last executing test programs: 5m13.246781208s ago: executing program 0 (id=21): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x2c}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/216, 0xd8, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x9, 0x1, 0x2}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 5m13.172167732s ago: executing program 0 (id=22): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x0, 0x1}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x10b}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 5m13.093944117s ago: executing program 0 (id=23): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000240)={r3, @in6={{0xa, 0x4e24, 0x300d, @private2={0xfc, 0x2, '\x00', 0x1}, 0x21}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x82, &(0x7f0000000740)={0x0, 0x1006}, 0x8) 5m13.012360312s ago: executing program 0 (id=24): r0 = socket(0x10, 0x2, 0x0) syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7KWxqv3HfXL7b5bt8eGhrevdiRVNQ9V5cuf+pmz585/6YXBC9283J75gPr322fjtdGrlxovz96cm59aWJiabIzNtCdmJ6d2vYe91t/qZHUCGjdfvzV5/fpC4+zz5zZ9fHvg/f4njg9cHHz21DPdsmNDw8OjG0XqveVr99yQjp1meByOIk5Fiue+99PUiogi9n4u6g927Lc6UnXiZNWJsaHhqiPT7dbMYvnhSPdEFBGNnkrN7jnafiyi1vdA+7CzZsRS2fyywSfL7o3OteZb16anGiOt+cX2Ynt2ZiR1Wlv2pxFFXEgRyxGx2n/37vqiiFqk+M6xtXQtIg51z8MXq4nBO7ej2Mc+7kLZzkZfxHLxCIzZAdYfRbwaKX72zomYyNeZ6lrzhYhXy/xBxFtlvhSRyi/G+Yj3tvke8WiqRRF/WY7/xbU0WV0PuteVy19rfGXm+mxP2e515SPeH+66Ujyk+8ORLflgHPBrUz2KaFVX/LV077/ZAQAAAAAAAAAAAAAAAOB+OxJFfCZSvPIff1LNK45qXvqxi4N/OPCrvXPGn/6Q/ZRln4+IpWJ3c3IP54mBI2kkpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989kZajd03x9syNxtXWtenOqrDdtX+7a6avr6+vN1InmznHcy7lXM65knM1ZxS5fs5mzvGcSzmXc67kXM0Zh3L9nM2c4zmXci7nXMm5mjNquX7OZs7xnEs5l3Ou5FzNGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jfWUqSIaEaMRydX+h926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzTvbahGRqn87TpS/nI/m4TI/Gc3BMl+K5qWcrSprzW89hPazN32piB9Hiv7623cGPI9/X+fdna9BvPXNjXefrXXyUPfDgff7nzh+7OLg8G88vdPrtF0DTl5uz9y63RgbGh4e7dlcy0f/ZM+2gXzc4v50nYhYeOPN11vT01Pz9/6i/Arsofoj9CLVHpeeelG9iNqBaMbD6TuPgfL+/16k+N13/7N7w+/c/+vxK513d+7w8fM/27j/v7h1R7u8/9e21sv3//Kevt39/8mebS/m34301SLqizfn+o5H1BfeePNU+2brxtSNqZnzp09/eXDwy+dO9x2OqF9vT0/1vLovpwsAAAAAAAAAAAAAAADgwUlF/H6kaP14LTUi4nY1X2vg4uCzp545FIeq+Vab5m2/Nnr1UuPl2Ztz81MLC1OTjbGZ9sTs5NRuD1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2nx+tX7q2sDjfmtj+4zgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVh4zpSJ+Hil+56+ejs9X7Twad52zXO7vIsXJC5/L5eJwWa7bhs5zBTozA8uy/xcp/ukXm8t250M+uVH2zK5P7COiHP9jkeL7f/Hd+M28bfPzH7Yf/6Nbd7RP4/9Uz7ajm55XsOeuk8f/VKR46cm347fytg96/kf32RsncuE7z+fYp/H/VM+2gXzc374/XQcAAAAAAAAAAHik9aUi/j5S/HC4ll7I23bz9/8mt+5on/7+16d7tk3en/WKPvTFnk8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLZ8Wv05369Vzw24n3/+12sgH3d8790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66mPV/P5J3dcT30lUrzyP8/lcul4Wa67DvxA9Wv9yuzMqUvT07MTrcXWtempxuhca2KqrPtUpFj728/lukW1vnp3vfnOGu8ba7HPR4rhf+iW7azF3l2b/KmNsmfKsp+IFP/9j5vLdtex/tRG2bNl2b+JFF//l+3LHt8oe64s+91I8aOvN7plj5Zlu89H/fRG2ecnZot9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97c/nOXP68/n9fz9vKW9/sWe9/i9vVOv8D1fr/O72+l/X/q+cKLO10VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S/fd9Qvt2du3R4bGt6+2pFU1TxUlS9/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UJaNx8/dbk9esLjbPPn9v08e2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3z0e+Sdth+OIr460jx3Pd+mn7YH1HE3s/Fh3x39tuRqhMnq06MDQ1XHZlut2YWyw9HuieiiGj0VGp2z9EDGIs9aUYslc0vG3yy7N7oXGu+dW16qjHSml9sL7ZnZ0ZSp7VlfxpRxIUUsRwRq/13764ving9Unzn2Fr61/6IQ93z8MUro189fXbndhT72MddKNvZ6ItYLh6BMTvA+qOIf44UP3vnRPxbf0QtOj/xhYhXy/xBxFvRGe9UfjHOR7y3zfeIR1Mtivj/cvwvrqV3+svrQfe6cvlrja/MXJ/tKdu9rjzy94cH6YBfm+pRxI+qK/5a+nf/XQMAAAAAAAAAAAAAAAAcIEX8eqR48d0TqZoffGdOcXvmRuNq69p0Z1pfd+5fd870+vr6eiN1splzPOdSzuWcKzlXc0aR6+dslllfXx/P75dyLudcybmaMw7l+jmbOcdzLuVczrmSczVn1HL9nM2c4zmXci7nXMm5mjMOyNw9AAAAAAAAAAAAAAAAAADg46Wo/knx7W+spfX+zvrS49HJFeuBfuz9MgAA//8hX/ir") write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) creat(&(0x7f0000000100)='./bus\x00', 0x44) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fdatasync(r2) 5m12.501207242s ago: executing program 0 (id=27): r0 = io_uring_setup(0x25b4, &(0x7f00000010c0)={0x0, 0x1670, 0x80, 0x0, 0x3d6}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r3, 0x0, 0xffffffff000) close_range(r0, 0xffffffffffffffff, 0x0) 5m11.912236636s ago: executing program 0 (id=31): socket(0x28, 0x5, 0x0) socket(0x28, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x50}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5m11.415376215s ago: executing program 32 (id=31): socket(0x28, 0x5, 0x0) socket(0x28, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x50}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 11.509507445s ago: executing program 1 (id=1196): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x1e, 0x4, 0x0) connect$can_bcm(r3, &(0x7f0000000340), 0x10) 10.344214532s ago: executing program 1 (id=1197): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x94bb8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setitimer(0x1, &(0x7f00000002c0)={{}, {r3, r4/1000+60000}}, &(0x7f0000000300)) 8.945590153s ago: executing program 1 (id=1200): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000000)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, r4, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40090}, 0x0) 7.823073718s ago: executing program 1 (id=1204): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x9b}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 7.736924423s ago: executing program 4 (id=1205): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1b, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0f0000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000500008500000017000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x2b000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6.500102225s ago: executing program 4 (id=1208): r0 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f00004fa000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0x1ff, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) 6.116252696s ago: executing program 4 (id=1211): write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0xff58) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x585d4d9346027f5c}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd, 0x1fff}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x5}}}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x70}}, 0x0) 6.090048488s ago: executing program 3 (id=1212): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r3, &(0x7f00000004c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) 4.656105241s ago: executing program 2 (id=1213): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000000)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, r4, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40090}, 0x0) 3.743942693s ago: executing program 3 (id=1214): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x143}, 0x48) 3.561528794s ago: executing program 4 (id=1215): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYRES8=r3, @ANYRES32=0x0, @ANYBLOB=',discard,\x00', @ANYRESHEX, @ANYRESOCT=r3, @ANYRES8, @ANYRESDEC=r3, @ANYBLOB="51060c4f1adb6e795b70e7edcdc5cd30e197ceacee351e08a6e2ee4650101fb28229b16aecf828a55c8aa0efd840e40fef6612e7b389eb304c41e39360e1f5cb6f78bd7100bd30bbd42aa24b2dc9171d068e92ac848e65c9", @ANYRES32=r3, @ANYRESDEC], 0x81, 0x1536, &(0x7f00000008c0)="$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") ptrace$cont(0x1f, r3, 0x400, 0x7ff) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 3.534373385s ago: executing program 2 (id=1216): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001000)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) recvmsg$can_raw(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x100) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff2}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) 3.469781699s ago: executing program 1 (id=1217): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090810000000000000040000", 0x58}], 0x1) 1.884780901s ago: executing program 1 (id=1218): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r4, 0x1, 0x70bd27, 0x0, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x2c}}, 0x800) 1.884395991s ago: executing program 3 (id=1219): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000380)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="436558a7fac00c4adcec9fd99bd75a9641520a30626ecbf42f195e59cb51a6254bae5d60266b"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.718021111s ago: executing program 3 (id=1220): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f00000000c0)="2ef20f017df4ba4200b07aeeb80e000f00d0660f3acfc30d0f01b91a000f20e06635000010000f22e06766c744240033d500006766c74424020001c0fe6766c744240600000000670f0114240f00d466b9410101c066b869d281cd66ba000000000f302e0f017500", 0x68}], 0x1, 0x11, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x101) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.682827892s ago: executing program 2 (id=1221): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xb) 1.608546717s ago: executing program 3 (id=1222): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b80)=ANY=[@ANYBLOB="180000005600230d0000000000000000070000005c47ef594ca1561b3e5955bd7e058027d86f7673081c"], 0x18}}, 0x4040000) 1.405967418s ago: executing program 4 (id=1223): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xe22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x1}, 0x1c) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) 379.775798ms ago: executing program 2 (id=1224): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0xa}}]}, 0x40}}, 0x0) r3 = socket(0x10, 0x803, 0x0) unshare(0x2a020400) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x0, 0x400000, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x5}]}, 0x48}}, 0x0) 327.096601ms ago: executing program 3 (id=1225): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x20, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 236.423106ms ago: executing program 4 (id=1226): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x400}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000010b00000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r4, r3, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=1227): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x109, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x4, 0x8000, 0x3ff, 0x1, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x1ff, 0x2, 0x400008, 0xe, 0x4, 0x2, 0x0, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x33, 0x6, 0x1000, 0x5, 0x40, 0x7, 0x5, 0x5], [0x6, 0x1e, 0x6, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x2f7, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x12, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x403, 0xc, 0x3, 0x379, 0x9, 0x200, 0x5, 0x7, 0x6, 0x2, 0x1, 0x6, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd5, 0x7, 0x20, 0x7, 0x4, 0x8, 0x437, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1001, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0xf5e, 0x5, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x20000, 0x7, 0x6d7e, 0x6, 0x4, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x1, 0x3, 0xfff, 0x100fffe, 0x2005, 0x7, 0x4, 0x2000eb, 0x9, 0x5, 0x2, 0x100000d9, 0x0, 0x7ff, 0x401, 0x5], [0xc, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x9, 0x4, 0xfff, 0x8, 0x763, 0xf, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x403e, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f8, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7ffd, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x9, 0xe, 0xffffffff, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/24, 0x18}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.108' (ED25519) to the list of known hosts. [ 82.039091][ T5759] cgroup: Unknown subsys name 'net' [ 82.174074][ T5759] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.927175][ T5759] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.669693][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.678458][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.688611][ T5781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.696583][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.696961][ T5781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.711868][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.713210][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.728398][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.736672][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.745376][ T5786] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.753536][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.760953][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.769502][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.787180][ T5781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.798948][ T5781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.807023][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.818484][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.825883][ T5779] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.835653][ T5787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.843830][ T5787] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.851651][ T5787] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.851919][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.867901][ T5087] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.880615][ T5087] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.362203][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 86.386976][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 86.587199][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.595186][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.602516][ T5772] bridge_slave_0: entered allmulticast mode [ 86.609901][ T5772] bridge_slave_0: entered promiscuous mode [ 86.633088][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.640469][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.648008][ T5771] bridge_slave_0: entered allmulticast mode [ 86.655606][ T5771] bridge_slave_0: entered promiscuous mode [ 86.663426][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 86.677103][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.684245][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.691692][ T5772] bridge_slave_1: entered allmulticast mode [ 86.699674][ T5772] bridge_slave_1: entered promiscuous mode [ 86.707381][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 86.730967][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.739615][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.746924][ T5771] bridge_slave_1: entered allmulticast mode [ 86.753977][ T5771] bridge_slave_1: entered promiscuous mode [ 86.832792][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.866967][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.879652][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.908650][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.961553][ T5772] team0: Port device team_slave_0 added [ 87.008483][ T5772] team0: Port device team_slave_1 added [ 87.021763][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.029274][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.039798][ T5773] bridge_slave_0: entered allmulticast mode [ 87.056556][ T5773] bridge_slave_0: entered promiscuous mode [ 87.068948][ T5771] team0: Port device team_slave_0 added [ 87.078775][ T5771] team0: Port device team_slave_1 added [ 87.122643][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.130070][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.145142][ T5773] bridge_slave_1: entered allmulticast mode [ 87.152591][ T5773] bridge_slave_1: entered promiscuous mode [ 87.194721][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.206833][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.214102][ T5774] bridge_slave_0: entered allmulticast mode [ 87.224441][ T5774] bridge_slave_0: entered promiscuous mode [ 87.249930][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.257043][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.283724][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.323489][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.334039][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.342368][ T5774] bridge_slave_1: entered allmulticast mode [ 87.350263][ T5774] bridge_slave_1: entered promiscuous mode [ 87.399812][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.408947][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.435414][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.448630][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.456459][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.483224][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.508883][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.542188][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.572897][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.582048][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.608495][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.638947][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.691558][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.720373][ T5773] team0: Port device team_slave_0 added [ 87.769430][ T5773] team0: Port device team_slave_1 added [ 87.785633][ T5771] hsr_slave_0: entered promiscuous mode [ 87.792545][ T5771] hsr_slave_1: entered promiscuous mode [ 87.819385][ T5772] hsr_slave_0: entered promiscuous mode [ 87.827786][ T5772] hsr_slave_1: entered promiscuous mode [ 87.834213][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.843223][ T5772] Cannot create hsr debugfs directory [ 87.849020][ T5087] Bluetooth: hci1: command tx timeout [ 87.849039][ T51] Bluetooth: hci2: command tx timeout [ 87.878754][ T5774] team0: Port device team_slave_0 added [ 87.920630][ T5774] team0: Port device team_slave_1 added [ 87.926416][ T51] Bluetooth: hci3: command tx timeout [ 87.935265][ T51] Bluetooth: hci0: command tx timeout [ 87.989175][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.996453][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.022719][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.035901][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.042934][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.069378][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.120039][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.129813][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.156513][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.169738][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.176807][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.202843][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.323484][ T5773] hsr_slave_0: entered promiscuous mode [ 88.330927][ T5773] hsr_slave_1: entered promiscuous mode [ 88.338555][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.346681][ T5773] Cannot create hsr debugfs directory [ 88.423910][ T5774] hsr_slave_0: entered promiscuous mode [ 88.430996][ T5774] hsr_slave_1: entered promiscuous mode [ 88.437666][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.445582][ T5774] Cannot create hsr debugfs directory [ 88.709054][ T5772] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.742162][ T5772] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.752567][ T5772] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.763948][ T5772] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.886778][ T5771] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.900663][ T5771] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.911605][ T5771] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.925397][ T5771] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.047252][ T5773] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.065117][ T5773] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.087950][ T5773] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.102663][ T5773] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.201855][ T5774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.213608][ T5774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.239579][ T5774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.250644][ T5774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.287379][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.378505][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.398734][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.434104][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.450895][ T1077] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.458409][ T1077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.479696][ T1077] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.486932][ T1077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.521068][ T1077] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.528330][ T1077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.540692][ T1077] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.547967][ T1077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.651383][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.661532][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.735768][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.771343][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.778578][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.807226][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.854742][ T2951] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.862038][ T2951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.875860][ T2951] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.883159][ T2951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.912805][ T2951] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.920061][ T2951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.928538][ T51] Bluetooth: hci1: command tx timeout [ 89.934032][ T51] Bluetooth: hci2: command tx timeout [ 90.015058][ T51] Bluetooth: hci3: command tx timeout [ 90.020714][ T5087] Bluetooth: hci0: command tx timeout [ 90.287593][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.422768][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.434535][ T5772] veth0_vlan: entered promiscuous mode [ 90.463074][ T5772] veth1_vlan: entered promiscuous mode [ 90.573863][ T5771] veth0_vlan: entered promiscuous mode [ 90.594491][ T5772] veth0_macvtap: entered promiscuous mode [ 90.610942][ T5771] veth1_vlan: entered promiscuous mode [ 90.622338][ T5772] veth1_macvtap: entered promiscuous mode [ 90.717566][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.733179][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.763866][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.786645][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.794690][ T5771] veth0_macvtap: entered promiscuous mode [ 90.821198][ T5771] veth1_macvtap: entered promiscuous mode [ 90.838254][ T5772] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.848723][ T5772] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.862171][ T5772] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.871726][ T5772] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.949222][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.963259][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.976735][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.030454][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.047844][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.060024][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.074301][ T5771] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.084125][ T5771] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.093392][ T5771] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.102233][ T5771] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.113611][ T5773] veth0_vlan: entered promiscuous mode [ 91.158910][ T5774] veth0_vlan: entered promiscuous mode [ 91.180823][ T5773] veth1_vlan: entered promiscuous mode [ 91.193979][ T2951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.215613][ T2951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.244158][ T5774] veth1_vlan: entered promiscuous mode [ 91.297504][ T2920] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.309943][ T2920] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.332295][ T5773] veth0_macvtap: entered promiscuous mode [ 91.378273][ T5773] veth1_macvtap: entered promiscuous mode [ 91.396183][ T2996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.404105][ T2996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.472015][ T5774] veth0_macvtap: entered promiscuous mode [ 91.503679][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.533556][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.545298][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.556730][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.574715][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.622923][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.623358][ T2996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.649064][ T2996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.655233][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.667482][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.680120][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.693170][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.709689][ T5774] veth1_macvtap: entered promiscuous mode [ 91.734432][ T5773] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.743867][ T5773] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.753723][ T5773] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.764085][ T5773] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.881930][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.894721][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.910917][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.922284][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.932839][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.944031][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.956924][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.006158][ T51] Bluetooth: hci1: command tx timeout [ 92.012064][ T5087] Bluetooth: hci2: command tx timeout [ 92.035786][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.053850][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.064543][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.079657][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.086629][ T51] Bluetooth: hci3: command tx timeout [ 92.091999][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.096295][ T5087] Bluetooth: hci0: command tx timeout [ 92.113905][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.126582][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.153931][ T5774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.166246][ T5870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.177352][ T5774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.188027][ T788] cfg80211: failed to load regulatory.db [ 92.192198][ T5774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.202996][ T5774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.230594][ T2996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.249857][ T2996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.312199][ T2951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.336613][ T2951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.418860][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.434874][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.535520][ T2996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.543427][ T2996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.657534][ T5874] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.671542][ T5876] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5'. [ 92.795313][ T5874] syz.3.4[5874]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 92.852978][ T5874] loop3: detected capacity change from 0 to 136 [ 93.577507][ T5895] tipc: Failed to remove unknown binding: 66,0,0/0:1265148006/1265148007 [ 93.617209][ T5895] tipc: Failed to remove unknown binding: 66,0,0/0:1265148006/1265148007 [ 94.085259][ T51] Bluetooth: hci2: command tx timeout [ 94.085974][ T5087] Bluetooth: hci1: command tx timeout [ 94.166607][ T5087] Bluetooth: hci0: command tx timeout [ 94.175119][ T5087] Bluetooth: hci3: command tx timeout [ 94.342452][ T5911] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 94.485929][ T5917] netlink: 28 bytes leftover after parsing attributes in process `syz.0.19'. [ 94.497690][ T5917] netlink: 28 bytes leftover after parsing attributes in process `syz.0.19'. [ 94.946905][ T5929] loop0: detected capacity change from 0 to 2048 [ 94.955773][ T5929] ======================================================= [ 94.955773][ T5929] WARNING: The mand mount option has been deprecated and [ 94.955773][ T5929] and is ignored by this kernel. Remove the mand [ 94.955773][ T5929] option from the mount to silence this warning. [ 94.955773][ T5929] ======================================================= [ 95.026254][ T5929] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 95.402486][ T5774] UDF-fs: error (device loop0): udf_read_inode: (ino 1) failed !bh [ 95.433223][ T5774] UDF-fs: error (device loop0): udf_read_inode: (ino 1) failed !bh [ 95.656947][ T5938] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.730853][ T5941] loop1: detected capacity change from 0 to 512 [ 95.740225][ T5941] EXT4-fs: Ignoring removed oldalloc option [ 95.758453][ T5941] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 95.779749][ T5941] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 95.828034][ T5941] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2852: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 