last executing test programs: 9.935773265s ago: executing program 5 (id=3118): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x0) shmctl$IPC_RMID(0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x29) pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102400, 0x19000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104, 0xa01}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x80) socket$packet(0x11, 0x2, 0x300) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x20042000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, r1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, 0x0}, 0x18}], 0x1, 0x1, 0x0) 9.87714474s ago: executing program 0 (id=3119): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001"], 0x14) 6.487905438s ago: executing program 3 (id=3129): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="2c385aa3d49100dc6626c892b6bc436a962e9a281e7d6cd677fb7ee23c3e8f8e9aeed9a0f7c86f5dd37f8cc297d0ba5bdd26efb4c0240484a18f42ac1f52869a870137eab1da01", 0x47) accept4(r0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xffff, '\x00', 0x0, r1, 0xfffffffe, 0x1, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000280)='\xc3)\',[*][\x00', 0x300000, &(0x7f0000000300)={@_ha_fsid={[0x7, 0x6]}, {0xff, 0xb, 0x0, 0x5}}, 0x5, 0x0, &(0x7f0000000540)=0xf19}) r4 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x8b, 0x10000, @mcast2, 0x5}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="671723d7", 0x4}, {&(0x7f0000000140)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2", 0x19}, {&(0x7f0000000200)="0090000000", 0x5}], 0x3}, 0x20048b88) poll(&(0x7f0000000600)=[{r3, 0x8}, {r4, 0x21da}], 0x2, 0x5) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r5 = socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000900)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x30}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xc2}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ce}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x249}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffb}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xafe}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x837}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3dc}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x40}]}, 0x110}, 0x1, 0x0, 0x0, 0x4}, 0x8000) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x4008054) write$nci(r7, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r7, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) 6.369090326s ago: executing program 0 (id=3131): socket$kcm(0x21, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x800) socket$nl_route(0x10, 0x3, 0x0) r2 = epoll_create1(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00'], 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x20) 6.255825984s ago: executing program 5 (id=3132): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, 0x0, 0x0, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 5.953175087s ago: executing program 4 (id=3134): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80102, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) close(r0) ppoll(&(0x7f00000000c0)=[{r1, 0x8010}], 0x1, 0x0, 0x0, 0x0) 5.756788925s ago: executing program 5 (id=3135): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x2400c800) 5.590108368s ago: executing program 0 (id=3136): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x5, 0xe, 0x0, &(0x7f0000000300)="259a00f2710010000000000000a8", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.238677485s ago: executing program 5 (id=3138): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{}, &(0x7f0000000080), &(0x7f00000001c0)=r1}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xffc3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0xff}, @IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 5.155115062s ago: executing program 3 (id=3139): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @local, 0x9}, 0x1c) sendmmsg$inet(r1, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000800)="2bae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecada531c07ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dea658eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4dbf0da9a5212f3dbc8d1dff240856691243b203d7edd4d3cc89a38a6c80fdb1229a01044af7aaecb20d5570ebf24b30bbc6dfc3f70d85cd9f0d60ebd8fedd161d199d9997a0e2d18d1c99bc7158564e0ddb4673055de196535d706d142e1dc7d404583923cb1b286cfc5418884ac7e605d93652dc48ff690894405a0b6abc3c4d0f6a16c0a95c0508bd7eeffcd1da0b17f7701448658864b429e9472edfeffbf34d6e7c78f4aa73c0", 