last executing test programs: 3m5.032808253s ago: executing program 3 (id=388): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=r2, @ANYBLOB="46060900000000002400128009000100626f6e6400000400140002800800040088"], 0x44}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0) 3m4.767724825s ago: executing program 3 (id=394): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4400046, r1}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @remote, @private1, 0x0, 0x0, 0x0, 0x0, 0x3ffffffe, 0x0, r3}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r5}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001800ef0100000000000000000a00000000002300000000001400050000000000000000000000000000000002"], 0x30}, 0x1, 0x11}, 0x0) 3m4.715347938s ago: executing program 3 (id=395): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e, 0x0, 0x0, 0x10, &(0x7f0000000440), 0x0, 0x0, 0x401a, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/size\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='256\n', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/zoned\x00', 0x2, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000002900)=ANY=[], 0x0) write(r1, &(0x7f0000000700)='1\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/nullb/nullb1/power\x00', 0x2, 0x0) write(r2, &(0x7f0000000b00)='1', 0x1) 3m2.11002227s ago: executing program 3 (id=401): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x3005840, 0x0, 0x5, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x3005840, 0x0, 0x5, 0x0, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f0000000000)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='pstore\x00', 0x0, 0x0) 3m1.986376926s ago: executing program 3 (id=402): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x7b}, @printk={@x, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0xe, 0x4, 0x8, 0x10001, 0x0, 0xffffffffffffffff, 0x6}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x5, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r1, @ANYBLOB="00000000000000004e8000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ID={0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3b}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}]}}}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000058}, 0x20008844) r3 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f0000000180)=[{0x0, 0xea}], 0x1}, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8916, &(0x7f0000000000)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 2m58.610333744s ago: executing program 3 (id=423): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001e00080028bd7000fbdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="4210020090000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4024810}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)="7800000018002507b9409b14ffff0b7a0204be1486d8fe056406040c5c0009003f0006200a0000000d0085a168d0bf46d32345653610648d270005000a06024e49935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000400160040030a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x20000800, 0x0, 0xa0) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mlockall(0x7) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r2 = syz_clone(0x800, 0x0, 0xfffffffffffffe04, 0x0, 0x0, 0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000240)=0x7, 0x100000000, 0x3) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='wchan\x00') pread64(r3, &(0x7f0000000140)=""/15, 0xf, 0x4) 2m58.49279385s ago: executing program 32 (id=423): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001e00080028bd7000fbdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="4210020090000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4024810}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)="7800000018002507b9409b14ffff0b7a0204be1486d8fe056406040c5c0009003f0006200a0000000d0085a168d0bf46d32345653610648d270005000a06024e49935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000400160040030a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x20000800, 0x0, 0xa0) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mlockall(0x7) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r2 = syz_clone(0x800, 0x0, 0xfffffffffffffe04, 0x0, 0x0, 0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000240)=0x7, 0x100000000, 0x3) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='wchan\x00') pread64(r3, &(0x7f0000000140)=""/15, 0xf, 0x4) 5.283080583s ago: executing program 5 (id=1382): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000d00)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}, {&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}], 0x3, 0x0, 0x0, 0x40088c5}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000bc0)={{r0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000800), 0x0}, 0x0, 0x0}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000006fc0)=[{{0x0, 0x0, 0x0}, 0x400002}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=""/72, 0x48}, 0x81}], 0x2, 0x20000020, 0x0) 5.212313816s ago: executing program 0 (id=1383): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) ftruncate(0xffffffffffffffff, 0x1) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xb21e0180, 0x0, 0x41, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0xa65400, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 4.947525398s ago: executing program 0 (id=1385): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r1, 0x0, 0x31, &(0x7f0000000280)=0x9, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x672024}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, 0x4, 0x8, 0x201, 0x0, 0x0, {0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa00}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x9}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) write$rfkill(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, 0x80, 0x1, 0x1}, 0x8) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1}, 0x6e) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x3) openat$dsp1(0xffffffffffffff9c, 0x0, 0x101081, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040302"], 0x4) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 4.553802017s ago: executing program 1 (id=1387): syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYRES16=0x0, @ANYRES8=0x0, @ANYRESDEC, @ANYRES32, @ANYRESHEX, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRES8, @ANYRES8], 0x1, 0x1ef, &(0x7f0000000300)="$eJzslU9rE0EYxn+zO+l2NdCcvVpsL9pmC+I3sB/AD2DYrrWY+Kcb0ISA0UsvIuJnECp+Cg+C3nsoInipBwVzqHiqSGR23p1uSCBV4iGwDyTv8z4z7zvzvsPO3E4fpAHw+7gXUyODosonpdDAirLayYK1P8QOBV+19euivxH7RWza6R48s7R7p9FsJrtpZwpRCqbNGSHjkj7zYhPIh6ejiuLf8oyRJWaTx5G2bzs7PvRiRAkmzZFYZrifceLNuOTwjGfxswpF5dusC6zwnzrmCKet+1WdfkwfX9rjnDjHl/CQ0bbMH/H+KipFrq/0+hOPQeYcHvdiQ27KLWa0LfvLP4lsjnHeFeZc0NAH5TN0eXR2W8IKsNZu3V9LO93LO63GdrKd3I2ijavr78/LJzp8DDvNZF0xeC6rxJ751zgEvF6CgXp1AIdhL64An0/H+xSgClszOAcqlBLzkPxyXr1YCAzBK8QWc9i8b115gWg+LW5wiUXgYd8MR9huLWOyaW6Z0jZR+DUyp64L+4QTPBazgSvxvebWHgqVh+2jXY76ERXnROKYhZKNa678PbHLYjfF7os9Epu/XfmbpLMM38Vb7cMCjxrt9m72eFnmtMhpUc2t7Mmq+Wuo8p0ElChRokSJEiVKzAn+BAAA//+Kekw8") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00') pread64(r3, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) 4.553246347s ago: executing program 2 (id=1388): socket$netlink(0x10, 0x3, 0x0) socket(0xa, 0x5, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x70bd27, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x3, 0x7, 0x41217df2c9ce37e8}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r2, {0x4}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 4.290119549s ago: executing program 0 (id=1390): socket$packet(0x11, 0x3, 0x300) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x1, 0x0, [{0x0, 0x100000}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000400)={0x1, 0x0, &(0x7f0000010000), &(0x7f0000020000), &(0x7f0000018000)}) write(r1, &(0x7f0000010000)="000002000000000080", 0x9) write(r1, &(0x7f0000018000)="000001", 0x3) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000600)={0x1, r1}) write$tun(r1, &(0x7f0000000800)=ANY=[], 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 4.144165506s ago: executing program 5 (id=1392): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9e\xd4JSG\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r3, &(0x7f0000000dc0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x101) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 3.788933102s ago: executing program 2 (id=1393): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080), 0x4) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, 0xfffffffffffffffd, &(0x7f00000002c0)=0x12) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000300)="e61646ea54da11756e9868eff90dbb551865a5f90556214d14141bd346390c574293544c140de2db1120f41ad3a12d341195aa784b523c8067149fa07b33a09f6dab6bd9de38a1f18935da05a83aee0155a8fdfce4c9303794509acfcd87dabed76bb01c9a97b335d75ba310aaafaaad235397162c89d8c92de2eda4e2bf53ac2b993abeee3d3891ea31c0bf4990225cae740dfef1efb55253", 0x99, 0x4000, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000080)="0422b9dd9210b75f1359c130211f", 0xe, 0x20000090, &(0x7f00000000c0)={0x11, 0x86dd, r4, 0x1, 0x9, 0x6, @multicast}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {0x0, 0xa}, {0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bind$packet(r1, &(0x7f0000000000)={0x11, 0x15, r4, 0x1, 0x1}, 0x14) 3.491922367s ago: executing program 1 (id=1394): socket$tipc(0x1e, 0x2, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x101a01, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000240)=0x468, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000140)=""/41, &(0x7f0000000080)=0x29) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000200), 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x1f, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800b367e4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0x12e5, &(0x7f00000006c0)=ANY=[], 0x0) 3.232606589s ago: executing program 4 (id=1395): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x60) 2.293571672s ago: executing program 0 (id=1396): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffdfe) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/61, 0x54000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x28040680) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x84, 0x0, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.287525453s ago: executing program 1 (id=1397): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x1000}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56561, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0x2, 0x8}, {0xc, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 1.681813961s ago: executing program 4 (id=1398): r0 = gettid() wait4(0x0, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) waitid(0x2, 0x0, 0x0, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x2000b, 0x1000005, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x1005) r2 = socket$unix(0x1, 0x1, 0x0) accept$unix(r1, 0x0, 0x0) connect$unix(r2, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) 1.553856518s ago: executing program 2 (id=1399): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) r1 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000008070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r1, 0x1, 0x0) fchdir(r3) prlimit64(0x0, 0x7, &(0x7f00000001c0)={0x8, 0x8f}, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r0}, 0x18) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18) 1.449931602s ago: executing program 5 (id=1400): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0xb423, 0x0, 0x5, 0x199}, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000000)='nfs\x00', 0x0) syz_io_uring_setup(0x68fd, &(0x7f0000000080)={0x0, 0x1035, 0x0, 0x1, 0x1048}, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[]) 1.390165155s ago: executing program 4 (id=1401): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x2}, 0x20) r1 = gettid() r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r2, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7fffffe, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe800000000000", @ANYRES8], 0x0) 1.337792118s ago: executing program 1 (id=1402): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1.306513249s ago: executing program 0 (id=1403): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000400)={[{@nombcache}, {@nodiscard}]}, 0xff, 0x4bb, &(0x7f0000000a00)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100767266000c00028008000100e8"], 0x48}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@ipv6_newaddr={0x48, 0x14, 0x1, 0x70bd2a, 0x25dfdbfc, {0xa, 0x80, 0x82}, [@IFA_FLAGS={0x8, 0x8, 0x2}, @IFA_CACHEINFO={0x14, 0x6, {0x3, 0x18, 0x51b2, 0x5}}, @IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1c}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004800}, 0x4040014) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="28000000130001000200"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000120)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="340000001400010604000000000000000a402000", @ANYRES32=r3, @ANYBLOB="140002002001"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000160)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=ANY=[@ANYBLOB="340000001400010605000000000000000a402000", @ANYRES32=r2, @ANYBLOB="140002002001000000000000000000"], 0x34}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000880)='veth0\x00', 0x6) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0xa, 0x5000, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) 1.268349581s ago: executing program 2 (id=1404): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/190, 0xfffffffffffffeff, 0x0, 0x0}, &(0x7f0000001380)=0x40) sendmsg$inet6(r0, &(0x7f0000004200)={0x0, 0x0, &(0x7f0000003f40)=[{&(0x7f0000002f40)="b9b20de7dea999109709c55fe4e7fb4ea933a2a751f09fbde3060a59caea9189c0a5cb07a69dd119033e7347a99adec91697c539eaf6e38bd0e7b7c18ee9004ea382286ac3de19dbbd4fe971a6127924b460e59719529a34f95084c623ab148bc1976ab0d1d842c660f0c99a5323d7f6343e256e9275efe91832d3cd541aaf43d62c55941f001976b78117563b3393ada0089ab6f98ef684a24a47909105a022a37baf26a122871e646e6d25234f720b60f80081f7a4acdc33f79b4d2c8d6319643861d0b9214e8a3f12cf51d23e2354969572d8c3a1845a6c8fd8308881e0d50d28eba81ebed1edd4b1b7244f0c2460c7995a20f37a47f7551b1d9559bc7e069fc44788147d66b881754236745f7f89f42334ce70899261ea1dff0be18b1f10bb10e44dd12d0f13cd45a8ff707122db00a51a6d818d1fc93d46474293e43b48bd630c2de609503cace9e22395a2d3795a2339c0590b4d3be6f64b4ba16d62325843e880e38798121bee6cef16b87dff1c52e322be935a4f01b4c1c0eeaccabf974161f556530f8eeee83f2eea881bb97a43f1f175f7e28db716e886f4342b20a854190c4febf36bcc3bb6b371120a3e15f4b6e04481645e3698300c2995384baeb6eba8656ac3796087f927bd88168478cff4f59dbe73a33fb366076c4015a374069b9316f91cdc5891edbb75946bfd27b81588c8f2c13ae66309e517f52d3662d2d6e38c595ea46dd6b2df971896f62213f901f12bc1e2b6b50e0f03a0225743a34d7e1a067e652f4e5649fc16c9072721da71bb2de237e30177cb19a69ea0b6351ac5358ade777fcd218102b573e2a9f5faf5c85058cbfd009dd316fbd28d2c670b1769f21ce444ab552f329dbc0b65fbea397182457c19264837d9a8423da5e85a89bf90ac5d8d74fc6b5acd76e1565d7a4ceb39dfe076a5a9ce17ebd7be3ba2adb5d08ed39fdda0888e996d58e0818eeb335fe91fedbb5102d95e859dcbd580a587b88748c54e0033832f008b6d8ad4247e1d5553dcab34544d426cccedb1cd6314f6b7352a255709a23a00eeb6ac0ebd95210c7ebf269f217ec116b60f79d7dfb6ab501125a853892c3589008e2f6354cd883835929b0924df6cfb31fb2e84e3b3223fb501f48607e14e26f4b9edb67c11209f61eaf5087fdfcaddebd73013c9f92f8d1ab7e89a25c6d83e07663910560e407d8133929d637a3d81bc13a6f17d0f732f08da403f3711329684c7b161357ba1fc54060243b637ba52ad781b4a48bb67809612c2c126b8a9fc8342e3bf55dc16df5ae9a3d4b68f5096163345638a61553c768bca59c93f71eb6432e2756206c11ecab99528ec2afbfba0b1236a0ecfbbf7fc3bdb28401992dc85ba1eb9a2631b13d6497a10c02230f9c023aeebc97ad12de341c5eb623fd65d254630a2bfd90cd845ec400dddfed66621970ac61b0c8015784bfbdd539390cb54cc032fb823380fae48bed95fb2c16ed5af441a0bb9374cb295199530e267837faacb2379817295e2f4b55b8d732164ca69bf894a920a3c7bb97ce2c4f47436da138f459b92ebf1c7001af2803dbb057569380ff4e2679f21ef0a457cfb93d477df26a0f26e3a3511be8f4f4f3ab155eec86bfedf50821f628455598db34d835ad599f6bb04e849b77913398c3f5e489c3977fe858a66f557d9b7c555b945c378bf29405853b1ad07738c672ce03a43789199ed8dccf9dd030f65eb571fc7b80706ac0ea37f520074156124601ac1d4192ba3784262f3c77163be767b1befa6db16802937b5b4b00e5ae76fba792bae1c61e8de579068df78228dc89c776c2f46a225f6fa7af5a002349cfdb7b1182d962a4ca9b771aa80d4fd48f15c8fb34ddb5f836898290e8b295eca6ee3734f337031782e376f39a7bf074cbffdc774101a77787c1e6c9f89fba2599d61850a2b4553eb6ffc46e2fd177053a31eb6c6bc93a4cd8ddd7d1b9d31bcf82f24e8f6c4d0a6630a5414aeef37064596309d61a60fdb7fe70fffefe30a578cd4395790395a8ae863efeb910200a01439ff647d65aed64acd0cc508e829e9761a40933a01d61fb1a74fcc82ba8748b3c3785f76bf0b29f2cf682ec84de405531c22127175302351f4c90a00e91336d687dc0a164417fceaf85559414eb115377505cbb105da207a0b8a8cf12a3cd8b3b1ae2b648fe0ffd74be418ae32990e4b7af298730ce06a0c34c5b572f2dbde5cdd16498e9ee8b5e3ef0cd28480ca4e0d09138c8873718a4a4de26a57f2cdee4a2caeb9d1757aa1d3380844487e9400152abdd42e95a7243d93889f8118d4f680ac30f1515ff74983a49234569045d549b356e0249c6bd7bed84615c9cd334b5229118c6b766f9bc9dd8bc6aa90e4ec62d20a52012c0fcf65c97a1a3c6b9d863a50c9ad8e6a4deacf84f5dbdc58031b929477bb6af2cfe7e53fb0746529d7332ff315d367b2e0fdc0a31589029479179702fe2ab564887628d21feb4d2ad13a5fe0cf6f95cb4ac9190cf9b254b763276f63c73b52b37e8efa7083bc4e992769da8d2e4a8f29c50460d35e3c3af99dc93fdf91e96fdc217aec6417ddf6b141fff9a39ab9507a138d78b0b418b6e7073d02bdf8d71ea7c98b2e2551009af6e388c489240333648af1b38203961b654cb55d05a5d968eed6637f2bc87023c1a122c8b1a129047538cc1a370e7e3f844c71f4375e491fe88943f23a153db52a8d8ec7a6420a2dfffbef40570154a1f22bfdb9359c60c0dca7e7ca014cc56e699830ab5f9a7e631ba3874b84361aa3380df6249bd6d4d8d3be3859cccad8d8f4c957bfb04a3d78fd969c74c3bccb1197e6cf6353db0b973858440714b8c379399bbeaec8a05fd0c440075d38d20ece57825e0f983860a9f056332d09f88ab4545777616fc744a10189c85c07368ba477829e831a20694c664976abaf9fe0f6c242518cb83f08a87a0613495592e02bdab7941b1bb50c2e809d648242bbb401ca1ddec4dec70e1c35a3b484837e934e4c0b1bfdca55d6080e8404fc3e0ef5c1573dff660b310a6949edadae644376a2bdcfed9cba491536e4df4401dfed80711b62a84f0b81ece7079d6d32ff0c9abe7f799b97da32cb7e9f8a463d23c158476ee0762967ef6dd53a7e7b20d24595440269ae5b6934c8140a3fe01ad423b732782f8ea3548d2734d01d42dcec0021681ec9130a15916fdae3d55575bbd8859845e238f875df478207d3212193db62545d26fd90b81ba28bdf94a5d1d7520e796bdebdafd845c6cbf6db26b723e5d5e3b870ea0cd82b313770e86f070c7b9bb57babb19198ed881c2d63091ac039a1756fd9d9548ae3f46d30f02fe56940df0bfc151674eb8b4bd8794ab7707bf40f6b65f18d418c1a1ac19ac39e24073fcd2c76b5e5a82c15e500ce12e4d75a7a49ee5f207ddff8f4a0e68ac4d912c6413a28e4bcc9903774998f497158f5b5f8a4687858656647e39f94b193cb928400a690a2083e25bcde662f09903dc840badcbd93243d7bcf41575cac9efda6e8426956e524325ffd93383d4cd75a182953633b7ee923c6019dac10be140f7cf229b64cf6ac90b94d20bf6fd5d216ac770f7978c4429b6d95d69f2429ef9d236e5849cced8ed25c2a377ebe2e67e02a07f2f6468762025985ad1e9a892f34f282fbbec9ac0f2f9b5716a32fce0d5d32c4d78d329b4b0e056da485c074716a1ed384b2db102e87a2f4eab3b9ad374e67b7780f378e5a24aead4b353b2eac77c06905a964c3dd52fd09d0bb1b4b6320a55b93e444af1538ffc896624b4945bd94773b710b30b0ad361e019c1bed9d0e2ea4a66d14df79d7e54543a31a2dadf39bb069fa6e85571d442d55ffd43765174f11174ff29cbd05097a92e774b30d8d7cd7357b34fb928a49acd9aaa1495a4d62ea5fe52626d2c1eda912ca1d1d91d83a06aac47e9e27382e47ee85b4ad2b460f888de835c592436bec189e5ef91c0f396ecf56e8593a6c035c03abdaa2a40f6f68039c4b369be93b91f34c89fe0f82b44dbf246f75160557e6ade1eeb7cb0c20f3a363dc92c01a442cc6f087052383180b4970d315d34483e5b4278c939693fef935d910010dbe40be9675934d530926bac6f17b164b09fcf473162b1654649aa63ee862d5adea2b283a072c04ba6b2c21f64860f060a7d1ed51b28faf535f7ecd19b1e0e40a043819126ecd0c1d83776f84b16929f5edc370911b1c64e51e6f90c0d45f601399a95e48179a98d68a1f8fde44c5a78166321e5f93b58798e5e8f62024da557872833d4dc03465226c13a42487c9e2ef63f86142a2138f75868d32aa123dd6038d7f12e782364779beca0f2f1d8a3d04b7004a5248a7ef36e550f34b8dea0c96b63b45b45f5878a04bf7b2d25a827068fae6cfc93098605828ab08b0faa25899dc07f493bd9f02c748fe4aa9ef5a8823796765eb36c65a1bd0fa2885c23515b141d95985d8507c31b901564302c69ed36ae9783d54a4fa2d7d1018b10d79dd18a58faa120da05b4b46e7956407957104484141cc6ad53961ed2f04af29e3abfe661476731126011a71320380f4c10e6cadf922cdcc1c055a843bef7ebc3fc44ea39b0ea6cd4ac9dba587743a25983cb310a279196363feb97ce5b27323f3dbe0812fc880abdcfb442d5d24672b558b02ae9084da68add2735111ba11396642bad4a83b055dcfc1831137f62c189895f347bbd512bbba9c5fc8cfe25e22b948430d319231c7fcb57cb3bc866f7f897d97e06214ef55a8b3c602355797f880553156a4f999e64d2938922e55cd2f99ca91c824f57a486bcb49d6d08b33dfb5eccc8f6580034a2fe26a543fca7f6d1b6f81b59edc055f7bf58ba12204f38f3861880ffbdcc4c652b47ce2cbcf3d20838fe3708b3d8c01c46c676c3a8af9409a558c49750832536ff9bc7af97975823eb7ef824bc99d00a5bc94186b68dc90f6cfcdad6c90986019700e813f01e1f9d28bcd4b970e24d1e39e2e764bc65d9cfa4626de39dd8145671e6ae59ddcfbd3135482b16f807b105a305bc2fb76d54810608f3ac8a3f3a874cb55eac0956c7a635c307d453a5722c1b4e0f2a1f8cb8c78ab2e9ca503edad5490277e57ae2624ca3baf762c9125e64e949b64a9ddab4ad402ef1b1eafd424bbcb20d9a659de61db6fb829b8e79bad75c3b0c6c4d8670b059c5711da0b77b08fe48914e600a9be1db9a3ccd9b8c8ab3966c7ba488a58697ab226bdfa523c5ed81b418353f45e75ffa15c6fdec50d5d27abdc27ea7ccadf791c6cea641ffb2c048cb465b7e37953c9becef3ae613ef8ae8acab7a27e3baa98eff8c9dcd0a2ee7cd776956fae6ba32fc93ab725a9e43d5b47ee1f99f10f5ad7eb305df5aa1bc52c2fe5150bb0cdf20eff8f68200647577fc90b99ea4d05df7f12ba9628e292a11174a18dc67b6b97577c0e895d956f0fadcf4f90da3f52ac3fb100cb8ceb07a1eb9c5a6766dc1e64c82bbcd016bf6750ab0d0c0c30cbd219ffaabdde3fad3d02e193c2f889110900d5d7b17f9ff81782f72e1d3193b89345a496446165bd446b6ef8d4e8bdf1f100a0f9e413e7ecc7314deeac59f74422630761c7d55f0b7fc560b5198440b809e1e6119288d1eaa8e4129e1e76daebecdecb30f7016877ac5a86603d0b7db8ab63aa0ae490dfdf6766f74e6285f1eac32f40964e3474b1ab6eda18df098121eb561a1aa496a5e2301de40778989a623da304b7d93694ea7037f1d729b9eed71192eaba5bbc9a81ace031949c209f05f068489a480471525ab6513c4304", 0x1000}], 0x1}, 0x20000000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000000)=0x40) 1.093106879s ago: executing program 5 (id=1405): socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r3, 0x0, 0x3f01) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000370427bd70000000000000000000", @ANYRES32=r5, @ANYBLOB="c30803000b2ebe2650001280080001006774700044000280080007000a010101080004000100000008000700ac1414330500", @ANYRES32=r2], 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)={0x4c, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_LINK={0x8, 0x1, r5}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6}, @GTPA_PEER_ADDR6={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x33}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004800) 764.281255ms ago: executing program 5 (id=1406): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x80) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x148, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x3}, {0x0, 0xfff1}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x118, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_DPS={0x10, 0x3, {0x0, 0xd, 0x1, 0x4}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x480d8}, 0x4000000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 425.20264ms ago: executing program 2 (id=1407): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'ip6gre0\x00', 0x2000}) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'sit0\x00'}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'syztnl1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x1, 0x3, &(0x7f00000013c0)=ANY=[@ANYBLOB="18000000000300"/16], &(0x7f0000001400)='syzkaller\x00'}, 0x94) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x2800) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000800), 0x161200, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x7fffffffffffffff) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x8000000) 406.446561ms ago: executing program 4 (id=1408): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x2, 0x3, 0x0, {0xa, 0x4c23, 0x8, @local, 0x97}}}, 0x80, 0x0}, 0xf765) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00'}) r1 = socket$kcm(0x10, 0x400000002, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r2, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0xfe33) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4840) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x4040800) 333.861115ms ago: executing program 1 (id=1409): setitimer(0x0, &(0x7f0000000580)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) close(r0) r1 = inotify_init1(0x800) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) fcntl$setsig(r1, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 230.123669ms ago: executing program 4 (id=1410): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xe, 0x4, 0x4, 0x8}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000380), &(0x7f00000003c0)=r4}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) sendmsg$unix(r7, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 133.709424ms ago: executing program 4 (id=1411): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) syz_clone3(0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r1, 0x402, 0x1a) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000a00)='./file0\x00', 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="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", @ANYBLOB="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", @ANYBLOB="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"], 0xff, 0x2c1, &(0x7f0000000d40)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x39a, &(0x7f00000002c0)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r2, 0x1, r0, 0x4}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) socket$nl_route(0x10, 0x3, 0x0) 133.288474ms ago: executing program 1 (id=1412): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, 0x0, 0x20040004) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount$tmpfs(0x0, &(0x7f0000000200)='./tracefs/file0\x00', &(0x7f00000002c0), 0x4400, &(0x7f0000000300)=ANY=[@ANYBLOB="696e646f36342c66736e61cddbb5bd726163656673002c7063723d30304a30"]) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) creat(&(0x7f00000000c0)='./tracefs/dynamic_events\x00', 0x0) socket$inet(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbmon(&(0x7f0000000900), 0x5, 0xa01) unshare(0x2c020400) pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0xd6c1, 0x6, 0x10000, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x3fb, 0xffffffffffffdffd, 0x8, 0x9, 0xfffffffffffffffc, 0x0, 0x192dbfb5, 0xfffffffffffffffc}, 0x0, 0x0) 84.341896ms ago: executing program 2 (id=1413): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x200, {0x1d, 0x1, 0x8}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8, 0x9, r1}]}, 0x24}}, 0x0) fallocate(0xffffffffffffffff, 0x2, 0x8, 0x1) syz_usb_connect$cdc_ncm(0x2, 0x75, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000082505a1a4400001020301090263000201000000090480000102090000052406000105240000000d240f0100000000000000000006341a000001072414"], 0x0) r2 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000000c0)='secret\x00', &(0x7f0000000180)='}\x00', 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet6(r4, &(0x7f0000000480)={&(0x7f0000000040)={0xa, 0x4e20, 0xfffffffc, @remote, 0x2}, 0x1c, 0x0}, 0x20008814) sendto$inet6(r4, 0x0, 0x0, 0x20000000, 0x0, 0x0) close(r2) ioctl(r3, 0x40046f41, &(0x7f0000000300)) 60.198618ms ago: executing program 0 (id=1414): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 0s ago: executing program 5 (id=1415): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000007060108e8ff000000000000000000000500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x40844}, 0x0) kernel console output (not intermixed with test programs): 0 [ 106.867936][ T5110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 106.878096][ T5110] Call Trace: [ 106.881490][ T5110] [ 106.884062][ T4175] usb 2-1: device descriptor read/64, error -71 [ 106.884429][ T5110] dump_stack_lvl+0x188/0x250 [ 106.895327][ T5110] ? show_regs_print_info+0x20/0x20 [ 106.900546][ T5110] ? load_image+0x410/0x410 [ 106.905067][ T5110] ? uncharge_page+0x490/0x490 [ 106.909853][ T5110] should_fail+0x383/0x4b0 [ 106.914295][ T5110] prepare_alloc_pages+0x1e3/0x5b0 [ 106.919433][ T5110] __alloc_pages+0x11b/0x480 [ 106.924054][ T5110] ? zone_statistics+0x170/0x170 [ 106.929006][ T5110] ? rcu_lock_acquire+0x30/0x30 [ 106.933871][ T5110] ? alloc_pages+0x452/0x560 [ 106.938484][ T5110] __get_free_pages+0x8/0x30 [ 106.943182][ T5110] __tlb_remove_page_size+0x1f2/0x3f0 [ 106.948579][ T5110] unmap_page_range+0xfcf/0x2410 [ 106.953642][ T5110] unmap_vmas+0x131/0x250 [ 106.957996][ T5110] ? unmap_page_range+0x2410/0x2410 [ 106.963199][ T5110] ? __mutex_lock_common+0x435/0x2400 [ 106.968594][ T5110] ? exit_mm_release+0x16/0x30 [ 106.973399][ T5110] exit_mmap+0x3b9/0x640 [ 106.975095][ T5116] loop3: detected capacity change from 0 to 4096 [ 106.977658][ T5110] ? vm_brk+0x20/0x20 [ 106.977694][ T5110] ? uprobe_clear_state+0x2f6/0x460 [ 106.993249][ T5110] __mmput+0x115/0x390 [ 106.997341][ T5110] exit_mm+0x632/0x7b0 [ 107.001549][ T5110] ? perf_pmu_migrate_context+0xb70/0xb70 [ 107.007291][ T5110] ? do_exit+0x2110/0x2110 [ 107.008846][ T5116] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 107.011709][ T5110] ? __ia32_sys_timer_delete+0x40/0x40 [ 107.011735][ T5110] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 107.011760][ T5110] ? tty_audit_exit+0x149/0x1f0 [ 107.011780][ T5110] do_exit+0x5b8/0x2110 [ 107.011801][ T5110] ? put_task_struct+0x80/0x80 [ 107.011817][ T5110] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 107.011842][ T5110] ? _raw_spin_lock_irq+0xb7/0xf0 [ 107.011864][ T5110] do_group_exit+0x12c/0x2f0 [ 107.011878][ T5110] ? lockdep_hardirqs_on+0x94/0x140 [ 107.026879][ T4175] usb usb2-port1: attempt power cycle [ 107.031783][ T5110] get_signal+0x7eb/0x12e0 [ 107.031825][ T5110] arch_do_signal_or_restart+0xe6/0x12a0 [ 107.031857][ T5110] ? futex_exit_release+0x1c0/0x1c0 [ 107.087137][ T5110] ? get_sigframe_size+0x10/0x10 [ 107.092089][ T5110] ? __context_tracking_exit+0x4c/0x80 [ 107.097552][ T5110] ? exit_to_user_mode_loop+0x3b/0x130 [ 107.103097][ T5110] exit_to_user_mode_loop+0x9e/0x130 [ 107.108370][ T5110] exit_to_user_mode_prepare+0xee/0x180 [ 