95.850884][ T5941] EXT4-fs (loop1): 1 truncate cleaned up [ 95.869331][ T5941] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.956616][ T5941] loop1: detected capacity change from 512 to 64 [ 95.994118][ T63] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.038840][ T5941] syz.1.30: attempt to access beyond end of device [ 96.038840][ T5941] loop1: rw=2049, sector=70, nr_sectors = 2 limit=64 [ 96.067852][ T5941] EXT4-fs warning (device loop1): ext4_end_bio:357: I/O error 10 writing to inode 15 starting block 35) [ 96.098510][ T5941] Buffer I/O error on device loop1, logical block 35 [ 96.130963][ T5947] binder_alloc: 5946: binder_alloc_buf size 8 failed, no address space [ 96.140980][ T5941] syz.1.30: attempt to access beyond end of device [ 96.140980][ T5941] loop1: rw=2049, sector=510, nr_sectors = 2 limit=64 [ 96.157846][ T5947] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 0 (num: 0 largest: 0) [ 96.172279][ T63] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.182850][ T5941] EXT4-fs warning (device loop1): ext4_end_bio:357: I/O error 10 writing to inode 15 starting block 255) [ 96.219898][ T5941] Buffer I/O error on device loop1, logical block 255 [ 96.240614][ T5941] syz.1.30: attempt to access beyond end of device [ 96.240614][ T5941] loop1: rw=2049, sector=506, nr_sectors = 4 limit=64 [ 96.265048][ T5941] EXT4-fs warning (device loop1): ext4_end_bio:357: I/O error 10 writing to inode 15 starting block 253) [ 96.293220][ T5941] Buffer I/O error on device loop1, logical block 253 [ 96.300103][ T5941] Buffer I/O error on device loop1, logical block 254 [ 96.311066][ T63] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.328333][ T5941] syz.1.30: attempt to access beyond end of device [ 96.328333][ T5941] loop1: rw=2049, sector=74, nr_sectors = 8 limit=64 [ 96.353066][ T5941] EXT4-fs warning (device loop1): ext4_end_bio:357: I/O error 10 writing to inode 15 starting block 37) [ 96.371817][ T5941] Buffer I/O error on device loop1, logical block 37 [ 96.378574][ T5941] Buffer I/O error on device loop1, logical block 38 [ 96.385296][ T5941] Buffer I/O error on device loop1, logical block 39 [ 96.392020][ T5941] Buffer I/O error on device loop1, logical block 40 [ 96.440964][ T63] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.554001][ T5771] EXT4-fs error (device loop1): mb_free_blocks:1954: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 96.600679][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.642320][ T5950] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000009 [ 96.866501][ T5953] netlink: 168 bytes leftover after parsing attributes in process `syz.1.35'. [ 97.422103][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.438221][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.451941][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.473667][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.497829][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 97.515620][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.553292][ T5865] IPVS: starting estimator thread 0... [ 97.647988][ T5974] IPVS: using max 18 ests per chain, 43200 per kthread [ 97.835244][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.997619][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.415120][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.746707][ T5815] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 98.968621][ T5815] usb 4-1: Using ep0 maxpacket: 32 [ 98.998757][ T5815] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 99.008150][ T5815] usb 4-1: config 0 has no interface number 0 [ 99.018029][ T5815] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 99.038779][ T5815] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 99.054428][ T5967] chnl_net:caif_netlink_parms(): no params data found [ 99.061785][ T5815] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.075921][ T5815] usb 4-1: Product: syz [ 99.080299][ T5815] usb 4-1: Manufacturer: syz [ 99.103873][ T5815] usb 4-1: SerialNumber: syz [ 99.166590][ T5815] usb 4-1: config 0 descriptor?? [ 99.175770][ T5987] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 99.254963][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 99.296033][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.305195][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 99.359191][ T63] hsr_slave_0: left promiscuous mode [ 99.386046][ T63] hsr_slave_1: left promiscuous mode [ 99.422282][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.460205][ T5987] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 99.469146][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.501687][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.530198][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.573735][ T63] bridge_slave_1: left allmulticast mode [ 99.599304][ T63] bridge_slave_1: left promiscuous mode [ 99.605815][ T5087] Bluetooth: hci2: command tx timeout [ 99.634145][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.723267][ T63] bridge_slave_0: left allmulticast mode [ 99.755303][ T63] bridge_slave_0: left promiscuous mode [ 99.767452][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.909959][ T6002] loop2: detected capacity change from 0 to 256 [ 99.923564][ T63] veth1_macvtap: left promiscuous mode [ 99.952082][ T63] veth0_macvtap: left promiscuous mode [ 99.960819][ T63] veth1_vlan: left promiscuous mode [ 99.988054][ T63] veth0_vlan: left promiscuous mode [ 100.075050][ T6002] FAT-fs (loop2): Directory bread(block 64) failed [ 100.082120][ T6002] FAT-fs (loop2): Directory bread(block 65) failed [ 100.115587][ T6002] FAT-fs (loop2): Directory bread(block 66) failed [ 100.129429][ T6002] FAT-fs (loop2): Directory bread(block 67) failed [ 100.145205][ T6002] FAT-fs (loop2): Directory bread(block 68) failed [ 100.165266][ T6002] FAT-fs (loop2): Directory bread(block 69) failed [ 100.172087][ T6002] FAT-fs (loop2): Directory bread(block 70) failed [ 100.191489][ T6002] FAT-fs (loop2): Directory bread(block 71) failed [ 100.203804][ T6002] FAT-fs (loop2): Directory bread(block 72) failed [ 100.219255][ T6002] FAT-fs (loop2): Directory bread(block 73) failed [ 100.396504][ T6008] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.660495][ T6012] syz.2.44: attempt to access beyond end of device [ 100.660495][ T6012] loop2: rw=2049, sector=1224, nr_sectors = 544 limit=256 [ 100.740182][ T6012] syz.2.44: attempt to access beyond end of device [ 100.740182][ T6012] loop2: rw=2049, sector=1800, nr_sectors = 128 limit=256 [ 100.820932][ T6012] syz.2.44: attempt to access beyond end of device [ 100.820932][ T6012] loop2: rw=2049, sector=1960, nr_sectors = 360 limit=256 [ 100.931798][ T6002] syz.2.44: attempt to access beyond end of device [ 100.931798][ T6002] loop2: rw=524288, sector=1232, nr_sectors = 248 limit=256 [ 100.965871][ T6002] syz.2.44: attempt to access beyond end of device [ 100.965871][ T6002] loop2: rw=0, sector=1232, nr_sectors = 8 limit=256 [ 100.996588][ T6002] syz.2.44: attempt to access beyond end of device [ 100.996588][ T6002] loop2: rw=0, sector=1232, nr_sectors = 8 limit=256 [ 101.133470][ T2920] kworker/u4:8: attempt to access beyond end of device [ 101.133470][ T2920] loop2: rw=1, sector=1224, nr_sectors = 8 limit=256 [ 101.332127][ T5815] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 101.355513][ T5815] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 101.378424][ T5815] asix: probe of 4-1:0.188 failed with error -71 [ 101.439753][ T5815] usb 4-1: USB disconnect, device number 2 [ 101.701933][ T5087] Bluetooth: hci2: command tx timeout [ 102.867916][ T63] team0 (unregistering): Port device team_slave_1 removed [ 103.095452][ T6014] loop1: detected capacity change from 0 to 32768 [ 103.128869][ T63] team0 (unregistering): Port device team_slave_0 removed [ 103.156380][ T6014] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.46 (6014) [ 103.265221][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.274734][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.304898][ T6014] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 103.346192][ T6014] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 103.394594][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.417451][ T6014] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 103.428113][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 103.458035][ T6014] BTRFS info (device loop1): use zstd compression, level 3 [ 103.505745][ T6014] BTRFS info (device loop1): using free space tree [ 103.517373][ T6030] loop3: detected capacity change from 0 to 2048 [ 103.568556][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.645535][ T6030] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 103.700679][ T6014] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 103.729719][ T6014] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 103.765077][ T5087] Bluetooth: hci2: command tx timeout [ 103.953792][ T6014] BTRFS error (device loop1): open_ctree failed: -12 [ 104.235116][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.734562][ T5784] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by udevd (5784) [ 105.250070][ T63] bond0 (unregistering): Released all slaves [ 105.535042][ T6051] netlink: 'syz.3.55': attribute type 1 has an invalid length. [ 105.773330][ T6054] bond1 (unregistering): Released all slaves [ 105.814149][ T6055] netlink: 28 bytes leftover after parsing attributes in process `syz.3.55'. [ 105.844951][ T6055] team_slave_1: entered promiscuous mode [ 105.845710][ T5087] Bluetooth: hci2: command tx timeout [ 105.861929][ T6055] team_slave_1: entered allmulticast mode [ 105.913181][ T5967] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.921105][ T5967] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.928511][ T5967] bridge_slave_0: entered allmulticast mode [ 105.936518][ T5967] bridge_slave_0: entered promiscuous mode [ 105.956276][ T5967] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.966132][ T5967] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.994530][ T5967] bridge_slave_1: entered allmulticast mode [ 106.066948][ T5967] bridge_slave_1: entered promiscuous mode [ 106.086165][ T6061] loop2: detected capacity change from 0 to 32768 [ 106.191613][ T6075] loop1: detected capacity change from 0 to 1024 [ 106.201727][ T6075] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 106.269538][ T6061] XFS (loop2): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 106.271037][ T6075] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.327686][ T5967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.394303][ T5967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.553942][ T6075] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5920: Out of memory [ 106.593207][ T6075] EXT4-fs (loop1): Remounting filesystem read-only [ 106.607468][ T6061] XFS (loop2): Ending clean mount [ 106.639384][ T5967] team0: Port device team_slave_0 added [ 106.677010][ T6061] XFS (loop2): Quotacheck needed: Please wait. [ 106.688203][ T5967] team0: Port device team_slave_1 added [ 106.767299][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.820113][ T6061] XFS (loop2): Quotacheck: Done. [ 106.862746][ T5967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.887615][ T5967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.975423][ T5967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.035033][ T5967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.056986][ T5967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.100384][ T6098] loop3: detected capacity change from 0 to 2048 [ 107.121930][ T28] audit: type=1800 audit(1769188284.719:2): pid=6061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.59" name="bus" dev="loop2" ino=7435 res=0 errno=0 [ 107.188477][ T5967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.423655][ T5967] hsr_slave_0: entered promiscuous mode [ 107.464449][ T5967] hsr_slave_1: entered promiscuous mode [ 107.491927][ T5967] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.531523][ T5967] Cannot create hsr debugfs directory [ 107.783483][ T5772] XFS (loop2): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 108.238459][ T5967] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 108.269625][ T5967] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 108.299861][ T5967] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 108.331538][ T5967] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 108.580706][ T6131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.665686][ T6131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.713361][ T6131] bond0 (unregistering): Released all slaves [ 109.004574][ T6141] loop2: detected capacity change from 0 to 32768 [ 109.029077][ T5967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.133283][ T5967] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.293631][ T6146] ERROR: (device loop2): dbAlloc: the hint is outside the map [ 109.293631][ T6146] [ 109.324252][ T6146] ERROR: (device loop2): remounting filesystem as read-only [ 109.341228][ T6146] syz.2.74: attempt to access beyond end of device [ 109.341228][ T6146] loop2: rw=2049, sector=44032, nr_sectors = 8 limit=32768 [ 109.460602][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.467897][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.859680][ T2920] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.866908][ T2920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.931704][ T113] blkno = 1580, nblocks = 1 [ 109.944957][ T113] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map [ 109.944957][ T113] [ 110.841575][ T6176] bridge_slave_0: left allmulticast mode [ 110.886429][ T6176] bridge_slave_0: left promiscuous mode [ 110.893848][ T6176] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.952550][ T6176] bridge_slave_1: left allmulticast mode [ 110.969253][ T6176] bridge_slave_1: left promiscuous mode [ 110.986886][ T6176] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.089012][ T6176] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 111.120925][ T6176] team0: Port device team_slave_0 removed [ 111.173125][ T6176] team0: Failed to send options change via netlink (err -105) [ 111.185508][ T6176] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 111.216048][ T6176] team0: Port device team_slave_1 removed [ 111.232324][ T6176] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.264985][ T6176] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.297053][ T6176] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.312734][ T6176] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.398224][ T5967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.627642][ T6179] team0: Mode changed to "activebackup" [ 111.666271][ T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 112.549714][ T6203] trusted_key: syz.1.86 sent an empty control message without MSG_MORE. [ 112.575090][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 