0x2de}, {&(0x7f0000000bc0)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0769421fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff188919c6e2e31a2a074863edba4a0e58b61faec4a42c29d7f9e48a43b8cb7d3c5a1e5aa67f87538140f8d633a54bceb8b1dda2397ea147d3b26e903f608b6ab1844ea7cf630d828118bba0f0f85e2e6316ae1ed9a2a7d08a05c170cb76bf111930df0cf760f7768571afdefe82a95296cee7c010f748a97046efcc774e7d85edbd5058104fef4942fb4430da89f67d1fea33bf2acfb793a610b3738b393eed8633fc8e8f63", 0x16f}, {&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df4050d43d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9d", 0xa0}, {&(0x7f0000000200)="f610e61fc81c0e00c86f0500194d27a5a42cf1", 0x13}, {&(0x7f0000000380)="6e6270f8d704d8845f6fdf", 0xb}], 0x5, 0x0, 0x0, 0x900}}], 0x1, 0x0) 5.024108787s ago: executing program 0 (id=3140): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x14}, 0x6}, 0x1c, &(0x7f0000000680)=[{0x0}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000006c0)="9a", 0x1}], 0x1}}], 0x2, 0x4000840) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x2, 0xc}, 0x8) 4.872481686s ago: executing program 4 (id=3142): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x60, 0x0, 0x1, 0x0, 0x25dfdbfe, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x64}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4044}, 0x40000) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="900000000001010400008000141a000002000010240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100ac1414aa08000200ac1e00010c000280050001000000000008000740000000012c000e800c00028005000100210000000600034000"], 0x90}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 4.724731148s ago: executing program 4 (id=3143): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001"], 0x14) 4.675306336s ago: executing program 0 (id=3144): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000400), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100"], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) r3 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r3], 0x14) 4.502259259s ago: executing program 5 (id=3145): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56561, 0x70bd2b, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0x3, 0x8}, {0x9, 0x10}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0xffffe000}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20002000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.264650234s ago: executing program 2 (id=3146): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x48100) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000040)={0x7, 0x100000, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) close_range(r1, 0xffffffffffffffff, 0x0) 4.149082923s ago: executing program 3 (id=3148): socket$kcm(0x21, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x800) socket$nl_route(0x10, 0x3, 0x0) r2 = epoll_create1(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r2, @ANYRES8=r3], 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x20) 4.04303387s ago: executing program 2 (id=3149): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x4}, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(0xffffffffffffffff, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x240000d4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.829675535s ago: executing program 2 (id=3151): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="2c385aa3d49100dc6626c892b6bc436a962e9a281e7d6cd677fb7ee23c3e8f8e9aeed9a0f7c86f5dd37f8cc297d0ba5bdd26efb4c0240484a18f42ac1f52869a870137eab1da01", 0x47) accept4(r0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xffff, '\x00', 0x0, r1, 0xfffffffe, 0x1, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000280)='\xc3)\',[*][\x00', 0x300000, &(0x7f0000000300)={@_ha_fsid={[0x7, 0x6]}, {0xff, 0xb, 0x0, 0x5}}, 0x5, 0x0, &(0x7f0000000540)=0xf19}) r4 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x8b, 0x10000, @mcast2, 0x5}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="671723d7", 0x4}, {&(0x7f0000000140)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2", 0x19}, {&(0x7f0000000200)="0090000000", 0x5}], 0x3}, 0x20048b88) poll(&(0x7f0000000600)=[{r3, 0x8}, {r4, 0x21da}], 0x2, 0x5) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r5 = socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000900)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x30}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xc2}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ce}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x249}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffb}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xafe}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x837}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3dc}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x40}]}, 0x110}, 0x1, 0x0, 0x0, 0x4}, 0x8000) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x4008054) write$nci(r7, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r7, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) 