107.113901][ T5110] syscall_exit_to_user_mode+0x16/0x40 [ 107.119350][ T5110] do_syscall_64+0x58/0xa0 [ 107.123751][ T5110] ? clear_bhb_loop+0x30/0x80 [ 107.128414][ T5110] ? clear_bhb_loop+0x30/0x80 [ 107.133079][ T5110] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.138956][ T5110] RIP: 0033:0x7f0cfab59159 [ 107.143359][ T5110] Code: Unable to access opcode bytes at RIP 0x7f0cfab5912f. [ 107.150704][ T5110] RSP: 002b:00007f0cf8db10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 107.159126][ T5110] RAX: 0000000000000001 RBX: 00007f0cfade0fa8 RCX: 00007f0cfab59159 [ 107.167083][ T5110] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0cfade0fac [ 107.175039][ T5110] RBP: 00007f0cfade0fa0 R08: 0030ec1cd7e24ea8 R09: 0000000000000000 [ 107.183083][ T5110] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 107.191037][ T5110] R13: 00007f0cfade1038 R14: 00007ffd95d104e0 R15: 00007ffd95d105c8 [ 107.199010][ T5110] [ 107.291180][ T5124] loop2: detected capacity change from 0 to 256 [ 107.346251][ T5126] sch_fq: defrate 8 ignored. [ 107.371491][ T5124] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 107.388857][ T5128] tipc: Failed to remove unknown binding: 66,0,0/0:451828886/451828888 [ 107.414069][ T25] audit: type=1800 audit(1790175654.486:125): pid=5116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.259" name="file1" dev="loop3" ino=30 res=0 errno=0 [ 107.452864][ T5128] tipc: Failed to remove unknown binding: 66,0,0/0:451828886/451828887 [ 107.465398][ T5124] netlink: 28 bytes leftover after parsing attributes in process `syz.2.263'. [ 107.481210][ T5128] tipc: Failed to remove unknown binding: 66,0,0/0:451828886/451828888 [ 107.507290][ T5128] tipc: Failed to remove unknown binding: 66,0,0/0:451828886/451828887 [ 107.572003][ T4175] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 107.672478][ T4175] usb 2-1: device descriptor read/8, error -71 [ 107.718988][ T5142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.270'. [ 108.558065][ T4179] udevd[4179]: symlink '../../loop2' '/dev/disk/by-diskseq/87.tmp-b7:2' failed: Read-only file system [ 108.647224][ T4179] udevd[4179]: symlink '../../loop3' '/dev/disk/by-diskseq/88.tmp-b7:3' failed: Read-only file system [ 108.763547][ T4179] udevd[4179]: symlink '../../loop3' '/dev/disk/by-diskseq/88.tmp-b7:3' failed: Read-only file system [ 108.789614][ T5152] loop2: detected capacity change from 0 to 8192 [ 108.798628][ T5160] tipc: Failed to remove unknown binding: 66,0,0/0:1657713628/1657713630 [ 108.844871][ T5160] tipc: Failed to remove unknown binding: 66,0,0/0:1657713628/1657713629 [ 108.877325][ T5163] tipc: Failed to remove unknown binding: 66,0,0/0:1657713628/1657713630 [ 108.906720][ T5163] tipc: Failed to remove unknown binding: 66,0,0/0:1657713628/1657713629 [ 109.932451][ T4176] udevd[4176]: symlink '../../loop3' '/dev/disk/by-diskseq/88.tmp-b7:3' failed: Read-only file system [ 109.961291][ T4179] udevd[4179]: symlink '../../loop2' '/dev/disk/by-diskseq/89.tmp-b7:2' failed: Read-only file system [ 111.225524][ T4179] udevd[4179]: symlink '../../loop2' '/dev/disk/by-label/SYZKALLER.tmp-b7:2' failed: Read-only file system [ 111.247031][ T4179] udevd[4179]: symlink '../../loop2' '/dev/disk/by-uuid/1DC8-C73B.tmp-b7:2' failed: Read-only file system [ 111.875421][ T4179] udevd[4179]: symlink '../../loop2' '/dev/disk/by-diskseq/89.tmp-b7:2' failed: Read-only file system [ 111.920635][ T4179] udevd[4179]: symlink '../../loop2' '/dev/disk/by-diskseq/89.tmp-b7:2' failed: Read-only file system [ 111.959591][ T4179] udevd[4179]: symlink '../../loop2' '/dev/disk/by-diskseq/89.tmp-b7:2' failed: Read-only file system [ 112.941168][ T5195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.288'. [ 113.114366][ T25] audit: type=1800 audit(1790175660.186:126): pid=5201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.291" name="protocol" dev="configfs" ino=36220 res=0 errno=0 [ 113.637538][ T25] audit: type=1800 audit(1790175660.466:127): pid=5202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.291" name="local" dev="configfs" ino=35796 res=0 errno=0 [ 113.978934][ T4179] udevd[4179]: symlink '../../loop3' '/dev/disk/by-diskseq/88.tmp-b7:3' failed: Read-only file system [ 114.826861][ T4179] udevd[4179]: symlink '../../loop2' '/dev/disk/by-diskseq/90.tmp-b7:2' failed: Read-only file system [ 114.979401][ T5223] loop1: detected capacity change from 0 to 164 [ 115.003652][ T4176] udevd[4176]: symlink '../../loop3' '/dev/disk/by-diskseq/88.tmp-b7:3' failed: Read-only file system [ 115.081075][ T5223] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 115.110333][ T4179] udevd[4179]: symlink '../../loop1' '/dev/disk/by-diskseq/91.tmp-b7:1' failed: Read-only file system [ 115.140579][ T4179] udevd[4179]: symlink '../../loop1' '/dev/disk/by-label/CDROM.tmp-b7:1' failed: Read-only file system [ 115.159885][ T4179] udevd[4179]: symlink '../../loop1' '/dev/disk/by-uuid/2022-11-22-16-59-57-00.tmp-b7:1' failed: Read-only file system [ 115.179873][ T5223] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 115.209191][ T5223] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 115.266594][ T4179] udevd[4179]: symlink '../../loop1' '/dev/disk/by-diskseq/91.tmp-b7:1' failed: Read-only file system [ 115.274601][ T4176] udevd[4176]: symlink '../../loop2' '/dev/disk/by-diskseq/90.tmp-b7:2' failed: Read-only file system [ 115.329910][ T4179] udevd[4179]: symlink '../../loop1' '/dev/disk/by-label/CDROM.tmp-b7:1' failed: Read-only file system [ 115.375973][ T4179] udevd[4179]: symlink '../../loop1' '/dev/disk/by-uuid/2022-11-22-16-59-57-00.tmp-b7:1' failed: Read-only file system [ 117.039128][ T5239] tipc: Started in network mode [ 117.067991][ T5239] tipc: Node identity ac1414aa, cluster identity 4711 [ 117.084056][ T5239] tipc: New replicast peer: 172.20.20.187 [ 117.090241][ T5239] tipc: Enabled bearer , priority 10 [ 117.160203][ T5244] Cannot find set identified by id 0 to match [ 119.229544][ T4272] tipc: Node number set to 2886997162 [ 119.480462][ T4179] udevd[4179]: symlink '../../loop3' '/dev/disk/by-diskseq/88.tmp-b7:3' failed: Read-only file system [ 119.573802][ T4179] udevd[4179]: symlink '../../loop2' '/dev/disk/by-diskseq/90.tmp-b7:2' failed: Read-only file system [ 119.597352][ T5265] device batadv_slave_1 entered promiscuous mode [ 119.625743][ T5265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.311'. [ 119.646532][ T5265] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.742648][ T5265] device batadv_slave_1 left promiscuous mode [ 119.749427][ T5265] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.511751][ T4179] udevd[4179]: symlink '../../loop3' '/dev/disk/by-diskseq/88.tmp-b7:3' failed: Read-only file system [ 120.595626][ T4179] udevd[4179]: symlink '../../loop2' '/dev/disk/by-diskseq/90.tmp-b7:2' failed: Read-only file system [ 120.739072][ T4176] udevd[4176]: symlink '../../loop1' '/dev/disk/by-diskseq/92.tmp-b7:1' failed: Read-only file system [ 120.746539][ T5282] netlink: 12 bytes leftover after parsing attributes in process `syz.1.307'. [ 120.780783][ T5282] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 120.789108][ T5282] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 120.800227][ T5282] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 120.831217][ T4179] udevd[4179]: symlink '../../loop3' '/dev/disk/by-diskseq/88.tmp-b7:3' failed: Read-only file system [ 120.904502][ T4179] udevd[4179]: symlink '../../loop1' '/dev/disk/by-diskseq/92.tmp-b7:1' failed: Read-only file system [ 120.933895][ T5286] loop3: detected capacity change from 0 to 256 [ 120.982431][ T5291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.315'. [ 121.136450][ T4179] udevd[4179]: symlink '../../loop3' '/dev/disk/by-diskseq/93.tmp-b7:3' failed: Read-only file system [ 121.147577][ T5286] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xdbae3f17, utbl_chksum : 0xe619d30d) [ 121.260256][ T4176] udevd[4176]: symlink '../../loop1' '/dev/disk/by-diskseq/92.tmp-b7:1' failed: Read-only file system [ 121.468075][ T4179] udevd[4179]: symlink '../../loop3' '/dev/disk/by-uuid/1234-1234.tmp-b7:3' failed: Read-only file system [ 122.181234][ T5286] exfat: Unknown parameter 'ŸÂbË‘WYÈe&7aØÈ !±ÄŒOײ$¾¶3L'~ÒüIgù7ñ«æ'Í›zñÉ{Œ—2Ÿ–2s(Í4’…Ì#nšþó\éF†é' [ 122.294046][ T5317] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.301454][ T5317] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.014538][ T5317] device bridge_slave_1 left promiscuous mode [ 123.022189][ T5317] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.053987][ T5324] loop2: detected capacity change from 0 to 128 [ 123.187166][ T5317] device bridge_slave_0 left promiscuous mode [ 123.223469][ T5317] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.282791][ T5331] device-mapper: ioctl: only supply one of name or uuid, cmd(14) [ 123.303841][ T5324] device-mapper: ioctl: only supply one of name or uuid, cmd(5) [ 123.920648][ T21] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 123.928574][ T5328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.327'. [ 124.192105][ T21] usb 2-1: Using ep0 maxpacket: 32 [ 125.073989][ T5350] loop2: detected capacity change from 0 to 512 [ 125.128514][ T5350] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 125.171766][ T5350] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 125.199892][ T5350] EXT4-fs error (device loop2): ext4_orphan_get:1436: comm syz.2.336: bad orphan inode 131083 [ 125.217944][ T21] usb 2-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 125.250002][ T5358] netlink: 277 bytes leftover after parsing attributes in process `syz.3.348'. [ 125.272146][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.280172][ T21] usb 2-1: Product: syz [ 125.343631][ T5350] EXT4-fs (loop2): mounted filesystem without journal. Opts: stripe=0x0000000000000000,dioread_lock,nojournal_checksum,,errors=continue. Quota mode: none. [ 125.366078][ T21] usb 2-1: Manufacturer: syz [ 125.370885][ T21] usb 2-1: SerialNumber: syz [ 125.430746][ T25] audit: type=1800 audit(1790175672.496:128): pid=5364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.339" name="protocol" dev="configfs" ino=37039 res=0 errno=0 [ 125.452211][ T21] usb 2-1: can't set config #1, error -71 [ 125.462970][ T21] usb 2-1: USB disconnect, device number 6 [ 125.489517][ T25] audit: type=1800 audit(1790175672.496:129): pid=5364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.339" name="local" dev="configfs" ino=37040 res=0 errno=0 [ 125.577796][ T5361] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 126.655511][ T5371] netlink: 20 bytes leftover after parsing attributes in process `syz.4.343'. [ 126.769163][ T5371] capability: warning: `syz.4.343' uses 32-bit capabilities (legacy support in use) [ 126.895029][ T25] audit: type=1326 audit(1790175673.966:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5381 comm="syz.1.345" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a0b5d6159 code=0x0 [ 128.114394][ T5404] netlink: 12 bytes leftover after parsing attributes in process `syz.0.351'. [ 129.165516][ T7] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 129.422004][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 129.544107][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 128, changing to 11 [ 129.550300][ T5404] ODEBUG: Out of memory. ODEBUG disabled [ 129.559569][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 129.732288][ T7] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 129.749014][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.757549][ T7] usb 2-1: Product: syz [ 129.761734][ T7] usb 2-1: Manufacturer: syz [ 129.777600][ T7] usb 2-1: SerialNumber: syz [ 129.784591][ T7] usb 2-1: config 0 descriptor?? [ 129.836269][ T7] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input5 [ 130.694854][ T4272] usb 2-1: USB disconnect, device number 7 [ 130.721980][ C1] xpad 2-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 132.634566][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.641223][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.120725][ T5527] kvm: pic: non byte write [ 133.808451][ T5569] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 133.816637][ T5569] IPv6: NLM_F_CREATE should be set when creating new route [ 134.791311][ T5590] netlink: 4 bytes leftover after parsing attributes in process `syz.4.387'. [ 134.850618][ T5594] netlink: 'syz.3.388': attribute type 1 has an invalid length. [ 134.874960][ T5594] 8021q: adding VLAN 0 to HW filter on device bond2 [ 134.931024][ T5594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.388'. [ 134.960102][ T5594] bond2: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 135.028777][ T5594] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 135.200342][ T25] audit: type=1800 audit(1790175682.266:131): pid=5608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.395" name="size" dev="configfs" ino=37343 res=0 errno=0 [ 137.228292][ T25] audit: type=1800 audit(1790175682.296:132): pid=5608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.395" name="zoned" dev="configfs" ino=37344 res=0 errno=0 [ 137.701492][ T25] audit: type=1800 audit(1790175682.296:133): pid=5608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.395" name="power" dev="configfs" ino=37345 res=0 errno=0 [ 137.740684][ T5630] overlayfs: failed to clone upperpath [ 137.868614][ T5619] IPVS: fo: FWM 3 0x00000003 - no destination available [ 137.890416][ C0] IPVS: fo: FWM 3 0x00000003 - no destination available [ 138.408514][ T5653] loop1: detected capacity change from 0 to 256 [ 141.005186][ T4676] bridge0: port 3(syz_tun) entered disabled state [ 141.051821][ T5687] overlayfs: failed to clone upperpath [ 141.060815][ T4676] device syz_tun left promiscuous mode [ 141.067330][ T4676] bridge0: port 3(syz_tun) entered disabled state [ 141.084372][ T5688] tipc: Enabled bearer , priority 10 [ 141.295449][ T771] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.678104][ T771] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.108597][ T771] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.252841][ T25] audit: type=1800 audit(1790175689.326:134): pid=5711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.430" name="size" dev="configfs" ino=38234 res=0 errno=0 [ 142.306178][ T25] audit: type=1800 audit(1790175689.346:135): pid=5711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.430" name="zoned" dev="configfs" ino=37716 res=0 errno=0 [ 142.331128][ T771] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.365306][ T25] audit: type=1800 audit(1790175689.346:136): pid=5711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.430" name="power" dev="configfs" ino=37717 res=0 errno=0 [ 142.388675][ T5716] FAULT_INJECTION: forcing a failure. [ 142.388675][ T5716] name failslab, interval 1, probability 0, space 0, times 0 [ 142.432198][ T5716] CPU: 1 PID: 5716 Comm: syz.2.431 Not tainted syzkaller #0 [ 142.439532][ T5716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 142.449593][ T5716] Call Trace: [ 142.452880][ T5716] [ 142.455815][ T5716] dump_stack_lvl+0x188/0x250 [ 142.460504][ T5716] ? show_regs_print_info+0x20/0x20 [ 142.465712][ T5716] ? load_image+0x410/0x410 [ 142.470230][ T5716] ? __might_sleep+0xf0/0xf0 [ 142.474923][ T5716] ? __lock_acquire+0x7b50/0x7b50 [ 142.479968][ T5716] should_fail+0x383/0x4b0 [ 142.484456][ T5716] should_failslab+0x5/0x20 [ 142.488971][ T5716] slab_pre_alloc_hook+0x51/0xc0 [ 142.493914][ T5716] ? __kernfs_new_node+0xe3/0x6b0 [ 142.498949][ T5716] kmem_cache_alloc+0x3d/0x280 [ 142.503719][ T5716] __kernfs_new_node+0xe3/0x6b0 [ 142.508585][ T5716] ? __lock_acquire+0x7b50/0x7b50 [ 142.513617][ T5716] ? kernfs_new_node+0x250/0x250 [ 142.518674][ T5716] ? kernfs_activate+0x1eb/0x210 [ 142.523661][ T5716] kernfs_new_node+0x148/0x250 [ 142.528437][ T5716] __kernfs_create_file+0x47/0x2e0 [ 142.533561][ T5716] sysfs_add_file_mode_ns+0x2d2/0x390 [ 142.538950][ T5716] internal_create_group+0x492/0xd00 [ 142.544341][ T5716] ? sysfs_create_group+0x20/0x20 [ 142.549378][ T5716] ? kernfs_add_one+0x564/0x6c0 [ 142.554262][ T5716] sysfs_create_groups+0x55/0x120 [ 142.559303][ T5716] device_add_attrs+0x82/0x690 [ 142.564078][ T5716] device_add+0x677/0x1050 [ 142.568594][ T5716] netdev_register_kobject+0x184/0x320 [ 142.574065][ T5716] register_netdevice+0x10e8/0x1720 [ 142.579283][ T5716] ? netif_stacked_transfer_operstate+0x200/0x200 [ 142.585796][ T5716] ? memset+0x1e/0x40 [ 142.589810][ T5716] ip6_tnl_locate+0x72e/0x840 [ 142.594517][ T5716] ? ip6_tnl_unlink+0x2c0/0x2c0 [ 142.599379][ T5716] ? ip6_tnl_siocdevprivate+0x5f5/0xb90 [ 142.604942][ T5716] ip6_tnl_siocdevprivate+0x61b/0xb90 [ 142.610343][ T5716] ? ip6_tnl_start_xmit+0x12d0/0x12d0 [ 142.615745][ T5716] ? full_name_hash+0x8e/0xe0 [ 142.620445][ T5716] dev_ifsioc+0xa30/0xd50 [ 142.624796][ T5716] ? dev_ioctl+0xe30/0xe30 [ 142.629225][ T5716] ? full_name_hash+0x8e/0xe0 [ 142.633928][ T5716] dev_ioctl+0x5df/0xe30 [ 142.638188][ T5716] ? get_user_ifreq+0xc7/0x170 [ 142.642977][ T5716] sock_ioctl+0x679/0x700 [ 142.647409][ T5716] ? sock_poll+0x420/0x420 [ 142.651930][ T5716] ? bpf_lsm_file_ioctl+0x5/0x10 [ 142.656882][ T5716] ? security_file_ioctl+0x7c/0xa0 [ 142.662109][ T5716] ? sock_poll+0x420/0x420 [ 142.666548][ T5716] __se_sys_ioctl+0xfa/0x170 [ 142.671152][ T5716] do_syscall_64+0x4c/0xa0 [ 142.675578][ T5716] ? clear_bhb_loop+0x30/0x80 [ 142.680263][ T5716] ? clear_bhb_loop+0x30/0x80 [ 142.684949][ T5716] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 142.690844][ T5716] RIP: 0033:0x7f0cfab59159 [ 142.695261][ T5716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.714869][ T5716] RSP: 002b:00007f0cf8db1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.723300][ T5716] RAX: ffffffffffffffda RBX: 00007f0cfade0fa0 RCX: 00007f0cfab59159 [ 142.731275][ T5716] RDX: 0000200000000400 RSI: 00000000000089f1 RDI: 0000000000000006 [ 142.739362][ T5716] RBP: 00007f0cfabf006b R08: 0000000000000000 R09: 0000000000000000 [ 142.747347][ T5716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.755334][ T5716] R13: 00007f0cfade1038 R14: 00007f0cfade0fa0 R15: 00007ffd95d105c8 [ 142.763420][ T5716] [ 143.320200][ T5724] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709518847) [ 143.402322][ T5724] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 144.029786][ T5712] chnl_net:caif_netlink_parms(): no params data found [ 144.615476][ T4272] Bluetooth: hci3: command 0x0409 tx timeout [ 144.984453][ T5755] netlink: 'syz.0.443': attribute type 3 has an invalid length. [ 145.119974][ T5755] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.443'. [ 145.161242][ T5756] netlink: 'syz.0.443': attribute type 3 has an invalid length. [ 145.192122][ T5756] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.443'. [ 145.213593][ T5762] netlink: 'syz.0.443': attribute type 3 has an invalid length. [ 145.225997][ T771] bond2: (slave ip6gretap1): Releasing active interface [ 145.375498][ T5762] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.443'. [ 145.497697][ T5768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.444'. [ 145.535770][ T5712] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.560332][ T5712] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.790866][ T5712] device bridge_slave_0 entered promiscuous mode [ 146.002577][ T5712] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.034498][ T5712] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.042726][ T5712] device bridge_slave_1 entered promiscuous mode [ 146.215426][ T5712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.386104][ T5712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.652248][ T21] Bluetooth: hci3: command 0x041b tx timeout [ 146.917814][ T5712] team0: Port device team_slave_0 added [ 146.930264][ T5712] team0: Port device team_slave_1 added [ 146.995471][ T5712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.463971][ T5712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.540105][ T5712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.553088][ T5712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.560167][ T5712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.607347][ T5712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.702111][ T5792] netlink: 11834 bytes leftover after parsing attributes in process `syz.2.450'. [ 147.718403][ T5712] device hsr_slave_0 entered promiscuous mode [ 147.738962][ T5712] device hsr_slave_1 entered promiscuous mode [ 147.768491][ T5712] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 147.786748][ T5712] Cannot create hsr debugfs directory [ 147.962134][ T5797] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 148.762318][ T4272] Bluetooth: hci3: command 0x040f tx timeout [ 148.794814][ T5712] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 148.851216][ T5712] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 148.878438][ T5821] netlink: 12 bytes leftover after parsing attributes in process `syz.4.457'. [ 148.903955][ T5821] device bond1 entered promiscuous mode [ 148.909977][ T5821] 8021q: adding VLAN 0 to HW filter on device bond1 [ 148.939796][ T5712] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 149.007904][ T5824] device erspan1 entered promiscuous mode [ 149.015335][ T5824] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 149.024405][ T5712] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 149.085223][ T5826] netlink: 140 bytes leftover after parsing attributes in process `syz.2.456'. [ 149.107404][ T5826] netlink: 28 bytes leftover after parsing attributes in process `syz.2.456'. [ 149.157520][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 149.239256][ T771] device hsr_slave_0 left promiscuous mode [ 149.268474][ T771] device hsr_slave_1 left promiscuous mode [ 149.288829][ T771] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.312110][ T771] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.357003][ T771] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.375466][ T771] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.395768][ T771] device bridge_slave_1 left promiscuous mode [ 149.413130][ T771] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.437661][ T771] device bridge_slave_0 left promiscuous mode [ 149.475914][ T771] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.581116][ T771] device veth1_macvtap left promiscuous mode [ 149.605786][ T771] device veth0_macvtap left promiscuous mode [ 149.643815][ T771] device veth1_vlan left promiscuous mode [ 149.731418][ T771] device veth0_vlan left promiscuous mode [ 150.496960][ T771] bond2 (unregistering): Released all slaves [ 150.554671][ T771] bond1 (unregistering): Released all slaves [ 150.807956][ T4193] Bluetooth: hci3: command 0x0419 tx timeout [ 150.817719][ T5875] netlink: 12 bytes leftover after parsing attributes in process `syz.1.470'. [ 150.836237][ T771] team0 (unregistering): Port device team_slave_0 removed [ 150.852853][ T771] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.867775][ T771] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.001500][ T771] bond0 (unregistering): Released all slaves [ 151.132699][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.140222][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.171545][ T5873] device bridge_slave_1 left promiscuous mode [ 151.187509][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.216913][ T5873] device bridge_slave_0 left promiscuous mode [ 151.223431][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.274166][ T5876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.469'. [ 151.310738][ T5883] netlink: 140 bytes leftover after parsing attributes in process `syz.0.472'. [ 151.320003][ T5883] netlink: 28 bytes leftover after parsing attributes in process `syz.0.472'. [ 151.347832][ T5887] netlink: 'syz.1.473': attribute type 4 has an invalid length. [ 151.399811][ T5885] netlink: 'syz.1.473': attribute type 4 has an invalid length. [ 151.474517][ T5712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.555622][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 151.579097][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 151.631274][ T5712] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.677291][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 151.701009][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 151.730949][ T4293] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.738277][ T4293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.816480][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 151.830160][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 151.894704][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 151.951559][ T4293] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.958721][ T4293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.018198][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 152.045852][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 152.110206][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 152.155955][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 152.200841][ T5712] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 152.227813][ T5712] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 152.269816][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 152.284101][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 152.314988][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 152.339582][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 152.369609][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 152.385394][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 152.422884][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 152.445593][ T5929] netlink: 12 bytes leftover after parsing attributes in process `syz.4.481'. [ 152.506216][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 152.687333][ T5942] binder: BC_ACQUIRE_RESULT not supported [ 152.727141][ T5942] binder: 5938:5942 ioctl c0306201 200000000240 returned -22 [ 152.779735][ T5944] loop1: detected capacity change from 0 to 128 [ 152.802462][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 152.815253][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 152.867975][ T5712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.072526][ T5953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.486'. [ 153.181028][ T5953] device bond1 entered promiscuous mode [ 153.252175][ T5953] 8021q: adding VLAN 0 to HW filter on device bond1 [ 153.347424][ T5961] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 153.362493][ T5957] device erspan1 entered promiscuous mode [ 153.391144][ T5957] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 153.437703][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 153.623700][ T25] audit: type=1800 audit(1790175700.696:137): pid=5974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.490" name="attr_allow_any_host" dev="configfs" ino=38754 res=0 errno=0 [ 153.670044][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 153.706377][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 153.721970][ T25] audit: type=1800 audit(1790175700.726:138): pid=5974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.490" name="addr_trtype" dev="configfs" ino=38760 res=0 errno=0 [ 153.780292][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 153.829468][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 153.847076][ T13] nvmet: creating controller 1 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:3c38b971-c6e2-461a-bcfd-9f3d02219f64. [ 153.867749][ T5712] device veth0_vlan entered promiscuous mode [ 153.889303][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 153.904194][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 153.949181][ T5712] device veth1_vlan entered promiscuous mode [ 153.974141][ T5974] nvme nvme0: creating 2 I/O queues. [ 154.029976][ T5981] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.037305][ T5981] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.049201][ T5974] nvme nvme0: new ctrl: "testsubsys" [ 154.112105][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 154.120236][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 154.149718][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 154.170037][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 154.186721][ T5712] device veth0_macvtap entered promiscuous mode [ 154.203640][ T5981] device bridge_slave_1 left promiscuous mode [ 154.209860][ T5981] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.291858][ T5981] device bridge_slave_0 left promiscuous mode [ 154.322590][ T5981] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.439550][ T5997] ip_tables: iptables: counters copy to user failed while replacing table [ 154.856050][ T6012] capability: warning: `syz.1.497' uses deprecated v2 capabilities in a way that may be insecure [ 155.241914][ T5712] device veth1_macvtap entered promiscuous mode [ 155.257649][ T5984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.491'. [ 155.283012][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 155.301172][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 155.338765][ T5712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.371066][ T5712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.391315][ T5712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.412347][ T5712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.440728][ T5712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.480421][ T5712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.522426][ T5712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.532982][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 155.542602][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 155.555823][ T6020] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 155.567905][ T5712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.628454][ T5712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.711019][ T5712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.817245][ T5712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.999042][ T5712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.139740][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 156.198559][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 156.315993][ T5712] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.352296][ T5712] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.364905][ T5712] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.381415][ T6037] netlink: 12 bytes leftover after parsing attributes in process `syz.2.504'. [ 156.404655][ T5712] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.598524][ T4451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.609924][ T4451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.638596][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 156.657246][ T6044] IPVS: fo: FWM 3 0x00000003 - no destination available [ 156.707162][ C1] IPVS: fo: FWM 3 0x00000003 - no destination available [ 156.725808][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.745795][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.772170][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 156.882976][ T6057] overlayfs: failed to clone upperpath [ 157.209838][ T6081] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 157.511119][ T6096] x_tables: unsorted entry at hook 2 [ 157.630276][ T6096] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 157.867608][ T6100] loop5: detected capacity change from 0 to 512 [ 158.343201][ T6100] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 49) [ 158.392608][ T6100] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 49) [ 158.464278][ T6100] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 49) [ 158.574139][ T6118] jffs2: notice: (6118) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 158.706063][ T6126] netlink: 14 bytes leftover after parsing attributes in process `syz.0.527'. [ 159.101451][ T6145] loop1: detected capacity change from 0 to 256 [ 159.175660][ T6151] netlink: 132 bytes leftover after parsing attributes in process `syz.0.533'. [ 159.196944][ T6145] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 159.212522][ T1323] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 159.231578][ T6151] netlink: 132 bytes leftover after parsing attributes in process `syz.0.533'. [ 159.625455][ T1323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.647466][ T1323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.701343][ T1323] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 159.720468][ T1323] usb 3-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00 [ 159.730042][ T1323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.760014][ T1323] usb 3-1: config 0 descriptor?? [ 159.828077][ T6169] loop1: detected capacity change from 0 to 512 [ 159.841307][ T6171] netlink: 12 bytes leftover after parsing attributes in process `syz.5.539'. [ 160.032965][ T6136] loop2: detected capacity change from 0 to 128 [ 160.105622][ T6177] netlink: 8 bytes leftover after parsing attributes in process `syz.5.540'. [ 160.307806][ T1323] wacom 0003:056A:0003.0001: unbalanced collection at end of report description [ 160.332875][ T1323] wacom 0003:056A:0003.0001: parse failed [ 160.349184][ T1323] wacom: probe of 0003:056A:0003.0001 failed with error -22 [ 160.534955][ T6195] netlink: 32 bytes leftover after parsing attributes in process `syz.4.545'. [ 160.545758][ T1323] usb 3-1: USB disconnect, device number 3 [ 160.968672][ T6218] netlink: 'syz.0.553': attribute type 4 has an invalid length. [ 161.738671][ T6232] loop5: detected capacity change from 0 to 512 [ 161.761764][ T6220] netlink: 'syz.0.553': attribute type 4 has an invalid length. [ 161.821512][ T6223] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 161.848985][ T6223] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 161.865169][ T6223] bond0: (slave bond_slave_0): Releasing backup interface [ 161.907892][ T6223] bond0: (slave bond_slave_1): Releasing backup interface [ 162.034128][ T6223] team0: Port device team_slave_0 removed [ 162.065648][ T6223] team0: Port device team_slave_1 removed [ 162.074913][ T6223] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.090266][ T6223] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.105359][ T6223] bond1: (slave erspan1): Releasing backup interface [ 162.114156][ T6223] device erspan1 left promiscuous mode [ 162.540328][ T6247] loop5: detected capacity change from 0 to 32768 [ 162.662753][ T6247] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.558 (6247) [ 162.746993][ T6247] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 162.779204][ T6247] BTRFS info (device loop5): using free space tree [ 162.798655][ T6247] BTRFS info (device loop5): has skinny extents [ 163.845268][ T6247] BTRFS info (device loop5): enabling ssd optimizations [ 164.868272][ T6310] jffs2: notice: (6310) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 165.449658][ T6336] netlink: 'syz.0.577': attribute type 1 has an invalid length. [ 165.476913][ T6336] netlink: 'syz.0.577': attribute type 4 has an invalid length. [ 165.485020][ T6336] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.577'. [ 165.563172][ T6342] sch_tbf: burst 21990 is lower than device lo mtu (11337746) ! [ 165.670043][ T4270] BTRFS info (device loop5): qgroup scan completed (inconsistency flag cleared) [ 166.098400][ T6368] netlink: 12 bytes leftover after parsing attributes in process `syz.2.585'. [ 167.038689][ T6380] Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 167.160342][ T6388] VFS: Mount too revealing [ 167.201724][ T6394] loop2: detected capacity change from 0 to 1024 [ 167.339882][ T6394] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,block_validity,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 167.596255][ T6369] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 167.612057][ T6405] loop1: detected capacity change from 0 to 32768 [ 167.643321][ T6405] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.592 (6405) [ 167.700326][ T6405] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 167.715369][ T6405] BTRFS info (device loop1): using free space tree [ 167.728637][ T6405] BTRFS info (device loop1): has skinny extents [ 167.869798][ T6405] BTRFS info (device loop1): enabling ssd optimizations [ 168.058128][ T4293] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 168.126813][ T6369] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 168.152099][ T6369] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 168.177243][ T6369] usb 6-1: Product: syz [ 168.189220][ T6369] usb 6-1: Manufacturer: syz [ 168.217649][ T6369] usb 6-1: SerialNumber: syz [ 168.219138][ T6435] device bridge0 left promiscuous mode [ 168.240960][ T6369] usb 6-1: config 0 descriptor?? [ 168.254209][ T6435] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.277108][ T6435] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.511319][ T6369] usb 6-1: USB disconnect, device number 2 [ 168.582150][ T4193] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 168.847613][ T4193] usb 3-1: Using ep0 maxpacket: 32 [ 168.989908][ T6459] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 169.008584][ T6459] bond0: (slave bond_slave_0): Releasing backup interface [ 169.040209][ T6459] bond0: (slave bond_slave_1): Releasing backup interface [ 169.110605][ T6459] team0: Port device team_slave_0 removed [ 169.141628][ T6459] team0: Port device team_slave_1 removed [ 169.151735][ T6459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.165526][ T6459] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.198276][ T6459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.215480][ T6459] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.892066][ T4193] usb 3-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 169.927824][ T4193] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.968741][ T4193] usb 3-1: Product: syz [ 169.986836][ T4193] usb 3-1: Manufacturer: syz [ 169.991815][ T4193] usb 3-1: SerialNumber: syz [ 170.216364][ T6483] loop5: detected capacity change from 0 to 512 [ 170.273523][ T6483] EXT4-fs (loop5): Test dummy encryption mode enabled [ 170.316700][ T6486] device syzkaller0 entered promiscuous mode [ 170.329504][ T6435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.594'. [ 170.360986][ T6483] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,acl,usrquota,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 170.501517][ T6483] jffs2: notice: (6483) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 170.518429][ T4193] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 170.552626][ T4193] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 170.674556][ T4193] snd-usb-audio: probe of 3-1:1.0 failed with error -71 [ 170.734266][ T4193] usb 3-1: USB disconnect, device number 4 [ 170.745433][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 171.023152][ T6508] device syzkaller0 entered promiscuous mode [ 171.060768][ T6512] bond0: (slave bond_slave_0): Releasing backup interface [ 171.097852][ T6512] bond0: (slave bond_slave_1): Releasing backup interface [ 171.129377][ T6512] team0: Port device team_slave_0 removed [ 171.168387][ T6512] team0: Port device team_slave_1 removed [ 171.190955][ T6512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.229489][ T6512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.253958][ T6512] bond1: (slave erspan1): Releasing backup interface [ 171.277840][ T6512] device erspan1 left promiscuous mode [ 171.522193][ T6533] netlink: 'syz.2.623': attribute type 10 has an invalid length. [ 171.571357][ T6533] device dummy0 left promiscuous mode [ 171.665472][ T6533] device dummy0 entered promiscuous mode [ 171.689711][ T6533] team0: Port device dummy0 added [ 171.721961][ T6537] netlink: 'syz.2.623': attribute type 10 has an invalid length. [ 172.891502][ T6557] netlink: 28 bytes leftover after parsing attributes in process `syz.5.627'. [ 173.604668][ T6556] ci_hdrc pcspkr: platform data missing [ 173.624609][ T6537] device dummy0 left promiscuous mode [ 173.689573][ T6537] team0: Port device dummy0 removed [ 173.756969][ T6537] device dummy0 entered promiscuous mode [ 173.770421][ T6537] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 173.990798][ T6572] device syzkaller0 entered promiscuous mode [ 174.048504][ T6576] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 174.111969][ T6449] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 174.546377][ T6590] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 174.610222][ T6590] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 174.734388][ T6590] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 175.059656][ T6449] usb 6-1: Using ep0 maxpacket: 8 [ 175.168814][ T6590] bond0: (slave bond_slave_0): Releasing backup interface [ 175.202162][ T6449] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.226132][ T6449] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 175.270590][ T6590] bond0: (slave bond_slave_1): Releasing backup interface [ 175.422120][ T6449] usb 6-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 175.431236][ T6449] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.455324][ T6590] team0: Port device team_slave_0 removed [ 175.487812][ T6449] usb 6-1: Product: syz [ 175.495673][ T6449] usb 6-1: Manufacturer: syz [ 175.504660][ T6449] usb 6-1: SerialNumber: syz [ 175.532647][ T6590] team0: Port device team_slave_1 removed [ 175.548299][ T6590] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.587080][ T6590] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.623254][ T6590] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.630760][ T6590] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.762973][ T25] audit: type=1326 audit(1798564842.892:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6620 comm="syz.0.644" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef20d8a159 code=0x7ffc0000 [ 175.855147][ T25] audit: type=1326 audit(1798564842.912:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6620 comm="syz.0.644" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef20d8a159 code=0x7ffc0000 [ 175.928963][ T6449] usb 6-1: USB disconnect, device number 3 [ 175.972326][ T25] audit: type=1326 audit(1798564842.912:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6620 comm="syz.0.644" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef20d8a159 code=0x7ffc0000 [ 176.077694][ T6635] loop1: detected capacity change from 0 to 512 [ 176.084844][ T25] audit: type=1326 audit(1798564842.912:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6620 comm="syz.0.644" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef20d8a159 code=0x7ffc0000 [ 176.117964][ T25] audit: type=1326 audit(1798564842.912:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6620 comm="syz.0.644" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fef20d8a159 code=0x7ffc0000 [ 176.148143][ T6635] EXT4-fs (loop1): Test dummy encryption mode enabled [ 176.181565][ T25] audit: type=1326 audit(1798564842.912:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6620 comm="syz.0.644" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef20d8a159 code=0x7ffc0000 [ 176.234440][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 176.235657][ T6635] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,acl,usrquota,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 176.272515][ T25] audit: type=1326 audit(1798564842.912:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6620 comm="syz.0.644" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef20d8a159 code=0x7ffc0000 [ 176.301003][ T25] audit: type=1326 audit(1798564842.912:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6620 comm="syz.0.644" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef20d8a159 code=0x7ffc0000 [ 176.415370][ T6635] jffs2: notice: (6635) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 176.476111][ T25] audit: type=1326 audit(1798564842.912:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6620 comm="syz.0.644" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef20d8a159 code=0x7ffc0000 [ 176.533518][ T6651] /dev/loop0: Can't open blockdev [ 176.581427][ T25] audit: type=1326 audit(1798564842.912:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6620 comm="syz.0.644" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fef20d8a159 code=0x7ffc0000 [ 177.348354][ T6701] nvmet: adding nsid 1 to subsystem test [ 177.363144][ T6700] netlink: 'syz.0.663': attribute type 1 has an invalid length. [ 177.405116][ T6700] 8021q: adding VLAN 0 to HW filter on device bond1 [ 177.521678][ T6708] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 177.541194][ T6708] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 177.552159][ T6708] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 177.559772][ T6708] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 177.571372][ T6708] device bridge_slave_0 left promiscuous mode [ 177.578032][ T6708] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.588047][ T6708] device bridge_slave_1 left promiscuous mode [ 177.595432][ T6708] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.606092][ T6708] bond0: (slave bond_slave_0): Releasing backup interface [ 177.622529][ T6708] bond0: (slave bond_slave_1): Releasing backup interface [ 177.659635][ T6708] team0: Port device team_slave_0 removed [ 177.686569][ T6708] team0: Port device team_slave_1 removed [ 177.699298][ T6708] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.707417][ T6708] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.723423][ T6708] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.731084][ T6708] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.802634][ T6700] 8021q: adding VLAN 0 to HW filter on device bond2 [ 177.815373][ T6700] bond1: (slave bond2): Enslaving as an active interface with a down link [ 177.856713][ T6720] bond1 (unregistering): (slave bond2): Releasing active interface [ 177.888469][ T6720] bond1 (unregistering): Released all slaves [ 178.089780][ T6741] loop1: detected capacity change from 0 to 512 [ 178.112440][ T6744] netlink: 'syz.0.662': attribute type 4 has an invalid length. [ 178.216469][ T6741] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 178.291613][ T6741] EXT4-fs (loop1): 1 truncate cleaned up [ 178.297704][ T6741] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,noinit_itable,block_validity,errors=remount-ro,nombcache,. Quota mode: none. [ 179.176454][ T6759] loop1: detected capacity change from 0 to 8 [ 180.037986][ T6759] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 180.228868][ T6768] jffs2: notice: (6768) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 180.490719][ T6772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.672'. [ 180.800381][ T6779] FAULT_INJECTION: forcing a failure. [ 180.800381][ T6779] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 180.813860][ T6779] CPU: 0 PID: 6779 Comm: syz.5.674 Not tainted syzkaller #0 [ 180.821157][ T6779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 180.831241][ T6779] Call Trace: [ 180.834530][ T6779] [ 180.837465][ T6779] dump_stack_lvl+0x188/0x250 [ 180.842145][ T6779] ? show_regs_print_info+0x20/0x20 [ 180.847349][ T6779] ? load_image+0x410/0x410 [ 180.851861][ T6779] ? uncharge_page+0x490/0x490 [ 180.856661][ T6779] should_fail+0x383/0x4b0 [ 180.861093][ T6779] prepare_alloc_pages+0x1e3/0x5b0 [ 180.866219][ T6779] __alloc_pages+0x11b/0x480 [ 180.870815][ T6779] ? zone_statistics+0x170/0x170 [ 180.875759][ T6779] ? rcu_lock_acquire+0x30/0x30 [ 180.880625][ T6779] ? alloc_pages+0x452/0x560 [ 180.885249][ T6779] __get_free_pages+0x8/0x30 [ 180.889849][ T6779] __tlb_remove_page_size+0x1f2/0x3f0 [ 180.895237][ T6779] unmap_page_range+0xfcf/0x2410 [ 180.900212][ T6779] unmap_vmas+0x131/0x250 [ 180.904735][ T6779] ? unmap_page_range+0x2410/0x2410 [ 180.910031][ T6779] ? __mutex_lock_common+0x435/0x2400 [ 180.915412][ T6779] ? exit_mm_release+0x16/0x30 [ 180.920222][ T6779] exit_mmap+0x3b9/0x640 [ 180.924565][ T6779] ? vm_brk+0x20/0x20 [ 180.928568][ T6779] ? uprobe_clear_state+0x2f6/0x460 [ 180.933775][ T6779] __mmput+0x115/0x390 [ 180.937852][ T6779] exit_mm+0x632/0x7b0 [ 180.941926][ T6779] ? perf_pmu_migrate_context+0xb70/0xb70 [ 180.947656][ T6779] ? do_exit+0x2110/0x2110 [ 180.952077][ T6779] ? __ia32_sys_timer_delete+0x40/0x40 [ 180.957547][ T6779] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 180.963014][ T6779] ? tty_audit_exit+0x149/0x1f0 [ 180.967873][ T6779] do_exit+0x5b8/0x2110 [ 180.972034][ T6779] ? put_task_struct+0x80/0x80 [ 180.976905][ T6779] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 180.982898][ T6779] ? _raw_spin_lock_irq+0xb7/0xf0 [ 180.987938][ T6779] do_group_exit+0x12c/0x2f0 [ 180.992532][ T6779] ? lockdep_hardirqs_on+0x94/0x140 [ 180.997742][ T6779] get_signal+0x7eb/0x12e0 [ 181.002188][ T6779] arch_do_signal_or_restart+0xe6/0x12a0 [ 181.007843][ T6779] ? futex_exit_release+0x1c0/0x1c0 [ 181.013052][ T6779] ? get_sigframe_size+0x10/0x10 [ 181.018005][ T6779] ? __context_tracking_exit+0x4c/0x80 [ 181.023574][ T6779] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 181.029570][ T6779] ? exit_to_user_mode_loop+0x3b/0x130 [ 181.035047][ T6779] exit_to_user_mode_loop+0x9e/0x130 [ 181.040338][ T6779] exit_to_user_mode_prepare+0xee/0x180 [ 181.045899][ T6779] syscall_exit_to_user_mode+0x16/0x40 [ 181.051371][ T6779] do_syscall_64+0x58/0xa0 [ 181.055797][ T6779] ? clear_bhb_loop+0x30/0x80 [ 181.060658][ T6779] ? clear_bhb_loop+0x30/0x80 [ 181.065361][ T6779] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 181.071267][ T6779] RIP: 0033:0x7f99e8422159 [ 181.075694][ T6779] Code: Unable to access opcode bytes at RIP 0x7f99e842212f. [ 181.083239][ T6779] RSP: 002b:00007f99e667a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 181.091663][ T6779] RAX: fffffffffffffe00 RBX: 00007f99e86a9fa8 RCX: 00007f99e8422159 [ 181.099644][ T6779] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f99e86a9fa8 [ 181.107625][ T6779] RBP: 00007f99e86a9fa0 R08: 0000000000000000 R09: 0000000000000000 [ 181.115615][ T6779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.123623][ T6779] R13: 00007f99e86aa038 R14: 00007ffc0f7eaf90 R15: 00007ffc0f7eb078 [ 181.131617][ T6779] [ 181.136916][ T6449] Bluetooth: hci1: command 0x0406 tx timeout [ 181.144689][ T6449] Bluetooth: hci4: command 0x0406 tx timeout [ 181.151600][ T6449] Bluetooth: hci2: command 0x0406 tx timeout [ 181.159237][ T6449] Bluetooth: hci0: command 0x0406 tx timeout [ 181.190872][ T6787] loop2: detected capacity change from 0 to 1024 [ 181.293494][ T6787] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,,errors=continue. Quota mode: none. [ 181.333170][ T6797] netlink: 'syz.0.679': attribute type 8 has an invalid length. [ 181.357757][ T6787] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.389330][ T6797] sch_fq: defrate 0 ignored. [ 181.473849][ T6798] dummy0 speed is unknown, defaulting to 1000 [ 181.503954][ T6797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.679'. [ 181.536003][ T6798] dummy0 speed is unknown, defaulting to 1000 [ 181.545325][ T6787] EXT4-fs error (device loop2): ext4_free_blocks:6231: comm syz.2.677: Freeing blocks not in datazone - block = 0, count = 16 [ 181.556323][ T6798] dummy0 speed is unknown, defaulting to 1000 [ 181.614260][ T6802] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 181.649614][ T6802] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 181.661498][ T6802] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 181.689309][ T6805] team0: Mode changed to "random" [ 181.753377][ T771] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm kworker/u4:3: bg 0: block 112: padding at end of block bitmap is not set [ 182.338728][ T771] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 182.388719][ T771] EXT4-fs (loop2): This should not happen!! Data will be lost [ 182.388719][ T771] [ 182.399612][ T771] EXT4-fs (loop2): Total free blocks count 0 [ 182.405830][ T771] EXT4-fs (loop2): Free/Dirty block details [ 182.411792][ T771] EXT4-fs (loop2): free_blocks=16 [ 182.417120][ T771] EXT4-fs (loop2): dirty_blocks=16 [ 182.422411][ T771] EXT4-fs (loop2): Block reservation details [ 182.428389][ T771] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 182.468413][ T6802] device vlan0 entered promiscuous mode [ 182.495007][ T6798] infiniband syz0: set active [ 182.500216][ T6798] infiniband syz0: added dummy0 [ 182.554081][ T6798] RDS/IB: syz0: added [ 182.566533][ T6798] smc: adding ib device syz0 with port count 1 [ 182.573665][ T6798] smc: ib device syz0 port 1 has pnetid [ 182.618096][ T6810] loop1: detected capacity change from 0 to 128 [ 182.627741][ T6802] team0: Port device vlan0 added [ 182.635248][ T4233] dummy0 speed is unknown, defaulting to 1000 [ 182.635315][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 182.714842][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 182.738822][ T4193] dummy0 speed is unknown, defaulting to 1000 [ 182.748098][ T6812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.682'. [ 182.759292][ T6798] dummy0 speed is unknown, defaulting to 1000 [ 183.515081][ T6798] dummy0 speed is unknown, defaulting to 1000 [ 183.909932][ T6822] orangefs_mount: mount request failed with -4 [ 183.965322][ T6824] device syzkaller0 entered promiscuous mode [ 184.227806][ T6798] dummy0 speed is unknown, defaulting to 1000 [ 184.420339][ T6840] kvm [6839]: vcpu0, guest rIP: 0x79 ignored wrmsr: 0x11e data 0xbe702911 [ 184.519219][ T6798] dummy0 speed is unknown, defaulting to 1000 [ 184.713617][ T6798] dummy0 speed is unknown, defaulting to 1000 [ 185.344706][ T6873] netlink: 28 bytes leftover after parsing attributes in process `syz.0.700'. [ 185.991216][ T6877] loop2: detected capacity change from 0 to 1024 [ 186.075771][ T6877] EXT4-fs (loop2): Ignoring removed bh option [ 186.202413][ T6877] EXT4-fs (loop2): mounted filesystem without journal. Opts: lazytime,dioread_lock,stripe=0x0000000000000005,nolazytime,debug_want_extra_isize=0x0000000000000080,errors=remount-ro,barrier=0x0000000000000004,grpquota,bh,init_itable,. Quota mode: writeback. [ 186.289304][ T6898] netlink: 'syz.1.710': attribute type 8 has an invalid length. [ 186.314013][ T6898] sch_fq: defrate 0 ignored. [ 186.320050][ T6877] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 186.376902][ T6898] rdma_rxe: rxe_register_device failed with error -23 [ 186.402782][ T6898] rdma_rxe: failed to add dummy0 [ 186.467390][ T6898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.710'. [ 187.181580][ T6926] netlink: 28 bytes leftover after parsing attributes in process `syz.4.718'. [ 187.666958][ T6938] ipt_CLUSTERIP: Please specify destination IP [ 187.729769][ T6940] raw_sendmsg: syz.0.724 forgot to set AF_INET. Fix it! [ 188.301819][ T6954] netlink: 4 bytes leftover after parsing attributes in process `syz.5.728'. [ 189.469898][ T6965] netlink: 14 bytes leftover after parsing attributes in process `syz.1.732'. [ 189.531864][ T6963] loop2: detected capacity change from 0 to 8192 [ 189.795620][ T6969] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.945334][ T6969] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.038825][ T6969] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.064610][ T6986] loop3: detected capacity change from 0 to 7 [ 190.078362][ T4179] Dev loop3: unable to read RDB block 7 [ 190.087527][ T4179] loop3: AHDI p1 p2 [ 190.091632][ T4179] loop3: partition table partially beyond EOD, truncated [ 190.109189][ T4179] loop3: p1 start 1702000233 is beyond EOD, truncated [ 190.136542][ T6986] Dev loop3: unable to read RDB block 7 [ 190.145861][ T6986] loop3: AHDI p1 p2 [ 190.146597][ T6969] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.149861][ T6986] loop3: partition table partially beyond EOD, truncated [ 190.180199][ T6986] loop3: p1 start 1702000233 is beyond EOD, truncated [ 190.374142][ T6991] loop1: detected capacity change from 0 to 128 [ 190.374280][ T6969] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.410588][ T6969] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.431338][ T6969] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.453312][ T6969] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.651470][ T6979] syz.4.737 (6979) used greatest stack depth: 19472 bytes left [ 191.155298][ T1323] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 191.967191][ T1323] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 191.996810][ T1323] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.005175][ T1323] usb 6-1: Product: syz [ 192.009342][ T1323] usb 6-1: Manufacturer: syz [ 192.021910][ T1323] usb 6-1: SerialNumber: syz [ 192.483431][ T7029] netlink: 'syz.4.755': attribute type 1 has an invalid length. [ 192.577714][ T7033] loop2: detected capacity change from 0 to 1024 [ 192.606335][ T1323] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 192.616496][ T7030] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 192.628650][ T7030] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 192.662620][ T4230] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 192.902240][ T4230] usb 2-1: Using ep0 maxpacket: 8 [ 192.958585][ T7030] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 193.022601][ T4230] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.093536][ T4230] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 193.114181][ T7030] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 193.171633][ T7030] bond2: (slave geneve2): making interface the new active one [ 193.205054][ T7030] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 193.235696][ T7035] netlink: 28 bytes leftover after parsing attributes in process `syz.4.755'. [ 193.278672][ T7035] 8021q: adding VLAN 0 to HW filter on device bond2 [ 193.360774][ T7040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.757'. [ 193.396320][ T4230] usb 2-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 193.412450][ T4230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.430619][ T4230] usb 2-1: Product: syz [ 193.442842][ T4230] usb 2-1: Manufacturer: syz [ 193.447467][ T4230] usb 2-1: SerialNumber: syz [ 193.546031][ T4293] hfsplus: b-tree write err: -5, ino 25 [ 193.562330][ T4293] hfsplus: b-tree write err: -5, ino 4 [ 193.570081][ T4293] hfsplus: b-tree write err: -5, ino 2 [ 193.581231][ T4293] hfsplus: b-tree write err: -5, ino 26 [ 193.588804][ T4293] hfsplus: b-tree write err: -5, ino 27 [ 193.913638][ T4230] usb 2-1: USB disconnect, device number 8 [ 194.074286][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.080610][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.122128][ T1323] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 194.153167][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 194.632096][ T1323] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -71 [ 195.577896][ T7089] syz.2.771 sent an empty control message without MSG_MORE. [ 196.142027][ T1323] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 196.705461][ T1323] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 196.762489][ T7113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.778'. [ 196.771390][ T7113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.778'. [ 197.354321][ T7113] 8021q: VLANs not supported on ip6gre0 [ 197.378672][ T1323] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 197.411992][ T1323] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 197.442091][ T1323] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 197.482039][ T1323] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 197.532075][ T1323] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 197.549557][ T7131] loop2: detected capacity change from 0 to 512 [ 197.574222][ T1323] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 197.614673][ T1323] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 197.707400][ T1323] lan78xx: probe of 6-1:1.0 failed with error -71 [ 197.718064][ T1323] usb 6-1: USB disconnect, device number 4 [ 197.749713][ T7137] loop1: detected capacity change from 0 to 512 [ 197.809155][ T7131] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 197.852459][ T7131] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.916269][ T7137] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 197.962892][ T7137] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c128, mo2=0002] [ 197.970982][ T7137] System zones: 1-12 [ 197.980446][ T7137] EXT4-fs (loop1): 1 truncate cleaned up [ 197.986367][ T7137] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000009,bsddf,debug,data_err=ignore,errors=remount-ro,. Quota mode: none. [ 198.033131][ T7137] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 198.127484][ T7137] EXT4-fs (loop1): Remounting filesystem read-only [ 198.142513][ T7137] EXT4-fs error (device loop1): __ext4_new_inode:1360: inode #18: comm syz.1.788: mark_inode_dirty error [ 198.161953][ T7137] EXT4-fs (loop1): Remounting filesystem read-only [ 198.168592][ T7137] EXT4-fs error (device loop1) in __ext4_new_inode:1362: Corrupt filesystem [ 198.189661][ T7137] EXT4-fs (loop1): Remounting filesystem read-only [ 198.202111][ T7137] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 198.234247][ T7137] EXT4-fs (loop1): Remounting filesystem read-only [ 198.240845][ T7137] EXT4-fs error (device loop1): ext4_evict_inode:284: inode #18: comm syz.1.788: mark_inode_dirty error [ 198.265429][ T7137] EXT4-fs (loop1): Remounting filesystem read-only [ 198.306044][ T7137] EXT4-fs warning (device loop1): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 199.509393][ T7191] device syzkaller0 entered promiscuous mode [ 199.594258][ T7200] device syzkaller0 entered promiscuous mode [ 199.795543][ T7212] SET target dimension over the limit! [ 200.486768][ T7241] loop1: detected capacity change from 0 to 512 [ 200.530398][ T7237] loop2: detected capacity change from 0 to 4096 [ 200.564855][ T7241] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 200.612528][ T7241] EXT4-fs (loop1): invalid inodes per group: 0 [ 200.612528][ T7241] [ 200.874825][ T7241] netlink: 'syz.1.820': attribute type 4 has an invalid length. [ 200.892376][ T7247] scsi_nl_rcv_msg: Msgtype 1 failed - err -3 [ 201.861219][ T4201] Bluetooth: hci0: Received unexpected HCI Event 00000000 [ 201.923256][ T7262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.828'. [ 202.027497][ T25] kauditd_printk_skb: 40 callbacks suppressed [ 202.027511][ T25] audit: type=1400 audit(1798564869.152:189): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=7267 comm="syz.5.830" [ 202.127081][ T7275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.159521][ T7275] loop2: detected capacity change from 0 to 512 [ 202.209896][ T7275] EXT4-fs (loop2): 1 truncate cleaned up [ 202.215970][ T7275] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 202.235967][ T7275] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.834: bg 0: block 465: padding at end of block bitmap is not set [ 202.519908][ T7286] netlink: 12 bytes leftover after parsing attributes in process `syz.5.836'. [ 202.653930][ T7292] netlink: 8 bytes leftover after parsing attributes in process `syz.5.839'. [ 202.669215][ T7292] bond0: option arp_validate: invalid value (808464432) [ 202.789832][ T7294] Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 202.795455][ T7298] loop1: detected capacity change from 0 to 1024 [ 202.973351][ T7300] loop2: detected capacity change from 0 to 512 [ 202.979996][ T4270] hfsplus: b-tree write err: -5, ino 25 [ 202.986956][ T4270] hfsplus: b-tree write err: -5, ino 4 [ 203.003804][ T4270] hfsplus: b-tree write err: -5, ino 2 [ 203.085753][ T7300] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 203.164787][ T7300] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,inode_readahead_blks=0x0000000000010000,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 203.212271][ T7300] ext4 filesystem being mounted at /163/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 203.364069][ T7300] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #2: block 3: comm syz.2.842: lblock 0 mapped to illegal pblock 3 (length 1) [ 203.522169][ T7321] netlink: 28 bytes leftover after parsing attributes in process `syz.1.848'. [ 203.557820][ T4451] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm kworker/u4:11: Invalid inode table block 538976288 in block_group 0 [ 203.816070][ T7326] loop2: detected capacity change from 0 to 256 [ 203.858303][ T7326] FAT-fs (loop2): Directory bread(block 64) failed [ 203.895393][ T7326] FAT-fs (loop2): Directory bread(block 65) failed [ 203.948392][ T7326] FAT-fs (loop2): Directory bread(block 66) failed [ 204.086975][ T7326] FAT-fs (loop2): Directory bread(block 67) failed [ 204.225283][ T7326] FAT-fs (loop2): Directory bread(block 68) failed [ 204.395294][ T7326] FAT-fs (loop2): Directory bread(block 69) failed [ 204.520414][ T7326] FAT-fs (loop2): Directory bread(block 70) failed [ 204.527131][ T7326] FAT-fs (loop2): Directory bread(block 71) failed [ 204.533858][ T7326] FAT-fs (loop2): Directory bread(block 72) failed [ 204.540570][ T7326] FAT-fs (loop2): Directory bread(block 73) failed [ 204.796607][ T7337] can: request_module (can-proto-0) failed. [ 204.815373][ T7342] loop2: detected capacity change from 0 to 256 [ 204.861649][ T7337] infiniband syz0: set active [ 204.897841][ T7337] rdma_rxe: ignoring netdev event = 26 for dummy0 [ 204.926866][ T7337] rdma_rxe: ignoring netdev event = 21 for dummy0 [ 204.974401][ T7342] FAT-fs (loop2): bogus logical sector size 0 [ 204.980531][ T7342] FAT-fs (loop2): Can't find a valid FAT filesystem [ 204.996322][ T7337] batman_adv: batadv0: Adding interface: dummy0 [ 205.030115][ T7337] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.088745][ T7337] batman_adv: batadv0: Interface activated: dummy0 [ 205.109712][ T6447] dummy0 speed is unknown, defaulting to 1000 [ 205.112063][ T7340] rdma_rxe: ignoring netdev event = 23 for dummy0 [ 205.258387][ T7344] loop1: detected capacity change from 0 to 64 [ 205.549500][ T7340] net_ratelimit: 1 callbacks suppressed [ 205.550945][ T7340] batadv0: mtu less than device minimum [ 205.936974][ T7340] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 205.950480][ T7340] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 205.963755][ T7340] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 205.976024][ T7340] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 205.988267][ T7340] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 206.000655][ T7340] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 206.013127][ T7340] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 206.025486][ T7340] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 206.037025][ T7340] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 206.067706][ T7340] rdma_rxe: dummy0 changed mtu to 0 [ 206.078297][ T1323] dummy0 speed is unknown, defaulting to 1000 [ 207.171077][ T7367] loop2: detected capacity change from 0 to 16 [ 207.256311][ T7367] erofs: (device loop2): erofs_read_superblock: blkszbits 9 isn't supported on this platform [ 207.355165][ T7376] loop5: detected capacity change from 0 to 512 [ 207.394641][ T7376] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 207.541312][ T7376] EXT4-fs (loop5): 1 truncate cleaned up [ 207.549459][ T7376] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier=0x0000000000000005,errors=remount-ro,. Quota mode: none. [ 207.599938][ T7376] EXT4-fs error (device loop5): ext4_generic_delete_entry:2731: inode #2: block 13: comm syz.5.868: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 207.627754][ T7376] EXT4-fs (loop5): Remounting filesystem read-only [ 207.634589][ T7376] EXT4-fs error (device loop5) in ext4_delete_entry:2802: Corrupt filesystem [ 207.644430][ T7376] EXT4-fs (loop5): Remounting filesystem read-only [ 208.421139][ T7402] netlink: 'syz.5.884': attribute type 1 has an invalid length. [ 208.454810][ T7402] device bond1 entered promiscuous mode [ 208.460610][ T7402] 8021q: adding VLAN 0 to HW filter on device bond1 [ 208.516738][ T7402] netlink: 8 bytes leftover after parsing attributes in process `syz.5.884'. [ 208.549270][ T7402] device macsec1 entered promiscuous mode [ 209.733161][ T7422] overlayfs: overlapping lowerdir path [ 209.885095][ T7410] bond1: (slave erspan1): making interface the new active one [ 209.959524][ T7410] device erspan1 entered promiscuous mode [ 210.049049][ T7410] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 210.108118][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 210.131109][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): macsec1: link becomes ready [ 210.199365][ T7429] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 210.358262][ T7438] loop1: detected capacity change from 0 to 512 [ 211.028875][ T7438] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 211.052021][ T7438] EXT4-fs (loop1): Ignoring removed nobh option [ 211.149172][ T7438] EXT4-fs (loop1): mounted filesystem without journal. Opts: nomblk_io_submit,bsddf,journal_dev=0x0000000000000007,nobh,,errors=continue. Quota mode: writeback. [ 211.202145][ T7438] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.409882][ T7438] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #15: comm syz.1.887: corrupted xattr block 33 [ 212.117501][ T7438] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #15: comm syz.1.887: corrupted xattr block 33 [ 212.241506][ T7458] loop2: detected capacity change from 0 to 512 [ 212.278111][ T7458] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 212.357789][ T7458] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 212.381996][ T7458] System zones: 1-12 [ 212.386857][ T7458] EXT4-fs error (device loop2): ext4_orphan_get:1436: comm syz.2.892: bad orphan inode 131072 [ 212.440000][ T7458] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,data=journal,norecovery,,errors=continue. Quota mode: none. [ 212.731230][ T7485] netlink: 20 bytes leftover after parsing attributes in process `syz.2.900'. [ 212.839062][ T7490] loop5: detected capacity change from 0 to 16 [ 212.921134][ T7490] erofs: (device loop5): mounted with root inode @ nid 36. [ 212.927288][ T7492] can: request_module (can-proto-0) failed. [ 212.970670][ T7490] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 212.985313][ T7492] bond0: (slave dummy0): Releasing backup interface [ 213.002784][ T7492] device dummy0 left promiscuous mode [ 213.026245][ T7492] batman_adv: batadv0: Adding interface: dummy0 [ 213.045323][ T7492] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.071635][ T7492] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 213.090938][ T7490] netlink: 4 bytes leftover after parsing attributes in process `syz.5.902'. [ 214.159952][ T7507] loop5: detected capacity change from 0 to 1024 [ 214.261478][ T7507] EXT4-fs (loop5): Ignoring removed bh option [ 214.336447][ T7507] EXT4-fs (loop5): mounted filesystem without journal. Opts: block_validity,max_dir_size_kb=0x0000000000000001,nombcache,sysvgroups,noinit_itable,dioread_lock,nogrpid,bh,grpjquota=,,errors=continue. Quota mode: none. [ 214.532569][ T7520] loop0: detected capacity change from 0 to 4096 [ 214.605589][ T4179] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 214.624036][ T4179] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 214.651389][ T4179] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 214.673348][ T7516] loop1: detected capacity change from 0 to 4096 [ 214.680199][ T4179] loop0: [ 214.689439][ T7520] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 214.712141][ T7520] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 214.735814][ T7520] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 214.765275][ T7520] loop0: [ 215.096718][ T4201] Bluetooth: hci2: Received unexpected HCI Event 00000000 [ 216.870138][ T7542] loop5: detected capacity change from 0 to 512 [ 217.106831][ T7542] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 217.348108][ T7542] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.498449][ T7575] loop1: detected capacity change from 0 to 32768 [ 219.547253][ T7575] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.934 (7575) [ 219.757086][ T7575] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 219.790015][ T7575] BTRFS info (device loop1): using free space tree [ 219.824931][ T7575] BTRFS info (device loop1): has skinny extents [ 220.031048][ T7575] BTRFS info (device loop1): enabling ssd optimizations [ 220.125777][ T25] audit: type=1800 audit(1798564887.252:190): pid=7575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.934" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 220.252038][ T25] audit: type=1804 audit(1798564887.372:191): pid=7575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.934" name="/newroot/193/file0/bus" dev="loop1" ino=263 res=1 errno=0 [ 220.987986][ T7629] loop1: detected capacity change from 0 to 512 [ 221.128170][ T7629] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.940: missing EA_INODE flag [ 221.148619][ T7629] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.940: error while reading EA inode 12 err=-117 [ 221.203323][ T7629] EXT4-fs (loop1): 1 orphan inode deleted [ 221.209097][ T7629] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 221.449080][ T7577] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.466196][ T7577] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.511995][ T7577] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.520382][ T7577] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.224489][ T7583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.945'. [ 222.254325][ T7583] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 222.322136][ T7583] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (68719607821) [ 222.709003][ T4230] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 223.085313][ T4230] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.107163][ T4230] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 223.128468][ T4230] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 223.132001][ T7655] loop2: detected capacity change from 0 to 40427 [ 223.157153][ T4230] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 223.177468][ T4230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.194421][ T7655] F2FS-fs (loop2): invalid crc value [ 223.225279][ T7655] F2FS-fs (loop2): Found nat_bits in checkpoint [ 223.238987][ T7661] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.334918][ T7661] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.355610][ T7655] F2FS-fs (loop2): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 223.483655][ T7661] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.646717][ T7661] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.702074][ T4230] cxacru 2-1:1.0: send of cm 0x91 failed (-71) [ 223.715994][ T4230] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 223.758479][ T4230] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 223.845101][ T7668] loop5: detected capacity change from 0 to 64 [ 224.017646][ T4230] cxacru: probe of 2-1:1.0 failed with error -71 [ 224.318454][ T4230] usb 2-1: USB disconnect, device number 9 [ 224.677170][ T7661] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.698588][ T7661] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.714193][ T7661] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.729553][ T7661] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.000157][ T7678] FAULT_INJECTION: forcing a failure. [ 225.000157][ T7678] name failslab, interval 1, probability 0, space 0, times 0 [ 225.039773][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807bada400: rx timeout, send abort [ 225.108427][ T7678] CPU: 0 PID: 7678 Comm: syz.5.959 Not tainted syzkaller #0 [ 225.115761][ T7678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 225.125827][ T7678] Call Trace: [ 225.129114][ T7678] [ 225.132053][ T7678] dump_stack_lvl+0x188/0x250 [ 225.136745][ T7678] ? show_regs_print_info+0x20/0x20 [ 225.141954][ T7678] ? load_image+0x410/0x410 [ 225.146470][ T7678] ? __might_sleep+0xf0/0xf0 [ 225.151069][ T7678] ? __lock_acquire+0x7b50/0x7b50 [ 225.156109][ T7678] should_fail+0x383/0x4b0 [ 225.160546][ T7678] should_failslab+0x5/0x20 [ 225.165073][ T7678] slab_pre_alloc_hook+0x51/0xc0 [ 225.170016][ T7678] ? alloc_dax+0xbf/0x5a0 [ 225.174359][ T7678] __kmalloc_track_caller+0x69/0x330 [ 225.179779][ T7678] ? alloc_dax+0xbf/0x5a0 [ 225.184136][ T7678] kstrdup+0x32/0x70 [ 225.188039][ T7678] alloc_dax+0xbf/0x5a0 [ 225.192208][ T7678] ? run_dax+0x30/0x30 [ 225.196280][ T7678] ? __raw_spin_lock_init+0x41/0x100 [ 225.201580][ T7678] dm_create+0xabe/0xf90 [ 225.205876][ T7678] dev_create+0x12e/0x2c0 [ 225.210234][ T7678] ? list_devices+0x820/0x820 [ 225.214927][ T7678] ? __might_fault+0xb3/0x110 [ 225.219616][ T7678] ? _copy_from_user+0x111/0x170 [ 225.224564][ T7678] dm_ctl_ioctl+0x947/0xd00 [ 225.229514][ T7678] ? list_devices+0x820/0x820 [ 225.234203][ T7678] ? dm_poll+0x120/0x120 [ 225.238502][ T7678] ? bpf_lsm_file_ioctl+0x5/0x10 [ 225.243447][ T7678] ? security_file_ioctl+0x7c/0xa0 [ 225.248567][ T7678] ? dm_poll+0x120/0x120 [ 225.252821][ T7678] __se_sys_ioctl+0xfa/0x170 [ 225.257424][ T7678] do_syscall_64+0x4c/0xa0 [ 225.261845][ T7678] ? clear_bhb_loop+0x30/0x80 [ 225.266533][ T7678] ? clear_bhb_loop+0x30/0x80 [ 225.271220][ T7678] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 225.277122][ T7678] RIP: 0033:0x7f99e8422159 [ 225.281544][ T7678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.301174][ T7678] RSP: 002b:00007f99e667a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 225.309603][ T7678] RAX: ffffffffffffffda RBX: 00007f99e86a9fa0 RCX: 00007f99e8422159 [ 225.317584][ T7678] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 225.325567][ T7678] RBP: 00007f99e84b906b R08: 0000000000000000 R09: 0000000000000000 [ 225.333547][ T7678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.341530][ T7678] R13: 00007f99e86aa038 R14: 00007f99e86a9fa0 R15: 00007ffc0f7eb078 [ 225.349555][ T7678] [ 225.540862][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801fa22800: rx timeout, send abort [ 225.550604][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807bada400: abort rx timeout. Force session deactivation [ 226.049114][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801fa22800: abort rx timeout. Force session deactivation [ 226.488926][ T7705] tipc: Enabling of bearer rejected, failed to enable media [ 226.762025][ T7715] loop5: detected capacity change from 0 to 512 [ 226.947960][ T7715] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 228.808944][ T7616] syz.4.939 (7616) used greatest stack depth: 19056 bytes left [ 229.974430][ T7610] syz.4.939 (7610) used greatest stack depth: 18928 bytes left [ 230.443595][ T7753] loop1: detected capacity change from 0 to 40427 [ 230.573515][ T7753] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 230.581424][ T7753] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 230.698665][ T7753] F2FS-fs (loop1): Found nat_bits in checkpoint [ 230.752022][ T7753] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 230.759496][ T7753] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 230.843949][ T6447] libceph: connect (1)[c::]:6789 error -101 [ 230.853580][ T6447] libceph: mon0 (1)[c::]:6789 connect error [ 230.991606][ T7753] handle_bad_sector: 6 callbacks suppressed [ 230.991624][ T7753] attempt to access beyond end of device [ 230.991624][ T7753] loop1: rw=2049, want=45104, limit=40427 [ 231.017235][ T6447] libceph: connect (1)[c::]:6789 error -101 [ 231.023450][ T6447] libceph: mon0 (1)[c::]:6789 connect error [ 231.050756][ T7767] ceph: No mds server is up or the cluster is laggy [ 231.292251][ T4186] attempt to access beyond end of device [ 231.292251][ T4186] loop1: rw=2049, want=40976, limit=40427 [ 231.295775][ T6447] libceph: connect (1)[c::]:6789 error -101 [ 231.316262][ T6447] libceph: mon0 (1)[c::]:6789 connect error [ 231.521310][ T7783] device syzkaller0 entered promiscuous mode [ 231.574277][ T7785] loop2: detected capacity change from 0 to 8 [ 231.728093][ T25] audit: type=1800 audit(1798564898.852:192): pid=7772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.987" name="bus" dev="ramfs" ino=44727 res=0 errno=0 [ 231.869501][ T7785] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 231.899143][ T7785] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 231.943485][ T25] audit: type=1326 audit(1798564899.072:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7791 comm="syz.1.990" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a0b5d6159 code=0x7ffc0000 [ 232.125383][ T25] audit: type=1326 audit(1798564899.112:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7791 comm="syz.1.990" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f0a0b5d6159 code=0x7ffc0000 [ 232.229071][ T25] audit: type=1326 audit(1798564899.112:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7791 comm="syz.1.990" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a0b5d6159 code=0x7ffc0000 [ 232.306950][ T7807] dns_resolver: Unsupported content type (6) [ 232.837374][ T25] audit: type=1326 audit(1798564899.112:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7791 comm="syz.1.990" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0a0b5d6159 code=0x7ffc0000 [ 232.861541][ T25] audit: type=1326 audit(1798564899.112:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7791 comm="syz.1.990" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a0b5d6159 code=0x7ffc0000 [ 232.886061][ T25] audit: type=1326 audit(1798564899.112:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7791 comm="syz.1.990" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0a0b5d6159 code=0x7ffc0000 [ 232.921126][ T25] audit: type=1326 audit(1798564899.122:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7791 comm="syz.1.990" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a0b5d6159 code=0x7ffc0000 [ 232.979359][ T25] audit: type=1326 audit(1798564899.122:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7791 comm="syz.1.990" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0a0b5d5deb code=0x7ffc0000 [ 233.013123][ T25] audit: type=1326 audit(1798564899.122:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7791 comm="syz.1.990" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0a0b5d5deb code=0x7ffc0000 [ 233.319351][ T7820] loop1: detected capacity change from 0 to 128 [ 234.494257][ T7820] ufs: ufstype=hp is supported read-only [ 234.566370][ T7820] ufs: ufs_fill_super(): bad magic number [ 235.771151][ T7854] tpm_tis pcspkr: no memory resource defined [ 235.779160][ T7847] kvm: pic: level sensitive irq not supported [ 236.869188][ T7873] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1017'. [ 236.932406][ T7873] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1017'. [ 239.341491][ T7911] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 241.891364][ T7943] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1042'. [ 241.962444][ T7943] bond1: (slave vlan2): Enslaving as an active interface with a down link [ 242.149886][ T7958] binder: BINDER_SET_CONTEXT_MGR already set [ 242.172795][ T7958] binder: 7957:7958 ioctl 4018620d 200000000100 returned -16 [ 242.195508][ T7958] binder: BINDER_SET_CONTEXT_MGR already set [ 242.207221][ T7958] binder: 7957:7958 ioctl 4018620d 200000004a80 returned -16 [ 242.223629][ T7958] binder: 7957:7958 ioctl c0306201 200000000380 returned -14 [ 242.323448][ T7962] sctp: [Deprecated]: syz.2.1049 (pid 7962) Use of int in max_burst socket option. [ 242.323448][ T7962] Use struct sctp_assoc_value instead [ 243.187638][ T7972] batman_adv: batadv0: Adding interface: ip6gretap1 [ 243.194372][ T7972] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.220244][ T7972] batman_adv: batadv0: Interface activated: ip6gretap1 [ 243.227277][ T7972] net_ratelimit: 10 callbacks suppressed [ 243.227291][ T7972] batadv0: mtu less than device minimum [ 243.240457][ T7972] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 243.252792][ T7972] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 243.265187][ T7972] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 243.277650][ T7972] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 243.289996][ T7972] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 243.302405][ T7972] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 243.314875][ T7972] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 243.327158][ T7972] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 243.339605][ T7972] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 244.586168][ T8002] device syzkaller0 entered promiscuous mode [ 247.050256][ T8025] loop5: detected capacity change from 0 to 8 [ 247.265370][ T13] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 247.512397][ T13] usb 2-1: Using ep0 maxpacket: 16 [ 247.672646][ T13] usb 2-1: unable to get BOS descriptor or descriptor too short [ 247.782808][ T13] usb 2-1: config 1 has an invalid interface number: 94 but max is 0 [ 247.837886][ T13] usb 2-1: config 1 has no interface number 0 [ 247.880578][ T13] usb 2-1: config 1 interface 94 has no altsetting 0 [ 248.719644][ T13] usb 2-1: New USB device found, idVendor=0af0, idProduct=6971, bcdDevice=55.88 [ 248.728818][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.738403][ T13] usb 2-1: Product: syz [ 248.803273][ T13] usb 2-1: Manufacturer: syz [ 248.827273][ T13] usb 2-1: SerialNumber: syz [ 249.394579][ T13] usb-storage 2-1:1.94: USB Mass Storage device detected [ 249.482486][ T8064] loop2: detected capacity change from 0 to 512 [ 249.588315][ T8064] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 249.647760][ T8064] System zones: 1-12 [ 249.691622][ T8064] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.1081: missing EA_INODE flag [ 249.783184][ T13] usb 2-1: USB disconnect, device number 10 [ 249.827996][ T8064] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.1081: error while reading EA inode 12 err=-117 [ 250.479320][ T8064] EXT4-fs (loop2): 1 orphan inode deleted [ 250.505862][ T8064] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 252.725774][ T8096] set match dimension is over the limit! [ 252.984243][ T8099] UBIFS error (pid: 8099): cannot open "./file0", error -22 [ 253.080330][ T8099] loop1: detected capacity change from 0 to 256 [ 253.309227][ T8102] loop2: detected capacity change from 0 to 512 [ 253.506540][ T8105] futex_wake_op: syz.0.1093 tries to shift op by 144; fix this program [ 253.540207][ T8102] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 253.562188][ T8102] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 254.072282][ T8102] EXT4-fs (loop2): 1 truncate cleaned up [ 254.605429][ T8102] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,bsdgroups,grpjquota=,,errors=continue. Quota mode: none. [ 255.791782][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.794868][ T8102] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.1090: inode #4294967040: comm syz.2.1090: iget: illegal inode # [ 255.802898][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.026669][ T8102] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.1090: error while reading EA inode 4294967040 err=-117 [ 256.785042][ T8135] loop5: detected capacity change from 0 to 4096 [ 256.798449][ T8135] __ntfs_error: 38 callbacks suppressed [ 256.798465][ T8135] ntfs: (device loop5): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 257.424756][ T8135] ntfs: volume version 3.1. [ 258.796561][ T8146] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1102'. [ 258.823237][ T8145] ntfs: (device loop5): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 258.834724][ T8145] ntfs: (device loop5): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 259.231519][ T8161] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 261.048292][ T8175] loop5: detected capacity change from 0 to 512 [ 261.245229][ T8175] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 262.561607][ T8209] syz.0.1123[8209] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 262.561735][ T8209] syz.0.1123[8209] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 265.164686][ T8241] loop5: detected capacity change from 0 to 164 [ 265.228181][ T8241] rock: corrupted directory entry. extent=134217760 out of volume (nzones=41) [ 265.553431][ T25] audit: type=1326 audit(1798564932.682:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8246 comm="syz.5.1136" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f99e8422159 code=0x0 [ 266.305825][ T8253] syz.4.1138[8253] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 266.306022][ T8253] syz.4.1138[8253] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 266.824297][ T13] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 267.231385][ T13] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 267.441804][ T8266] fido_id[8266]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 268.161483][ T7626] Bluetooth: hci3: command 0x0406 tx timeout [ 268.459326][ T8286] kvm: pic: level sensitive irq not supported [ 268.510309][ T8289] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 269.609388][ T8309] futex_wake_op: syz.4.1154 tries to shift op by 144; fix this program [ 269.832014][ T8316] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 269.903867][ T8317] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1155'. [ 271.507182][ T8324] loop2: detected capacity change from 0 to 512 [ 271.538960][ T8308] loop1: detected capacity change from 0 to 32768 [ 271.540060][ T8324] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 271.562485][ T8324] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 272.395879][ T8324] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.1157: Invalid inode bitmap blk 4 in block_group 0 [ 272.432508][ T8324] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,norecovery,mblk_io_submit,quota,nobarrier,grpquota,nombcache,barrier=0x000000000000000c,dioread_nolock,noblock_validity,data_err=ignore,norecovery,,errors=continue. Quota mode: writeback. [ 272.473746][ T25] audit: type=1800 audit(1798564939.602:241): pid=8308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1153" name="file1" dev="loop1" ino=7 res=0 errno=0 [ 272.500531][ T8337] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1162'. [ 272.536903][ T8337] xt_CT: You must specify a L4 protocol and not use inversions on it [ 272.690595][ T8348] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1165'. [ 273.096809][ T25] audit: type=1800 audit(1798564940.212:242): pid=8363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1153" name="file1" dev="loop1" ino=7 res=0 errno=0 [ 273.295971][ T8367] netlink: 'syz.5.1173': attribute type 4 has an invalid length. [ 273.670269][ T8375] net_ratelimit: 10 callbacks