112.600122][ T8] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 112.662549][ T8] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 112.702304][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.723116][ T8] usb 4-1: Product: syz [ 112.745447][ T8] usb 4-1: Manufacturer: syz [ 112.750156][ T8] usb 4-1: SerialNumber: syz [ 112.785604][ T8] usb 4-1: config 0 descriptor?? [ 113.032109][ T8] usb 4-1: USB disconnect, device number 3 [ 113.107919][ T5967] veth0_vlan: entered promiscuous mode [ 113.161635][ T5967] veth1_vlan: entered promiscuous mode [ 113.248416][ T5967] veth0_macvtap: entered promiscuous mode [ 113.271707][ T5967] veth1_macvtap: entered promiscuous mode [ 113.318037][ T5967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.338424][ T5967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.361158][ T5967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.382663][ T5967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.401093][ T5967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.418944][ T5967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.439904][ T5967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.460947][ T5967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.481872][ T5967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.512125][ T5967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.582556][ T5967] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.636872][ T5967] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.664952][ T5967] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.694898][ T5967] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.841881][ T6229] syz.3.90 uses obsolete (PF_INET,SOCK_PACKET) [ 114.065353][ T2920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.106133][ T2920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.181055][ T2920] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.203583][ T2920] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.416339][ T6243] binder: 6242:6243 unknown command 0 [ 114.421805][ T6243] binder: 6242:6243 ioctl c0306201 200000000080 returned -22 [ 114.478755][ T6247] netlink: 12 bytes leftover after parsing attributes in process `syz.1.94'. [ 114.885437][ T6258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.994522][ T6258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.089227][ T6262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.182125][ T6297] fuse: Bad value for 'fd' [ 116.281963][ T6301] netlink: 64 bytes leftover after parsing attributes in process `syz.3.106'. [ 116.595439][ T6283] loop4: detected capacity change from 0 to 40427 [ 116.663678][ T6283] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 116.726356][ T6283] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 116.774081][ T6316] loop3: detected capacity change from 0 to 512 [ 116.823418][ T6316] EXT4-fs: Ignoring removed i_version option [ 116.875415][ T6316] EXT4-fs: Ignoring removed bh option [ 116.984690][ T6316] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.082389][ T6316] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 117.704002][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.731166][ T6337] loop1: detected capacity change from 0 to 4096 [ 118.055188][ T6337] ntfs3: loop1: Failed to load $Extend (-22). [ 118.090211][ T6337] ntfs3: loop1: Failed to initialize $Extend. [ 118.335925][ T6337] ntfs3: loop1: ino=5, "/" directory corrupted [ 118.378196][ T6337] ntfs3: loop1: ino=5, "/" directory corrupted [ 118.410694][ T6337] ntfs3: loop1: ino=5, "/" directory corrupted [ 118.451923][ T6337] ntfs3: loop1: ino=5, "/" directory corrupted [ 118.475516][ T6337] ntfs3: loop1: ino=5, "/" directory corrupted [ 118.500991][ T6351] ntfs3: loop1: ino=5, "/" directory corrupted [ 118.510416][ T6350] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 118.527939][ T6337] ntfs3: loop1: ino=5, "/" directory corrupted [ 118.537389][ T6337] ntfs3: loop1: ino=5, "/" directory corrupted [ 118.591471][ T6348] netlink: 24 bytes leftover after parsing attributes in process `syz.2.119'. [ 118.764399][ T6356] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 118.776362][ T6326] loop4: detected capacity change from 0 to 32768        syzkaller syzkaller login: [ 121.125004][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 121.318434][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.345146][ T8] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 121.372424][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.399397][ T8] usb 2-1: config 0 descriptor?? [ 121.421537][ T8] pwc: Askey VC010 type 2 USB webcam detected. [ 122.710505][ T8] pwc: recv_control_msg error -32 req 02 val 2b00 [ 122.719383][ T8] pwc: recv_control_msg error -32 req 02 val 2700 [ 122.730119][ T8] pwc: recv_control_msg error -32 req 02 val 2c00 [ 122.741795][ T8] pwc: recv_control_msg error -32 req 04 val 1000 [ 122.800714][ T8] pwc: recv_control_msg error -32 req 04 val 1300 [ 122.839979][ T8] pwc: recv_control_msg error -32 req 04 val 1400 [ 122.860811][ T8] pwc: recv_control_msg error -32 req 02 val 2000 [ 123.078047][ T8] pwc: recv_control_msg error -71 req 04 val 1500 [ 123.086849][ T8] pwc: recv_control_msg error -71 req 02 val 2500 [ 123.110147][ T8] pwc: recv_control_msg error -71 req 02 val 2400 [ 123.139993][ T8] pwc: recv_control_msg error -71 req 02 val 2600 [ 123.155199][ T8] pwc: recv_control_msg error -71 req 02 val 2900 [ 123.170686][ T8] pwc: recv_control_msg error -71 req 02 val 2800 [ 123.186051][ T8] pwc: recv_control_msg error -71 req 04 val 1100 [ 123.194573][ T8] pwc: recv_control_msg error -71 req 04 val 1200 [ 123.221622][ T8] pwc: Registered as video103. [ 123.241095][ T8] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 123.305010][ T8] usb 2-1: USB disconnect, device number 2 [ 123.739502][ T6439] netlink: 28 bytes leftover after parsing attributes in process `syz.4.143'. [ 123.750826][ T6439] lo: entered promiscuous mode [ 123.763715][ T6439] lo: entered allmulticast mode [ 125.500505][ T6488] process 'syz.3.156' launched './file1' with NULL argv: empty string added [ 125.516307][ T6490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.157'. [ 127.030487][ T28] audit: type=1326 audit(1769188304.629:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6513 comm="syz.3.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d439acb9 code=0x7ffc0000 [ 127.075311][ T28] audit: type=1326 audit(1769188304.659:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6513 comm="syz.3.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d439acb9 code=0x7ffc0000 [ 127.145032][ T28] audit: type=1326 audit(1769188304.719:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6513 comm="syz.3.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f63d439acb9 code=0x7ffc0000 [ 127.195062][ T28] audit: type=1326 audit(1769188304.719:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6513 comm="syz.3.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d439acb9 code=0x7ffc0000 [ 127.245037][ T28] audit: type=1326 audit(1769188304.719:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6513 comm="syz.3.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d439acb9 code=0x7ffc0000 [ 127.294882][ T28] audit: type=1326 audit(1769188304.719:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6513 comm="syz.3.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f63d439acb9 code=0x7ffc0000 [ 127.336008][ T28] audit: type=1326 audit(1769188304.719:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6513 comm="syz.3.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d439acb9 code=0x7ffc0000 [ 127.409127][ T28] audit: type=1326 audit(1769188304.719:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6513 comm="syz.3.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d439acb9 code=0x7ffc0000 [ 127.480940][ T28] audit: type=1326 audit(1769188304.729:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6513 comm="syz.3.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f63d435b58e code=0x7ffc0000 [ 127.539878][ T28] audit: type=1326 audit(1769188304.729:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6513 comm="syz.3.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d439acb9 code=0x7ffc0000 [ 127.725185][ T5915] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 127.759247][ T6523] tmpfs: Bad value for 'mpol' [ 127.765696][ T6523] mmap: syz.3.170 (6523): VmData 175874048 exceed data ulimit 1129. Update limits or use boot option ignore_rlimit_data. [ 127.918156][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.938924][ T5915] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 127.958704][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.989977][ T5915] usb 5-1: config 0 descriptor?? [ 128.102320][ T6528] netlink: 12 bytes leftover after parsing attributes in process `syz.3.172'. [ 128.238735][ T5915] usbhid 5-1:0.0: can't add hid device: -71 [ 128.254927][ T5915] usbhid: probe of 5-1:0.0 failed with error -71 [ 128.285872][ T5915] usb 5-1: USB disconnect, device number 2 [ 128.865024][ T5915] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 129.130187][ T6524] loop1: detected capacity change from 0 to 32768 [ 129.165105][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 129.718120][ T6524] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 129.824351][ T6524] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 129.948318][ T5915] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 129.957713][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.968201][ T5915] usb 5-1: config 0 descriptor?? [ 129.977039][ T5915] hub 5-1:0.0: USB hub found [ 130.147590][ T6524] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 130.190845][ T5915] hub 5-1:0.0: 1 port detected [ 130.238910][ T5833] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 130.268561][ T5833] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 130.368715][ T5833] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 100ms [ 130.411058][ T5833] gfs2: fsid=syz:syz.0: jid=0: Done [ 130.421694][ T6524] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 130.790779][ T6524] gfs2: fsid=syz:syz.0: found 1 quota changes [ 130.880945][ T5771] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 130.880945][ T5771] inode = 11 2339 [ 130.880945][ T5771] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 472 [ 130.900581][ T5771] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 130.911572][ T5771] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:5771 [syz-executor] gfs2_quota_sync+0x411/0x5a0 [ 130.922620][ T5771] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 130.931544][ T5771] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 130.954183][ T5771] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 130.963665][ T5771] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 130.982164][ T5771] gfs2: fsid=syz:syz.0: File system withdrawn [ 130.994779][ T5771] CPU: 1 PID: 5771 Comm: syz-executor Not tainted syzkaller #0 [ 131.002444][ T5771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 131.012564][ T5771] Call Trace: [ 131.015895][ T5771] [ 131.018872][ T5771] dump_stack_lvl+0x18c/0x250 [ 131.023711][ T5771] ? kobject_uevent_env+0x363/0x8b0 [ 131.028961][ T5771] ? show_regs_print_info+0x20/0x20 [ 131.034214][ T5771] ? load_image+0x400/0x400 [ 131.038779][ T5771] ? kobject_uevent_env+0x363/0x8b0 [ 131.044041][ T5771] gfs2_withdraw+0xb24/0x13d0 [ 131.048807][ T5771] ? gfs2_lm+0x240/0x240 [ 131.053119][ T5771] ? preempt_schedule+0xc0/0xd0 [ 131.058040][ T5771] ? gfs2_consist_inode_i+0xf5/0x110 [ 131.063392][ T5771] gfs2_inode_refresh+0xb89/0x1000 [ 131.068569][ T5771] ? gfs2_inode_metasync+0xf0/0xf0 [ 131.073747][ T5771] ? gfs2_glock_nq+0xd4f/0x1420 [ 131.078699][ T5771] gfs2_instantiate+0x162/0x220 [ 131.083616][ T5771] gfs2_glock_wait+0x1d4/0x2a0 [ 131.088490][ T5771] do_sync+0x4c6/0xe50 [ 131.092606][ T5771] ? gfs2_quota_sync+0x411/0x5a0 [ 131.097595][ T5771] ? bh_get+0x760/0x760 [ 131.101805][ T5771] ? __lock_acquire+0x7d40/0x7d40 [ 131.106878][ T5771] ? do_raw_spin_lock+0x11f/0x2c0 [ 131.111968][ T5771] ? gfs2_quota_sync+0x411/0x5a0 [ 131.116953][ T5771] ? do_raw_spin_unlock+0x121/0x230 [ 131.122207][ T5771] gfs2_quota_sync+0x411/0x5a0 [ 131.127110][ T5771] gfs2_sync_fs+0x4c/0xb0 [ 131.131496][ T5771] sync_filesystem+0xea/0x220 [ 131.136236][ T5771] generic_shutdown_super+0x6f/0x2b0 [ 131.141587][ T5771] kill_block_super+0x44/0x90 [ 131.146330][ T5771] deactivate_locked_super+0x97/0x100 [ 131.151767][ T5771] cleanup_mnt+0x43b/0x4d0 [ 131.156246][ T5771] task_work_run+0x1d4/0x260 [ 131.160900][ T5771] ? task_work_cancel+0x220/0x220 [ 131.165986][ T5771] ? exit_to_user_mode_loop+0x3b/0x110 [ 131.171509][ T5771] exit_to_user_mode_loop+0xe6/0x110 [ 131.176857][ T5771] exit_to_user_mode_prepare+0xee/0x180 [ 131.182501][ T5771] syscall_exit_to_user_mode+0x1a/0x50 [ 131.188125][ T5771] do_syscall_64+0x61/0xa0 [ 131.192601][ T5771] ? clear_bhb_loop+0x40/0x90 [ 131.197338][ T5771] ? clear_bhb_loop+0x40/0x90 [ 131.202072][ T5771] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 131.208106][ T5771] RIP: 0033:0x7f4b82f9bf17 [ 131.212584][ T5771] Code: a2 c7 05 7c 96 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 131.232253][ T5771] RSP: 002b:00007ffc524d1998 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 131.240730][ T5771] RAX: 0000000000000000 RBX: 00007f4b8300471f RCX: 00007f4b82f9bf17 [ 131.248748][ T5771] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc524d1a50 [ 131.256761][ T5771] RBP: 00007ffc524d1a50 R08: 00007ffc524d2a50 R09: 00000000ffffffff [ 131.264779][ T5771] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc524d2ae0 [ 131.272799][ T5771] R13: 00007f4b8300471f R14: 000000000001f370 R15: 00007ffc524d2b20 [ 131.280926][ T5771] [ 131.834741][ T6575] loop1: detected capacity change from 0 to 1024 [ 131.912881][ T6581] netlink: 52 bytes leftover after parsing attributes in process `syz.3.181'. [ 131.982246][ T6581] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.991012][ T6581] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.004764][ T8] usb 5-1: USB disconnect, device number 3 [ 132.051652][ T6583] netlink: 76 bytes leftover after parsing attributes in process `syz.3.181'. [ 132.070656][ T6583] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.078012][ T6583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.085906][ T6583] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.093146][ T6583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.213269][ T6583] netlink: 52 bytes leftover after parsing attributes in process `syz.3.181'. [ 132.242673][ T6587] loop2: detected capacity change from 0 to 512 [ 132.255534][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 132.255550][ T28] audit: type=1800 audit(1769188309.849:30): pid=6571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.178" name="file2" dev="loop1" ino=21 res=0 errno=0 [ 132.282665][ T6583] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.290033][ T6583] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.320919][ T6587] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 132.401812][ T6587] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 132.495892][ T6587] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.182: Corrupt directory, running e2fsck is recommended [ 132.552524][ T6587] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 132.615957][ T6587] EXT4-fs error (device loop2): ext4_iget_extra_inode:4732: inode #15: comm syz.2.182: corrupted in-inode xattr: e_name out of bounds [ 132.678021][ T6587] EXT4-fs error (device loop2): ext4_orphan_get:1403: comm syz.2.182: couldn't read orphan inode 15 (err -117) [ 132.709565][ T6587] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.997881][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.129201][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.136338][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.475083][ T8] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 133.548293][ T6614] overlayfs: failed to clone upperpath [ 133.695012][ T8] usb 5-1: config 0 has no interfaces? [ 133.706508][ T8] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 133.736686][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.788230][ T8] usb 5-1: config 0 descriptor?? [ 134.300161][ T27] usb 5-1: USB disconnect, device number 4 [ 138.418126][ T6699] loop2: detected capacity change from 0 to 256 [ 138.741710][ T6699] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 139.101403][ T6709] mmap: syz.1.205 (6709) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 140.113140][ T6721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.209'. [ 140.544251][ T6735] netlink: 'syz.3.212': attribute type 1 has an invalid length. [ 140.585238][ T6735] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.669496][ T6735] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.677296][ T6735] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 140.690575][ T6735] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 140.804194][ T6738] ip6erspan0: entered promiscuous mode [ 140.840214][ T6738] bond1: (slave ip6erspan0): making interface the new active one [ 140.865436][ T6738] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 141.160863][ T6749] capability: warning: `syz.4.215' uses 32-bit capabilities (legacy support in use) [ 142.784527][ T6774] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (13312 ns). Using initial count to start timer. [ 143.231354][ T6791] syz_tun: entered allmulticast mode [ 144.114952][ T5761] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 144.197447][ T6820] netlink: 24 bytes leftover after parsing attributes in process `syz.3.233'. [ 144.350142][ T5761] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.389634][ T5761] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 144.413429][ T5761] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 144.429846][ T5761] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 144.442740][ T5761] usb 3-1: SerialNumber: syz [ 144.490887][ T6820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.233'. [ 144.703151][ T5761] usb 3-1: 0:2 : does not exist [ 144.808163][ T5761] usb 3-1: USB disconnect, device number 2 [ 144.857636][ T5784] udevd[5784]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 146.324552][ T6861] Illegal XDP return value 4294967294 on prog (id 24) dev syz_tun, expect packet loss! [ 147.618298][ T6876] sctp: [Deprecated]: syz.1.252 (pid 6876) Use of struct sctp_assoc_value in delayed_ack socket option. [ 147.618298][ T6876] Use struct sctp_sack_info instead [ 148.157571][ T6885] fuse: Bad value for 'fd' [ 148.234577][ T6887] bridge0: entered promiscuous mode [ 148.240721][ T6887] vlan2: entered promiscuous mode [ 148.570488][ T6891] netlink: 'syz.4.259': attribute type 4 has an invalid length. [ 148.671308][ T6894] netlink: 'syz.4.259': attribute type 4 has an invalid length. [ 148.812837][ T6897] bridge0: port 3(macvlan2) entered blocking state [ 148.865351][ T6897] bridge0: port 3(macvlan2) entered disabled state [ 148.895144][ T6897] macvlan2: entered allmulticast mode [ 148.918180][ T6897] bridge0: entered allmulticast mode [ 149.006683][ T6897] macvlan2: left allmulticast mode [ 149.011984][ T6897] bridge0: left allmulticast mode [ 149.380634][ T6905] loop1: detected capacity change from 0 to 1024 [ 150.843466][ T6916] loop2: detected capacity change from 0 to 1024 [ 150.851380][ T6916] EXT4-fs: Ignoring removed oldalloc option [ 150.857744][ T6916] EXT4-fs: Ignoring removed bh option [ 150.868155][ T6916] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 150.916078][ T6916] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.005132][ T28] audit: type=1804 audit(1769188584.598:31): pid=6916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.268" name="/newroot/63/file1/bus" dev="loop2" ino=18 res=1 errno=0 [ 151.424133][ T6917] loop1: detected capacity change from 0 to 32768 [ 151.433493][ T6917] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.267 (6917) [ 151.465292][ T6917] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 151.480229][ T6917] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 151.489678][ T6917] BTRFS info (device loop1): using free space tree [ 151.554499][ T6917] BTRFS info (device loop1): enabling ssd optimizations [ 151.561857][ T6917] BTRFS info (device loop1): auto enabling async discard [ 151.735113][ T28] audit: type=1800 audit(1769188585.328:32): pid=6917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.267" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 152.040176][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.076264][ T6947] sctp: [Deprecated]: syz.4.274 (pid 6947) Use of struct sctp_assoc_value in delayed_ack socket option. [ 152.076264][ T6947] Use struct sctp_sack_info instead [ 152.248576][ T5771] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 153.120197][ T6970] netlink: 24 bytes leftover after parsing attributes in process `syz.4.283'. [ 153.213956][ T8] IPVS: starting estimator thread 0... [ 153.345083][ T6974] IPVS: using max 18 ests per chain, 43200 per kthread [ 153.355936][ T6971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.283'. [ 153.472454][ T6984] netlink: 12 bytes leftover after parsing attributes in process `syz.3.287'. [ 154.003447][ T6978] loop2: detected capacity change from 0 to 32768 [ 155.053632][ T6978] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.285 (6978) [ 155.139339][ T6978] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 155.194602][ T6978] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 155.237034][ T6978] BTRFS info (device loop2): using free space tree [ 155.282703][ T28] audit: type=1800 audit(1769188588.878:33): pid=6994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.290" name="/" dev="fuse" ino=9 res=0 errno=0 [ 155.541368][ T6978] BTRFS info (device loop2): enabling ssd optimizations [ 155.563323][ T6978] BTRFS info (device loop2): auto enabling async discard [ 155.586493][ T7023] netlink: 24 bytes leftover after parsing attributes in process `syz.1.293'. [ 155.761198][ T28] audit: type=1800 audit(1769188589.358:34): pid=6978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.285" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 156.216769][ T7031] netlink: 'syz.3.297': attribute type 4 has an invalid length. [ 156.548232][ T7034] netlink: 'syz.3.297': attribute type 4 has an invalid length. [ 156.886443][ T5772] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 157.195235][ T7034] syz.3.297 (7034) used greatest stack depth: 20648 bytes left [ 158.861401][ T7055] loop2: detected capacity change from 0 to 2048 [ 158.894664][ T7055] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 159.410661][ T7069] netlink: 35 bytes leftover after parsing attributes in process `syz.3.309'. [ 160.112783][ T7083] overlayfs: failed to clone upperpath [ 160.169873][ T7083] Invalid ELF header magic: != ELF [ 161.547238][ T7070] loop2: detected capacity change from 0 to 32768 [ 161.617573][ T7070] XFS (loop2): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 161.798565][ T7070] XFS (loop2): Ending clean mount [ 162.058565][ T5772] XFS (loop2): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 163.529579][ T7115] Invalid ELF header magic: != ELF [ 164.144486][ T7129] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 165.130527][ T7132] xt_bpf: check failed: parse error [ 165.175478][ T7134] netlink: 'syz.1.327': attribute type 4 has an invalid length. [ 165.238906][ T7134] netlink: 'syz.1.327': attribute type 4 has an invalid length. [ 167.814938][ T5815] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 168.879283][ T5815] usb 2-1: Using ep0 maxpacket: 32 [ 168.889880][ T5815] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 168.905225][ T5815] usb 2-1: config 0 has no interface number 0 [ 168.912199][ T5815] usb 2-1: config 0 interface 12 has no altsetting 0 [ 168.920451][ T7208] netlink: 76 bytes leftover after parsing attributes in process `syz.3.350'. [ 168.931791][ T5815] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 168.940995][ T5815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.949101][ T5815] usb 2-1: Product: syz [ 168.953311][ T5815] usb 2-1: Manufacturer: syz [ 168.958049][ T5815] usb 2-1: SerialNumber: syz [ 168.975976][ T5815] usb 2-1: config 0 descriptor?? [ 171.792543][ T5087] Bluetooth: hci0: unexpected Set CIG Parameters response data [ 171.900947][ T7245] xt_bpf: check failed: parse error [ 172.010753][ T5815] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 172.019462][ T5815] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 172.033351][ T5815] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 172.041821][ T5815] f81534: probe of 2-1:0.12 failed with error -71 [ 172.072453][ T5815] usb 2-1: USB disconnect, device number 3 [ 172.443451][ T7256] netlink: 'syz.4.372': attribute type 1 has an invalid length. [ 172.503210][ T7256] 8021q: adding VLAN 0 to HW filter on device bond1 [ 172.511419][ T7260] netlink: 24 bytes leftover after parsing attributes in process `syz.3.373'. [ 172.593540][ T7261] bond1: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 172.683237][ T7256] bond1: (slave ip6gretap1): making interface the new active one [ 172.717062][ T7256] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 172.991457][ T7266] loop1: detected capacity change from 0 to 32768 [ 173.182480][ T7271] ERROR: (device loop1): dbAlloc: the hint is outside the map [ 173.182480][ T7271] [ 173.208907][ T7271] ERROR: (device loop1): remounting filesystem as read-only [ 173.223924][ T7271] syz.1.375: attempt to access beyond end of device [ 173.223924][ T7271] loop1: rw=2049, sector=44032, nr_sectors = 8 limit=32768 [ 173.795320][ T7277] xt_bpf: check failed: parse error [ 174.293276][ T112] blkno = 1580, nblocks = 1 [ 174.298218][ T112] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map [ 174.298218][ T112] [ 175.886657][ T5087] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 175.948674][ T5087] Bluetooth: hci0: Injecting HCI hardware error event [ 175.960455][ T51] Bluetooth: hci0: hardware error 0x00 [ 178.215169][ T51] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 180.245353][ T51] Bluetooth: hci0: Opcode 0x2046 failed: -110 [ 180.541524][ T7323] xt_bpf: check failed: parse error [ 182.100625][ T7350] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.672665][ T7350] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.153944][ T7350] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.239377][ T7374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.406'. [ 183.488098][ T7350] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.134718][ T7350] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.171044][ T7350] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.189476][ T7350] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.228007][ T7350] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.227215][ T7402] syz.3.412: attempt to access beyond end of device [ 186.227215][ T7402] loop7: rw=0, sector=0, nr_sectors = 8 limit=0 [ 186.296682][ T7402] F2FS-fs (loop7): Unable to read 1th superblock [ 186.381479][ T7402] syz.3.412: attempt to access beyond end of device [ 186.381479][ T7402] loop7: rw=0, sector=8, nr_sectors = 8 limit=0 [ 186.431285][ T7402] F2FS-fs (loop7): Unable to read 2th superblock [ 186.586290][ T7413] netlink: 24 bytes leftover after parsing attributes in process `syz.4.419'. [ 188.974034][ T7442] loop1: detected capacity change from 0 to 128 [ 189.121967][ T7442] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 189.175554][ T7442] ext4 filesystem being mounted at /110/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 190.141893][ T5771] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 190.262318][ T7462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.293426][ T7459] loop2: detected capacity change from 0 to 128 [ 190.436958][ T7466] warning: `syz.1.436' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 192.845721][ T7517] netlink: 'syz.3.449': attribute type 1 has an invalid length. [ 192.884472][ T7517] bond2: entered promiscuous mode [ 192.893726][ T7517] 8021q: adding VLAN 0 to HW filter on device bond2 [ 193.018505][ T7517] 8021q: adding VLAN 0 to HW filter on device bond2 [ 193.053952][ T7517] bond2: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 193.085053][ T7517] bond2: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 193.114359][ T7517] bond2: (slave ip6gre2): making interface the new active one [ 193.150917][ T7517] ip6gre2: entered promiscuous mode [ 193.166769][ T7517] bond2: (slave ip6gre2): Enslaving as an active interface with an up link [ 193.214840][ T7524] netlink: 4 bytes leftover after parsing attributes in process `syz.3.449'. [ 193.293519][ T7529] loop1: detected capacity change from 0 to 128 [ 193.979111][ T7537] x_tables: duplicate underflow at hook 2 [ 194.530974][ T7524] bond2 (unregistering): (slave ip6gre2): Releasing backup interface [ 194.542158][ T7524] ip6gre2: left promiscuous mode [ 194.576760][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.583216][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.590861][ T7524] bond2 (unregistering): Released all slaves [ 195.945935][ T7568] netlink: 24 bytes leftover after parsing attributes in process `syz.1.458'. [ 196.544096][ T7584] loop1: detected capacity change from 0 to 4096 [ 196.780154][ T7584] ext4: Unknown parameter 'uid>00000000000000000000' [ 196.794096][ T7579] loop2: detected capacity change from 0 to 4096 [ 196.810364][ T7579] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 198.798651][ T7599] loop1: detected capacity change from 0 to 32768 [ 198.828241][ T7599] XFS: noikeep mount option is deprecated. [ 198.884201][ T7599] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 199.105411][ T5815] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 