3.812498024s ago: executing program 3 (id=3152): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x5, 0xe, 0x0, &(0x7f0000000300)="259a00f2710010000000000000a8", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.570196348s ago: executing program 3 (id=3153): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x3, 0x10, 0x5, 0x1, 0x7, 0x6}, [@TCA_NETEM_CORR={0x10, 0x1, {0x4, 0x0, 0x7}}, @TCA_NETEM_REORDER={0xc, 0x3, {0x2000067, 0x8001}}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 3.564640883s ago: executing program 1 (id=3154): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x2, 0x5003) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) syz_mount_image$fuse(0x0, 0x0, 0x300f401, 0x0, 0x2, 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, 0x0}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket(0x400000000010, 0x3, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs\x00') process_mrelease(r7, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x998ed4ed88999c67}, 0x4c840) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) r8 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, 0x0, 0x0, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) 2.928316495s ago: executing program 3 (id=3155): r0 = syz_open_dev$sndpcmp(&(0x7f0000000180), 0x7d, 0x2300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8041) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x4000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0xfffffffe}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) 2.227388053s ago: executing program 1 (id=3156): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x60, 0x0, 0x1, 0x0, 0x25dfdbfe, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x64}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4044}, 0x40000) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="900000000001010400008000141a000002000010240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100ac1414aa08000200ac1e00010c000280050001000000000008000740000000012c000e800c00028005000100210000000600034000"], 0x90}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 1.993237891s ago: executing program 1 (id=3157): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x4000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0xfffffffe}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) 1.636799176s ago: executing program 1 (id=3158): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) socket(0x400000000010, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000dc0)=ANY=[], 0x14) r4 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r4], 0x14) 1.471945405s ago: executing program 4 (id=3159): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{}, &(0x7f0000000080), &(0x7f00000001c0)=r1}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xffc3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0xff}, @IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) 1.386625066s ago: executing program 0 (id=3160): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) listen(0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xfffffffd, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56561, 0x70bd2a, 0x25dfdbfa, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0x0, 0x8}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048090) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1.376497076s ago: executing program 5 (id=3161): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @local, 0x9}, 0x1c) sendmmsg$inet(r1, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000800)="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", 0x2de}, {&(0x7f0000000bc0)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0769421fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff188919c6e2e31a2a074863edba4a0e58b61faec4a42c29d7f9e48a43b8cb7d3c5a1e5aa67f87538140f8d633a54bceb8b1dda2397ea147d3b26e903f608b6ab1844ea7cf630d828118bba0f0f85e2e6316ae1ed9a2a7d08a05c170cb76bf111930df0cf760f7768571afdefe82a95296cee7c010f748a97046efcc774e7d85edbd5058104fef4942fb4430da89f67d1fea33bf2acfb793a610b3738b393eed8633fc8e8f63", 0x16f}, {&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df4050d43d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9d", 0xa0}, {&(0x7f0000000200)="f610e61fc81c0e00c86f0500194d27a5a42cf1", 0x13}, {&(0x7f0000000380)="6e6270f8d704d8845f6fdf", 0xb}], 0x5, 0x0, 0x0, 0x900}}], 0x1, 0x0) 1.224554839s ago: executing program 2 (id=3162): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00), 0x0, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 812.483656ms ago: executing program 2 (id=3163): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x4}, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(0xffffffffffffffff, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x240000d4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 