suppressed [ 273.670286][ T8375] ip_tables: iptables: counters copy to user failed while replacing table [ 273.808699][ T8380] xt_connbytes: Forcing CT accounting to be enabled [ 273.907181][ T8380] xt_CT: No such helper "netbios-ns" [ 274.070037][ T8389] loop9: detected capacity change from 0 to 7 [ 274.285581][ T8399] loop_set_status: loop9 (úù) has still dirty pages (nrpages=1) [ 274.286499][ T8404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.351220][ T8389] Dev loop9: unable to read RDB block 7 [ 274.363479][ T8405] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1175'. [ 274.608610][ T8389] loop9: unable to read partition table [ 274.731186][ T8389] loop9: partition table beyond EOD, truncated [ 274.863837][ T8389] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 274.870246][ T3851] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.880632][ T3851] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.898945][ T3851] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.933328][ T3851] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.038276][ T8411] FAULT_INJECTION: forcing a failure. [ 275.038276][ T8411] name failslab, interval 1, probability 0, space 0, times 0 [ 275.088081][ T8411] CPU: 1 PID: 8411 Comm: syz.1.1180 Not tainted syzkaller #0 [ 275.095694][ T8411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 275.105763][ T8411] Call Trace: [ 275.109051][ T8411] [ 275.111986][ T8411] dump_stack_lvl+0x188/0x250 [ 275.116685][ T8411] ? show_regs_print_info+0x20/0x20 [ 275.121893][ T8411] ? load_image+0x410/0x410 [ 275.126408][ T8411] ? __might_sleep+0xf0/0xf0 [ 275.131002][ T8411] ? __lock_acquire+0x7b50/0x7b50 [ 275.136040][ T8411] should_fail+0x383/0x4b0 [ 275.140466][ T8411] should_failslab+0x5/0x20 [ 275.144969][ T8411] slab_pre_alloc_hook+0x51/0xc0 [ 275.149914][ T8411] ? copy_mm+0x8b6/0x13d0 [ 275.154248][ T8411] kmem_cache_alloc+0x3d/0x280 [ 275.159016][ T8411] copy_mm+0x8b6/0x13d0 [ 275.163208][ T8411] ? copy_signal+0x610/0x610 [ 275.167892][ T8411] ? __init_rwsem+0x11e/0x160 [ 275.172586][ T8411] ? copy_signal+0x501/0x610 [ 275.177189][ T8411] copy_process+0x17a7/0x3e70 [ 275.181894][ T8411] ? __pidfd_prepare+0x140/0x140 [ 275.186838][ T8411] ? verify_lock_unused+0x140/0x140 [ 275.192050][ T8411] kernel_clone+0x23f/0x990 [ 275.196572][ T8411] ? create_io_thread+0x180/0x180 [ 275.201632][ T8411] __x64_sys_clone+0x19a/0x210 [ 275.206498][ T8411] ? __ia32_sys_vfork+0x130/0x130 [ 275.211537][ T8411] ? lockdep_hardirqs_on+0x94/0x140 [ 275.216741][ T8411] do_syscall_64+0x4c/0xa0 [ 275.221167][ T8411] ? clear_bhb_loop+0x30/0x80 [ 275.225853][ T8411] ? clear_bhb_loop+0x30/0x80 [ 275.230542][ T8411] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 275.236450][ T8411] RIP: 0033:0x7f0a0b5d6159 [ 275.240876][ T8411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.260694][ T8411] RSP: 002b:00007f0a0982dfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 275.269123][ T8411] RAX: ffffffffffffffda RBX: 00007f0a0b85dfa0 RCX: 00007f0a0b5d6159 [ 275.277117][ T8411] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000040000 [ 275.285105][ T8411] RBP: 00007f0a0b66d06b R08: 0000000000000000 R09: 0000000000000000 [ 275.293092][ T8411] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 275.301087][ T8411] R13: 00007f0a0b85e038 R14: 00007f0a0b85dfa0 R15: 00007ffe3a322c48 [ 275.309117][ T8411] [ 276.506508][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 276.587693][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 276.646337][ T8435] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 276.969421][ T8450] sctp: [Deprecated]: syz.4.1193 (pid 8450) Use of struct sctp_assoc_value in delayed_ack socket option. [ 276.969421][ T8450] Use struct sctp_sack_info instead [ 277.170341][ T8459] xt_ipcomp: unknown flags 1D [ 277.224542][ T6447] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 278.702354][ T8505] xt_TCPMSS: Only works on TCP SYN packets [ 278.762007][ T6447] usb 6-1: device not accepting address 5, error -71 [ 278.771177][ T8508] netlink: 11834 bytes leftover after parsing attributes in process `syz.2.1209'. [ 278.813920][ T8508] netlink: 'syz.2.1209': attribute type 16 has an invalid length. [ 278.836906][ T8508] netlink: 'syz.2.1209': attribute type 21 has an invalid length. [ 278.857237][ T8508] netlink: 'syz.2.1209': attribute type 25 has an invalid length. [ 278.888927][ T8508] netlink: 'syz.2.1209': attribute type 27 has an invalid length. [ 278.910431][ T8508] netlink: 'syz.2.1209': attribute type 28 has an invalid length. [ 278.946433][ T8508] netlink: 'syz.2.1209': attribute type 29 has an invalid length. [ 278.975121][ T8508] netlink: 'syz.2.1209': attribute type 30 has an invalid length. [ 279.081899][ T8514] bonding: bond1 is being created... [ 279.782499][ T8522] xt_CT: No such helper "pptp" [ 279.961370][ T8532] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 280.450667][ T8538] batman_adv: batadv0: Adding interface: ip6gretap1 [ 280.457432][ T8538] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.484434][ T8538] batman_adv: batadv0: Interface activated: ip6gretap1 [ 280.632009][ T7623] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 280.768116][ T8546] netlink: 'syz.0.1219': attribute type 10 has an invalid length. [ 280.797480][ T8546] device geneve0 entered promiscuous mode [ 280.929616][ T8546] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 281.799692][ T7623] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.811599][ T8554] device syzkaller0 entered promiscuous mode [ 281.832164][ T7623] usb 3-1: config 0 has no interfaces? [ 281.836685][ T8554] tipc: Enabled bearer , priority 0 [ 281.837681][ T7623] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 281.854795][ T7623] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.866769][ T7623] usb 3-1: config 0 descriptor?? [ 281.908511][ T8553] tipc: Resetting bearer [ 282.231277][ T7623] usb 3-1: USB disconnect, device number 5 [ 282.627891][ T8553] tipc: Disabling bearer [ 282.651907][ T8561] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 282.659427][ T8561] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 282.678112][ T8561] device bond1 left promiscuous mode [ 282.687586][ T8563] netlink: 'syz.5.1224': attribute type 1 has an invalid length. [ 282.909359][ T8563] 8021q: adding VLAN 0 to HW filter on device bond2 [ 282.963071][ T7623] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 283.014498][ T8576] loop1: detected capacity change from 0 to 256 [ 283.672144][ T7623] usb 3-1: Using ep0 maxpacket: 32 [ 283.749946][ T8583] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1228'. [ 284.392733][ T8576] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 284.412303][ T7623] usb 3-1: device descriptor read/all, error -71 [ 286.826039][ T8608] tipc: Resetting bearer [ 286.870767][ T8608] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 286.994084][ T8610] loop1: detected capacity change from 0 to 8 [ 287.441703][ T8626] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1240'. [ 288.364533][ T8641] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 288.462105][ T25] audit: type=1326 audit(1798564955.552:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8636 comm="syz.0.1247" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef20d8a159 code=0x0 [ 292.608965][ T8669] hub 8-0:1.0: USB hub found [ 292.643321][ T8678] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 292.669647][ T8669] hub 8-0:1.0: 1 port detected [ 293.595844][ T8682] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1255'. [ 294.073695][ T8692] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1258'. [ 294.303328][ T8692] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1258'. [ 294.522240][ T8692] netlink: 'syz.2.1258': attribute type 5 has an invalid length. [ 294.616796][ T8703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1261'. [ 294.836682][ T8692] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1258'. [ 294.867141][ T8690] device syzkaller0 entered promiscuous mode [ 295.126526][ T25] audit: type=1326 audit(1798564962.252:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8714 comm="syz.4.1265" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb34bc5159 code=0x7ffc0000 [ 295.855885][ T25] audit: type=1326 audit(1798564962.842:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8714 comm="syz.4.1265" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb34bc5159 code=0x7ffc0000 [ 295.892873][ T25] audit: type=1326 audit(1798564962.942:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8714 comm="syz.4.1265" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb34bc5159 code=0x7ffc0000 [ 296.071767][ T25] audit: type=1326 audit(1798564962.952:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8714 comm="syz.4.1265" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdb34bc5159 code=0x7ffc0000 [ 296.097472][ T8738] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 296.136748][ T8738] loop1: detected capacity change from 0 to 128 [ 296.155312][ T8742] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1269'. [ 296.170511][ T25] audit: type=1326 audit(1798564962.972:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8714 comm="syz.4.1265" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb34bc5159 code=0x7ffc0000 [ 296.216977][ T25] audit: type=1326 audit(1798564962.982:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8714 comm="syz.4.1265" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb34bc5159 code=0x7ffc0000 [ 296.248247][ T25] audit: type=1326 audit(1798564962.982:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8714 comm="syz.4.1265" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb34bc5159 code=0x7ffc0000 [ 296.285293][ T8748] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1271'. [ 296.319359][ T25] audit: type=1326 audit(1798564963.042:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8714 comm="syz.4.1265" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb34bc5159 code=0x7ffc0000 [ 296.405100][ T25] audit: type=1326 audit(1798564963.042:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8714 comm="syz.4.1265" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb34bc5159 code=0x7ffc0000 [ 296.429787][ T25] audit: type=1326 audit(1798564963.052:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8714 comm="syz.4.1265" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdb34bc5159 code=0x7ffc0000 [ 296.524567][ T8755] loop2: detected capacity change from 0 to 256 [ 296.547066][ T8757] loop1: detected capacity change from 0 to 512 [ 296.588062][ T8755] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 296.614669][ T8755] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 296.673931][ T8757] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 296.684238][ T8755] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 296.687476][ T8765] loop5: detected capacity change from 0 to 1024 [ 296.711568][ T8757] System zones: 1-12 [ 296.742403][ T8757] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.1274: missing EA_INODE flag [ 296.742979][ T8765] hfsplus: unable to parse mount options [ 296.767182][ T8757] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1274: error while reading EA inode 12 err=-117 [ 296.801562][ T8757] EXT4-fs (loop1): 1 orphan inode deleted [ 296.809224][ T8757] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 298.416711][ T8777] loop2: detected capacity change from 0 to 512 [ 298.752869][ T7626] Bluetooth: hci0: command 0x1407 tx timeout [ 299.388669][ T8777] EXT4-fs (loop2): Test dummy encryption mode enabled [ 299.411021][ T8777] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 299.599317][ T8777] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 299.637599][ T8777] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=continue,grpjquota=,errors=continue,auto_da_alloc,lazytime,usrjquota=min_batch_time=0x00000000ffffffff,nouid32,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 300.590358][ T8833] device veth1_macvtap left promiscuous mode [ 301.932116][ T2856] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 302.146383][ T8887] loop1: detected capacity change from 0 to 256 [ 302.213060][ T8887] FAT-fs (loop1): Unrecognized mount option "iochB¤8è|.ÑW‰Eóarset=cp949" or missing value [ 302.346534][ T8892] loop1: detected capacity change from 0 to 8 [ 302.352941][ T2856] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 302.366802][ T2856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.396710][ T2856] usb 3-1: config 0 descriptor?? [ 302.474350][ T2856] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 302.697245][ T8898] xt_limit: Overflow, try lower: 1207959552/384 [ 303.310253][ T8907] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 303.580186][ T8907] CIFS mount error: No usable UNC path provided in device string! [ 303.580186][ T8907] [ 303.674310][ T8907] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 303.689285][ T8914] bond3: (slave vlan0): Enslaving as a backup interface with an up link [ 303.963984][ T8925] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 304.017662][ T8925] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 304.043069][ T8924] mmap: syz.0.1321 (8924) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 304.124322][ T8927] overlayfs: failed to clone upperpath [ 304.240356][ T8933] tipc: Failed to remove unknown binding: 66,0,0/0:962380670/962380672 [ 304.270916][ T8930] tipc: Failed to remove unknown binding: 66,0,0/0:1087465997/1087465998 [ 304.281288][ T8930] tipc: Failed to remove unknown binding: 66,0,0/0:1087465997/1087465998 [ 304.322335][ T2856] gspca_sunplus: reg_w_riv err -71 [ 304.327535][ T2856] sunplus: probe of 3-1:0.0 failed with error -71 [ 304.344669][ T2856] usb 3-1: USB disconnect, device number 8 [ 304.561178][ T8946] device syzkaller0 entered promiscuous mode [ 305.344654][ T8953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1331'. [ 305.361565][ T8953] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1331'. [ 306.414103][ T8968] netlink: 'syz.5.1336': attribute type 3 has an invalid length. [ 308.510432][ T9011] tipc: Failed to remove unknown binding: 66,0,0/0:3039487048/3039487050 [ 309.210827][ T9011] tipc: Failed to remove unknown binding: 66,0,0/0:3039487048/3039487049 [ 309.258077][ T9011] tipc: Failed to remove unknown binding: 66,0,0/0:3039487048/3039487050 [ 309.281935][ T9011] tipc: Failed to remove unknown binding: 66,0,0/0:3039487048/3039487049 [ 309.480470][ T9030] loop2: detected capacity change from 0 to 512 [ 309.801216][ T9030] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 309.830248][ T9041] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 310.081350][ T9041] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98 [ 310.430918][ T9030] EXT4-fs (loop2): orphan cleanup on readonly fs [ 310.521392][ T9030] EXT4-fs error (device loop2): ext4_orphan_get:1436: comm syz.2.1352: bad orphan inode 15 [ 310.555434][ T9030] ext4_test_bit(bit=14, block=18) = 1 [ 310.560968][ T9030] is_bad_inode(inode)=0 [ 310.576095][ T9030] NEXT_ORPHAN(inode)=1023 [ 310.580468][ T9030] max_ino=32 [ 310.594834][ T9030] i_nlink=0 [ 310.608635][ T9030] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2928: inode #15: comm syz.2.1352: corrupted xattr block 19 [ 310.645660][ T9030] EXT4-fs warning (device loop2): ext4_evict_inode:304: xattr delete (err -117) [ 310.665199][ T9030] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 311.302214][ T9060] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1364'. [ 311.306188][ T9060] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1364'. [ 311.328822][ T9060] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1364'. [ 311.345009][ T9060] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1364'. [ 311.392675][ T9060] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1364'. [ 311.412861][ T9060] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1364'. [ 311.444097][ T9064] overlayfs: failed to clone upperpath [ 311.449976][ T9060] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1364'. [ 311.494544][ T9060] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1364'. [ 311.509504][ T9060] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1364'. [ 311.523416][ T9060] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1364'. [ 312.182149][ T9088] IPVS: Error joining to the multicast group [ 314.870787][ T9167] loop1: detected capacity change from 0 to 256 [ 314.967190][ T9167] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 315.003799][ T9167] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 315.052895][ T9167] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0x84a6b859, utbl_chksum : 0xe619d30d) [ 315.320729][ T9175] loop1: detected capacity change from 0 to 8 [ 316.631920][ C0] net_ratelimit: 9 callbacks suppressed [ 316.982981][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.989921][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.509844][ T9193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1393'. [ 318.706679][ T9237] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1405'. [ 319.573242][ T9231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1403'. [ 319.607181][ T9231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1403'. [ 320.642043][ C1] [ 320.644510][ C1] ================================ [ 320.647651][ T9264] kcov: kcov_task_exit: t = ffff888027f55940, kcov->t = ffff888027f55940 [ 320.649615][ C1] WARNING: inconsistent lock state [ 320.649639][ C1] syzkaller #0 Not tainted [ 320.667494][ C1] -------------------------------- [ 320.672579][ C1] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 320.679401][ C1] syz.0.1414/9257 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 320.685716][ C1] ffff8880207a0120 (sk_lock-AF_X25){+.?.}-{0:0}, at: x25_kill_by_neigh+0x109/0x250 [ 320.694455][ C0] virtqueue callback for ffff888147e6e700 (ffffffff85491a80) [ 320.695008][ C1] {SOFTIRQ-ON-W} state was registered at: [ 320.702397][ C0] No more buffers in queue [ 320.708069][ C1] lock_acquire+0x19e/0x400 [ 320.712623][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 320.717136][ C1] lock_sock_nested+0x44/0x100 [ 320.723034][ C0] No more buffers in queue [ 320.727828][ C1] x25_bind+0x18a/0x3b0 [ 320.732266][ C0] tcp_in_window: START [ 320.736436][ C1] __sys_bind+0x2e9/0x3e0 [ 320.740483][ C0] tcp_in_window: [ 320.744872][ C1] __x64_sys_bind+0x76/0x80 [ 320.744887][ C1] do_syscall_64+0x4c/0xa0 [ 320.744903][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 320.748612][ C0] seq=602939015 ack=363748948+(0) sack=363748948+(0) win=24567 end=602939016 [ 320.753176][ C1] irq event stamp: 64346 [ 320.753184][ C1] hardirqs last enabled at (64346): [] __local_bh_enable_ip+0x136/0x1c0 [ 320.757672][ C0] tcp_in_window: sender end=602939015 maxend=606083847 maxwin=3144576 scale=7 receiver end=363748948 maxend=366893524 maxwin=3144832 scale=7 [ 320.763622][ C1] hardirqs last disabled at (64345): [] __local_bh_enable_ip+0xd7/0x1c0 [ 320.763645][ C1] softirqs last enabled at (57476): [] __irq_exit_rcu+0x13b/0x230 [ 320.772423][ C0] tcp_in_window: [ 320.776624][ C1] softirqs last disabled at (64273): [] __irq_exit_rcu+0x13b/0x230 [ 320.786597][ C0] seq=602939015 ack=363748948+(0) sack=363748948+(0) win=24567 end=602939016 [ 320.801127][ C1] [ 320.801127][ C1] other info that might help us debug this: [ 320.801134][ C1] Possible unsafe locking scenario: [ 320.801134][ C1] [ 320.801139][ C1] CPU0 [ 320.801143][ C1] ---- [ 320.801146][ C1] lock(sk_lock-AF_X25 [ 320.811024][ C0] tcp_in_window: sender end=602939015 maxend=606083847 maxwin=3144576 scale=7 receiver end=363748948 maxend=366893524 maxwin=3144832 scale=7 [ 320.820782][ C1] ); [ 320.820788][ C1] [ 320.820791][ C1] lock(sk_lock-AF_X25); [ 320.820803][ C1] [ 320.820803][ C1] *** DEADLOCK *** [ 320.820803][ C1] [ 320.820807][ C1] 1 lock held by syz.0.1414/9257: [ 320.824435][ C0] tcp_in_window: I=1 II=1 III=1 IV=1 [ 320.833843][ C1] #0: ffffffff8c31ef60 (rcu_read_lock [ 320.842606][ C0] tcp_in_window: res=1 sender end=602939016 maxend=606083847 maxwin=3144576 receiver end=363748948 maxend=366893524 maxwin=3144832 [ 320.850627][ C1] ){....}-{1:2} [ 320.858071][ C0] tcp_conntracks: [ 320.861316][ C1] , at: rcu_lock_acquire+0x9/0x30 [ 320.864591][ C0] syn=0 ack=1 fin=1 rst=0 old=3 new=4 [ 320.868710][ C1] [ 320.868710][ C1] stack backtrace: [ 320.868718][ C1] CPU: 1 PID: 9257 Comm: syz.0.1414 Not tainted syzkaller #0 [ 320.910375][ C0] virtqueue callback for ffff888147e6e700 (ffffffff85491a80) [ 320.911786][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 320.978984][ C1] Call Trace: [ 320.982260][ C1] [ 320.985093][ C1] dump_stack_lvl+0x188/0x250 [ 320.989763][ C1] ? show_regs_print_info+0x20/0x20 [ 320.995077][ C1] ? unwind_get_return_address+0x49/0x80 [ 321.000716][ C1] valid_state+0x13b/0x1d0 [ 321.005128][ C1] mark_lock_irq+0xa9/0x900 [ 321.009618][ C1] ? stack_trace_save+0xa6/0xf0 [ 321.014452][ C1] ? save_trace+0xad0/0xad0 [ 321.018936][ C1] ? is_bpf_text_address+0x254/0x270 [ 321.024225][ C1] ? save_trace+0x5a/0xad0 [ 321.028623][ C1] ? mark_lock+0x94/0x320 [ 321.032939][ C1] mark_lock+0x208/0x320 [ 321.037170][ C1] __lock_acquire+0xc63/0x7b50 [ 321.041923][ C1] ? ____kasan_slab_free+0xd5/0x110 [ 321.047116][ C1] ? verify_lock_unused+0x140/0x140 [ 321.052482][ C1] ? __napi_poll+0xbb/0x430 [ 321.056973][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 321.061807][ C1] ? irq_exit_rcu+0x5/0x20 [ 321.066214][ C1] ? finish_lock_switch+0x12f/0x290 [ 321.071394][ C1] ? finish_task_switch+0x12f/0x650 [ 321.076581][ C1] ? __schedule+0x11cb/0x4350 [ 321.081269][ C1] ? verify_lock_unused+0x140/0x140 [ 321.086459][ C1] ? unix_dgram_sendmsg+0x115c/0x19c0 [ 321.091820][ C1] ? verify_lock_unused+0x140/0x140 [ 321.097004][ C1] ? __x64_sys_sendmmsg+0x9c/0xb0 [ 321.102010][ C1] ? do_syscall_64+0x4c/0xa0 [ 321.106584][ C1] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 321.112645][ C1] lock_acquire+0x19e/0x400 [ 321.117138][ C1] ? x25_kill_by_neigh+0x109/0x250 [ 321.122332][ C1] ? lock_chain_count+0x20/0x20 [ 321.126381][ C0] virtqueue callback for ffff888147e6e700 (ffffffff85491a80) [ 321.127173][ C1] ? __local_bh_enable_ip+0xd7/0x1c0 [ 321.139785][ C1] ? read_lock_is_recursive+0x10/0x10 [ 321.145148][ C1] ? __local_bh_enable_ip+0x136/0x1c0 [ 321.150524][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 321.155712][ C1] ? __local_bh_enable_ip+0x136/0x1c0 [ 321.161073][ C1] ? _local_bh_enable+0xa0/0xa0 [ 321.165933][ C1] lock_sock_nested+0x44/0x100 [ 321.170688][ C1] ? x25_kill_by_neigh+0x109/0x250 [ 321.175789][ C1] x25_kill_by_neigh+0x109/0x250 [ 321.180712][ C1] x25_lapb_receive_frame+0x19d/0xf20 [ 321.186076][ C1] ? x25_device_event+0x250/0x250 [ 321.191085][ C1] netif_receive_skb_core+0x149/0x210 [ 321.196443][ C1] lapbeth_napi_poll+0x3e/0x80 [ 321.201193][ C1] __napi_poll+0xbb/0x430 [ 321.205512][ C1] net_rx_action+0x522/0xa80 [ 321.210384][ C1] ? net_tx_action+0x880/0x880 [ 321.215133][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 321.221096][ C1] ? detach_timer+0x2b0/0x2b0 [ 321.225760][ C1] ? lock_chain_count+0x20/0x20 [ 321.230597][ C1] ? handle_softirqs+0x209/0x830 [ 321.235525][ C1] handle_softirqs+0x336/0x830 [ 321.240276][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 321.245200][ C1] ? do_softirq+0x210/0x210 [ 321.249693][ C1] ? hrtimer_interrupt+0x6a2/0x8b0 [ 321.254796][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 321.259979][ C1] __irq_exit_rcu+0x13b/0x230 [ 321.264651][ C1] ? irq_exit_rcu+0x20/0x20 [ 321.269147][ C1] irq_exit_rcu+0x5/0x20 [ 321.273373][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 321.278993][ C1] [ 321.281909][ C1] [ 321.284825][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 321.290798][ C1] RIP: 0010:finish_lock_switch+0x12f/0x290 [ 321.296587][ C1] Code: 83 c7 18 be ff ff ff ff e8 8e da 6c 08 85 c0 74 46 4d 85 ff 75 62 0f 1f 44 00 00 48 89 df e8 78 4a 76 08 e8 93 e3 2a 00 fb 5b <41> 5c 41 5d 41 5e 41 5f 5d c3 48 89 df e8 2f 0e fe ff 43 80 3c 2c [ 321.316178][ C1] RSP: 0018:ffffc900030af2d8 EFLAGS: 00000286 [ 321.322245][ C1] RAX: 648e44aaf9531100 RBX: ffff888027f53b80 RCX: 648e44aaf9531100 [ 321.330233][ C1] RDX: dffffc0000000000 RSI: ffffffff8a2b2be0 RDI: ffffffff8a7a48c0 [ 321.338194][ C1] RBP: 1ffff11017227613 R08: ffff8880b913a343 R09: 1ffff11017227468 [ 321.346150][ C1] R10: dffffc0000000000 R11: ffffed1017227469 R12: 0000000000000000 [ 321.354110][ C1] R13: dffffc0000000000 R14: ffffffff8158f3a0 R15: 0000000000000000 [ 321.362069][ C1] ? update_rt_migration+0x3a0/0x3a0 [ 321.367350][ C1] finish_task_switch+0x12f/0x650 [ 321.372367][ C1] __schedule+0x11cb/0x4350 [ 321.376860][ C1] ? mark_lock+0x94/0x320 [ 321.381173][ C1] ? __lock_acquire+0x13dc/0x7b50 [ 321.386189][ C1] ? mark_lock+0x94/0x320 [ 321.390586][ C1] ? release_firmware_map_entry+0x190/0x190 [ 321.396465][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 321.402436][ C1] schedule+0x11b/0x1e0 [ 321.406579][ C1] schedule_timeout+0xbd/0x2d0 [ 321.411325][ C1] ? console_conditional_schedule+0x40/0x40 [ 321.417202][ C1] ? __lock_acquire+0x7b50/0x7b50 [ 321.422224][ C1] ? rcu_lock_release+0x9/0x20 [ 321.427019][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 321.432207][ C1] unix_wait_for_peer+0x1f2/0x2e0 [ 321.437237][ C1] ? unix_find_other+0x840/0x840 [ 321.442157][ C1] ? do_raw_spin_lock+0x128/0x2f0 [ 321.447164][ C1] ? init_wait_entry+0xd0/0xd0 [ 321.451915][ C1] ? __rwlock_init+0x140/0x140 [ 321.456663][ C1] ? unix_dgram_sendmsg+0xb56/0x19c0 [ 321.461933][ C1] ? bpf_lsm_unix_may_send+0x5/0x10 [ 321.467117][ C1] unix_dgram_sendmsg+0x115c/0x19c0 [ 321.472309][ C1] ? unix_dgram_poll+0x680/0x680 [ 321.477230][ C1] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 321.483638][ C1] ? apparmor_socket_sendmsg+0x88/0x230 [ 321.489311][ C1] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 321.494579][ C1] ? security_socket_sendmsg+0x7c/0xa0 [ 321.500021][ C1] ? unix_dgram_poll+0x680/0x680 [ 321.504957][ C1] ____sys_sendmsg+0x5be/0x8f0 [ 321.509711][ C1] ? __sys_sendmsg_sock+0x30/0x30 [ 321.514728][ C1] ? rcu_is_watching+0x11/0xa0 [ 321.519475][ C1] ? import_iovec+0x6f/0xa0 [ 321.523965][ C1] ___sys_sendmsg+0x236/0x2e0 [ 321.528721][ C1] ? __sys_sendmsg+0x290/0x290 [ 321.533478][ C1] ? __might_fault+0xb3/0x110 [ 321.538138][ C1] __sys_sendmmsg+0x2ba/0x500 [ 321.542803][ C1] ? __ia32_sys_sendmsg+0x80/0x80 [ 321.547921][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 321.554252][ C1] ? lock_chain_count+0x20/0x20 [ 321.559095][ C1] __x64_sys_sendmmsg+0x9c/0xb0 [ 321.564108][ C1] do_syscall_64+0x4c/0xa0 [ 321.568819][ C1] ? clear_bhb_loop+0x30/0x80 [ 321.573500][ C1] ? clear_bhb_loop+0x30/0x80 [ 321.574347][ C0] virtqueue callback for ffff888147e6e700 (ffffffff85491a80) [ 321.578266][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 321.591657][ C1] RIP: 0033:0x7fef20d8a159 [ 321.596070][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.615661][ C1] RSP: 002b:00007fef1efe2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 321.624069][ C1] RAX: ffffffffffffffda RBX: 00007fef21011fa0 RCX: 00007fef20d8a159 [ 321.632119][ C1] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 0000000000000007 [ 321.640074][ C1] RBP: 00007fef20e2106b R08: 0000000000000000 R09: 0000000000000000 [ 321.648026][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 321.655979][ C1] R13: 00007fef21012038 R14: 00007fef21011fa0 R15: 00007ffee3f31048 [ 321.663940][ C1] [ 321.666973][ C1] BUG: sleeping function called from invalid context at net/core/sock.c:3260 [ 321.672571][ T9261] release set syz1 [ 321.675748][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 9257, name: syz.0.1414 [ 321.679919][ T9265] kcov: kcov_task_exit: t = ffff88801de1bb80, kcov->t = ffff88801de1bb80 [ 321.688448][ C1] INFO: lockdep is turned off. [ 321.697081][ T9263] kcov: kcov_task_exit: t = ffff88802a4c3b80, kcov->t = ffff88802a4c3b80 [ 321.701613][ C1] Preemption disabled at: [ 321.701621][ C1] [] schedule+0x114/0x1e0 [ 321.710248][ T9266] kcov: kcov_task_exit: t = ffff8880276f1dc0, kcov->t = ffff8880276f1dc0 [ 321.714387][ C1] CPU: 1 PID: 9257 Comm: syz.0.1414 Not tainted syzkaller #0 [ 321.735998][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 321.746176][ C1] Call Trace: [ 321.749473][ C1] [ 321.752327][ C1] dump_stack_lvl+0x188/0x250 [ 321.757011][ C1] ? show_regs_print_info+0x20/0x20 [ 321.762204][ C1] ? load_image+0x410/0x410 [ 321.766721][ C1] ___might_sleep+0x493/0x610 [ 321.771404][ C1] ? schedule+0x114/0x1e0 [ 321.775728][ C1] ? __might_sleep+0xf0/0xf0 [ 321.780309][ C1] ? __local_bh_enable_ip+0xd7/0x1c0 [ 321.785577][ C1] ? read_lock_is_recursive+0x10/0x10 [ 321.790936][ C1] ? __local_bh_enable_ip+0x136/0x1c0 [ 321.796292][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 321.801482][ C1] ? __local_bh_enable_ip+0x136/0x1c0 [ 321.806843][ C1] ? _local_bh_enable+0xa0/0xa0 [ 321.811678][ C1] lock_sock_nested+0x5b/0x100 [ 321.816432][ C1] x25_kill_by_neigh+0x109/0x250 [ 321.821363][ C1] x25_lapb_receive_frame+0x19d/0xf20 [ 321.826726][ C1] ? x25_device_event+0x250/0x250 [ 321.831744][ C1] netif_receive_skb_core+0x149/0x210 [ 321.837105][ C1] lapbeth_napi_poll+0x3e/0x80 [ 321.841860][ C1] __napi_poll+0xbb/0x430 [ 321.846187][ C1] net_rx_action+0x522/0xa80 [ 321.851117][ C1] ? net_tx_action+0x880/0x880 [ 321.855871][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 321.861836][ C1] ? detach_timer+0x2b0/0x2b0 [ 321.866504][ C1] ? lock_chain_count+0x20/0x20 [ 321.871347][ C1] ? handle_softirqs+0x209/0x830 [ 321.876266][ C1] handle_softirqs+0x336/0x830 [ 321.881015][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 321.885852][ C1] ? do_softirq+0x210/0x210 [ 321.890345][ C1] ? hrtimer_interrupt+0x6a2/0x8b0 [ 321.895476][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 321.900665][ C1] __irq_exit_rcu+0x13b/0x230 [ 321.905340][ C1] ? irq_exit_rcu+0x20/0x20 [ 321.909859][ C1] irq_exit_rcu+0x5/0x20 [ 321.914122][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 321.919770][ C1] [ 321.922776][ C1] [ 321.925690][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 321.931749][ C1] RIP: 0010:finish_lock_switch+0x12f/0x290 [ 321.937551][ C1] Code: 83 c7 18 be ff ff ff ff e8 8e da 6c 08 85 c0 74 46 4d 85 