199.182133][ T7599] XFS (loop1): Ending clean mount [ 199.219971][ T7599] XFS (loop1): Quotacheck needed: Please wait. [ 199.324945][ T5815] usb 3-1: Using ep0 maxpacket: 16 [ 199.333469][ T5815] usb 3-1: config 0 has no interfaces? [ 199.343314][ T7626] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.356427][ T5815] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 199.370571][ T5815] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 199.380313][ T7599] XFS (loop1): Quotacheck: Done. [ 199.396584][ T5815] usb 3-1: Manufacturer: syz [ 199.455264][ T5815] usb 3-1: config 0 descriptor?? [ 199.904163][ T7626] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.982467][ T7612] netlink: 76 bytes leftover after parsing attributes in process `syz.2.472'. [ 200.028488][ T5815] usb 3-1: USB disconnect, device number 3 [ 200.153974][ T7626] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.267187][ T7626] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.406451][ T7626] Failed to register nexthop notifier [ 200.564599][ T7633] IPv4: Oversized IP packet from 172.20.20.170 [ 200.573311][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 200.580642][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 200.593618][ T7633] IPv4: Oversized IP packet from 172.20.20.170 [ 200.600510][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 200.607036][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 200.620203][ T7633] IPv4: Oversized IP packet from 172.20.20.170 [ 200.628422][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 200.635039][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 200.645424][ T7633] IPv4: Oversized IP packet from 172.20.20.170 [ 201.618999][ T5771] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 203.491996][ T7667] lo: entered allmulticast mode [ 203.564140][ T7666] lo: left allmulticast mode [ 204.469906][ T7675] vlan2: entered promiscuous mode [ 204.492527][ T7675] vlan2: entered allmulticast mode [ 204.499391][ T7675] bridge0: entered allmulticast mode [ 204.521842][ T7675] netlink: 4 bytes leftover after parsing attributes in process `syz.4.489'. [ 204.555175][ T7675] bridge_slave_0: left allmulticast mode [ 204.560930][ T7675] bridge_slave_0: left promiscuous mode [ 204.589412][ T7675] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.628166][ T7675] bridge_slave_1: left allmulticast mode [ 204.655033][ T7675] bridge_slave_1: left promiscuous mode [ 204.660898][ T7675] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.712003][ T7675] bond0: (slave bond_slave_0): Releasing backup interface [ 204.759854][ T7675] bond0: (slave bond_slave_1): Releasing backup interface [ 204.903974][ T7675] team0: Port device team_slave_0 removed [ 204.975453][ T7675] team0: Port device team_slave_1 removed [ 205.036036][ T7675] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.056541][ T7675] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.135666][ T7675] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.144250][ T7675] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.178614][ T7675] bond1: (slave ip6gretap1): Releasing active interface [ 207.104317][ T7706] netlink: 24 bytes leftover after parsing attributes in process `syz.3.502'. [ 210.712849][ T7727] loop2: detected capacity change from 0 to 40427 [ 210.750616][ T7727] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 210.777480][ T7727] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 210.805845][ T7727] F2FS-fs (loop2): invalid crc value [ 210.849998][ T7727] F2FS-fs (loop2): Found nat_bits in checkpoint [ 211.014890][ T7727] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 211.022398][ T7727] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 211.292685][ T7747] netlink: 24 bytes leftover after parsing attributes in process `syz.4.515'. [ 212.004994][ T5782] Bluetooth: hci3: command 0x0406 tx timeout [ 212.020377][ T5782] Bluetooth: hci1: command 0x0406 tx timeout [ 214.637974][ T7770] overlayfs: failed to clone upperpath [ 214.723527][ T7773] loop2: detected capacity change from 0 to 512 [ 214.763419][ T7773] EXT4-fs (loop2): 1 truncate cleaned up [ 214.780955][ T7773] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.546280][ T7785] vlan2: entered promiscuous mode [ 215.551494][ T7785] bridge0: entered promiscuous mode [ 215.562891][ T7785] vlan2: entered allmulticast mode [ 215.568653][ T7785] bridge0: entered allmulticast mode [ 215.598097][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.615973][ T7788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.525'. [ 215.724226][ T7785] bridge_slave_0: left allmulticast mode [ 215.752638][ T7785] bridge_slave_0: left promiscuous mode [ 215.782545][ T7785] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.846768][ T7785] bridge_slave_1: left allmulticast mode [ 215.852518][ T7785] bridge_slave_1: left promiscuous mode [ 215.886356][ T7785] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.934070][ T7785] bond0: (slave bond_slave_0): Releasing backup interface [ 216.110919][ T7785] bond0: (slave bond_slave_1): Releasing backup interface [ 216.323927][ T7785] team0: Port device team_slave_0 removed [ 216.405840][ T7785] team0: Port device team_slave_1 removed [ 216.412757][ T7785] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.446023][ T7785] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.459208][ T7785] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.475401][ T7785] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.506985][ T7785] bond1: (slave ip6erspan0): Releasing active interface [ 216.613204][ T7797] netlink: 24 bytes leftover after parsing attributes in process `syz.1.528'. [ 217.436127][ T7815] netlink: 'syz.2.532': attribute type 1 has an invalid length. [ 217.507721][ T7818] o2cb: This node has not been configured. [ 217.515192][ T7818] o2cb: Cluster check failed. Fix errors before retrying. [ 217.526086][ T7818] (syz.4.534,7818,1):user_dlm_register:674 ERROR: status = -22 [ 217.533793][ T7818] (syz.4.534,7818,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 217.559054][ T7815] bond1: entered promiscuous mode [ 217.564626][ T7815] 8021q: adding VLAN 0 to HW filter on device bond1 [ 217.641592][ T7815] netlink: 28 bytes leftover after parsing attributes in process `syz.2.532'. [ 217.669543][ T7815] bond1: entered allmulticast mode [ 217.718535][ T7815] bond1: (slave bridge1): making interface the new active one [ 217.752393][ T7815] bridge1: entered promiscuous mode [ 217.911748][ T7815] bridge1: entered allmulticast mode [ 218.032645][ T7815] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 218.726213][ T7833] netlink: 44 bytes leftover after parsing attributes in process `syz.4.539'. [ 218.784632][ T7835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.540'. [ 219.174354][ T7838] netlink: 4 bytes leftover after parsing attributes in process `syz.2.540'. [ 219.655402][ T7840] netlink: 'syz.3.542': attribute type 1 has an invalid length. [ 219.685920][ T7840] 8021q: adding VLAN 0 to HW filter on device bond2 [ 219.767945][ T7840] bond2: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 219.788819][ T7840] bond2: entered allmulticast mode [ 219.816939][ T7843] netlink: 20 bytes leftover after parsing attributes in process `syz.4.549'. [ 219.833886][ T7845] vlan2: entered promiscuous mode [ 219.844153][ T7850] netlink: 4 bytes leftover after parsing attributes in process `syz.1.541'. [ 219.870716][ T7845] bridge0: entered promiscuous mode [ 219.900252][ T7845] vlan2: entered allmulticast mode [ 219.910148][ T7845] bridge0: entered allmulticast mode [ 219.939164][ T7846] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 219.973937][ T7851] netlink: 20 bytes leftover after parsing attributes in process `syz.4.549'. [ 221.772441][ T7867] overlayfs: failed to clone upperpath [ 221.893942][ T7866] process 'newroot/116/bus/file0' started with executable stack [ 222.252574][ T5087] Bluetooth: hci2: command 0x0406 tx timeout [ 222.867783][ T7894] netlink: 24 bytes leftover after parsing attributes in process `syz.3.558'. [ 223.334245][ T7906] vlan2: entered promiscuous mode [ 223.340925][ T7906] bridge0: entered promiscuous mode [ 223.346512][ T7906] vlan2: entered allmulticast mode [ 223.351868][ T7906] bridge0: entered allmulticast mode [ 223.376447][ T7906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.562'. [ 223.416223][ T7906] bridge_slave_0: left allmulticast mode [ 223.422144][ T7906] bridge_slave_0: left promiscuous mode [ 223.432612][ T7906] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.446562][ T7906] bridge_slave_1: left allmulticast mode [ 223.452500][ T7906] bridge_slave_1: left promiscuous mode [ 223.465030][ T7906] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.486390][ T7906] bond0: (slave bond_slave_0): Releasing backup interface [ 223.512303][ T7906] bond0: (slave bond_slave_1): Releasing backup interface [ 223.569248][ T7906] team0: Port device team_slave_0 removed [ 223.599371][ T7906] team0: Port device team_slave_1 removed [ 223.617368][ T7906] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.629781][ T7906] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.640400][ T7906] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.649368][ T7906] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.674412][ T7906] bond1: (slave bridge1): Releasing backup interface [ 223.682565][ T7906] bridge1: left promiscuous mode [ 223.690927][ T7906] bridge1: left allmulticast mode [ 224.308070][ T7916] lo speed is unknown, defaulting to 1000 [ 224.314418][ T7916] lo speed is unknown, defaulting to 1000 [ 224.358052][ T7916] lo speed is unknown, defaulting to 1000 [ 224.432531][ T7916] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 224.559945][ T7916] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 224.738293][ T7916] lo speed is unknown, defaulting to 1000 [ 224.749698][ T7916] lo speed is unknown, defaulting to 1000 [ 224.759487][ T7916] lo speed is unknown, defaulting to 1000 [ 224.771406][ T7916] lo speed is unknown, defaulting to 1000 [ 224.782163][ T7916] lo speed is unknown, defaulting to 1000 [ 224.801267][ T7930] netlink: 24 bytes leftover after parsing attributes in process `syz.2.572'. [ 228.173298][ T7968] siw: device registration error -23 [ 229.132574][ T7985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.587'. [ 229.157212][ T7985] ~ÿ: entered promiscuous mode [ 229.806123][ T7990] wireguard0: entered promiscuous mode [ 229.854675][ T7990] wireguard0: entered allmulticast mode [ 230.034587][ C0] sched: RT throttling activated [ 235.409166][ T8023] lo speed is unknown, defaulting to 1000 [ 235.741391][ T8026] netlink: 24 bytes leftover after parsing attributes in process `syz.3.597'. [ 236.116539][ T8031] netlink: 4 bytes leftover after parsing attributes in process `syz.3.599'. [ 236.205459][ T8032] netlink: 4 bytes leftover after parsing attributes in process `syz.3.599'. [ 240.736050][ T8078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.620'. [ 240.879439][ T8078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.620'. [ 241.450177][ T8091] netlink: 12 bytes leftover after parsing attributes in process `syz.2.626'. [ 241.555473][ T8091] 8021q: adding VLAN 0 to HW filter on device bond2 [ 241.592154][ T8098] macvlan2: entered promiscuous mode [ 241.597544][ T8098] macvlan2: entered allmulticast mode [ 241.609713][ T8098] bond2: entered allmulticast mode [ 241.615822][ T8098] bond2: entered promiscuous mode [ 241.622530][ T8098] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 241.632219][ T8098] team0: Port device macvlan2 added [ 245.727816][ T8132] cgroup: fork rejected by pids controller in /syz2 [ 247.935730][ T8205] Zero length message leads to an empty skb [ 247.997018][ T8204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.297407][ T8193] overlay: ./file1 is not a directory [ 248.435001][ T8209] netlink: 4 bytes leftover after parsing attributes in process `syz.4.658'. [ 248.444911][ T8209] netlink: 2 bytes leftover after parsing attributes in process `syz.4.658'. [ 249.917154][ T8230] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 251.170503][ T8234] loop2: detected capacity change from 0 to 32768 [ 251.185783][ T8234] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.667 (8234) [ 251.240691][ T8234] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 251.283979][ T8234] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 251.313592][ T8234] BTRFS info (device loop2): using free space tree [ 251.690610][ T8234] BTRFS info (device loop2): enabling ssd optimizations [ 251.720049][ T8234] BTRFS info (device loop2): auto enabling async discard [ 253.121906][ T5772] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 256.368411][ T8314] binder: 8313:8314 ioctl c0306201 2000000001c0 returned -14 [ 256.728398][ T8327] xt_TCPMSS: Only works on TCP SYN packets [ 256.892209][ T8336] netlink: 'syz.3.695': attribute type 2 has an invalid length. [ 258.076648][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 258.089280][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.398073][ T788] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 259.651609][ T788] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.753964][ T788] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 259.904453][ T788] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 260.016271][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.150311][ T788] usb 3-1: config 0 descriptor?? [ 260.273533][ T788] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 260.608120][ T1188] usb 3-1: USB disconnect, device number 4 [ 261.616689][ T8414] fuse: root generation should be zero [ 262.789073][ T8424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.724'. [ 262.918700][ T8428] all: renamed from lo (while UP) [ 263.090993][ T8430] netlink: 28 bytes leftover after parsing attributes in process `syz.3.727'. [ 263.114280][ T8430] netlink: 28 bytes leftover after parsing attributes in process `syz.3.727'. [ 263.143501][ T8430] syz_tun: entered promiscuous mode [ 263.153039][ T8430] syz_tun: left promiscuous mode [ 264.094817][ T8437] netlink: 1319 bytes leftover after parsing attributes in process `syz.3.730'. [ 264.154984][ T8438] syzkaller0: entered promiscuous mode [ 264.160545][ T8438] syzkaller0: entered allmulticast mode [ 265.529143][ T8461] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 265.537325][ T8461] IPv6: NLM_F_CREATE should be set when creating new route [ 266.937429][ T8483] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 268.428005][ T8521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.030369][ T8553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.773'. [ 272.614127][ T8566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.777'. [ 277.218636][ T8576] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.235207][ T8576] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.245020][ T8576] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.254341][ T8576] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.470048][ T8576] vlan2: left promiscuous mode [ 277.495105][ T8576] vlan2: left allmulticast mode [ 277.500061][ T8576] bridge0: left allmulticast mode [ 277.521475][ T8588] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 277.589006][ T8595] lo speed is unknown, defaulting to 1000 [ 281.224163][ T8658] tipc: Started in network mode [ 281.233984][ T8658] tipc: Node identity 4, cluster identity 4711 [ 281.258112][ T8658] tipc: Node number set to 4 [ 283.873919][ T28] audit: type=1804 audit(1769188713.748:35): pid=8701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.820" name="file0" dev="ramfs" ino=16405 res=1 errno=0 [ 284.141246][ T8712] ip6t_REJECT: ECHOREPLY is not supported [ 285.307600][ T8724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.827'. [ 285.325029][ T8724] veth0_vlan: entered allmulticast mode [ 289.769635][ T8765] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 292.905274][ T8809] loop2: detected capacity change from 0 to 512 [ 293.087350][ T8809] EXT4-fs: Ignoring removed nomblk_io_submit option [ 293.124508][ T8809] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 293.153437][ T8809] EXT4-fs (loop2): 1 truncate cleaned up [ 293.160572][ T8809] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.462026][ T8832] netlink: 'syz.4.862': attribute type 1 has an invalid length. [ 294.535415][ T8832] bond2: entered promiscuous mode [ 294.562341][ T8832] bond2: entered allmulticast mode [ 294.573375][ T8834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.862'. [ 294.600354][ T8834] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 294.614957][ T8834] bond2: (slave bridge1): making interface the new active one [ 294.638072][ T8834] bridge1: entered promiscuous mode [ 294.652029][ T8834] bridge1: entered allmulticast mode [ 294.659247][ T8834] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 294.672858][ T5915] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 294.692004][ T8832] netlink: 28 bytes leftover after parsing attributes in process `syz.4.862'. [ 294.908334][ T8832] bond2: left promiscuous mode [ 294.940436][ T8832] bridge1: left promiscuous mode [ 294.983500][ T8832] bond2: left allmulticast mode [ 295.031851][ T8832] bridge1: left allmulticast mode [ 295.120151][ T8832] 8021q: adding VLAN 0 to HW filter on device bond2 [ 295.332630][ T8832] syz.4.862 (8832) used greatest stack depth: 20552 bytes left [ 295.562019][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.573295][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.591651][ T5915] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 295.615568][ T5915] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 295.625860][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.645898][ T5915] usb 3-1: config 0 descriptor?? [ 295.765597][ T9] IPVS: starting estimator thread 0... [ 295.874164][ T8851] IPVS: using max 20 ests per chain, 48000 per kthread [ 295.908771][ T28] audit: type=1326 audit(1769188725.012:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8854 comm="syz.3.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d439acb9 code=0x7ffc0000 [ 295.941832][ T28] audit: type=1326 audit(1769188725.012:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8854 comm="syz.3.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d439acb9 code=0x7ffc0000 [ 295.971091][ T28] audit: type=1326 audit(1769188725.021:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8854 comm="syz.3.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f63d439acb9 code=0x7ffc0000 [ 295.999909][ T28] audit: type=1326 audit(1769188725.021:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8854 comm="syz.3.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d439acb9 code=0x7ffc0000 [ 296.023401][ T28] audit: type=1326 audit(1769188725.021:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8854 comm="syz.3.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f63d439acb9 code=0x7ffc0000 [ 296.046487][ T28] audit: type=1326 audit(1769188725.021:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8854 comm="syz.3.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f63d439aa22 code=0x7ffc0000 [ 296.079236][ T28] audit: type=1326 audit(1769188725.031:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8854 comm="syz.3.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f63d435b58e code=0x7ffc0000 [ 296.124168][ T28] audit: type=1326 audit(1769188725.040:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8854 comm="syz.3.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f63d439aae7 code=0x7ffc0000 [ 296.155191][ T5915] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 296.178176][ T28] audit: type=1326 audit(1769188725.040:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8854 comm="syz.3.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f63d435b58e code=0x7ffc0000 [ 296.217744][ T28] audit: type=1326 audit(1769188725.040:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8854 comm="syz.3.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f63d439a94b code=0x7ffc0000 [ 296.249994][ T5915] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 296.533847][ T8863] netlink: 40 bytes leftover after parsing attributes in process `syz.1.872'. [ 296.552821][ T8863] netlink: 40 bytes leftover after parsing attributes in process `syz.1.872'. [ 296.563541][ T8863] netlink: 40 bytes leftover after parsing attributes in process `syz.1.872'. [ 296.710053][ T8865] overlayfs: failed to clone upperpath [ 296.876744][ T5087] Bluetooth: hci1: unexpected event for opcode 0x2011 [ 297.112013][ T27] usb 3-1: USB disconnect, device number 5 [ 298.559665][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.971695][ T8890] netlink: 'syz.2.881': attribute type 10 has an invalid length. [ 299.061731][ T8890] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 300.313100][ T8913] GUP no longer grows the stack in syz.2.887 (8913): 200000004000-200000008000 (200000002000) [ 300.325613][ T8913] CPU: 1 PID: 8913 Comm: syz.2.887 Not tainted syzkaller #0 [ 300.333023][ T8913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 300.343132][ T8913] Call Trace: [ 300.346490][ T8913] [ 300.349484][ T8913] dump_stack_lvl+0x18c/0x250 [ 300.354261][ T8913] ? show_regs_print_info+0x20/0x20 [ 300.359535][ T8913] ? load_image+0x400/0x400 [ 300.364106][ T8913] ? find_vma+0x134/0x1b0 [ 300.368533][ T8913] __get_user_pages+0xf0e/0x1380 [ 300.373583][ T8913] ? populate_vma_page_range+0x380/0x380 [ 300.379385][ T8913] get_user_pages_remote+0x3ea/0xbd0 [ 300.384749][ T8913] ? __might_sleep+0x60/0xe0 [ 300.389423][ T8913] ? get_dump_page+0x200/0x200 [ 300.394272][ T8913] __access_remote_vm+0x1fd/0x570 [ 300.399454][ T8913] ? generic_access_phys+0x650/0x650 [ 300.404807][ T8913] ? alloc_pages+0x4dc/0x740 [ 300.409483][ T8913] ? do_raw_spin_unlock+0x121/0x230 [ 300.414772][ T8913] proc_pid_cmdline_read+0x453/0x840 [ 300.420157][ T8913] ? comm_show+0x150/0x150 [ 300.424656][ T8913] ? common_file_perm+0xe0/0x1f0 [ 300.429671][ T8913] ? fsnotify_perm+0x271/0x5e0 [ 300.434511][ T8913] do_iter_read+0x4fa/0xc90 [ 300.439098][ T8913] ? comm_show+0x150/0x150 [ 300.443584][ T8913] ? vfs_iter_read+0xa0/0xa0 [ 300.448246][ T8913] ? __import_iovec+0x5f2/0x850 [ 300.453180][ T8913] ? import_iovec+0x73/0xa0 [ 300.457758][ T8913] do_preadv+0x236/0x390 [ 300.462121][ T8913] ? do_writev+0x480/0x480 [ 300.466625][ T8913] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 300.472680][ T8913] ? lock_chain_count+0x20/0x20 [ 300.477601][ T8913] ? lockdep_hardirqs_on+0x98/0x150 [ 300.482868][ T8913] do_syscall_64+0x55/0xa0 [ 300.487344][ T8913] ? clear_bhb_loop+0x40/0x90 [ 300.492103][ T8913] ? clear_bhb_loop+0x40/0x90 [ 300.496937][ T8913] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 300.502899][ T8913] RIP: 0033:0x7f3cf1b9acb9 [ 300.507382][ T8913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.527145][ T8913] RSP: 002b:00007f3cf29b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 300.535627][ T8913] RAX: ffffffffffffffda RBX: 00007f3cf1e15fa0 RCX: 00007f3cf1b9acb9 [ 300.543700][ T8913] RDX: 0000000000000001 RSI: 0000200000000d00 RDI: 0000000000000006 [ 300.551745][ T8913] RBP: 00007f3cf1c08bf7 R08: 0000000000000200 R09: 0000000000000000 [ 300.559782][ T8913] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 300.568085][ T8913] R13: 00007f3cf1e16038 R14: 00007f3cf1e15fa0 R15: 00007ffda1991f08 [ 300.576231][ T8913] [ 300.726001][ T8924] netlink: 'syz.4.890': attribute type 4 has an invalid length. [ 301.111157][ T8931] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 301.137831][ T8931] CIFS mount error: No usable UNC path provided in device string! [ 301.137831][ T8931] [ 301.148335][ T8931] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 304.769254][ T8965] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.900'. [ 305.520058][ T8972] VFS: Mount too revealing [ 308.323192][ T9007] netlink: 12 bytes leftover after parsing attributes in process `syz.4.914'. [ 309.559114][ T5087] Bluetooth: hci3: unexpected event for opcode 0x202f [ 312.006493][ T9032] netlink: 32 bytes leftover after parsing attributes in process `syz.3.922'. [ 312.015934][ T9032] netlink: 32 bytes leftover after parsing attributes in process `syz.3.922'. [ 312.662461][ T9053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.927'. [ 312.852273][ T9054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.927'. [ 314.178769][ T5087] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 314.189467][ T5087] Bluetooth: hci3: Injecting HCI hardware error event [ 314.200455][ T51] Bluetooth: hci3: hardware error 0x00 [ 316.051809][ T9079] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaa [ 316.382780][ T51] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 318.128179][ T9108] loop2: detected capacity change from 0 to 512 [ 318.143619][ T9108] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 323.791843][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.809566][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.472971][ T9181] sch_fq: defrate 0 ignored. [ 327.214346][ T9204] netlink: 'syz.3.976': attribute type 1 has an invalid length. [ 327.272168][ T9204] 8021q: adding VLAN 0 to HW filter on device bond3 [ 327.378157][ T9204] 8021q: adding VLAN 0 to HW filter on device bond3 [ 327.407144][ T9204] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 327.460404][ T9204] bond3: (slave vti0): Error -95 calling set_mac_address [ 327.488094][ T9205] netlink: 32 bytes leftover after parsing attributes in process `syz.2.975'. [ 327.508252][ T9205] netlink: 32 bytes leftover after parsing attributes in process `syz.2.975'. [ 327.540217][ T9210] bond3: (slave gretap1): making interface the new active one [ 327.590471][ T9210] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 327.757783][ T9210] syz.3.976 (9210) used greatest stack depth: 19080 bytes left [ 327.949549][ T9222] tipc: Enabled bearer , priority 10 [ 328.093918][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 328.093935][ T28] audit: type=1326 audit(1769189011.125:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9219 comm="syz.2.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cf1b9acb9 code=0x7ffc0000 [ 328.140125][ T9226] tipc: Enabled bearer , priority 0 [ 328.199099][ T28] audit: type=1326 audit(1769189011.125:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9219 comm="syz.2.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cf1b9acb9 code=0x7ffc0000 [ 328.223648][ T28] audit: type=1326 audit(1769189011.172:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9219 comm="syz.2.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f3cf1b9acb9 code=0x7ffc0000 [ 328.295522][ T28] audit: type=1326 audit(1769189011.172:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9219 comm="syz.2.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cf1b9acb9 code=0x7ffc0000 [ 328.331805][ T9221] loop2: detected capacity change from 0 to 2048 [ 328.669098][ T28] audit: type=1326 audit(1769189011.172:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9219 comm="syz.2.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cf1b9acb9 code=0x7ffc0000 [ 328.888999][ T9221] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 329.002103][ T28] audit: type=1326 audit(1769189011.172:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9219 comm="syz.2.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f3cf1b9acb9 code=0x7ffc0000 [ 329.062601][ T28] audit: type=1326 audit(1769189011.172:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9219 comm="syz.2.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cf1b9acb9 code=0x7ffc0000 [ 329.104123][ T28] audit: type=1326 audit(1769189011.172:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9219 comm="syz.2.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cf1b9acb9 code=0x7ffc0000 [ 329.136173][ T28] audit: type=1326 audit(1769189011.172:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9219 comm="syz.2.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f3cf1b9acb9 code=0x7ffc0000 [ 329.196010][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 329.205333][ T28] audit: type=1326 audit(1769189011.172:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9219 comm="syz.2.