678.683805ms ago: executing program 4 (id=3164): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x48100) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000040)={0x7, 0x100000, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) close_range(r1, 0xffffffffffffffff, 0x0) 567.30339ms ago: executing program 1 (id=3165): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x5, 0xe, 0x0, &(0x7f0000000300)="259a00f2710010000000000000a8", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) 341.031415ms ago: executing program 2 (id=3166): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x25, 0x5}) fcntl$lock(r1, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) 301.164199ms ago: executing program 4 (id=3167): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000100)={0x0, 'veth0_vlan\x00', {0x4}, 0x26}) socket$packet(0x11, 0x3, 0x300) close(r0) keyctl$reject(0x13, 0x0, 0xaad2, 0x201, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0xd, 0x7, 0x8000000000000, 0x4, 0x200000000000000, 0x0, 0x100000000, 0x0, 0x0, 0x9, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x3}) 0s ago: executing program 1 (id=3168): shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000980)=""/223}, {&(0x7f0000000800)=""/89}, {&(0x7f0000000880)=""/154}, {&(0x7f0000000940)=""/14}, {&(0x7f0000000cc0)=""/4096}, {&(0x7f0000001cc0)=""/108}, {&(0x7f0000001d40)=""/101}], 0x0, &(0x7f0000001e40)=""/133}, 0x1000}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000001f00)=""/17}, {&(0x7f0000001f40)=""/48}, {&(0x7f0000001f80)=""/133}]}, 0xff}, {{0x0, 0x0, &(0x7f0000002640), 0x0, &(0x7f00000026c0)=""/71}, 0x1}], 0x400023e, 0x300, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): 9] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 139.221854][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.245668][ T9] usb 2-1: Product: syz [ 139.259334][ T9] usb 2-1: Manufacturer: syz [ 139.285867][ T9] usb 2-1: SerialNumber: syz [ 139.417190][ T9] usb 2-1: config 0 descriptor?? [ 140.212207][ T5865] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 140.379172][ T5865] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.878078][ T5865] usb 1-1: config 0 interface 0 has no altsetting 0 [ 140.888321][ T5865] usb 1-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 140.899058][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.974890][ T5865] usb 1-1: config 0 descriptor?? [ 141.036497][ T9] dvb_usb_ec168 2-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 141.129014][ T9] usb 2-1: USB disconnect, device number 2 [ 142.161242][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 142.256908][ T6352] net_ratelimit: 11 callbacks suppressed [ 142.256925][ T6352] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 142.806858][ T5865] hid_parser_main: 13 callbacks suppressed [ 142.806884][ T5865] greenasia 0003:0E8F:0012.0003: unknown main item tag 0x0 [ 143.032381][ T5865] greenasia 0003:0E8F:0012.0003: unknown main item tag 0x0 [ 143.039635][ T5865] greenasia 0003:0E8F:0012.0003: unknown main item tag 0x0 [ 143.040973][ T6343] loop0: detected capacity change from 0 to 1024 [ 143.047488][ T5865] greenasia 0003:0E8F:0012.0003: unknown main item tag 0x0 [ 143.060603][ T5865] greenasia 0003:0E8F:0012.0003: unknown main item tag 0x0 [ 143.069986][ T5865] greenasia 0003:0E8F:0012.0003: unknown main item tag 0x0 [ 143.077247][ T5865] greenasia 0003:0E8F:0012.0003: unknown main item tag 0x0 [ 143.084497][ T5865] greenasia 0003:0E8F:0012.0003: unknown main item tag 0x0 [ 143.092082][ T5865] greenasia 0003:0E8F:0012.0003: unknown main item tag 0x0 [ 143.099418][ T5865] greenasia 0003:0E8F:0012.0003: unknown main item tag 0x0 [ 143.114019][ T5865] greenasia 0003:0E8F:0012.0003: hidraw0: USB HID v0.08 Device [HID 0e8f:0012] on usb-dummy_hcd.0-1/input0 [ 143.128794][ T5865] greenasia 0003:0E8F:0012.0003: no inputs found [ 143.304514][ T6374] Zero length message leads to an empty skb [ 143.379697][ T6343] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 143.607715][ T6343] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.483319][ T6368] vlan2: entered allmulticast mode [ 144.501310][ T6368] veth0_vlan: entered allmulticast mode [ 145.155543][ T5865] usb 1-1: USB disconnect, device number 3 [ 145.245235][ T5636] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 146.217165][ T6378] vlan2: left allmulticast mode [ 146.231269][ T6378] veth0_vlan: left allmulticast mode [ 146.575012][ T6384] fido_id[6384]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 146.740800][ T6401] netlink: 900 bytes leftover after parsing attributes in process `syz.1.111'. [ 147.808917][ T6407] syz.0.109 (6407) used greatest stack depth: 17968 bytes left [ 147.903973][ T6405] netlink: 900 bytes leftover after