1]:20001/0%0) [ 736.470994][ T4277] wireguard: wg2: Sending handshake initiation to peer 41 ([::1]:20001/0%0) [ 736.480115][ T4413] nf_conntrack: new packet for ffff888053c7cf00 [ 736.486377][ T4413] nf_nat: Already setup manip DST for ct ffff888053c7cf00 (status bits 0x188) [ 736.495246][ T4413] nf_nat: Already setup manip SRC for ct ffff888053c7cf00 (status bits 0x188) [ 736.504959][ T4277] nf_conntrack: new packet for ffff888055aae780 [ 736.511209][ T4277] nf_nat: Already setup manip DST for ct ffff888055aae780 (status bits 0x188) [ 736.520207][ T4277] nf_nat: Already setup manip SRC for ct ffff888055aae780 (status bits 0x188) [ 736.610428][ C0] wireguard: wg2: Handshake for peer 42 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 8) [ 736.622473][ T4277] wireguard: wg2: Sending handshake initiation to peer 42 (127.0.0.1:20002) [ 737.130631][ C0] wireguard: wg1: Handshake for peer 40 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 7) [ 737.143428][ T4277] wireguard: wg1: Sending handshake initiation to peer 40 (127.0.0.1:20003) [ 737.153462][ T4277] nf_conntrack: normal packet for ffff88807707bc80 [ 737.390744][ C0] nf_conntrack: new packet for ffff88801e862a80 [ 737.397034][ C0] nf_nat: Already setup manip DST for ct ffff88801e862a80 (status bits 0x188) [ 737.405909][ C0] virtqueue callback for ffff88801e152400 (ffffffff8444ab50) [ 737.405971][ C0] virtqueue interrupt with no work for ffff88801e152300 [ 737.405977][ C0] virtqueue interrupt with no work for ffff88801e152200 [ 737.427206][ C0] nf_nat: Already setup manip SRC for ct ffff88801e862a80 (status bits 0x188) [ 737.436102][ C0] nf_nat: Already setup manip SRC for ct ffff88801e862a80 (status bits 0x188) [ 737.445867][ C0] nf_nat: Already setup manip DST for ct ffff88801e862a80 (status bits 0x188) [ 737.455029][ T7] Added buffer head 0 to ffff88801e152400 [ 737.477596][ C0] nf_conntrack: new packet for ffff88801e862f00 [ 737.483857][ C0] nf_nat: Already setup manip DST for ct ffff88801e862f00 (status bits 0x188) [ 737.492729][ C0] nf_nat: Already setup manip SRC for ct ffff88801e862f00 (status bits 0x188) [ 737.501611][ C0] wireguard: wireguard0: No peer has allowed IPs matching 224.0.0.2