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3cf1b9aa22 code=0x7ffc0000 [ 329.229423][ T9233] netlink: 20 bytes leftover after parsing attributes in process `syz.3.984'. [ 333.481082][ T9269] xt_CT: You must specify a L4 protocol and not use inversions on it [ 338.008234][ T9301] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1005'. [ 338.121287][ T9304] netlink: 'syz.4.1005': attribute type 5 has an invalid length. [ 338.129408][ T9304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1005'. [ 338.272102][ T27] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 338.307090][ T9310] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1009'. [ 338.378798][ T27] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 338.576545][ T9317] netlink: 'syz.4.1012': attribute type 10 has an invalid length. [ 338.605412][ T9317] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.635834][ T9317] bond0: (slave team0): Enslaving as an active interface with an up link [ 338.690906][ T9317] netlink: 'syz.4.1012': attribute type 10 has an invalid length. [ 338.754080][ T9317] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 338.840634][ T9317] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 340.407917][ T9334] ip6t_rpfilter: unknown options [ 341.074841][ T9342] fuse: Bad value for 'fd' [ 344.719186][ T9379] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1029'. [ 344.776000][ T9379] veth1: entered promiscuous mode [ 344.785685][ T9379] bridge3: entered promiscuous mode [ 344.796730][ T9379] hsr1: entered promiscuous mode [ 347.644673][ T9418] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1040'. [ 348.822512][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 348.822527][ T28] audit: type=1804 audit(1769189030.516:102): pid=9428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1044" name="bus" dev="ramfs" ino=17814 res=1 errno=0 [ 348.898191][ T28] audit: type=1804 audit(1769189030.563:103): pid=9428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1044" name="bus" dev="ramfs" ino=17814 res=1 errno=0 [ 355.514888][ T9507] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1071'. [ 357.998188][ T9526] net_ratelimit: 86 callbacks suppressed [ 357.998235][ T9526] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 358.734751][ T9531] lo speed is unknown, defaulting to 1000 [ 358.753888][ T28] audit: type=1326 audit(1769189039.804:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9528 comm="syz.3.1079" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f63d439acb9 code=0x0 [ 360.654583][ T9558] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1086'. [ 361.545952][ T9562] fuse: Bad value for 'fd' [ 369.264083][ T9619] loop2: detected capacity change from 0 to 256 [ 369.368654][ T9619] FAT-fs (loop2): Directory bread(block 64) failed [ 369.397013][ T9619] FAT-fs (loop2): Directory bread(block 65) failed [ 369.412506][ T9619] FAT-fs (loop2): Directory bread(block 66) failed [ 369.429503][ T9619] FAT-fs (loop2): Directory bread(block 67) failed [ 369.450702][ T9619] FAT-fs (loop2): Directory bread(block 68) failed [ 369.458976][ T9619] FAT-fs (loop2): Directory bread(block 69) failed [ 369.493472][ T9619] FAT-fs (loop2): Directory bread(block 70) failed [ 369.504475][ T9619] FAT-fs (loop2): Directory bread(block 71) failed [ 369.522148][ T9619] FAT-fs (loop2): Directory bread(block 72) failed [ 369.547175][ T9619] FAT-fs (loop2): Directory bread(block 73) failed [ 374.278437][ T28] audit: type=1804 audit(1769189054.322:105): pid=9652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1117" name="bus" dev="ramfs" ino=18133 res=1 errno=0 [ 374.346957][ T28] audit: type=1804 audit(1769189054.369:106): pid=9652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1117" name="bus" dev="ramfs" ino=18133 res=1 errno=0 [ 376.034160][ T9676] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1124'. [ 376.510006][ T9687] xt_TCPMSS: Only works on TCP SYN packets [ 376.926393][ T9685] overlayfs: failed to resolve './cgroup': -2 [ 378.414055][ T28] audit: type=1804 audit(1769189058.194:107): pid=9709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1136" name="bus" dev="ramfs" ino=18911 res=1 errno=0 [ 378.496495][ T28] audit: type=1804 audit(1769189058.232:108): pid=9709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1136" name="bus" dev="ramfs" ino=18911 res=1 errno=0 [ 378.704235][ T9699] cgroup: fork rejected by pids controller in /syz1 [ 378.763177][ T9745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1138'. [ 380.489713][ T28] audit: type=1326 audit(1769189060.131:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9756 comm="syz.4.1142" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a4d19acb9 code=0x0 [ 381.209402][ T9759] lo speed is unknown, defaulting to 1000 [ 384.690925][ T9791] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1151'. [ 384.739272][ T9791] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1151'. [ 384.942211][ T9794] veth1_to_bond: entered allmulticast mode [ 384.974278][ T9794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1152'. [ 385.027411][ T9798] fuse: Unknown parameter '9p' [ 385.339430][ T9794] veth1_to_bond (unregistering): left allmulticast mode [ 385.413357][ T9802] syz_tun: entered allmulticast mode [ 385.424617][ T9799] syz_tun: left allmulticast mode [ 387.878786][ T9838] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 388.493293][ T9841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1165'. [ 389.368588][ T9873] netlink: 'syz.4.1174': attribute type 4 has an invalid length. [ 389.606597][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 389.613172][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 390.029801][ C0] hrtimer: interrupt took 48190 ns [ 391.081031][ T9894] netlink: 'syz.4.1181': attribute type 1 has an invalid length. [ 391.382170][ T9894] 8021q: adding VLAN 0 to HW filter on device bond3 [ 391.486026][ T9896] bond3: (slave gretap2): making interface the new active one [ 391.667434][ T9896] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 392.640455][ T9906] loop2: detected capacity change from 0 to 512 [ 392.656044][ T9906] EXT4-fs: Ignoring removed bh option [ 392.700594][ T9906] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 392.751820][ T9906] EXT4-fs (loop2): orphan cleanup on readonly fs [ 392.816375][ T9906] EXT4-fs (loop2): 1 truncate cleaned up [ 392.844211][ T9906] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 393.193590][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.444014][ T9918] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 396.049483][ T9932] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1192'. [ 396.172970][ T9932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1192'. [ 396.193761][ T9932] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1192'. [ 397.507573][ T9938] syz.3.1193 (9938) used greatest stack depth: 17864 bytes left [ 400.348673][ T9978] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1206'. [ 400.491934][ T9978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1206'. [ 402.763610][ T9999] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1211'. [ 403.227148][T10000] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1211'. [ 408.192433][T10048] input: syz1 as /devices/virtual/input/input6 [ 520.380414][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 520.387481][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P788/1:b..l [ 520.396001][ C1] rcu: (detected by 1, t=10502 jiffies, g=41745, q=73 ncpus=2) [ 520.403679][ C1] task:kworker/1:2 state:R running task stack:24328 pid:788 ppid:2 flags:0x00004000 [ 520.416172][ C1] Workqueue: events_power_efficient gc_worker [ 520.422313][ C1] Call Trace: [ 520.425641][ C1] [ 520.428617][ C1] __schedule+0x1553/0x45a0 [ 520.433232][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 520.439275][ C1] ? asan.module_dtor+0x20/0x20 [ 520.444182][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 520.449452][ C1] preempt_schedule_irq+0xbf/0x150 [ 520.454623][ C1] ? preempt_schedule_notrace+0x110/0x110 [ 520.460421][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 520.466300][ C1] irqentry_exit+0x67/0x70 [ 520.470822][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 520.476859][ C1] RIP: 0010:lock_acquire+0x208/0x420 [ 520.482206][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 520.501887][ C1] RSP: 0000:ffffc90003fd7940 EFLAGS: 00000206 [ 520.508019][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 38710f0fcb937b00 [ 520.516038][ C1] RDX: 0000000000000000 RSI: ffffffff8acada80 RDI: ffffffff8b1c80e0 [ 520.524059][ C1] RBP: ffffc90003fd7a48 R08: dffffc0000000000 R09: 1ffffffff2237ca0 [ 520.532081][ C1] R10: dffffc0000000000 R11: fffffbfff2237ca1 R12: 1ffff920007faf34 [ 520.540119][ C1] R13: ffffffff8d131fe0 R14: 0000000000000246 R15: dffffc0000000000 [ 520.548284][ C1] ? __might_sleep+0xe0/0xe0 [ 520.552947][ C1] ? read_lock_is_recursive+0x20/0x20 [ 520.558389][ C1] gc_worker+0x28d/0x1490 [ 520.562767][ C1] ? gc_worker+0x269/0x1490 [ 520.567425][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 520.572685][ C1] ? gc_worker+0x269/0x1490 [ 520.577243][ C1] ? init_conntrack+0xf10/0xf10 [ 520.582138][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 520.587591][ C1] ? process_scheduled_works+0x96f/0x15d0 [ 520.593415][ C1] ? process_scheduled_works+0x96f/0x15d0 [ 520.599206][ C1] process_scheduled_works+0xa5d/0x15d0 [ 520.604844][ C1] ? assign_work+0x430/0x430 [ 520.609502][ C1] ? assign_work+0x3d0/0x430 [ 520.614153][ C1] worker_thread+0xa55/0xfc0 [ 520.618804][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 520.624745][ C1] ? _raw_spin_unlock+0x40/0x40 [ 520.629647][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 520.635607][ C1] kthread+0x2fa/0x390 [ 520.639736][ C1] ? pr_cont_work+0x560/0x560 [ 520.644476][ C1] ? kthread_blkcg+0xd0/0xd0 [ 520.649142][ C1] ret_from_fork+0x48/0x80 [ 520.653633][ C1] ? kthread_blkcg+0xd0/0xd0 [ 520.658304][ C1] ret_from_fork_asm+0x11/0x20 [ 520.663156][ C1] [ 520.666313][ C1] rcu: rcu_preempt kthread starved for 10514 jiffies! g41745 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 520.677567][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 520.687665][ C1] rcu: RCU grace-period kthread stack dump: [ 520.693587][ C1] task:rcu_preempt state:R running task stack:27656 pid:17 ppid:2 flags:0x00004000 [ 520.704423][ C1] Call Trace: [ 520.707748][ C1] [ 520.710748][ C1] __schedule+0x1553/0x45a0 [ 520.715337][ C1] ? _raw_spin_lock_bh+0x41/0x50 [ 520.720334][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 520.726279][ C1] ? asan.module_dtor+0x20/0x20 [ 520.731195][ C1] ? enqueue_timer+0x23d/0x550 [ 520.736054][ C1] ? __mod_timer+0x984/0xdb0 [ 520.740717][ C1] schedule+0xbd/0x170 [ 520.744842][ C1] schedule_timeout+0x188/0x2d0 [ 520.749737][ C1] ? console_conditional_schedule+0x40/0x40 [ 520.755684][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 520.761628][ C1] ? update_process_times+0x1b0/0x1b0 [ 520.767087][ C1] ? prepare_to_swait_event+0x339/0x360 [ 520.772690][ C1] rcu_gp_fqs_loop+0x313/0x1590 [ 520.777594][ C1] ? rcu_gp_init+0x1162/0x1560 [ 520.782410][ C1] ? rcu_gp_kthread+0x3b0/0x3b0 [ 520.787311][ C1] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 520.793533][ C1] ? rcu_gp_init+0x1560/0x1560 [ 520.798346][ C1] ? rcu_gp_cleanup+0xb41/0xc90 [ 520.803246][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 520.808594][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 520.813842][ C1] rcu_gp_kthread+0x9d/0x3b0 [ 520.818492][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 520.823738][ C1] ? __kthread_parkme+0x7a/0x1c0 [ 520.828722][ C1] ? __kthread_parkme+0x162/0x1c0 [ 520.833798][ C1] kthread+0x2fa/0x390 [ 520.837913][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 520.843426][ C1] ? kthread_blkcg+0xd0/0xd0 [ 520.848059][ C1] ret_from_fork+0x48/0x80 [ 520.852533][ C1] ? kthread_blkcg+0xd0/0xd0 [ 520.857176][ C1] ret_from_fork_asm+0x11/0x20 [ 520.862009][ C1] [ 520.865064][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 520.871479][ C1] Sending NMI from CPU 1 to CPUs 0: [ 520.876735][ C0] NMI backtrace for cpu 0 [ 520.876746][ C0] CPU: 0 PID: 10045 Comm: syz.3.1225 Not tainted syzkaller #0 [ 520.876763][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 520.876772][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x60 [ 520.876798][ C0] Code: 00 00 f3 0f 1e fa 53 48 89 fb e8 13 00 00 00 48 8b 3d fc c8 03 0d 48 89 de 5b e9 93 57 57 00 cc cc cc f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0d 90 a2 7c 7e 65 8b 15 91 a2 7c 7e 81 e2 00 01 ff 00 74 [ 520.876811][ C0] RSP: 0000:ffffc900056ff148 EFLAGS: 00000046 [ 520.876825][ C0] RAX: ffffffff8a7369b3 RBX: ffff8880b8e3c930 RCX: dffffc0000000000 [ 520.876838][ C0] RDX: ffffc9000db1d000 RSI: 000000000007ffff RDI: 0000000000080000 [ 520.876849][ C0] RBP: ffff8880b8e3c930 R08: ffff8880b8e3c95b R09: 1ffff110171c792b [ 520.876861][ C0] R10: dffffc0000000000 R11: ffffed10171c792c R12: ffff88807c3d8500 [ 520.876873][ C0] R13: dffffc0000000000 R14: ffff88801e2c0518 R15: ffff88801e2c0520 [ 520.876885][ C0] FS: 00007f63d52936c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 520.876900][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 520.876910][ C0] CR2: 0000200000000058 CR3: 000000004aa4d000 CR4: 00000000003506f0 [ 520.876926][ C0] Call Trace: [ 520.876933][ C0] [ 520.876938][ C0] plist_check_list+0xe3/0x240 [ 520.876965][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 520.876983][ C0] ? plist_check_list+0x230/0x240 [ 520.877011][ C0] plist_add+0x66/0x490 [ 520.877034][ C0] ? plist_del+0x3d0/0x3f0 [ 520.877057][ C0] ? plist_check_list+0x229/0x240 [ 520.877091][ C0] put_prev_task_rt+0x24a/0x400 [ 520.877115][ C0] __schedule+0x27f5/0x45a0 [ 520.877152][ C0] ? asan.module_dtor+0x20/0x20 [ 520.877174][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 520.877197][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 520.877221][ C0] ? preempt_schedule+0xc0/0xd0 [ 520.877244][ C0] preempt_schedule_common+0x82/0xc0 [ 520.877267][ C0] preempt_schedule+0xc0/0xd0 [ 520.877290][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 520.877312][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 520.877334][ C0] ? lock_chain_count+0x20/0x20 [ 520.877352][ C0] preempt_schedule_thunk+0x1a/0x30 [ 520.877381][ C0] _raw_spin_unlock_irqrestore+0x111/0x120 [ 520.877400][ C0] ? _raw_spin_unlock+0x40/0x40 [ 520.877416][ C0] ? __wake_up_common+0x2a4/0x4e0 [ 520.877439][ C0] __wake_up_sync_key+0x12c/0x1a0 [ 520.877460][ C0] ? __wake_up_locked_key_bookmark+0x20/0x20 [ 520.877482][ C0] ? sock_load_diag_module+0x140/0x140 [ 520.877512][ C0] __unix_dgram_recvmsg+0x4b8/0xd80 [ 520.877541][ C0] ? unix_unhash+0x10/0x10 [ 520.877564][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 520.877583][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 520.877605][ C0] ? mark_lock+0x94/0x320 [ 520.877623][ C0] ? unix_dgram_recvmsg+0xad/0xd0 [ 520.877648][ C0] ? unix_dgram_sendmsg+0x16d0/0x16d0 [ 520.877674][ C0] sock_recvmsg_nosec+0x82/0xd0 [ 520.877699][ C0] ____sys_recvmsg+0x4e8/0x5e0 [ 520.877721][ C0] ? __sys_recvmsg_sock+0x50/0x50 [ 520.877744][ C0] ? import_iovec+0x73/0xa0 [ 520.877772][ C0] ___sys_recvmsg+0x216/0x590 [ 520.877790][ C0] ? __sys_recvmsg+0x2a0/0x2a0 [ 520.877816][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 520.877838][ C0] ? __might_fault+0xc6/0x120 [ 520.877853][ C0] ? __might_fault+0xaa/0x120 [ 520.877869][ C0] do_recvmmsg+0x39a/0x870 [ 520.877889][ C0] ? __sys_recvmmsg+0x290/0x290 [ 520.877916][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 520.877937][ C0] __x64_sys_recvmmsg+0x199/0x250 [ 520.877954][ C0] ? do_recvmmsg+0x870/0x870 [ 520.877971][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 520.877989][ C0] do_syscall_64+0x55/0xa0 [ 520.878012][ C0] ? clear_bhb_loop+0x40/0x90 [ 520.878029][ C0] ? clear_bhb_loop+0x40/0x90 [ 520.878047][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 520.878072][ C0] RIP: 0033:0x7f63d439acb9 [ 520.878086][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 520.878098][ C0] RSP: 002b:00007f63d5293028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 520.878113][ C0] RAX: ffffffffffffffda RBX: 00007f63d4616090 RCX: 00007f63d439acb9 [ 520.878125][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 520.878135][ C0] RBP: 00007f63d4408bf7 R08: 0000000000000000 R09: 0000000000000000 [ 520.878145][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 520.878154][ C0] R13: 00007f63d4616128 R14: 00007f63d4616090 R15: 00007ffe37bb9a18 [ 520.878173][ C0]