parsing attributes in process `syz.1.111'. [ 149.331355][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 149.540500][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 149.568758][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.278411][ T10] usb 5-1: config 0 has no interfaces? [ 150.313758][ T10] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 150.353024][ T6437] vlan2: entered allmulticast mode [ 150.358124][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.358187][ T6437] veth0_vlan: entered allmulticast mode [ 150.418665][ T10] usb 5-1: config 0 descriptor?? [ 150.439886][ T6438] vlan2: left allmulticast mode [ 150.445097][ T6438] veth0_vlan: left allmulticast mode [ 150.769925][ T6431] syzkaller0: entered promiscuous mode [ 150.784442][ T6431] syzkaller0: entered allmulticast mode [ 150.915699][ T6447] xt_CT: No such helper "netbios-ns" [ 152.311985][ T24] usb 5-1: USB disconnect, device number 3 [ 152.478514][ T6473] loop4: detected capacity change from 0 to 128 [ 152.628728][ T6473] syz.4.124: attempt to access beyond end of device [ 152.628728][ T6473] loop4: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 153.251455][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 153.424797][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 153.441618][ T10] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 153.455571][ T10] usb 5-1: config 1 has no interface number 0 [ 153.466932][ T10] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 153.494255][ T10] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 153.521550][ T10] usb 5-1: config 1 interface 105 has no altsetting 0 [ 153.538945][ T10] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 153.550213][ T10] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 153.558556][ T10] usb 5-1: Product: syz [ 153.562901][ T10] usb 5-1: Manufacturer: syz [ 153.568170][ T10] usb 5-1: SerialNumber: syz [ 153.587382][ T6478] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 153.603522][ T6478] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 154.033188][ T6478] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 154.040668][ T6478] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 154.470895][ T10] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 154.685435][ T10] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 154.768465][ T6469] syzkaller0: entered promiscuous mode [ 154.826515][ T6469] syzkaller0: entered allmulticast mode [ 156.935878][ T6533] netlink: 900 bytes leftover after parsing attributes in process `syz.3.136'. [ 157.062432][ T6535] netlink: 900 bytes leftover after parsing attributes in process `syz.3.136'. [ 162.684499][ T10] aqc111 5-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 5a:80:2d:fd:3d:80 [ 162.708625][ T10] usb 5-1: USB disconnect, device number 4 [ 162.734195][ T10] aqc111 5-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 163.041181][ T10] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 163.158130][ T10] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 163.256335][ T10] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 163.381452][ T990] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 163.614518][ T990] usb 6-1: Using ep0 maxpacket: 16 [ 163.632540][ T6577] loop1: detected capacity change from 0 to 1024 [ 163.676572][ T990] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.757593][ T990] usb 6-1: config 0 has no interfaces? [ 163.814923][ T990] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 163.902845][ T990] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.984965][ T990] usb 6-1: config 0 descriptor?? [ 164.192137][ T5771] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 164.217172][ T6588] batman_adv: batadv0: Interface deactivated: dummy0 [ 164.234878][ T6588] batman_adv: batadv0: Removing interface: dummy0 [ 164.419645][ T5771] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.422450][ T6588] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 164.531602][ T5771] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 164.857397][ T5771] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 164.989945][ T5771] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 164.996569][ T6590] team0: Port device xfrm0 added [ 165.013305][ T5771] usb 3-1: Product: syz [ 165.027130][ T5771] usb 3-1: SerialNumber: syz [ 165.050209][ T5771] usb 3-1: config 0 descriptor?? [ 165.806736][ T6606] binder: 6601:6606 ioctl 4018620d 0 returned -22 [ 166.444633][ T5771] usb 3-1: USB disconnect, device number 3 [ 166.460467][ T9] usb 6-1: USB disconnect, device number 3 [ 170.125682][ T6633] xt_CT: No such helper "netbios-ns" [ 170.482891][ T6647] loop1: detected capacity change from 0 to 1024 [ 170.698635][ T6652] netlink: 24 bytes leftover after parsing attributes in