ff 75 62 0f 1f 44 00 00 48 89 df e8 78 4a 76 08 e8 93 e3 2a 00 fb 5b <41> 5c 41 5d 41 5e 41 5f 5d c3 48 89 df e8 2f 0e fe ff 43 80 3c 2c [ 321.957152][ C1] RSP: 0018:ffffc900030af2d8 EFLAGS: 00000286 [ 321.963210][ C1] RAX: 648e44aaf9531100 RBX: ffff888027f53b80 RCX: 648e44aaf9531100 [ 321.971263][ C1] RDX: dffffc0000000000 RSI: ffffffff8a2b2be0 RDI: ffffffff8a7a48c0 [ 321.979225][ C1] RBP: 1ffff11017227613 R08: ffff8880b913a343 R09: 1ffff11017227468 [ 321.987279][ C1] R10: dffffc0000000000 R11: ffffed1017227469 R12: 0000000000000000 [ 321.995237][ C1] R13: dffffc0000000000 R14: ffffffff8158f3a0 R15: 0000000000000000 [ 322.003213][ C1] ? update_rt_migration+0x3a0/0x3a0 [ 322.008494][ C1] finish_task_switch+0x12f/0x650 [ 322.013505][ C1] __schedule+0x11cb/0x4350 [ 322.017993][ C1] ? mark_lock+0x94/0x320 [ 322.022305][ C1] ? __lock_acquire+0x13dc/0x7b50 [ 322.027320][ C1] ? mark_lock+0x94/0x320 [ 322.031681][ C1] ? release_firmware_map_entry+0x190/0x190 [ 322.037565][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 322.043535][ C1] schedule+0x11b/0x1e0 [ 322.047680][ C1] schedule_timeout+0xbd/0x2d0 [ 322.052463][ C1] ? console_conditional_schedule+0x40/0x40 [ 322.058361][ C1] ? __lock_acquire+0x7b50/0x7b50 [ 322.063374][ C1] ? rcu_lock_release+0x9/0x20 [ 322.068243][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 322.073426][ C1] unix_wait_for_peer+0x1f2/0x2e0 [ 322.078558][ C1] ? unix_find_other+0x840/0x840 [ 322.083490][ C1] ? do_raw_spin_lock+0x128/0x2f0 [ 322.088499][ C1] ? init_wait_entry+0xd0/0xd0 [ 322.093276][ C1] ? __rwlock_init+0x140/0x140 [ 322.098026][ C1] ? unix_dgram_sendmsg+0xb56/0x19c0 [ 322.103308][ C1] ? bpf_lsm_unix_may_send+0x5/0x10 [ 322.108593][ C1] unix_dgram_sendmsg+0x115c/0x19c0 [ 322.113782][ C1] ? unix_dgram_poll+0x680/0x680 [ 322.118702][ C1] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 322.125107][ C1] ? apparmor_socket_sendmsg+0x88/0x230 [ 322.130747][ C1] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 322.136052][ C1] ? security_socket_sendmsg+0x7c/0xa0 [ 322.141508][ C1] ? unix_dgram_poll+0x680/0x680 [ 322.146435][ C1] ____sys_sendmsg+0x5be/0x8f0 [ 322.151191][ C1] ? __sys_sendmsg_sock+0x30/0x30 [ 322.156200][ C1] ? rcu_is_watching+0x11/0xa0 [ 322.160948][ C1] ? import_iovec+0x6f/0xa0 [ 322.165459][ C1] ___sys_sendmsg+0x236/0x2e0 [ 322.170138][ C1] ? __sys_sendmsg+0x290/0x290 [ 322.174897][ C1] ? __might_fault+0xb3/0x110 [ 322.179568][ C1] __sys_sendmmsg+0x2ba/0x500 [ 322.184259][ C1] ? __ia32_sys_sendmsg+0x80/0x80 [ 322.189330][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 322.195319][ C1] ? lock_chain_count+0x20/0x20 [ 322.200158][ C1] __x64_sys_sendmmsg+0x9c/0xb0 [ 322.205020][ C1] do_syscall_64+0x4c/0xa0 [ 322.209424][ C1] ? clear_bhb_loop+0x30/0x80 [ 322.214114][ C1] ? clear_bhb_loop+0x30/0x80 [ 322.218778][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 322.224663][ C1] RIP: 0033:0x7fef20d8a159 [ 322.229070][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.248664][ C1] RSP: 002b:00007fef1efe2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 322.257074][ C1] RAX: ffffffffffffffda RBX: 00007fef21011fa0 RCX: 00007fef20d8a159 [ 322.265045][ C1] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 0000000000000007 [ 322.273006][ C1] RBP: 00007fef20e2106b R08: 0000000000000000 R09: 0000000000000000 [ 322.280963][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 322.288945][ C1] R13: 00007fef21012038 R14: 00007fef21011fa0 R15: 00007ffee3f31048 [ 322.297186][ C1] [ 322.300243][ C1] virtqueue callback for ffff888147e6e900 (ffffffff85491a80) [ 322.307897][ T9257] kcov: kcov_task_exit: t = ffff888027400000, kcov->t = ffff888027400000 [ 322.316666][ C1] wireguard: wg0: Handshake for peer 26 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2) [ 322.328628][ C1] nf_conntrack: new packet for ffff888029f8b380 [ 322.334911][ C1] nf_nat: Already setup manip DST for ct ffff888029f8b380 (status bits 0x188) [ 322.343902][ C1] nf_nat: Already setup manip SRC for ct ffff888029f8b380 (status bits 0x188) [ 322.352920][ C1] tipc: TX(): probing for key[1] [ 322.357937][ C1] nf_conntrack: new packet for ffff888029f8bb00 [ 322.364296][ C1] nf_nat: Already setup manip DST for ct ffff888029f8bb00 (status bits 0x188) [ 322.373532][ C1] nf_nat: Already setup manip SRC for ct ffff888029f8bb00 (status bits 0x188) [ 322.382523][ C1] nf_conntrack: new packet for ffff888029f8bb00 [ 322.388774][ C1] nf_nat: Already setup manip DST for ct ffff888029f8bb00 (status bits 0x188) [ 322.397646][ C1] nf_nat: Already setup manip SRC for ct ffff888029f8bb00 (status bits 0x188) [ 322.407512][ C1] No more buffers in queue [ 322.412069][ C1] Receiving skb proto 0x0806 len 28 type 1 [ 322.417880][ C1] No more buffers in queue [ 322.422403][ C1] No more buffers in queue [ 322.426820][ C1] eth0: xmit ffff888076bf2c80 42:01:0a:80:00:01 [ 322.433081][ C1] Added buffer head 19 to ffff888147e6ea00 [ 322.433184][ T9262] kcov: kcov_task_exit: t = ffff888027f53b80, kcov->t = ffff888027f53b80 [ 322.438886][ C1] virtqueue callback for ffff888147e6ea00 (ffffffff85491b70) [ 322.447483][ C0] virtqueue callback for ffff888147e6e700 (ffffffff85491a80) [ 322.455061][ C1] Sent skb ffff888076bf2c80 [ 322.466667][ C1] No more buffers in queue [ 322.471401][ T3520] sd 0:0:1:0: cmd ffff888023f0ed28 CDB: 0x2a [ 322.477447][ T3520] Added buffer head 142 to ffff88801f828f00 [ 322.478427][ T2856] Added buffer head 0 to ffff888146d3f000 [ 322.483866][ T9255] kcov: kcov_task_exit: t = ffff8880579e1dc0, kcov->t = ffff8880579e1dc0 [ 322.490859][ T5712] send_to_group: group=ffff88814459c800 mask=8 marks_mask=2008 marks_ignore_mask=0 data=ffff88805e660510 data_type=1 dir=0000000000000000 cookie=0 [ 322.497511][ C1] virtqueue callback for ffff88801f828f00 (ffffffff85068310) [ 322.512491][ C0] tipc: TX(): probing for key[1] [ 322.519691][ C1] sd 0:0:1:0: cmd ffff888023f0ed28 response 0 status 0x0 sense_len 0 [ 322.524703][ C0] nf_conntrack: new packet for ffff8880779cd980 [ 322.532643][ C1] No more buffers in queue [ 322.539059][ T263] sd 0:0:1:0: cmd ffff88802175a928 CDB: 0x35 [ 322.543312][ C0] nf_nat: Already setup manip DST for ct ffff8880779cd980 (status bits 0x188) [ 322.549283][ T263] Added buffer head 142 to ffff88801f828f00 [ 322.558147][ C0] nf_nat: Already setup manip SRC for ct ffff8880779cd980 (status bits 0x188) [ 322.564073][ C1] virtqueue callback for ffff88801f828f00 (ffffffff85068310) [ 322.572914][ C0] nf_conntrack: new packet for ffff8880779cd980 [ 322.580149][ C1] sd 0:0:1:0: cmd ffff88802175a928 response 0 status 0x0 sense_len 0 [ 322.586399][ C0] nf_nat: Already setup manip DST for ct ffff8880779cd980 (status bits 0x188) [ 322.594403][ C1] No more buffers in queue [ 322.594568][ T263] sd 0:0:1:0: cmd ffff888023f00128 CDB: 0x2a [ 322.603275][ C0] nf_nat: Already setup manip SRC for ct ffff8880779cd980 (status bits 0x188) [ 322.607654][ T263] Added buffer head 142 to ffff88801f828f00 [ 322.613768][ C0] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888078eda718 is addr:2001:: for cmd:0 at entry:ffff888017a95280 [ 322.622622][ T144] net_ratelimit: 2 callbacks suppressed [ 322.622634][ T144] wireguard: wg1: Sending handshake initiation to peer 10 (127.0.0.1:20003) [ 322.628316][ C0] sctp: sctp_addr_wq_timeout_handler: this is on DAD, trying 500 sec later [ 322.641528][ T4293] wireguard: wg0: Sending handshake initiation to peer 26 ([::1]:20003/0%0) [ 322.646872][ C1] virtqueue callback for ffff88801f828f00 (ffffffff85068310) [ 322.646892][ C1] sd 0:0:1:0: cmd ffff888023f00128 response 0 status 0x0 sense_len 0 [ 322.646910][ C1] No more buffers in queue [ 322.646915][ C0] nf_conntrack: normal packet for ffff88807a196300 [ 322.646929][ C0] tcp_in_window: START [ 322.646936][ C0] tcp_in_window: [ 322.646942][ C0] seq=363748948 ack=602939016+(0) sack=602939016+(0) win=24569 end=363748948 [ 322.715450][ C0] tcp_in_window: sender end=363748948 maxend=366893524 maxwin=3144832 scale=7 receiver end=602939016 maxend=606083847 maxwin=3144576 scale=7 [ 322.729762][ C0] tcp_in_window: [ 322.729770][ C0] seq=363748948 ack=602939016+(0) sack=602939016+(0) win=24569 end=363748948 [ 322.742131][ C0] tcp_in_window: sender end=363748948 maxend=366893524 maxwin=3144832 scale=7 receiver end=602939016 maxend=606083847 maxwin=3144576 scale=7 [ 322.756449][ C0] tcp_in_window: I=1 II=1 III=1 IV=1 [ 322.761840][ C0] tcp_in_window: res=1 sender end=363748948 maxend=366893524 maxwin=3144832 receiver end=602939016 maxend=606083848 maxwin=3144576 [ 322.775313][ C0] tcp_conntracks: [ 322.775322][ C0] syn=0 ack=1 fin=0 rst=0 old=4 new=5 [ 322.784454][ C0] No more buffers in queue [ 322.788863][ C0] eth0: xmit ffff88807638f000 42:01:0a:80:00:01 [ 322.795188][ C0] Added buffer head 3 to ffff888147e6e800 [ 322.800888][ C0] virtqueue callback for ffff888147e6e800 (ffffffff85491b70) [ 322.808387][ C0] wireguard: wg2: Handshake for peer 30 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 5) [ 322.808531][ C1] nf_conntrack: new packet for ffff888029f8a900 [ 322.819973][ C0] wireguard: wg0: Handshake for peer 25 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2) [ 322.826183][ C1] tcp_in_window: START [ 322.838029][ C0] wireguard: wg1: Sending keepalive packet to peer 4 (127.0.0.1:20003) [ 322.842046][ C1] tcp_in_window: [ 322.842054][ C1] seq=0 ack=0+(0) sack=0+(0) win=512 end=0 [ 322.850305][ C0] wireguard: wg2: Sending keepalive packet to peer 6 (127.0.0.1:20002) [ 322.853890][ C1] tcp_in_window: sender end=0 maxend=512 maxwin=512 scale=0 receiver end=0 maxend=512 maxwin=0 scale=0 [ 322.859706][ C0] wireguard: wg1: Handshake for peer 9 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 5) [ 322.867902][ C1] tcp_in_window: [ 322.867912][ C1] seq=0 ack=0+(0) sack=0+(0) win=512 end=0 [ 322.879435][ C0] wireguard: wg2: No valid endpoint has been configured or discovered for peer 37 [ 322.890668][ C1] tcp_in_window: sender end=0 maxend=512 maxwin=512 scale=0 receiver end=0 maxend=512 maxwin=0 scale=0 [ 322.894928][ C0] Sent skb ffff88807638f000 [ 322.900306][ C1] tcp_in_window: I=1 II=1 III=1 IV=1 [ 322.909533][ C0] No more buffers in queue [ 322.920539][ C1] tcp_in_window: res=1 sender end=0 maxend=512 maxwin=512 receiver end=0 maxend=512 maxwin=0 [ 322.925066][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 322.930310][ C1] tcp_conntracks: [ 322.934797][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 322.945068][ C1] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 322.951156][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 322.954878][ C1] nf_nat: Already setup manip DST for ct ffff888029f8a900 (status bits 0x188) [ 322.960815][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 322.966412][ C1] nf_nat: Already setup manip SRC for ct ffff888029f8a900 (status bits 0x188) [ 322.972242][ C0] No more buffers in queue [ 322.981362][ C1] nf_conntrack: new packet for ffff888029f8a900 [ 322.987266][ C0] tcp_in_window: START [ 322.996118][ C1] tcp_in_window: START [ 323.000607][ C0] tcp_in_window: [ 323.006933][ C1] tcp_in_window: [ 323.006943][ C1] seq=4294967295 ack=0+(0) sack=0+(0) win=512 end=4294967295 [ 323.011262][ C0] seq=602939015 ack=363748948+(0) sack=363748948+(0) win=24567 end=602939016 [ 323.015382][ C1] tcp_in_window: sender end=0 maxend=512 maxwin=512 scale=0 receiver end=0 maxend=512 maxwin=0 scale=0 [ 323.019100][ C0] tcp_in_window: sender end=602939016 maxend=606083848 maxwin=3144576 scale=7 receiver end=363748948 maxend=366893524 maxwin=3144832 scale=7 [ 323.022771][ C1] tcp_in_window: [ 323.030167][ C0] tcp_in_window: [ 323.039088][ C1] seq=4294967295 ack=0+(0) sack=0+(0) win=512 end=4294967295 [ 323.050131][ C0] seq=602939015 ack=363748948+(0) sack=363748948+(0) win=24567 end=602939016 [ 323.064842][ C1] tcp_in_window: sender end=0 maxend=512 maxwin=512 scale=0 receiver end=0 maxend=512 maxwin=0 scale=0 [ 323.068464][ C0] tcp_in_window: sender end=602939016 maxend=606083848 maxwin=3144576 scale=7 receiver end=363748948 maxend=366893524 maxwin=3144832 scale=7 [ 323.072089][ C1] tcp_in_window: I=1 II=1 III=1 IV=1 [ 323.079433][ C0] tcp_in_window: I=1 II=1 III=1 IV=1 [ 323.088192][ C1] tcp_in_window: res=1 sender end=0 maxend=512 maxwin=512 receiver end=0 maxend=512 maxwin=0 [ 323.099215][ C0] tcp_in_window: res=1 sender end=602939016 maxend=606083848 maxwin=3144576 receiver end=363748948 maxend=366893524 maxwin=3144832 [ 323.113610][ C1] tcp_conntracks: [ 323.118876][ C0] tcp_conntracks: [ 323.124157][ C1] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 323.134474][ C0] syn=0 ack=1 fin=1 rst=0 old=5 new=6 [ 323.148147][ C1] nf_nat: Already setup manip DST for ct ffff888029f8a900 (status bits 0x188) [ 323.151905][ C0] tcp_in_window: START [ 323.155622][ C1] nf_nat: Already setup manip SRC for ct ffff888029f8a900 (status bits 0x188) [ 323.160950][ C0] tcp_in_window: [ 323.166660][ T9145] wireguard: wg2: Sending handshake initiation to peer 30 (127.0.0.1:20002) [ 323.175413][ C0] seq=602939015 ack=363748948+(0) sack=363748948+(0) win=24567 end=602939016 [ 323.179661][ T9140] wireguard: wg0: Sending handshake initiation to peer 25 ([::1]:20002/0%0) [ 323.188580][ C0] tcp_in_window: sender end=602939016 maxend=606083848 maxwin=3144576 scale=7 receiver end=363748948 maxend=366893524 maxwin=3144832 scale=7 [ 323.192355][ T9160] wireguard: wg1: Sending handshake initiation to peer 9 ([::1]:20001/0%0) [ 323.200949][ C0] tcp_in_window: [ 323.221546][ T4193] nvmet: ctrl 1 update keep-alive timer for 5 secs [ 323.232814][ C0] seq=602939015 ack=363748948+(0) sack=363748948+(0) win=24567 end=602939016 [ 323.232840][ C0] tcp_in_window: sender end=602939016 maxend=606083848 maxwin=3144576 scale=7 receiver end=363748948 maxend=366893524 maxwin=3144832 scale=7 [ 323.242225][ T9267] kcov: kcov_start: t = ffff88802bd41dc0, size = 524288, area = ffffc90010701000 [ 323.245066][ C0] tcp_in_window: I=1 II=1 III=1 IV=1 [ 323.255847][ T9260] raw-gadget.0 gadget: event fetching interrupted [ 323.260653][ C0] tcp_in_window: res=1 sender end=602939016 maxend=606083848 maxwin=3144576 receiver end=363748948 maxend=366893524 maxwin=3144832 [ 323.275491][ T5712] inotify_handle_inode_event: group=ffff88814459c800 mark=ffff88807cb34898 mask=8 [ 323.284143][ C0] tcp_conntracks: [ 323.315921][ T9140] nf_conntrack: normal packet for ffff88801b7d2c00 [ 323.318531][ C0] syn=0 ack=1 fin=1 rst=0 old=6 new=6 [ 323.334010][ T4293] nf_conntrack: normal packet for ffff8880779cd080 [ 323.334215][ C0] tcp_in_window: START [ 323.344842][ C0] tcp_in_window: [ 323.344858][ C0] seq=602939015 ack=363748948+(0) sack=363748948+(0) win=24567 end=602939016 [ 323.353632][ T144] wireguard: wg1: No route to 127.0.0.1:20003, error -101 [ 323.357267][ C0] tcp_in_window: sender end=602939016 maxend=606083848 maxwin=3144576 scale=7 receiver end=363748948 maxend=366893524 maxwin=3144832 scale=7 [ 323.364501][ C1] nf_conntrack: new packet for ffff888029f8b380 [ 323.378786][ C0] tcp_in_window: [ 323.385104][ C0] seq=602939015 ack=363748948+(0) sack=363748948+(0) win=24567 end=602939016 [ 323.385109][ C1] nf_nat: Already setup manip DST for ct ffff888029f8b380 (status bits 0x188) [ 323.385127][ C0] tcp_in_window: sender end=602939016 maxend=606083848 maxwin=3144576 scale=7 receiver end=363748948 maxend=366893524 maxwin=3144832 scale=7 [ 323.388752][ C1] nf_nat: Already setup manip SRC for ct ffff888029f8b380 (status bits 0x188) [ 323.397491][ C0] tcp_in_window: I=1 II=1 III=1 IV=1 [ 323.406722][ T4193] kcov: kcov_remote_start: handle = 100000000000003, context: task [ 323.420849][ C0] tcp_in_window: res=1 sender end=602939016 maxend=606083848 maxwin=3144576 receiver end=363748948 maxend=366893524 maxwin=3144832 [ 323.429736][ T4193] kcov: kcov_start: t = ffff88802b3ebb80, size = 1048576, area = ffffc90014f0e000 [ 323.431947][ T5712] fsnotify_insert_event: group=ffff88814459c800 event=ffff888020368980 [ 323.435148][ C0] tcp_conntracks: [ 323.443122][ C1] tipc: TX(): probing for key[1] [ 323.456488][ C0] syn=0 ack=1 fin=1 rst=0 old=6 new=6 [ 323.465794][ C1] nf_conntrack: new packet for ffff888029f8bb00 [ 323.474029][ C0] tcp_in_window: START [ 323.477725][ C1] nf_nat: Already setup manip DST for ct ffff888029f8bb00 (status bits 0x188) [ 323.482651][ C0] tcp_in_window: [ 323.488005][ C1] nf_nat: Already setup manip SRC for ct ffff888029f8bb00 (status bits 0x188) [ 323.488149][ C1] nf_conntrack: new packet for ffff888029f8bb00 [ 323.494261][ C0] seq=602939015 ack=363748948+(0) sack=363748948+(0) win=24567 end=602939016 [ 323.498318][ C1] nf_nat: Already setup manip DST for ct ffff888029f8bb00 (status bits 0x188) [ 323.507154][ C0] tcp_in_window: sender end=602939016 maxend=606083848 maxwin=3144576 scale=7 receiver end=363748948 maxend=366893524 maxwin=3144832 scale=7 [ 323.510809][ C1] nf_nat: Already setup manip SRC for ct ffff888029f8bb00 (status bits 0x188) [ 323.519732][ C0] tcp_in_window: [ 323.527436][ T9254] kcov: kcov_task_exit: t = ffff88802242d940, kcov->t = ffff88802242d940 [ 323.534877][ C0] seq=602939015 ack=363748948+(0) sack=363748948+(0) win=24567 end=602939016 [ 323.587737][ C0] tcp_in_window: sender end=602939016 maxend=606083848 maxwin=3144576 scale=7 receiver end=363748948 maxend=366893524 maxwin=3144832 scale=7 [ 323.590193][ T3558] get_one_event: group=ffff88814459c800 event=ffff888020368980 [ 323.602128][ C0] tcp_in_window: I=1 II=1 III=1 IV=1 [ 323.602147][ C0] tcp_in_window: res=1 sender end=602939016 maxend=606083848 maxwin=3144576 receiver end=363748948 maxend=366893524 maxwin=3144832 [ 323.602169][ C0] tcp_conntracks: [ 323.602176][ C0] syn=0 ack=1 fin=1 rst=0 old=6 new=6 [ 323.602457][ C0] virtqueue callback for ffff888146d3f000 (ffffffff8444ab50) [ 323.609742][ T3558] fsnotify_remove_first_event: group=ffff88814459c800 event=ffff888020368980 [ 323.615021][ C0] virtqueue interrupt with no work for ffff88801e7bef00 [ 323.615032][ C0] virtqueue interrupt with no work for ffff88801e7bee00 [ 323.632987][ T9258] kcov: kcov_task_exit: t = ffff88802a509dc0, kcov->t = ffff88802a509dc0 [ 323.638274][ T4230] nf_conntrack: new packet for ffff88807a6e1200 [ 323.682253][ T4230] nf_nat: Already setup manip DST for ct ffff88807a6e1200 (status bits 0x188) [ 323.687482][ T4193] hub 3-0:1.0: state 7 ports 1 chg 0002 evt 0000 [ 323.691121][ T4230] nf_nat: Already setup manip SRC for ct ffff88807a6e1200 (status bits 0x188) [ 323.700217][ T9260] kcov: kcov_task_exit: t = ffff888073f08000, kcov->t = ffff888073f08000 [ 323.706560][ T6447] Added buffer head 0 to ffff888146d3f000 [ 323.720744][ T2856] wireguard: wg1: No route to 127.0.0.1:20003, error -101 [ 323.721495][ T9267] kcov: kcov_task_exit: t = ffff88802bd41dc0, kcov->t = ffff88802bd41dc0 [ 323.728161][ C0] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888078eda718 is addr:2001:: for cmd:0 at entry:ffff888017a95280 [ 323.749393][ C0] sctp: sctp_addr_wq_timeout_handler: this is on DAD, trying 500 sec later [ 323.758049][ C0] wireguard: wg2: Handshake for peer 29 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 2) [ 323.761678][ C1] kcov: kcov_remote_start: handle = 100000000000003, context: softirq [ 323.769678][ C0] wireguard: wg1: Handshake for peer 27 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 5) [ 323.777737][ C1] kcov: kcov_start: t = ffff888017a08000, size = 262144, area = ffffc90002059000 [ 323.777779][ C1] kcov: kcov_move_area: ffffc90013709000 1048576 <= ffffc90002059000 34 [ 323.789338][ C0] tipc: TX(): probing for key[1] [ 323.798961][ T4193] usb usb3-port1: status 0101, change 0000, 12 Mb/s [ 323.806872][ C0] nf_conntrack: new packet for ffff8880779cd980 [ 323.824664][ C0] nf_nat: Already setup manip DST for ct ffff8880779cd980 (status bits 0x188) [ 323.833589][ C0] nf_nat: Already setup manip SRC for ct ffff8880779cd980 (status bits 0x188) [ 323.842577][ C0] nf_conntrack: new packet for ffff8880779cd980 [ 323.848847][ C0] nf_nat: Already setup manip DST for ct ffff8880779cd980 (status bits 0x188) [ 323.857780][ C0] nf_nat: Already setup manip SRC for ct ffff8880779cd980 (status bits 0x188) [ 323.862070][ T3558] inotify_read: group=ffff88814459c800 kevent=ffff888020368980 [ 323.867130][ C0] No more buffers in queue [ 323.876172][ C1] kcov: kcov_remote_start: handle = 100000000000003, context: softirq [ 323.878606][ C0] No more buffers in queue [ 323.886728][ C1] kcov: kcov_start: t = ffff888072180000, size = 262144, area = ffffc90002059000 [ 323.886776][ C1] kcov: kcov_move_area: ffffc90013709000 1048576 <= ffffc90002059000 34 [ 323.891163][ C0] No more buffers in queue [ 323.901841][ T7623] nf_conntrack: new packet for ffff888029f8b800 [ 323.908975][ T144] sd 0:0:1:0: cmd ffff888023f2f128 CDB: 0x2a [ 323.912990][ T7623] nf_nat: Already setup manip DST for ct ffff888029f8b800 (status bits 0x188) [ 323.919222][ T144] Added buffer head 142 to ffff88801f828f00 [ 323.925243][ T7623] nf_nat: Already setup manip SRC for ct ffff888029f8b800 (status bits 0x188) [ 323.949640][ C1] virtqueue callback for ffff88801f828f00 (ffffffff85068310) [ 323.955410][ T9260] udc dummy_udc.2: unregistering UDC driver [USB Raw Gadget] [ 323.957038][ C1] sd 0:0:1:0: cmd ffff888023f2f128 response 0 status 0x0 sense_len 0 [ 323.957064][ C1] No more buffers in queue [ 323.975379][ T9260] dummy_hcd dummy_hcd.2: port status 0x00010110 has changes [ 323.986263][ T4186] send_to_group: group=ffff88814459c800 mask=8 marks_mask=2008 marks_ignore_mask=0 data=ffff88807da63690 data_type=1 dir=0000000000000000 cookie=0 [ 323.991850][ C0] wireguard: wg1: Handshake for peer 28 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 2) [ 324.013178][ T144] nf_conntrack: normal packet for ffff8880779cdc80 [ 324.017161][ T3558] copy_event_to_user: group=ffff88814459c800 event=ffff888020368980 [ 324.031937][ T4186] inotify_handle_inode_event: group=ffff88814459c800 mark=ffff88807cb343e8 mask=8 [ 324.041219][ T4193] dummy_hcd dummy_hcd.2: port status 0x00110100 has changes [ 324.041539][ T4186] fsnotify_insert_event: group=ffff88814459c800 event=ffff888048535e00 [ 324.051326][ C1] kcov: kcov_remote_start: handle = 100000000000003, context: softirq [ 324.064934][ C1] kcov: kcov_start: t = ffff888017a08000, size = 262144, area = ffffc90002059000 [ 324.066166][ T9260] kobject: 'dummy_udc.2' (ffff888024c18018): kobject_uevent_env [ 324.074124][ C1] kcov: kcov_move_area: ffffc90013709000 1048576 <= ffffc90002059000 144 [ 324.074158][ C1] kcov: kcov_remote_start: handle = 100000000000003, context: softirq [ 324.074172][ C1] kcov: kcov_start: t = ffff888017a08000, size = 262144, area = ffffc90002059000 [ 324.107528][ C1] kcov: kcov_move_area: ffffc90013709000 1048576 <= ffffc90002059000 34 [ 324.115975][ T4193] usb usb3-port1: not reset yet, waiting 60ms [ 324.128864][ T3558] get_one_event: group=ffff88814459c800 event=ffff888048535e00 [ 324.136525][ T3558] fsnotify_remove_first_event: group=ffff88814459c800 event=ffff888048535e00 [ 324.150257][ T9260] kobject: 'dummy_udc.2' (ffff888024c18018): fill_kobj_path: path = '/devices/platform/dummy_udc.2/udc/dummy_udc.2' [ 324.183390][ T3558] inotify_read: group=ffff88814459c800 kevent=ffff888048535e00 [ 324.183958][ T4172] nf_conntrack: normal packet for ffff88807a196300 [ 324.190977][ T3558] copy_event_to_user: group=ffff88814459c800 event=ffff888048535e00 [ 324.197704][ T4172] tcp_in_window: START [ 324.209664][ T4172] tcp_in_window: [ 324.209679][ T4172] seq=363748948 ack=602939016+(0) sack=602939016+(0) win=24569 end=363748948 [ 324.222116][ T4172] tcp_in_window: sender end=363748948 maxend=366893524 maxwin=3144832 scale=7 receiver end=602939016 maxend=606083848 maxwin=3144576 scale=7 [ 324.234153][ T4197] send_to_group: group=ffff88814459c800 mask=8 marks_mask=2008 marks_ignore_mask=0 data=ffff8880761b7410 data_type=1 dir=0000000000000000 cookie=0 [ 324.236565][ T4172] tcp_in_window: [ 324.251431][ T4172] seq=363748948 ack=602939016+(0) sack=602939016+(0) win=24569 end=363748948 [ 324.261891][ T3558] inotify_read: group=ffff88814459c800 kevent=0000000000000000 [ 324.263885][ T4172] tcp_in_window: sender end=363748948 maxend=366893524 maxwin=3144832 scale=7 receiver end=602939016 maxend=606083848 maxwin=3144576 scale=7 [ 324.285735][ T4172] tcp_in_window: I=1 II=1 III=1 IV=1 [ 324.291026][ T4172] tcp_in_window: res=1 sender end=363748948 maxend=366893524 maxwin=3144832 receiver end=602939016 maxend=606083848 maxwin=3144576 [ 324.302230][ T3558] kobject: 'loop5' (ffff888017118c00): kobject_uevent_env [ 324.304528][ T4172] tcp_conntracks: [ 324.311579][ T4172] syn=0 ack=1 fin=0 rst=0 old=6 new=7 [ 324.311770][ T3558] kobject: 'loop5' (ffff888017118c00): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 324.315322][ C0] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888078eda718 is addr:2001:: for cmd:0 at entry:ffff888017a95280 [ 324.315356][ C0] sctp: sctp_addr_wq_timeout_handler: this is on DAD, trying 500 sec later [ 324.315624][ C1] dummy_hcd dummy_hcd.2: port status 0x00110100 has changes [ 324.337088][ T3558] kobject: 'loop1' (ffff888017115280): kobject_uevent_env [ 324.344569][ C1] kcov: kcov_remote_start: handle = 100000000000003, context: softirq [ 324.361890][ T4197] inotify_handle_inode_event: group=ffff88814459c800 mark=ffff88807cb340c8 mask=8 [ 324.367446][ C1] kcov: kcov_start: t = ffff88801b5d3b80, size = 262144, area = ffffc90002059000 [ 324.381935][ T9160] bond2: (slave geneve2): Send learning packet: mac 06:4b:71:45:30:bb vlan 0 [ 324.384832][ C1] kcov: kcov_move_area: ffffc90013709000 1048576 <= ffffc90002059000 51 [ 324.401899][ T9160] geneve2: no route to 127.0.0.1 [ 324.402712][ C1] nf_conntrack: new packet for ffff888029f8b380 [ 324.421900][ T3558] kobject: 'loop1' (ffff888017115280): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 324.422124][ C1] nf_nat: Already setup manip DST for ct ffff888029f8b380 (status bits 0x188) [ 324.435942][ T9079] ping_close(sk=ffff888022dd8680,sk->num=0) [ 324.441102][ C1] nf_nat: Already setup manip SRC for ct ffff888029f8b380 (status bits 0x188) [ 324.456279][ T4193] dummy_hcd dummy_hcd.2: port status 0x00110100 has changes [ 324.464384][ C1] kcov: kcov_remote_start: handle = 100000000000003, context: softirq [ 324.464684][ T4179] inotify_handle_inode_event: group=ffff88814459c800 mark=ffff88807cb34898 mask=8000 [ 324.472548][ C1] kcov: kcov_start: t = ffff88801b5d3b80, size = 262144, area = ffffc90002059000 [ 324.472600][ C1] kcov: kcov_move_area: ffffc90013709000 1048576 <= ffffc90002059000 51 [ 324.484602][ T4197] fsnotify_insert_event: group=ffff88814459c800 event=ffff888048535d80 [ 324.491212][ C1] tipc: TX(): probing for key[1] [ 324.500581][ T4176] inotify_handle_inode_event: group=ffff88814459c800 mark=ffff88807cb343e8 mask=8000 [ 324.508085][ C1] nf_conntrack: new packet for ffff888029f8bb00 [ 324.521908][ T4179] fsnotify_insert_event: group=ffff88814459c800 event=ffff888048535dc0 [ 324.522481][ C1] nf_nat: Already setup manip DST for ct ffff888029f8bb00 (status bits 0x188) [ 324.528742][ T3558] get_one_event: group=ffff88814459c800 event=ffff888048535dc0 [ 324.536939][ C1] nf_nat: Already setup manip SRC for ct ffff888029f8bb00 (status bits 0x188) [ 324.537074][ C1] nf_conntrack: new packet for ffff888029f8bb00 [ 324.545841][ T3558] fsnotify_remove_first_event: group=ffff88814459c800 event=ffff888048535dc0 [ 324.553480][ C1] nf_nat: Already setup manip DST for ct ffff888029f8bb00 (status bits 0x188) [ 324.571946][ T4176] fsnotify_insert_event: group=ffff88814459c800 event=ffff888048535e40 [ 324.577408][ C1] nf_nat: Already setup manip SRC for ct ffff888029f8bb00 (status bits 0x188) [ 324.587933][ T9079] isk->refcnt = 1 [ 324.594789][ C1] geneve0: no tunnel metadata [ 324.603439][ C0] virtqueue callback for ffff888146d3f000 (ffffffff8444ab50) [ 324.607242][ C1] kcov: kcov_remote_start: handle = 100000000000003, context: softirq [ 324.611819][ C0] virtqueue interrupt with no work for ffff88801e7bef00 [ 324.619118][ C1] kcov: kcov_start: t = ffff88801b5d3b80, size = 262144, area = ffffc90002059000 [ 324.627246][ C0] virtqueue interrupt with no work for ffff88801e7bee00 [ 324.634192][ C1] kcov: kcov_move_area: ffffc90013709000 1048576 <= ffffc90002059000 34 [ 324.644102][ T4230] Added buffer head 0 to ffff888146d3f000 [ 324.650339][ T4193] usb usb3-port1: not reset yet, waiting 200ms [ 324.676525][ T4172] No more buffers in queue [ 324.679464][ T9079] ping_unhash(isk=ffff888022dd8680,isk->num=0) [ 324.680968][ T4172] eth0: xmit ffff88801ee7fdc0 42:01:0a:80:00:01 [ 324.688404][ T3558] inotify_read: group=ffff88814459c800 kevent=ffff888048535dc0 [ 324.693403][ T4172] Added buffer head 19 to ffff888147e6ea00 [ 324.693464][ C1] virtqueue callback for ffff888147e6ea00 (ffffffff85491b70) [ 324.701523][ T3558] copy_event_to_user: group=ffff88814459c800 event=ffff888048535dc0 [ 324.706811][ C1] Sent skb ffff88801ee7fdc0 [ 324.706841][ C1] No more buffers in queue [ 324.731265][ T4172] nf_conntrack: normal packet for ffff88807a196300 [ 324.731615][ T3558] get_one_event: group=ffff88814459c800 event=ffff888048535d80 [ 324.737874][ T4172] tcp_in_window: START [ 324.745426][ T3558] fsnotify_remove_first_event: group=ffff88814459c800 event=ffff888048535d80 [ 324.749457][ T4172] tcp_in_window: [ 324.758206][ T4172] seq=363748948 ack=602939016+(0) sack=602939016+(0) win=24569 end=363748948 [ 324.770599][ T4172] tcp_in_window: sender end=363748948 maxend=366893524 maxwin=3144832 scale=7 receiver end=602939016 maxend=606083848 maxwin=3144576 scale=7 [ 324.773400][ T3558] inotify_read: group=ffff88814459c800 kevent=ffff888048535d80 [ 324.784971][ T4172] tcp_in_window: [ 324.784981][ T4172] seq=363748948 ack=602939016+(0) sack=602939016+(0) win=24569 end=363748948 [ 324.792570][ C0] tipc: TX(): probing for key[1] [ 324.796128][ T4172] tcp_in_window: sender end=363748948 maxend=366893524 maxwin=3144832 scale=7 receiver end=602939016 maxend=606083848 maxwin=3144576 scale=7 [ 324.804965][ C0] nf_conntrack: new packet for ffff8880779cd980 [ 324.809799][ T4172] tcp_in_window: I=1 II=1 III=1 IV=1 [ 324.824149][ C0] nf_nat: Already setup manip DST for ct ffff8880779cd980 (status bits 0x188) [ 324.830375][ T4172] tcp_in_window: res=1 sender end=363748948 maxend=366893524 maxwin=3144832 receiver end=602939016 maxend=606083848 maxwin=3144576 [ 324.835675][ C0] nf_nat: Already setup manip SRC for ct ffff8880779cd980 (status bits 0x188) [ 324.844502][ T4172] tcp_conntracks: [ 324.858067][ C0] nf_conntrack: new packet for ffff8880779cd980 [ 324.866786][ T4172] syn=0 ack=1 fin=0 rst=0 old=7 new=7 [ 324.870492][ C0] nf_nat: Already setup manip DST for ct ffff8880779cd980 (status bits 0x188) [ 324.879545][ T4172] No more buffers in queue [ 324.882146][ C0] nf_nat: Already setup manip SRC for ct ffff8880779cd980 (status bits 0x188) [ 324.890971][ T4172] eth0: xmit ffff888061f72c80 42:01:0a:80:00:01 [ 324.895512][ C0] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888078eda718 is addr:2001:: for cmd:0 at entry:ffff888017a95280 [ 324.904230][ T4172] Added buffer head 19 to ffff888147e6ea00 [ 324.910448][ C1] virtqueue callback for ffff888147e6ea00 (ffffffff85491b70) [ 324.910450][ C0] sctp: sctp_addr_wq_timeout_handler: this is on DAD, trying 500 sec later [ 324.912726][ T2856] nvmet: ctrl 1 update keep-alive timer for 5 secs [ 324.923536][ C1] Sent skb ffff888061f72c80 [ 324.952640][ T3558] copy_event_to_user: group=ffff88814459c800 event=ffff888048535d80 [ 324.956276][ C1] No more buffers in queue [ 324.969225][ T4193] dummy_hcd dummy_hcd.2: port status 0x00110100 has changes [ 324.976769][ T3558] get_one_event: group=ffff88814459c800 event=ffff888048535e40 [ 324.976805][ C1] kcov: kcov_remote_start: handle = 100000000000003, context: softirq [ 324.984423][ T3558] fsnotify_remove_first_event: group=ffff88814459c800 event=ffff888048535e40 [ 324.992536][ C1] kcov: kcov_start: t = ffff888017a08000, size = 262144, area = ffffc90002059000 [ 324.992583][ C1] kcov: kcov_move_area: ffffc90013709000 1048576 <= ffffc90002059000 59 [ 325.018931][ C1] kcov: kcov_remote_start: handle = 100000000000003, context: softirq [ 325.021897][ T3558] inotify_read: group=ffff88814459c800 kevent=ffff888048535e40 [ 325.027099][ C1] kcov: kcov_start: t = ffff88801b5d3b80, size = 262144, area = ffffc90002059000 [ 325.043763][ C1] kcov: kcov_move_area: ffffc90013709000 1048576 <= ffffc90002059000 34 [ 325.052219][ T4193] usb usb3-port1: not reset yet, waiting 200ms [ 325.053297][ T3558] copy_event_to_user: group=ffff88814459c800 event=ffff888048535e40 [ 325.059612][ T7623] nf_conntrack: new packet for ffff888029f8b800 [ 325.072648][ T7623] nf_nat: Already setup manip DST for ct ffff888029f8b800 (status bits 0x188) [ 325.081528][ T7623] nf_nat: Already setup manip SRC for ct ffff888029f8b800 (status bits 0x188) [ 325.081970][ T4172] nf_conntrack: normal packet for ffff88807a196300 [ 325.090850][ T3558] inotify_read: group=ffff88814459c800 kevent=0000000000000000 [ 325.109200][ T3558] kobject: 'loop2' (ffff888017115e40): kobject_uevent_env [ 325.113325][ T4172] tcp_in_window: START [ 325.116648][ T3558] kobject: 'loop2' (ffff888017115e40): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 325.120394][ T4172] tcp_in_window: [ 325.130634][ T4172] seq=363748948 ack=602939016+(0) sack=602939016+(0) win=24569 end=363748948 [ 325.143066][ T4172] tcp_in_window: sender end=363748948 maxend=366893524 maxwin=3144832 scale=7 receiver end=602939016 maxend=606083848 maxwin=3144576 scale=7 [ 325.157441][ T4172] tcp_in_window: [ 325.157456][ T4172] seq=363748948 ack=602939016+(0) sack=602939016+(0) win=24569 end=363748948 [ 325.169859][ T4172] tcp_in_window: sender end=363748948 maxend=366893524 maxwin=3144832 scale=7 receiver end=602939016 maxend=606083848 maxwin=3144576 scale=7 [ 325.184228][ T4172] tcp_in_window: I=1 II=1 III=1 IV=1 [ 325.189514][ T4172] tcp_in_window: res=1 sender end=363748948 maxend=366893524 maxwin=3144832 receiver end=602939016 maxend=606083848 maxwin=3144576 [ 325.197740][ T4179] inotify_handle_inode_event: group=ffff88814459c800 mark=ffff88807cb340c8 mask=8000 [ 325.203039][ T4172] tcp_conntracks: [ 325.203050][ T4172] syn=0 ack=1 fin=0 rst=0 old=7 new=7 [ 325.204914][ T4172] No more buffers in queue [ 325.212956][ T4179] fsnotify_insert_event: group=ffff88814459c800 event=ffff888020368940 [ 325.216283][ T4172] eth0: xmit ffff88805478c780 42:01:0a:80:00:01 [ 325.221691][ T3558] get_one_event: group=ffff88814459c800 event=ffff888020368940 [ 325.226072][ T4172] Added buffer head 3 to ffff888147e6e800 [ 325.226176][ C0] virtqueue callback for ffff888147e6e800 (ffffffff85491b70) [ 325.234323][ T3558] fsnotify_remove_first_event: group=ffff88814459c800 event=ffff888020368940 [ 325.242183][ C0] Sent skb ffff88805478c780 [ 325.251741][ T3558] inotify_read: group=ffff88814459c800 kevent=ffff888020368940 [ 325.253784][ C0] No more buffers in queue [ 325.261135][ T3558] copy_event_to_user: group=ffff88814459c800 event=ffff888020368940 [ 325.270286][ T4172] nf_conntrack: normal packet for ffff88807a196300 [ 325.276056][ T4193] dummy_hcd dummy_hcd.2: port status 0x00110100 has changes [ 325.282204][ T4172] tcp_in_window: START [ 325.286961][ T3558] inotify_read: group=ffff88814459c800 kevent=0000000000000000 [ 325.294537][ T4172] tcp_in_window: [ 325.301194][ C1] kcov: kcov_remote_start: handle = 100000000000003, context: softirq [ 325.308299][ T4172] seq=363748948 ack=602939016+(0) sack=602939016+(0) win=24569 end=363748948 [ 325.312320][ C1] kcov: kcov_start: t = ffff888017a08000, size = 262144, area = ffffc90002059000 [ 325.319853][ T4172] tcp_in_window: sender end=363748948 maxend=366893524 maxwin=3144832 scale=7 receiver end=602939016 maxend=606083848 maxwin=3144576 scale=7 [ 325.323493][ C1] kcov: kcov_move_area: ffffc90013709000 1048576 <= ffffc90002059000 51 [ 325.331621][ T4172] tcp_in_window: [ 325.331630][ T4172] seq=363748948 ack=602939016+(0) sack=602939016+(0) win=24569 end=363748948 [ 325.341580][ C1] kcov: kcov_remote_start: handle = 100000000000003, context: softirq [ 325.349495][ T4172] tcp_in_window: sender end=363748948 maxend=366893524 maxwin=3144832 scale=7 receiver end=602939016 maxend=606083848 maxwin=3144576 scale=7 [ 325.364117][ C1] kcov: kcov_start: t = ffff888017a08000, size = 262144, area = ffffc90002059000 [ 325.364166][ C1] kcov: kcov_move_area: ffffc90013709000 1048576 <= ffffc90002059000 34 [ 325.372482][ T4172] tcp_in_window: I=1 II=1 III=1 IV=1 [ 325.376438][ T4193] usb usb3-port1: not reset yet, waiting 200ms [ 325.384848][ T4172] tcp_in_window: res=1 sender end=363748948 maxend=366893524 maxwin=3144832 receiver end=602939016 maxend=606083848 maxwin=3144576 [ 325.441926][ C1] nf_conntrack: new packet for ffff888029f8b380 [ 325.449555][ T4172] tcp_conntracks: [ 325.455815][ T4172] syn=0 ack=1 fin=0 rst=0 old=7 new=7 [ 325.455823][ C1] nf_nat: Already setup manip DST for ct ffff888029f8b380 (status bits 0x188) [ 325.459685][ C0] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888078eda718 is addr:2001:: for cmd:0 at entry:ffff888017a95280 [ 325.464909][ C1] nf_nat: Already setup manip SRC for ct ffff888029f8b380 (status bits 0x188) [ 325.473758][ C0] sctp: sctp_addr_wq_timeout_handler: this is on DAD, trying 500 sec later [ 325.487841][ T4172] No more buffers in queue [ 325.508617][ T4172] eth0: xmit ffff88805fe80b40 42:01:0a:80:00:01 [ 325.514874][ T4172] Added buffer head 19 to ffff888147e6ea00 [ 325.520683][ C1] virtqueue callback for ffff888147e6ea00 (ffffffff85491b70) [ 325.528190][ C1] tipc: TX(): probing for key[1] [ 325.533251][ C1] nf_conntrack: new packet for ffff888029f8bb00 [ 325.539521][ C1] nf_nat: Already setup manip DST for ct ffff888029f8bb00 (status bits 0x188) [ 325.548392][ C1] nf_nat: Already setup manip SRC for ct ffff888029f8bb00 (status bits 0x188) [ 325.557404][ C1] nf_conntrack: new packet for ffff888029f8bb00 [ 325.563703][ C1] nf_nat: Already setup manip DST for ct ffff888029f8bb00 (status bits 0x188) [ 325.572582][ C1] nf_nat: Already setup manip SRC for ct ffff888029f8bb00 (status bits 0x188) [ 325.581578][ C1] Sent skb ffff88805fe80b40 [ 325.586137][ C1] No more buffers in queue [ 325.591523][ T4172] nf_conntrack: normal packet for ffff88807a196300 [ 325.598775][ T4172] tcp_in_window: START [ 325.602340][ C0] virtqueue callback for ffff888146d3f000 (ffffffff8444ab50) [ 325.602936][ T4172] tcp_in_window: [ 325.610188][ T4172] seq=363748948 ack=602939016+(0) sack=602939016+(0) win=24569 end=363749412 [ 325.610222][ C0] virtqueue interrupt with no work for ffff88801e7bef00 [ 325.613871][ T4172] tcp_in_window: sender end=363748948 maxend=366893524 maxwin=3144832 scale=7 receiver end=602939016 maxend=606083848 maxwin=3144576 scale=7 [ 325.622695][ C0] virtqueue interrupt with no work for ffff88801e7bee00 [ 325.622911][ T2856] Added buffer head 0 to ffff888146d3f000 [ 325.629654][ T4172] tcp_in_window: [ 325.656817][ T4172] seq=363748948 ack=602939016+(0) sack=602939016+(0) win=24569 end=363749412 [ 325.669217][ T4172] tcp_in_window: sender end=363748948 maxend=366893524 maxwin=3144832 scale=7 receiver end=602939016 maxend=606083848 maxwin=3144576 scale=7 [ 325.683554][ T4172] tcp_in_window: I=1 II=1 III=1 IV=1 [ 325.688821][ T4172] tcp_in_window: res=1 sender end=363749412 maxend=366893524 maxwin=3144832 receiver end=602939016 maxend=606083848 maxwin=3144576 [ 325.702288][ T4172] tcp_conntracks: [ 325.702300][ T4172] syn=0 ack=1 fin=0 rst=0 old=7 new=7 [ 325.711592][ T4193] dummy_hcd dummy_hcd.2: port status 0x00110100 has changes [ 325.712035][ T4172] No more buffers in queue [ 325.718927][ C1] kcov: kcov_remote_start: handle = 100000000000003, context: softirq [ 325.723283][ T4172] eth0: xmit ffff888077780fe8 42:01:0a:80:00:01 [ 325.731385][ C1] kcov: kcov_start: t = ffff888017a08000, size = 262144, area = ffffc90002059000 [ 325.737624][ T4172] Added buffer head 3 to ffff888147e6e800 [ 325.746792][ C0] virtqueue callback for ffff888147e6e700 (ffffffff85491a80) [ 325.746795][ C1] kcov: kcov_move_area: ffffc90013709000 1048576 <= ffffc90002059000 51 [ 325.746814][ C0] virtqueue callback for ffff888147e6e800 (ffffffff85491b70) [ 325.746934][ C1] kcov: kcov_remote_start: handle = 100000000000003, context: softirq [ 325.752843][ C0] Sent skb ffff888077780fe8 [ 325.759863][ C1] kcov: kcov_start: t = ffff88801b5d3b80, size = 262144, area = ffffc90002059000 [ 325.768186][ C0] No more buffers in queue [ 325.775531][ C1] kcov: kcov_move_area: ffffc90013709000 1048576 <= ffffc90002059000 34 [ 325.783785][ C0] Receiving skb proto 0x0800 len 40 type 0 [ 325.789456][ T4193] usb usb3-port1: not reset yet, waiting 200ms [ 325.797407][ C0] No more buffers in queue [ 325.802225][ T4193] dummy_hcd dummy_hcd.2: port status 0x00010100 has changes [ 325.810145][ C0] tcp_conntracks: [ 325.816041][ C1] kcov: kcov_remote_start: handle = 100000000000003, context: softirq [ 325.822077][ C0] syn=0 ack=0 fin=0 rst=1 old=7 new=8 [ 325.826455][ C1] kcov: kcov_start: t = ffff888017a08000, size = 262144, area = ffffc90002059000 [ 325.835986][ C0] tipc: TX(): probing for key[1] [ 325.837493][ C1] kcov: kcov_move_area: ffffc90013709000 1048576 <= ffffc90002059000 51 [ 325.845693][ C0] nf_conntrack: new packet for ffff8880779cd980 [ 325.851840][ C1] kcov: kcov_remote_start: handle = 100000000000003, context: softirq [ 325.860238][ C0] nf_nat: Already setup manip DST for ct ffff8880779cd980 (status bits 0x188) [ 325.865162][ C1] kcov: kcov_start: t = ffff88801b5d3b80, size = 262144, area = ffffc90002059000 [ 325.873521][ C0] nf_nat: Already setup manip SRC for ct ffff8880779cd980 (status bits 0x188) [ 325.879730][ C1] kcov: kcov_move_area: ffffc90013709000 1048576 <= ffffc90002059000 34 [ 325.887956][ C0] nf_conntrack: new packet for ffff8880779cd980 [ 325.898057][ T4193] dummy_hcd dummy_hcd.2: port status 0x00010100 has changes [ 325.905787][ C0] nf_nat: Already setup manip DST for ct ffff8880779cd980 (status bits 0x188) [ 325.914678][ C1] kcov: kcov_remote_start: handle = 100000000000003, context: softirq [ 325.923132][ C0] nf_nat: Already setup manip SRC for ct ffff8880779cd980 (status bits 0x188) [ 325.929302][ C1] kcov: kcov_start: t = ffff888017a08000, size = 262144, area = ffffc90002059000 [ 325.936762][ C0] No more buffers in queue [ 325.945422][ C1] kcov: kcov_move_area: ffffc90013709000 1048576 <= ffffc90002059000 51 [ 325.953937][ T144] bond2: (slave geneve2): Send learning packet: mac 06:4b:71:45:30:bb vlan 0 [ 325.962516][ C1] kcov: kcov_remote_start: handle = 100000000000003, context: softirq [ 325.974895][ T144] geneve2: no route to 127.0.0.1 [ 325.976022][ C1] kcov: kcov_start: t = ffff888017a08000, size = 262144, area = ffffc90002059000 [ 325.985051][ T4171] tcp_in_window: START [ 325.993116][ C1] kcov: kcov_move_area: ffffc90013709000 1048576 <= ffffc90002059000 34 [ 326.001249][ T4171] tcp_in_window: [ 326.007384][ T7623] nf_conntrack: new packet for ffff888029f8b980 [ 326.015369][ T4171] seq=4216265318 ack=70469740+(0) sack=70469740+(0) win=501 end=4216265386 [ 326.019428][ T7623] nf_nat: Already setup manip DST for ct ffff888029f8b980 (status bits 0x188) [ 326.027736][ T4171] tcp_in_window: sender end=4216265318 maxend=4216329446 maxwin=64768 scale=7 receiver end=70469740 maxend=70533868 maxwin=65408 scale=7 [ 326.031362][ T7623] nf_nat: Already setup manip SRC for ct ffff888029f8b980 (status bits 0x188) [ 326.037583][ T4171] tcp_in_window: [ 326.046293][ T4193] kobject: '3-1' (ffff8880225ec0a8): kobject_cleanup, parent 0000000000000000 [ 326.054997][ T4171] seq=4216265318 ack=70469740+(0) sack=70469740+(0) win=501 end=4216265386 [ 326.098918][ T4171] tcp_in_window: sender end=4216265318 maxend=4216329446 maxwin=64768 scale=7 receiver end=70469740 maxend=70533868 maxwin=65408 scale=7 [ 326.112944][ T4171] tcp_in_window: I=1 II=1 III=1 IV=1 [ 326.118234][ T4171] tcp_in_window: res=1 sender end=4216265386 maxend=4216329446 maxwin=64768 receiver end=70469740 maxend=70533868 maxwin=65408 [ 326.131386][ T4171] tcp_conntracks: [ 326.131402][ T4171] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 326.166315][ T4181] kcov: kcov_task_exit: t = ffff8880798a3b80, kcov->t = ffff8880798a3b80 [ 326.166323][ T4182] kcov: kcov_task_exit: t = ffff8880798a5940, kcov->t = ffff8880798a5940 [ 326.172057][ T4185] kcov: kcov_task_exit: t = ffff88802b2bbb80, kcov->t = ffff88802b2bbb80 [ 326.174930][ T4183] kcov: kcov_task_exit: t = ffff88802b2b8000, kcov->t = ffff88802b2b8000 [ 326.183368][ T5697] kcov: kcov_task_exit: t = ffff88801ddf0000, kcov->t = ffff88801ddf0000 [ 326.196445][ C0] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888078eda718 is addr:2001:: for cmd:0 at entry:ffff888017a95280 [ 326.211859][ T4193] kobject: '3-1' (ffff8880225ec0a8): calling ktype release [ 326.221422][ C0] sctp: sctp_addr_wq_timeout_handler: this is on DAD, trying 500 sec later [ 326.239867][ T2856] nvmet: ctrl 1 update keep-alive timer for 5 secs [ 326.271873][ T4193] kobject: '3-1': free name [ 326.276460][ T4193] dummy_hcd dummy_hcd.2: port status 0x00010100 has changes [ 326.303783][ T7626] nf_conntrack: new packet for ffff888029f8b800 [ 326.310078][ T7626] nf_nat: Already setup manip DST for ct ffff888029f8b800 (status bits 0x188) [ 326.318967][ T7626] nf_nat: Already setup manip SRC for ct ffff888029f8b800 (status bits 0x188) [ 326.328404][ T4193] hub 3-0:1.0: state 7 ports 1 chg 0000 evt 0002 [ 326.341910][ T4193] dummy_hcd dummy_hcd.2: port status 0x00010100 has changes SYZFAIL: failed to send rpc [ 326.372876][ T4193] usb usb3-port1: status 0100, change 0001, 12 Mb/s [ 326.393729][ T4171] No more buffers in queue [ 326.398188][ T4171] eth0: xmit ffff88802418ad68 42:01:0a:80:00:01 [ 326.404481][ T4171] Added buffer head 3 to ffff888147e6e800 [ 326.410203][ C0] virtqueue callback for ffff888147e6e700 (ffffffff85491a80) [ 326.410236][ C0] virtqueue callback for ffff888147e6e800 (ffffffff85491b70) [ 326.425130][ C0] Sent skb ffff88802418ad68 [ 326.429640][ C0] No more buffers in queue [ 326.434122][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 326.439931][ C0] No more buffers in queue [ 326.444405][ C0] nf_conntrack: normal packet for ffff8880779c8180 [ 326.451267][ C0] tcp_in_window: START [ 326.455389][ C0] tcp_in_window: [ 326.455406][ C0] seq=70469740 ack=4216265386+(0) sack=4216265386+(0) win=501 end=70469740 [ 326.467639][ C0] tcp_in_window: sender end=70469740 maxend=70533868 maxwin=65408 scale=7 receiver end=4216265386 maxend=4216329446 maxwin=64768 scale=7 [ 326.481663][ C0] tcp_in_window: [ 326.481680][ C0] seq=70469740 ack=4216265386+(0) sack=4216265386+(0) win=501 end=70469740 [ 326.481903][ C1] nf_conntrack: new packet for ffff888029f8b380 [ 326.485333][ C0] tcp_in_window: sender end=70469740 maxend=70533868 maxwin=65408 scale=7 receiver end=4216265386 maxend=4216329446 maxwin=64768 scale=7 [ 326.493908][ C1] nf_nat: Already setup manip DST for ct ffff888029f8b380 (status bits 0x188) [ 326.500121][ C0] tcp_in_window: I=1 II=1 III=1 IV=1 [ 326.514110][ C1] nf_nat: Already setup manip SRC for ct ffff888029f8b380 (status bits 0x188) [ 326.522934][ C0] tcp_in_window: res=1 sender end=70469740 maxend=70533868 maxwin=65408 receiver end=4216265386 maxend=4216329514 maxwin=64768 [ 326.550256][ C0] tcp_conntracks: [ 326.550273][ C0] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 326.560227][ C0] No more buffers in queue [ 326.561856][ C1] tipc: TX(): probing for key[1] [ 326.565273][ T4171] tcp_in_window: START [ 326.569663][ C1] nf_conntrack: new packet for ffff888029f8bb00 [ 326.573671][ T4171] tcp_in_window: [ 326.579890][ T4171] seq=4216265386 ack=70469740+(0) sack=70469740+(0) win=501 end=4216265438 [ 326.579896][ C1] nf_nat: Already setup manip DST for ct ffff888029f8bb00 (status bits 0x188) [ 326.579924][ C1] nf_nat: Already setup manip SRC for ct ffff888029f8bb00 (status bits 0x188) [ 326.583541][ T4171] tcp_in_window: sender end=4216265386 maxend=4216329514 maxwin=64768 scale=7 receiver end=70469740 maxend=70533868 maxwin=65408 scale=7 [ 326.592242][ C1] nf_conntrack: new packet for ffff888029f8bb00 [ 326.600931][ T4171] tcp_in_window: [ 326.609798][ C1] nf_nat: Already setup manip DST for ct ffff888029f8bb00 (status bits 0x188) [ 326.609804][ C0] virtqueue callback for ffff888146d3f000 (ffffffff8444ab50) [ 326.609825][ C1] nf_nat: Already setup manip SRC for ct ffff888029f8bb00 (status bits 0x188) [ 326.609858][ C0] virtqueue interrupt with no work for ffff88801e7bef00 [ 326.609868][ C0] virtqueue interrupt with no work for ffff88801e7bee00 [ 326.612353][ T5712] ffff88801f5b8000 name hci3 bus 0 [ 326.623858][ T4171] seq=4216265386 ack=70469740+(0) sack=70469740+(0) win=501 end=4216265438 [ 326.661948][ T4193] usb usb3-port1: debounce total 100ms stable 100ms status 0x100 [ 326.665742][ T4171] tcp_in_window: sender end=4216265386 maxend=4216329514 maxwin=64768 scale=7 receiver end=70469740 maxend=70533868 maxwin=65408 scale=7 [ 326.674697][ T4193] hub 3-0:1.0: state 7 ports 1 chg 0000 evt 0002 [ 326.677754][ T4171] tcp_in_window: I=1 II=1 III=1 IV=1 [ 326.703508][ T5712] hci3 ffff88801f5b8000 [ 326.708069][ T4171] tcp_in_window: res=1 sender end=4216265438 maxend=4216329514 maxwin=64768 receiver end=70469740 maxend=70533868 maxwin=65408 [ 326.716126][ T4193] hub 3-0:1.0: hub_suspend [ 326.719650][ T4171] tcp_conntracks: [ 326.724101][ T5712] hci3: err 0x13 [ 326.737003][ T4171] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 326.737499][ T2856] Added buffer head 0 to ffff888146d3f000 [ 326.741908][ T4193] usb usb3: bus auto-suspend, wakeup 1 [ 326.747569][ T4230] nf_conntrack: new packet for ffff88807a6e1200 [ 326.748748][ T4193] usb usb3: dummy_bus_suspend [ 326.754138][ T4230] nf_nat: Already setup manip DST for ct ffff88807a6e1200 (status bits 0x188) [ 326.754161][ T4230] nf_nat: Already setup manip SRC for ct ffff88807a6e1200 (status bits 0x188) [ 326.754614][ T4171] No more buffers in queue [ 326.771893][ T5712] hci3: cancelling interleave scan [ 326.776279][ T4171] eth0: xmit ffff88802418afe8 42:01:0a:80:00:01 [ 326.801889][ T5712] hci3 state 0 -> 0 [ 326.803587][ T4171] Added buffer head 3 to ffff888147e6e800 [ 326.809781][ T5712] All LE pending actions cleared [ 326.809790][ T5712] hdev hci3 [ 326.809787][ C0] virtqueue callback for ffff888147e6e700 (ffffffff85491a80) [ 326.809799][ T5712] hcon ffff88807ceb8000 reason 22 [ 326.809810][ C0] virtqueue callback for ffff888147e6e800 (ffffffff85491b70) [ 326.809811][ T5712] hcon ffff88807ceb8000 conn ffff888025b4b000, err 103 [ 326.809837][ T5712] hci3 hcon ffff88807ceb8000 chan ffff88802a100100 [ 326.813706][ C0] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888078eda718 is addr:2001:: for cmd:0 at entry:ffff888017a95280 [ 326.874279][ C0] sctp: sctp_addr_wq_timeout_handler: this is on DAD, trying 500 sec later [ 326.883579][ C0] tipc: TX(): probing for key[1] [ 326.888654][ C0] nf_conntrack: new packet for ffff8880779cd980 [ 326.894923][ C0] nf_nat: Already setup manip DST for ct ffff8880779cd980 (status bits 0x188) [ 326.903836][ C0] nf_nat: Already setup manip SRC for ct ffff8880779cd980 (status bits 0x188) [ 326.912882][ C0] nf_conntrack: new packet for ffff8880779cd980 [ 326.919128][ C0] nf_nat: Already setup manip DST for ct ffff8880779cd980 (status bits 0x188) [ 326.928015][ C0] nf_nat: Already setup manip SRC for ct ffff8880779cd980 (status bits 0x188) [ 326.936968][ C0] Sent skb ffff88802418afe8 [ 326.941459][ C0] No more buffers in queue [ 326.945913][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 326.951720][ C0] No more buffers in queue [ 326.956171][ C0] nf_conntrack: normal packet for ffff8880779c8180 [ 326.962688][ C0] tcp_in_window: START [ 326.966746][ C0] tcp_in_window: [ 326.966754][ C0] seq=70469740 ack=4216265438+(0) sack=4216265438+(0) win=501 end=70469740 [ 326.978947][ C0] tcp_in_window: sender end=70469740 maxend=70533868 maxwin=65408 scale=7 receiver end=4216265438 maxend=4216329514 maxwin=64768 scale=7 [ 326.992967][ C0] tcp_in_window: [ 326.992980][ C0] seq=70469740 ack=4216265438+(0) sack=4216265438+(0) win=501 end=70469740 [ 327.005369][ C0] tcp_in_window: sender end=70469740 maxend=70533868 maxwin=65408 scale=7 receiver end=4216265438 maxend=4216329514 maxwin=64768 scale=7 [ 327.019376][ C0] tcp_in_window: I=1 II=1 III=1 IV=1 [ 327.024681][ C0] tcp_in_window: res=1 sender end=70469740 maxend=70533868 maxwin=65408 receiver end=4216265438 maxend=4216329566 maxwin=64768 [ 327.037846][ C0] tcp_conntracks: [ 327.037861][ C0] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 327.047234][ C0] No more buffers in queue [ 327.048281][ T6762] ffff88801efd8000 name hci4 bus 0 [ 327.059022][ T9108] ffff888078e00000 name hci2 bus 0 [ 327.071985][ T6762] hci4 ffff88801efd8000 [ 327.076175][ T6762] hci4: err 0x13 [ 327.079728][ T6762] hci4: cancelling interleave scan [ 327.084984][ T6762] hci4 state 0 -> 0 [ 327.088807][ T6762] All LE pending actions cleared [ 327.093825][ T6762] hdev hci4 [ 327.098589][ T9108] hci2 ffff888078e00000 [ 327.102766][ T9108] hci2: err 0x13 [ 327.106314][ T9108] hci2: cancelling interleave scan [ 327.111429][ T9108] hci2 state 0 -> 0 [ 327.115409][ T9108] All LE pending actions cleared [ 327.120422][ T9108] hdev hci2 [ 327.124848][ T6762] hcon ffff888063e7a000 reason 22 [ 327.129885][ T6762] hcon ffff888063e7a000 conn ffff88807bac3800, err 103 [ 327.136857][ T6762] hci4 hcon ffff888063e7a000 chan ffff88802638f700 [ 327.143421][ T5712] hci3 hcon ffff88807ceb8000 handle 201 [ 327.148973][ T5712] hcon ffff88807ceb8000 [ 327.153692][ T6762] hci4 hcon ffff888063e7a000 handle 201 [ 327.159254][ T6762] hcon ffff888063e7a000 [ 327.163437][ T9108] hcon ffff888078ef0000 reason 22 [ 327.168450][ T9108] hcon ffff888078ef0000 conn ffff88807bac4800, err 103 [ 327.175378][ T9108] hci2 hcon ffff888078ef0000 chan ffff88802638f100 [ 327.183506][ T6762] hci4: conn ffff888063e7a000 [ 327.188189][ T6762] device: 'hci4:201': device_unregister [ 327.195455][ T6762] kernfs runtime_status: removing [ 327.200508][ T6762] kernfs control: removing [ 327.204975][ T6762] kernfs runtime_suspended_time: removing [ 327.210699][ T6762] kernfs runtime_active_time: removing [ 327.216280][ T6762] kernfs autosuspend_delay_ms: removing [ 327.221866][ T6762] kernfs power: removing [ 327.226112][ T6762] kernfs device: removing [ 327.230447][ T6762] kernfs subsystem: removing [ 327.235251][ T6762] kernfs hci4:201: removing [ 327.239770][ T6762] kernfs uevent: removing [ 327.244212][ T6762] PM: Removing info for No Bus:hci4:201 [ 327.249763][ T6762] kobject: 'hci4:201' (ffff888063e7a420): kobject_uevent_env [ 327.257202][ T6762] kobject: 'hci4:201' (ffff888063e7a420): fill_kobj_path: path = '/devices/virtual/bluetooth/hci4/hci4:201' [ 327.268855][ T6762] kernfs hci4:201: removing [ 327.273398][ T6762] kobject: 'hci4:201' (ffff888063e7a420): kobject_cleanup, parent 0000000000000000 [ 327.282707][ T6762] kobject: 'hci4:201' (ffff888063e7a420): calling ktype release [ 327.290365][ T6762] kobject: 'hci4:201': free name [ 327.295336][ T6762] hci4 orig refcnt 10 [ 327.299394][ T6762] hcon ffff888063e76000 reason 22 [ 327.304432][ T6762] hcon ffff888063e76000 conn ffff88807bac3000, err 103 [ 327.309256][ T6301] ffff88807adf0000 name hci0 bus 0 [ 327.311282][ T6762] hci4 hcon ffff888063e76000 chan ffff88802638f600 [ 327.317117][ C0] geneve0: no route to 172.20.20.24 [ 327.322979][ T9108] hci2 hcon ffff888078ef0000 handle 201 [ 327.333686][ T9108] hcon ffff888078ef0000 [ 327.338493][ T6301] hci0 ffff88807adf0000 [ 327.342310][ T7623] nf_conntrack: clean_from_lists(ffff88807a6e0300) [ 327.342692][ T6301] hci0: err 0x13 [ 327.349230][ T7623] nf_conntrack: nf_ct_destroy(ffff88807a6e0300) [ 327.352814][ T6301] hci0: cancelling interleave scan [ 327.352837][ T6301] hci0 state 0 -> 0 [ 327.352867][ T6301] sock ffff888073fc6000 [ 327.352919][ T6301] channel 2 len 32 [ 327.353076][ T6301] channel 3 len 10 [ 327.364668][ T7623] nf_conntrack: nf_ct_destroy: returning ct=ffff88807a6e0300 to slab [ 327.368250][ T6301] All LE pending actions cleared [ 327.375889][ T7624] nf_conntrack: clean_from_lists(ffff8880779c9500) [ 327.376167][ T6301] hdev hci0 [ 327.379848][ T7624] nf_conntrack: nf_ct_destroy(ffff8880779c9500) [ 327.391930][ C0] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888078eda718 is addr:2001:: for cmd:0 at entry:ffff888017a95280 [ 327.394174][ T6762] hci4 hcon ffff888063e76000 handle 200 [ 327.399445][ C0] sctp: sctp_addr_wq_timeout_handler: this is on DAD, trying 500 sec later [ 327.402557][ T6762] hcon ffff888063e76000 [ 327.402586][ T9108] hci2: conn ffff888078ef0000 [ 327.408904][ T6301] hcon ffff888019bdc000 reason 22 [ 327.421926][ T9108] device: 'hci2:201': device_unregister [ 327.427393][ T6301] hcon ffff888019bdc000 conn ffff88807a1f8000, err 103 [ 327.436006][ T9108] kernfs runtime_status: removing [ 327.440122][ T6301] hci0 hcon ffff888019bdc000 chan ffff888146be3b00 [ 327.444818][ T9108] kernfs control: removing [ 327.450206][ T4171] tcp_in_window: START [ 327.455370][ T9108] kernfs runtime_suspended_time: removing [ 327.462175][ T4171] tcp_in_window: [ 327.462183][ T4171] seq=4216265438 ack=70469740+(0) sack=70469740+(0) win=501 end=4216265530 [ 327.462203][ T4171] tcp_in_window: sender end=4216265438 maxend=4216329566 maxwin=64768 scale=7 receiver end=70469740 maxend=70533868 maxwin=65408 scale=7 [ 327.462226][ T4171] tcp_in_window: [ 327.467241][ T9108] kernfs runtime_active_time: removing fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 327.473726][ T4171] seq=4216265438 ack=70469740+(0) sack=70469740+(0) win=501 end=4216265530 [ 327.478136][ T9108] kernfs autosuspend_delay_ms: removing [ 327.482183][ T4171] tcp_in_window: sender end=4216265438 maxend=4216329566 maxwin=64768 scale=7 receiver end=70469740 maxend=70533868 maxwin=65408 scale=7 [ 327.482207][ T4171] tcp_in_window: I=1 II=1 III=1 IV=1 [ 327.482221][ T4171] tcp_in_window: res=1 sender end=4216265530 maxend=4216329566 maxwin=64768 receiver end=70469740 maxend=70533868 maxwin=65408 [ 327.482243][ T4171] tcp_conntracks: [ 327.482250][ T4171] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 327.488314][ T9108] kernfs power: removing [ 327.501875][ T5712] hci3: conn ffff88807ceb8000 [ 327.514587][ C1] nf_conntrack: new packet for ffff888029f8b380 [ 327.521204][ T4171] No more buffers in queue [ 327.523607][ C1] nf_nat: Already setup manip DST for ct ffff888029f8b380 (status bits 0x188) [ 327.532207][ T4171] eth0: xmit ffff88802418b268 42:01:0a:80:00:01 [ 327.537743][ C1] nf_nat: Already setup manip SRC for ct ffff888029f8b380 (status bits 0x188) [ 327.551722][ T4171] Added buffer head 3 to ffff888147e6e800 [ 327.557042][ C0] virtqueue callback for ffff888147e6e700 (ffffffff85491a80) [ 327.557071][ C0] virtqueue callback for ffff888147e6e800 (ffffffff85491b70) [ 327.557141][ T9108] kernfs device: removing [ 327.570325][ C0] Sent skb ffff88802418b268 [ 327.573948][ T9108] kernfs subsystem: removing [ 327.579279][ C0] No more buffers in queue [ 327.583535][ T9108] kernfs hci2:201: removing [ 327.588197][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 327.594425][ T9108] kernfs uevent: removing [ 327.598793][ C0] No more buffers in queue [ 327.607637][ T9108] PM: Removing info for No Bus:hci2:201 [ 327.607651][ C0] virtqueue callback for ffff888146d3f000 (ffffffff8444ab50) [ 327.607665][ T9108] kobject: 'hci2:201' (ffff888078ef0420): kobject_uevent_env [ 327.607694][ C0] virtqueue interrupt with no work for ffff88801e7bef00 [ 327.607705][ C0] virtqueue interrupt with no work for ffff88801e7bee00 [ 327.607704][ T9108] kobject: 'hci2:201' (ffff888078ef0420): fill_kobj_path: path = '/devices/virtual/bluetooth/hci2/hci2:201' [ 327.607834][ T9108] kernfs hci2:201: removing [ 327.613982][ C0] nf_conntrack: normal packet for ffff8880779c8180 [ 327.622794][ T9108] kobject: 'hci2:201' (ffff888078ef0420): kobject_cleanup, parent 0000000000000000 [ 327.628492][ C0] tcp_in_window: START [ 327.635844][ T9108] kobject: 'hci2:201' (ffff888078ef0420): calling ktype release [ 327.643203][ C0] tcp_in_window: [ 327.647542][ T9108] kobject: 'hci2:201': free name [ 327.652001][ C0] seq=70469740 ack=4216265530+(0) sack=4216265530+(0) win=501 end=70469740 [ 327.656574][ T9108] hci2 orig refcnt 10 [ 327.661037][ C0] tcp_in_window: sender end=70469740 maxend=70533868 maxwin=65408 scale=7 receiver end=4216265530 maxend=4216329566 maxwin=64768 scale=7 [ 327.665636][ C1] tipc: TX(): probing for key[1] [ 327.671303][ C0] tcp_in_window: [ 327.675712][ C1] nf_conntrack: new packet for ffff888029f8bb00 [ 327.680012][ C0] seq=70469740 ack=4216265530+(0) sack=4216265530+(0) win=501 end=70469740 [ 327.685557][ C1] nf_nat: Already setup manip DST for ct ffff888029f8bb00 (status bits 0x188) [ 327.692929][ C0] tcp_in_window: sender end=70469740 maxend=70533868 maxwin=65408 scale=7 receiver end=4216265530 maxend=4216329566 maxwin=64768 scale=7 [ 327.700393][ C1] nf_nat: Already setup manip SRC for ct ffff888029f8bb00 (status bits 0x188) [ 327.707319][ C0] tcp_in_window: I=1 II=1 III=1 IV=1 [ 327.714377][ C1] nf_conntrack: new packet for ffff888029f8bb00 [ 327.725780][ C0] tcp_in_window: res=1 sender end=70469740 maxend=70533868 maxwin=65408 receiver end=4216265530 maxend=4216329658 maxwin=64768 [ 327.730277][ C1] nf_nat: Already setup manip DST for ct ffff888029f8bb00 (status bits 0x188) [ 327.736791][ C0] tcp_conntracks: [ 327.746073][ C1] nf_nat: Already setup manip SRC for ct ffff888029f8bb00 (status bits 0x188) [ 327.750107][ C0] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 327.781876][ T7624] nf_conntrack: nf_ct_destroy: returning ct=ffff8880779c9500 to slab [ 327.793563][ T4230] Added buffer head 0 to ffff888146d3f000 [ 327.799319][ C1] virtqueue callback for ffff888147e6e900 (ffffffff85491a80) [ 327.801935][ C0] No more buffers in queue [ 327.823306][ T7623] nf_conntrack: new packet for ffff888029f8b800 [ 327.826548][ T144] bond2: (slave geneve2): Send learning packet: mac 06:4b:71:45:30:bb vlan 0 [ 327.839614][ T7623] nf_nat: Already setup manip DST for ct ffff888029f8b800 (status bits 0x188) [ 327.850513][ T4230] nvmet: ctrl 1 update keep-alive timer for 5 secs [ 327.853755][ T7623] nf_nat: Already setup manip SRC for ct ffff888029f8b800 (status bits 0x188) [ 327.859976][ T5712] device: 'hci3:201': device_unregister [ 327.873928][ T4193] nf_conntrack: clean_from_lists(ffff888029f8a300) [ 327.881975][ T144] geneve2: no route to 127.0.0.1 [ 327.901856][ T4193] nf_conntrack: nf_ct_destroy(ffff888029f8a300) [ 327.910903][ T5712] kernfs runtime_status: removing [ 327.913845][ C0] tipc: TX(): probing for key[1] [ 327.913931][ C0] nf_conntrack: new packet for ffff8880779cd980 [ 327.913950][ C0] nf_nat: Already setup manip DST for ct ffff8880779cd980 (status bits 0x188) [ 327.913981][ C0] nf_nat: Already setup manip SRC for ct ffff8880779cd980 (status bits 0x188) [ 327.914068][ C0] nf_conntrack: new packet for ffff8880779cd980 [ 327.914081][ C0] nf_nat: Already setup manip DST for ct ffff8880779cd980 (status bits 0x188) [ 327.914101][ C0] nf_nat: Already setup manip SRC for ct ffff8880779cd980 (status bits 0x188) [ 327.914131][ C0] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888078eda718 is addr:2001:: for cmd:0 at entry:ffff888017a95280 [ 327.914165][ C0] sctp: sctp_addr_wq_timeout_handler: this is on DAD, trying 500 sec later [ 327.921860][ T4193] nf_conntrack: nf_ct_destroy: returning ct=ffff888029f8a300 to slab [ 327.926423][ T5712] kernfs control: removing [ 327.945018][ T4193] nf_conntrack: clean_from_lists(ffff8880779ccf00) [ 327.950367][ T4171] tcp_in_window: START [ 327.956455][ T6762] hci4: conn ffff888063e76000 [ 327.965321][ T4171] tcp_in_window: [ 327.965330][ T4171] seq=4216265530 ack=70469740+(0) sack=70469740+(0) win=501 end=4216265602 [ 327.970854][ T6762] device: 'hci4:200': device_unregister [ 327.977344][ T4171] tcp_in_window: sender end=4216265530 maxend=4216329658 maxwin=64768 scale=7 receiver end=70469740 maxend=70533868 maxwin=65408 scale=7 [ 328.001864][ T4193] nf_conntrack: nf_ct_destroy(ffff8880779ccf00) [ 328.004831][ T4171] tcp_in_window: [ 328.021853][ T4193] nf_conntrack: nf_ct_destroy: returning ct=ffff8880779ccf00 to slab [ 328.022492][ T4171] seq=4216265530 ack=70469740+(0) sack=70469740+(0) win=501 end=4216265602 [ 328.031200][ T7623] nf_conntrack: clean_from_lists(ffff888029f8b080) [ 328.037558][ T4171] tcp_in_window: sender end=4216265530 maxend=4216329658 maxwin=64768 scale=7 receiver end=70469740 maxend=70533868 maxwin=65408 scale=7 [ 328.046683][ C1] No more buffers in queue [ 328.059460][ T4171] tcp_in_window: I=1 II=1 III=1 IV=1 [ 328.068066][ C1] Receiving skb proto 0x0806 len 28 type 1 [ 328.076105][ T4171] tcp_in_window: res=1 sender end=4216265602 maxend=4216329658 maxwin=64768 receiver end=70469740 maxend=70533868 maxwin=65408 [ 328.080505][ C1] No more buffers in queue [ 328.086996][ T4171] tcp_conntracks: [ 328.091234][ C1] No more buffers in queue [ 328.095794][ T4171] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 328.099413][ C1] eth0: xmit ffff88801fb1e000 42:01:0a:80:00:01 [ 328.108230][ T6301] hci0 hcon ffff888019bdc000 handle 201 [ 328.113540][ C1] Added buffer head 19 to ffff888147e6ea00 [ 328.127681][ C1] virtqueue callback for ffff888147e6ea00 (ffffffff85491b70) [ 328.127698][ T6301] hcon ffff888019bdc000 [ 328.131047][ T4171] No more buffers in queue [ 328.134172][ T6762] kernfs runtime_status: removing [ 328.137678][ T4171] eth0: xmit ffff88802418b4e8 42:01:0a:80:00:01 [ 328.145767][ T6762] kernfs control: removing [ 328.154317][ T4171] Added buffer head 3 to ffff888147e6e800 [ 328.160816][ C0] virtqueue callback for ffff888147e6e700 (ffffffff85491a80) [ 328.160835][ T6762] kernfs runtime_suspended_time: removing [ 328.160836][ C0] virtqueue callback for ffff888147e6e800 (ffffffff85491b70) [ 328.160859][ T6762] kernfs runtime_active_time: removing [ 328.175007][ C0] Sent skb ffff88802418b4e8 [ 328.179317][ T6762] kernfs autosuspend_delay_ms: removing [ 328.184576][ C0] No more buffers in queue [ 328.190393][ T6762] kernfs power: removing [ 328.203473][ C0] virtqueue callback for ffff888147e6e700 (ffffffff85491a80) [ 328.207903][ T6762] kernfs device: removing [ 328.211601][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 328.216075][ T6762] kernfs subsystem: removing [ 328.221432][ C0] Receiving skb proto 0x0800 len 88 type 0 [ 328.227692][ T6762] kernfs hci4:200: removing [ 328.233234][ C0] Receiving skb proto 0x0800 len 112 type 0 [ 328.239031][ T6762] kernfs uevent: removing [ 328.246531][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 328.250500][ T6762] PM: Removing info for No Bus:hci4:200 [ 328.254941][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 328.259919][ T6762] kobject: 'hci4:200' (ffff888063e76420): kobject_uevent_env [ 328.266146][ C0] No more buffers in queue [ 328.270569][ T6762] kobject: 'hci4:200' (ffff888063e76420): fill_kobj_path: path = '/devices/virtual/bluetooth/hci4/hci4:200' [ 328.276269][ C0] nf_conntrack: normal packet for ffff8880779c8180 [ 328.283752][ T6762] kernfs hci4:200: removing [ 328.289390][ C0] tcp_in_window: START [ 328.296860][ T6762] kobject: 'hci4:200' (ffff888063e76420): kobject_cleanup, parent 0000000000000000 [ 328.302299][ C0] tcp_in_window: [ 328.306870][ T6762] kobject: 'hci4:200' (ffff888063e76420): calling ktype release [ 328.312555][ C0] seq=70469740 ack=4216265602+(0) sack=4216265602+(0) win=501 end=70469740 [ 328.317012][ T6762] kobject: 'hci4:200': free name [ 328.321198][ C0] tcp_in_window: sender end=70469740 maxend=70533868 maxwin=65408 scale=7 receiver end=4216265602 maxend=4216329658 maxwin=64768 scale=7 [ 328.328619][ T6762] hci4 orig refcnt 7 [ 328.332969][ C0] tcp_in_window: [ 328.339033][ T6762] hdev hci4 event 4 [ 328.343649][ C0] seq=70469740 ack=4216265602+(0) sack=4216265602+(0) win=501 end=70469740 [ 328.349473][ T6762] hdev 0000000000000000 len 8 [ 328.353932][ C0] tcp_in_window: sender end=70469740 maxend=70533868 maxwin=65408 scale=7 receiver end=4216265602 maxend=4216329658 maxwin=64768 scale=7 [ 328.359940][ T6762] hdev hci4 event 8 [ 328.364130][ C0] tcp_in_window: I=1 II=1 III=1 IV=1 [ 328.369998][ T6762] hci4 orig refcnt 6 [ 328.375530][ C0] tcp_in_window: res=1 sender end=70469740 maxend=70533868 maxwin=65408 receiver end=4216265602 maxend=4216329730 maxwin=64768 [ 328.381420][ T6762] channel 3 len 6 [ 328.388748][ C0] tcp_conntracks: [ 328.393196][ T6762] channel 3 len 8 [ 328.404597][ C0] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 328.411097][ T6762] hdev hci4 event 2 [ 328.415585][ C0] nf_conntrack: normal packet for ffff8880779c8180 [ 328.419620][ C0] virtqueue callback for ffff888147e6e700 (ffffffff85491a80) [ 328.419630][ T6762] hdev 0000000000000000 len 8 [ 328.419692][ T6762] kernfs runtime_status: removing [ 328.428915][ C0] tcp_in_window: START [ 328.432566][ T6762] kernfs control: removing [ 328.440145][ C0] tcp_in_window: [ 328.448793][ T6762] kernfs runtime_suspended_time: removing [ 328.453693][ C0] seq=70469740 ack=4216265602+(0) sack=4216265602+(0) win=501 end=70469776 [ 328.467772][ T6762] kernfs runtime_active_time: removing [ 328.471610][ C0] tcp_in_window: sender end=70469740 maxend=70533868 maxwin=65408 scale=7 receiver end=4216265602 maxend=4216329730 maxwin=64768 scale=7 [ 328.475254][ T6762] kernfs autosuspend_delay_ms: removing [ 328.479024][ C0] tcp_in_window: [ 328.487732][ T6762] kernfs power: removing [ 328.492357][ C0] seq=70469740 ack=4216265602+(0) sack=4216265602+(0) win=501 end=70469776 [ 328.506335][ T6762] kernfs device: removing [ 328.510276][ C0] tcp_in_window: sender end=70469740 maxend=70533868 maxwin=65408 scale=7 receiver end=4216265602 maxend=4216329730 maxwin=64768 scale=7 [ 328.515842][ T6762] kernfs subsystem: removing [ 328.519687][ C0] tcp_in_window: I=1 II=1 III=1 IV=1 [ 328.532818][ T6762] kernfs rfkill9: removing [ 328.536407][ C0] tcp_in_window: res=1 sender end=70469776 maxend=70533868 maxwin=65408 receiver end=4216265602 maxend=4216329730 maxwin=64768 [ 328.540131][ T6762] kernfs uevent: removing [ 328.543735][ C0] tcp_conntracks: [ 328.549111][ T6762] kernfs name: removing [ 328.552921][ C0] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 328.559537][ T6762] kernfs type: removing [ 328.566877][ C0] nf_conntrack: normal packet for ffff8880779c8180 [ 328.571704][ T6762] kernfs index: removing [ 328.576738][ C0] tcp_in_window: START [ 328.580932][ T6762] kernfs persistent: removing [ 328.585299][ C0] tcp_in_window: [ 328.588927][ T6762] kernfs state: removing [ 328.594717][ C0] seq=70469776 ack=4216265602+(0) sack=4216265602+(0) win=501 end=70469836 [ 328.603307][ T6762] kernfs soft: removing [ 328.603303][ C0] virtqueue callback for ffff888146d3f000 (ffffffff8444ab50) [ 328.603327][ T6762] kernfs hard: removing [ 328.603345][ T6762] kernfs hard_block_reasons: removing [ 328.603364][ T6762] PM: Removing info for No Bus:rfkill9 [ 328.603372][ C0] virtqueue interrupt with no work for ffff88801e7bef00 [ 328.603381][ C0] virtqueue interrupt with no work for ffff88801e7bee00 [ 328.603385][ T6762] kobject: 'rfkill9' (ffff8881472a7108): kobject_uevent_env [ 328.603418][ T6762] kobject: 'rfkill9' (ffff8881472a7108): fill_kobj_path: path = '/devices/virtual/bluetooth/hci4/rfkill9' [ 328.608837][ C0] tcp_in_window: sender end=70469776 maxend=70533868 maxwin=65408 scale=7 receiver end=4216265602 maxend=4216329730 maxwin=64768 scale=7 [ 328.622994][ T6762] kernfs rfkill9: removing [ 328.628407][ C0] tcp_in_window: [ 328.632056][ T6762] kobject: 'rfkill9' (ffff8881472a7108): kobject_cleanup, parent 0000000000000000 [ 328.636257][ C0] seq=70469776 ack=4216265602+(0) sack=4216265602+(0) win=501 end=70469836 [ 328.644930][ T6762] kobject: 'rfkill9' (ffff8881472a7108): calling ktype release [ 328.649234][ C0] tcp_in_window: sender end=70469776 maxend=70533868 maxwin=65408 scale=7 receiver end=4216265602 maxend=4216329730 maxwin=64768 scale=7 [ 328.663252][ T6762] kobject: 'rfkill9': free name [ 328.667803][ C0] tcp_in_window: I=1 II=1 III=1 IV=1 [ 328.673148][ T6762] kernfs runtime_status: removing [ 328.677495][ C0] tcp_in_window: res=1 sender end=70469836 maxend=70533868 maxwin=65408 receiver end=4216265602 maxend=4216329730 maxwin=64768 [ 328.690890][ T6762] kernfs control: removing [ 328.695179][ C0] tcp_conntracks: [ 328.698977][ T6762] kernfs runtime_suspended_time: removing [ 328.703108][ C0] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 328.708468][ T6762] kernfs runtime_active_time: removing [ 328.712611][ C0] nf_conntrack: normal packet for ffff8880779c8180 [ 328.719085][ T6762] kernfs autosuspend_delay_ms: removing [ 328.723325][ C0] tcp_in_window: START [ 328.727412][ T6762] kernfs power: removing [ 328.732129][ C0] tcp_in_window: [ 328.735753][ T6762] kernfs subsystem: removing [ 328.740044][ C0] seq=70469836 ack=4216265602+(0) sack=4216265602+(0) win=501 end=70469837 [ 328.748652][ T6762] kernfs hci4: removing [ 328.752770][ C0] tcp_in_window: sender end=70469836 maxend=70533868 maxwin=65408 scale=7 receiver end=4216265602 maxend=4216329730 maxwin=64768 scale=7 [ 328.760142][ T6762] kernfs uevent: removing [ 328.764518][ C0] tcp_in_window: [ 328.764529][ C0] seq=70469836 ack=4216265602+(0) sack=4216265602+(0) win=501 end=70469837 [ 328.769884][ T6762] PM: Removing info for No Bus:hci4 [ 328.775597][ C0] tcp_in_window: sender end=70469836 maxend=70533868 maxwin=65408 scale=7 receiver end=4216265602 maxend=4216329730 maxwin=64768 scale=7 [ 328.782679][ T6762] kobject: 'hci4' (ffff88801efd9740): kobject_uevent_env [ 328.789526][ C0] tcp_in_window: I=1 II=1 III=1 IV=1 [ 328.796819][ T6762] kobject: 'hci4' (ffff88801efd9740): fill_kobj_path: path = '/devices/virtual/bluetooth/hci4' [ 328.808178][ C0] tcp_in_window: res=1 sender end=70469837 maxend=70533868 maxwin=65408 receiver end=4216265602 maxend=4216329730 maxwin=64768 [ 328.822341][ T6762] kernfs hci4: removing [ 328.826630][ C0] tcp_conntracks: [ 328.830254][ T6762] hci4 orig refcnt 2 [ 328.839423][ C0] syn=0 ack=1 fin=1 rst=0 old=3 new=4 [ 328.848000][ T6762] kobject: 'hci4' (ffff88801efd9740): kobject_cleanup, parent 0000000000000000 [ 328.855659][ C0] nf_conntrack: normal packet for ffff8880779c8180 [ 328.869769][ T6762] kobject: 'hci4' (ffff88801efd9740): calling ktype release [ 328.874617][ C0] virtqueue callback for ffff888147e6e700 (ffffffff85491a80) [ 328.880021][ T6762] All LE connection parameters were removed [ 328.885425][ C0] tcp_in_window: START [ 328.898544][ T6762] kobject: 'hci4': free name [ 328.902917][ C0] tcp_in_window: [ 328.906701][ T9108] hcon ffff88801a3a0000 reason 22 [ 328.912345][ C0] seq=70469836 ack=4216265602+(0) sack=4216265602+(0) win=501 end=70469837 [ 328.917705][ T9108] hcon ffff88801a3a0000 conn ffff88807bac4000, err 103 [ 328.923167][ C0] tcp_in_window: sender end=70469837 maxend=70533868 maxwin=65408 scale=7 receiver end=4216265602 maxend=4216329730 maxwin=64768 scale=7 [ 328.929662][ T9108] hci2 hcon ffff88801a3a0000 chan ffff88802638f000 [ 328.935214][ C0] tcp_in_window: [ 328.961850][ T7623] nf_conntrack: nf_ct_destroy(ffff888029f8b080) [ 328.964540][ C0] seq=70469836 ack=4216265602+(0) sack=4216265602+(0) win=501 end=70469837 [ 328.991853][ T7623] nf_conntrack: nf_ct_destroy: returning ct=ffff888029f8b080 to slab [ 328.995016][ C0] tcp_in_window: sender end=70469837 maxend=70533868 maxwin=65408 scale=7 receiver end=4216265602 maxend=4216329730 maxwin=64768 scale=7 [ 329.101761][ T7625] nf_conntrack: clean_from_lists(ffff88801b7d2780) [ 329.103394][ C0] tcp_in_window: I=1 II=1 III=1 IV=1 [ 329.121867][ T7625] nf_conntrack: nf_ct_destroy(ffff88801b7d2780) [ 329.129364][ C0] tcp_in_window: res=1 sender end=70469837 maxend=70533868 maxwin=65408 receiver end=4216265602 maxend=4216329730 maxwin=64768 [ 329.136309][ C1] wireguard: wg2: Handshake for peer 30 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 6) [ 329.150146][ C0] tcp_conntracks: [ 329.156732][ C1] nf_conntrack: new packet for ffff888029f8b380 [ 329.160263][ C0] syn=0 ack=1 fin=1 rst=0 old=4 new=6 [ 329.166496][ C1] nf_nat: Already setup manip DST for ct ffff888029f8b380 (status bits 0x188) [ 329.175647][ T5712] kernfs runtime_suspended_time: removing [ 329.183138][ C1] nf_nat: Already setup manip SRC for ct ffff888029f8b380 (status bits 0x188) [ 329.198193][ T144] net_ratelimit: 13 callbacks suppressed [ 329.198220][ T144] wireguard: wg2: Sending handshake initiation to peer 30 (127.0.0.1:20002) [ 329.203808][ C1] wireguard: wg1: Handshake for peer 10 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 2) [ 329.208910][ T4230] Added buffer head 0 to ffff888146d3f000 [ 329.215179][ C1] tipc: TX(): probing for key[1] [ 329.228777][ C0] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888078eda718 is addr:2001:: for cmd:0 at entry:ffff888017a95280 [ 329.239865][ C1] nf_conntrack: new packet for ffff888029f8bb00 [ 329.243586][ C0] sctp: sctp_addr_wq_timeout_handler: this is on DAD, trying 500 sec later [ 329.249926][ C1] nf_nat: Already setup manip DST for ct ffff888029f8bb00 (status bits 0x188) [ 329.256054][ C0] tipc: TX(): probing for key[1] [ 329.264567][ C1] nf_nat: Already setup manip SRC for ct ffff888029f8bb00 (status bits 0x188) [ 329.270403][ C0] nf_conntrack: new packet for ffff8880779cd980 [ 329.279283][ C1] nf_conntrack: new packet for ffff888029f8bb00 [ 329.284816][ C0] nf_nat: Already setup manip DST for ct ffff8880779cd980 (status bits 0x188) [ 329.293477][ C1] nf_nat: Already setup manip DST for ct ffff888029f8bb00 (status bits 0x188) [ 329.305024][ C0] nf_nat: Already setup manip SRC for ct ffff8880779cd980 (status bits 0x188) [ 329.310800][ C1] nf_nat: Already setup manip SRC for ct ffff888029f8bb00 (status bits 0x188) [ 329.315971][ C0] nf_conntrack: new packet for ffff8880779cd980 [ 329.329056][ C1] wireguard: wg0: Sending keepalive packet to peer 1 ([::1]:20002/0%0) [ 329.335138][ C0] nf_nat: Already setup manip DST for ct ffff8880779cd980 (status bits 0x188) [ 329.343905][ C1] wireguard: wg1: Handshake for peer 27 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 6) [ 329.352570][ C0] nf_nat: Already setup manip SRC for ct ffff8880779cd980 (status bits 0x188) [ 329.357482][ C1] wireguard: wg2: Handshake for peer 29 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 3) [ 329.366351][ C0] wireguard: wg1: Handshake for peer 28 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 3) [ 329.372638][ C1] wireguard: wg2: Handshake for peer 6 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 2) [ 329.378957][ C0] No more buffers in queue [ 329.387686][ C1] wireguard: wg0: Handshake for peer 25 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2) [ 329.406536][ T144] wireguard: wg1: Sending handshake initiation to peer 10 (127.0.0.1:20003) [ 329.414402][ C1] wireguard: wg1: Handshake for peer 9 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 6) [ 329.421027][ T5712] kernfs runtime_active_time: removing [ 329.428908][ C1] wireguard: wg0: Handshake for peer 26 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2) [ 329.438575][ T144] wireguard: wg1: No route to 127.0.0.1:20003, error -101 [ 329.449339][ C1] wireguard: wg2: Sending keepalive packet to peer 5 ([::1]:20001/0%0) [ 329.458642][ T5712] kernfs autosuspend_delay_ms: removing [ 329.469971][ C1] Sent skb ffff88801fb1e000 [ 329.481723][ T144] wireguard: wg1: Sending handshake initiation to peer 27 ([::1]:20001/0%0) [ 329.492885][ C1] No more buffers in queue [ 329.497431][ T4171] tcp_in_window: START [ 329.508926][ T9160] wireguard: wg2: Sending handshake initiation to peer 29 ([::1]:20001/0%0) [ 329.517469][ T4171] tcp_in_window: [ 329.529303][ T9140] wireguard: wg1: Sending handshake initiation to peer 28 (127.0.0.1:20003) [ 329.534358][ T4171] seq=4216265602 ack=70469776+(0) sack=70469776+(0) win=501 end=4216265602 [ 329.546971][ T9145] sd 0:0:1:0: cmd ffff888023f00528 CDB: 0x2a [ 329.552999][ T4171] tcp_in_window: sender end=4216265602 maxend=4216329730 maxwin=64768 scale=7 receiver end=70469837 maxend=70533868 maxwin=65408 scale=7 [ 329.561268][ T9145] Added buffer head 142 to ffff88801f828f00 [ 329.566818][ T4171] tcp_in_window: [ 329.582141][ T9140] nf_conntrack: normal packet for ffff8880779cdc80 [ 329.584490][ T4171] seq=4216265602 ack=70469776+(0) sack=70469776+(0) win=501 end=4216265602 [ 329.588615][ T9140] wireguard: wg2: Sending handshake initiation to peer 6 (127.0.0.1:20002) [ 329.597190][ T4171] tcp_in_window: sender end=4216265602 maxend=4216329730 maxwin=64768 scale=7 receiver end=70469837 maxend=70533868 maxwin=65408 scale=7 [ 329.600833][ T7625] nf_conntrack: nf_ct_destroy: returning ct=ffff88801b7d2780 to slab [ 329.609490][ C0] virtqueue callback for ffff888146d3f000 (ffffffff8444ab50) [ 329.618049][ C1] virtqueue callback for ffff88801f828f00 (ffffffff85068310) [ 329.624034][ C0] virtqueue interrupt with no work for ffff88801e7bef00 [ 329.637940][ C1] sd 0:0:1:0: cmd ffff888023f00528 response 0 status 0x0 sense_len 0 [ 329.643810][ C0] virtqueue interrupt with no work for ffff88801e7bee00 [ 329.647430][ C1] No more buffers in queue [ 329.653956][ T4171] tcp_in_window: I=1 II=1 III=1 IV=1 [ 329.662989][ T9160] wireguard: wg0: Sending handshake initiation to peer 25 ([::1]:20002/0%0) [ 329.671034][ T4171] tcp_in_window: res=1 sender end=4216265602 maxend=4216329730 maxwin=64768 receiver end=70469837 maxend=70533904 maxwin=65408 [ 329.692525][ T9145] nf_conntrack: normal packet for ffff8880779cd080 [ 329.693305][ T4171] tcp_conntracks: [ 329.702818][ T8941] ffff88801e8b0000 name hci1 bus 0 [ 329.708003][ T4171] syn=0 ack=1 fin=0 rst=0 old=6 new=7 [ 329.718285][ T7626] nf_conntrack: new packet for ffff888029f8a480 [ 329.724755][ T4230] Added buffer head 0 to ffff888146d3f000 [ 329.729913][ T7626] nf_nat: Already setup manip DST for ct ffff888029f8a480 (status bits 0x188) [ 329.735667][ T5712] kernfs power: removing [ 329.739612][ T7626] nf_nat: Already setup manip SRC for ct ffff888029f8a480 (status bits 0x188) [ 329.749011][ T5712] kernfs device: removing [ 329.761600][ T4193] nvmet: ctrl 1 update keep-alive timer for 5 secs [ 329.768303][ T5712] kernfs subsystem: removing [ 329.771763][ C0] virtqueue callback for ffff888147e6e700 (ffffffff85491a80) [ 329.771798][ T7625] nf_conntrack: new packet for ffff888029f8b800 [ 329.777176][ T5712] kernfs hci3:201: removing [ 329.782251][ T7625] nf_nat: Already setup manip DST for ct ffff888029f8b800 (status bits 0x188) [ 329.788661][ T5712] kernfs uevent: removing [ 329.794720][ T7625] nf_nat: Already setup manip SRC for ct ffff888029f8b800 (status bits 0x188) [ 329.803903][ T5712] PM: Removing info for No Bus:hci3:201 [ 329.808279][ T4193] nf_conntrack: clean_from_lists(ffff8880779cc900) [ 329.816835][ T5712] kobject: 'hci3:201' (ffff88807ceb8420): kobject_uevent_env [ 329.821269][ T9160] nf_conntrack: normal packet for ffff88801b7d2c00 [ 329.827740][ T5712] kobject: 'hci3:201' (ffff88807ceb8420): fill_kobj_path: path = '/devices/virtual/bluetooth/hci3/hci3:201' [ 329.832141][ T4193] nf_conntrack: nf_ct_destroy(ffff8880779cc900) [ 329.840128][ T5712] kernfs hci3:201: removing [ 329.846289][ T4193] nf_conntrack: nf_ct_destroy: returning ct=ffff8880779cc900 to slab [ 329.850976][ T5712] kobject: 'hci3:201' (ffff88807ceb8420): kobject_cleanup, parent 0000000000000000 [ 329.859506][ T9160] nf_conntrack: new packet for ffff888029f8a480 [ 329.863770][ T5712] kobject: 'hci3:201' (ffff88807ceb8420): calling ktype release [ 329.872397][ T9160] nf_nat: Already setup manip DST for ct ffff888029f8a480 (status bits 0x188) [ 329.878332][ C0] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888078eda718 is addr:2001:: for cmd:0 at entry:ffff888017a95280 [ 329.884457][ T9160] nf_nat: Already setup manip SRC for ct ffff888029f8a480 (status bits 0x188) [ 329.891801][ C0] sctp: sctp_addr_wq_timeout_handler: this is on DAD, trying 500 sec later [ 329.906782][ T7626] nf_conntrack: clean_from_lists(ffff888029f8a780) [ 329.909775][ C0] No more buffers in queue [ 329.916113][ T7626] nf_conntrack: nf_ct_destroy(ffff888029f8a780) [ 329.920714][ C0] Receiving skb proto 0x0800 len 148 type 0 [ 329.928753][ T7626] nf_conntrack: nf_ct_destroy: returning ct=ffff888029f8a780 to slab [ 329.938214][ C0] Receiving skb proto 0x0800 len 148 type 0 [ 329.947434][ T8941] hci1 ffff88801e8b0000 [ 329.952106][ C0] Receiving skb proto 0x0800 len 148 type 0 [ 329.963053][ T7626] nf_conntrack: clean_from_lists(ffff88807a197980) [ 329.973929][ C0] No more buffers in queue [ 329.982855][ T8941] hci1: err 0x13 [ 329.991404][ C0] Added buffer head 1121 to ffff888147e6e700 [ 329.997937][ T7626] nf_conntrack: nf_ct_destroy(ffff88807a197980) [ 330.002372][ C0] Added buffer head 1122 to ffff888147e6e700 [ 330.008614][ T8941] hci1: cancelling interleave scan [ 330.014472][ C0] Added buffer head 1123 to ffff888147e6e700 [ 330.022547][ T7626] nf_conntrack: nf_ct_destroy: returning ct=ffff88807a197980 to slab [ 330.028395][ C0] Added buffer head 1124 to ffff888147e6e700 [ 330.032588][ T8941] hci1 state 0 -> 0 [ 330.038423][ C0] Added buffer head 1125 to ffff888147e6e700 [ 330.046875][ T7626] nf_conntrack: clean_from_lists(ffff8880779c9c80) [ 330.049321][ C0] Added buffer head 1126 to ffff888147e6e700 [ 330.052877][ T8941] All LE pending actions cleared [ 330.058950][ C0] Added buffer head 1127 to ffff888147e6e700 [ 330.065202][ T7626] nf_conntrack: nf_ct_destroy(ffff8880779c9c80) [ 330.071155][ C0] Added buffer head 1128 to ffff888147e6e700 [ 330.076301][ T8941] hdev hci1 [ 330.082261][ C0] Added buffer head 1129 to ffff888147e6e700 [ 330.090430][ T7626] nf_conntrack: nf_ct_destroy: returning ct=ffff8880779c9c80 to slab [ 330.096372][ C0] Added buffer head 1130 to ffff888147e6e700 [ 330.101604][ T7626] nf_conntrack: clean_from_lists(ffff888029f8b500) [ 330.106155][ C0] Added buffer head 1131 to ffff888147e6e700 [ 330.112643][ T7626] nf_conntrack: nf_ct_destroy(ffff888029f8b500) [ 330.118567][ C0] Added buffer head 1132 to ffff888147e6e700 [ 330.123505][ T7626] nf_conntrack: nf_ct_destroy: returning ct=ffff888029f8b500 to slab [ 330.129452][ C0] Added buffer head 1236 to ffff888147e6e700 [ 330.146743][ T7626] nf_conntrack: clean_from_lists(ffff88807a6e0480) [ 330.150727][ C0] Added buffer head 1237 to ffff888147e6e700 [ 330.158794][ T7626] nf_conntrack: nf_ct_destroy(ffff88807a6e0480) [ 330.164761][ C0] Added buffer head 1238 to ffff888147e6e700 [ 330.171258][ T7626] nf_conntrack: nf_ct_destroy: returning ct=ffff88807a6e0480 to slab [ 330.177227][ C0] Added buffer head 1010 to ffff888147e6e700 [ 330.188979][ T7626] nf_conntrack: clean_from_lists(ffff88807a197080) [ 330.189415][ C0] Added buffer head 1011 to ffff888147e6e700 [ 330.197477][ T7626] nf_conntrack: nf_ct_destroy(ffff88807a197080) [ 330.203438][ C0] Added buffer head 1072 to ffff888147e6e700 [ 330.209917][ T7626] nf_conntrack: nf_ct_destroy: returning ct=ffff88807a197080 to slab [ 330.215892][ C0] Added buffer head 1073 to ffff888147e6e700 [ 330.223088][ T7626] nf_conntrack: clean_from_lists(ffff88807a6e0f00) [ 330.228079][ C0] Added buffer head 1074 to ffff888147e6e700 [ 330.236150][ T7626] nf_conntrack: nf_ct_destroy(ffff88807a6e0f00) [ 330.242119][ C0] Added buffer head 1075 to ffff888147e6e700 [ 330.248603][ T7626] nf_conntrack: nf_ct_destroy: returning ct=ffff88807a6e0f00 to slab [ 330.254570][ C0] Added buffer head 1076 to ffff888147e6e700 [ 330.266648][ T7626] nf_conntrack: clean_from_lists(ffff888029f8a000) [ 330.266883][ C0] Added buffer head 1077 to ffff888147e6e700 [ 330.274926][ T7626] nf_conntrack: nf_ct_destroy(ffff888029f8a000) [ 330.280902][ C0] Added buffer head 1078 to ffff888147e6e700 [ 330.287596][ C1] geneve0: no tunnel metadata [ 330.293602][ C0] Added buffer head 1079 to ffff888147e6e700 [ 330.299998][ C1] tipc: TX(): probing for key[1] [ 330.305819][ C0] Added buffer head 1080 to ffff888147e6e700 [ 330.313967][ C1] nf_conntrack: new packet for ffff888029f8bb00 [ 330.319832][ C0] Added buffer head 1081 to ffff888147e6e700 [ 330.326332][ C1] nf_nat: Already setup manip DST for ct ffff888029f8bb00 (status bits 0x188) [ 330.332302][ C0] Added buffer head 1082 to ffff888147e6e700 [ 330.338521][ C1] nf_nat: Already setup manip SRC for ct ffff888029f8bb00 (status bits 0x188) [ 330.344496][ C0] Added buffer head 1083 to ffff888147e6e700 [ 330.349277][ C1] nf_conntrack: new packet for ffff888029f8bb00 [ 330.355120][ C0] Added buffer head 1084 to ffff888147e6e700 [ 330.360040][ C1] nf_nat: Already setup manip DST for ct ffff888029f8bb00 (status bits 0x188) [ 330.366010][ C0] Added buffer head 1085 to ffff888147e6e700 [ 330.372260][ C1] nf_nat: Already setup manip SRC for ct ffff888029f8bb00 (status bits 0x188) [ 330.378235][ C0] Added buffer head 1086 to ffff888147e6e700 [ 330.387198][ C1] nf_conntrack: new packet for ffff888029f8b380 [ 330.393020][ C0] Added buffer head 1087 to ffff888147e6e700 [ 330.401858][ C1] nf_nat: Already setup manip DST for ct ffff888029f8b380 (status bits 0x188) [ 330.407838][ C0] nf_conntrack: normal packet for ffff8880779c8180 [ 330.414060][ C1] nf_nat: Already setup manip SRC for ct ffff888029f8b380 (status bits 0x188) [ 330.420016][ C0] tcp_in_window: START [ 330.420025][ C0] tcp_in_window: [ 330.420031][ C0] seq=70469740 ack=4216265602+(0) sack=4216265602+(0) win=501 end=70469837 [ 330.429174][ C1] nf_nat: Already setup manip DST for ct ffff888029f8bb00 (status bits 0x188) [ 330.434845][ C0] tcp_in_window: sender end=70469837 maxend=70533904 maxwin=65408 scale=7 receiver end=4216265602 maxend=4216329730 maxwin=64768 scale=7 [ 330.443693][ C1] nf_nat: Already setup manip SRC for ct ffff888029f8bb00 (status bits 0x188) [ 330.449820][ C0] tcp_in_window: [ 330.458309][ T5712] kobject: 'hci3:201': free name [ 330.462040][ C0] seq=70469740 ack=4216265602+(0) sack=4216265602+(0) win=501 end=70469837 [ 330.471314][ T7626] nf_conntrack: nf_ct_destroy: returning ct=ffff888029f8a000 to slab [ 330.477367][ C0] tcp_in_window: sender end=70469837 maxend=70533904 maxwin=65408 scale=7 receiver end=4216265602 maxend=4216329730 maxwin=64768 scale=7 [ 330.486260][ T5712] hci3 orig refcnt 10 [ 330.490278][ C0] tcp_in_window: I=1 II=1 III=1 IV=1 [ 330.501271][ T7626] nf_conntrack: clean_from_lists(ffff88807a6e0900) [ 330.502501][ C0] tcp_in_window: res=1 sender end=70469837 maxend=70533904 maxwin=65408 receiver end=4216265602 maxend=4216329730 maxwin=64768 [ 330.511346][ T7626] nf_conntrack: nf_ct_destroy(ffff88807a6e0900) [ 330.525302][ C0] tcp_conntracks: [ 330.534241][ T7626] nf_conntrack: nf_ct_destroy: returning ct=ffff88807a6e0900 to slab [ 330.537845][ C0] syn=0 ack=1 fin=1 rst=0 old=7 new=7 [ 330.547250][ T7626] nf_conntrack: clean_from_lists(ffff88807a6e0c00) [ 330.551347][ C0] nf_conntrack: normal packet for ffff8880779c8180 [ 330.559482][ T4171] No more buffers in queue [ 330.573440][ C0] tcp_in_window: START [ 330.577483][ T4171] eth0: xmit ffff888025c3b280 42:01:0a:80:00:01 [ 330.582755][ C0] tcp_in_window: [ 330.589233][ T4171] Added buffer head 19 to ffff888147e6ea00 [ 330.602316][ C1] virtqueue callback for ffff888147e6ea00 (ffffffff85491b70) [ 330.602327][ C0] virtqueue callback for ffff888146d3f000 (ffffffff8444ab50) [ 330.602373][ C0] virtqueue interrupt with no work for ffff88801e7bef00 [ 330.608574][ T7626] nf_conntrack: nf_ct_destroy(ffff88807a6e0c00)