process `syz.5.173'. [ 170.854504][ T6652] loop5: detected capacity change from 0 to 1024 [ 170.919324][ T6652] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 171.017643][ T6652] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.021862][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 171.753906][ T6652] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 173.269685][ T5637] libceph: connect (1)[c::]:6789 error -101 [ 173.318450][ T5637] libceph: mon0 (1)[c::]:6789 connect error [ 173.491501][ T5354] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 173.615926][ T29] libceph: connect (1)[c::]:6789 error -101 [ 173.622264][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 173.641521][ T5354] usb 6-1: Using ep0 maxpacket: 16 [ 174.483590][ T6673] ceph: No mds server is up or the cluster is laggy [ 174.491808][ T5354] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.510530][ T29] libceph: connect (1)[c::]:6789 error -101 [ 174.525053][ T5354] usb 6-1: config 0 has no interfaces? [ 174.532520][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 174.543344][ T5354] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 174.562461][ T5354] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.590734][ T5354] usb 6-1: config 0 descriptor?? [ 174.651665][ T5637] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 175.037127][ T5637] usb 5-1: Using ep0 maxpacket: 16 [ 175.050744][ T5637] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 175.066386][ T5637] usb 5-1: config 1 has no interface number 0 [ 175.081668][ T5637] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 175.177465][ T6699] xt_cgroup: path and classid specified [ 175.701127][ T6700] vlan2: entered allmulticast mode [ 175.707575][ T6700] veth0_vlan: entered allmulticast mode [ 175.784167][ T6700] vlan2: left allmulticast mode [ 175.789023][ T6700] veth0_vlan: left allmulticast mode [ 176.081431][ T5637] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 176.091755][ T5637] usb 5-1: config 1 interface 105 has no altsetting 0 [ 176.110577][ T5637] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 176.130617][ T5637] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 176.148457][ T5637] usb 5-1: Product: syz [ 176.153646][ T5637] usb 5-1: Manufacturer: syz [ 176.158391][ T5637] usb 5-1: SerialNumber: syz [ 176.168805][ T6684] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 176.178311][ T6684] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 176.357232][ T6706] block nbd0: not configured, cannot reconfigure [ 177.129083][ T6684] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 177.326504][ T6684] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 177.537664][ T9] usb 6-1: USB disconnect, device number 4 [ 178.490042][ T5637] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 178.524730][ T5637] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 178.539772][ T5637] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 179.177340][ T5637] aqc111 5-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 32:86:2a:69:c8:e4 [ 179.238275][ T5637] usb 5-1: USB disconnect, device number 5 [ 179.289749][ T9] libceph: connect (1)[c::]:6789 error -101 [ 179.297687][ T5637] aqc111 5-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 179.319929][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 179.386313][ T9] libceph: connect (1)[c::]:6789 error -101 [ 179.421545][ T6725] ceph: No mds server is up or the cluster is laggy [ 179.451646][ T6738] netlink: 24 bytes leftover after parsing attributes in process `syz.4.196'. [ 179.507860][ T5637] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 179.559056][ T5637] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 179.603768][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 179.660204][ T5637] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 180.537711][ T9] libceph: connect (1)[c::]:6789 error -101 [ 180.551648][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 182.147320][ T5637] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 182.691235][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 182.848465][ T6761] netlink: 'syz.5.203': attribute type 1 has an invalid length. [ 183.165299][ T6761] 8021q: adding VLAN 0 to HW filter on device bond1 [ 184.789040][ T6790] netlink: 24 bytes leftover after parsing attributes in process `syz.3.210'. [ 184.986378][ T6767] bond1: (slave geneve2): making interface the new active one [ 185.138339][ T6767] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 185.181169][ T6796] xt_cgroup: path and classid specified [ 185.224104][ T5771] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 185.591494][ T5771] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.639176][ T5771] usb 4-1: config 0 interface 0 has no altsetting 0 [ 185.836322][ T5771] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 185.915954][ T5771] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.140474][ T5771] usb 4-1: config 0 descriptor?? [ 186.483151][ T990] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 186.665414][ T6790] loop3: detected capacity change from 0 to 1024 [ 186.673173][ T990] usb 6-1: Using ep0 maxpacket: 16 [ 186.693530][ T990] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 186.726977][ T990] usb 6-1: config 1 has no interface number 0 [ 186.749641][ T990] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 186.779127][ T990] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 186.805086][ T6790] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 186.904122][ T6790] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.916621][ T990] usb 6-1: config 1 interface 105 has no altsetting 0 [ 186.927787][ T990] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 186.938769][ T990] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 186.947285][ T990] usb 6-1: Product: syz [ 186.961926][ T990] usb 6-1: Manufacturer: syz [ 186.966864][ T990] usb 6-1: SerialNumber: syz [ 187.974910][ T6803] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 187.995829][ T6803] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 188.030204][ T6790] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: comm syz.3.210: lblock 0 mapped to illegal pblock 0 (length 6) [ 188.079927][ T6790] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 188.142311][ T6790] EXT4-fs (loop3): This should not happen!! Data will be lost [ 188.142311][ T6790] [ 188.291580][ T5354] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 188.453817][ T6803] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 188.496501][ T6803] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 188.872075][ T5354] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.908011][ T5354] usb 3-1: config 0 interface 0 has no altsetting 0 [ 188.928616][ T990] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -32 [ 188.947204][ T5354] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 188.986418][ T5354] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.010007][ T5771] usbhid 4-1:0.0: can't add hid device: -71 [ 189.029040][ T990] aqc111 6-1:1.105: probe with driver aqc111 failed with error -32 [ 189.041529][ T271] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:6: bg 0: block 112: padding at end of block bitmap is not set [ 189.059144][ T5771] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 189.082995][ T5771] usb 4-1: USB disconnect, device number 4 [ 189.117130][ T5354] usb 3-1: config 0 descriptor?? [ 189.174255][ T271] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 48 with error 28 [ 189.208441][ T271] EXT4-fs (loop3): This should not happen!! Data will be lost [ 189.208441][ T271] [ 189.225783][ T271] EXT4-fs (loop3): Total free blocks count 0 [ 189.259002][ T271] EXT4-fs (loop3): Free/Dirty block details [ 189.277096][ T271] EXT4-fs (loop3): free_blocks=0 [ 189.315044][ T271] EXT4-fs (loop3): dirty_blocks=48 [ 189.590309][ T5354] hid_parser_main: 16 callbacks suppressed [ 189.590336][ T5354] greenasia 0003:0E8F:0012.0004: unknown main item tag 0x0 [ 189.613619][ T5354] greenasia 0003:0E8F:0012.0004: unknown main item tag 0x0 [ 189.629786][ T5354] greenasia 0003:0E8F:0012.0004: unknown main item tag 0x0 [ 189.637225][ T5354] greenasia 0003:0E8F:0012.0004: unknown main item tag 0x0 [ 189.644086][ T271] EXT4-fs (loop3): Block reservation details [ 189.645166][ T5354] greenasia 0003:0E8F:0012.0004: unknown main item tag 0x0 [ 189.660313][ T5354] greenasia 0003:0E8F:0012.0004: unknown main item tag 0x0 [ 189.677621][ T6790] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz.3.210: data will be lost [ 189.825984][ T6831] vlan2: entered allmulticast mode [ 189.831299][ T6831] veth0_vlan: entered allmulticast mode [ 189.984167][ T6831] tipc: Resetting bearer [ 189.993231][ T6831] tipc: Resetting bearer [ 190.339513][ T6831] vlan2: left allmulticast mode [ 190.344461][ T6831] veth0_vlan: left allmulticast mode [ 190.371311][ T5354] greenasia 0003:0E8F:0012.0004: unknown main item tag 0x0 [ 190.381029][ T5354] greenasia 0003:0E8F:0012.0004: unknown main item tag 0x0 [ 190.482346][ T5354] greenasia 0003:0E8F:0012.0004: unknown main item tag 0x0 [ 190.500478][ T5354] greenasia 0003:0E8F:0012.0004: unknown main item tag 0x0 [ 190.516295][ T5354] greenasia 0003:0E8F:0012.0004: hidraw0: USB HID v0.08 Device [HID 0e8f:0012] on usb-dummy_hcd.2-1/input0 [ 190.580348][ T5354] greenasia 0003:0E8F:0012.0004: no inputs found [ 190.617497][ T5354] usb 6-1: USB disconnect, device number 5 [ 191.946511][ T6842] syzkaller0: entered promiscuous mode [ 192.052920][ T6842] syzkaller0: entered allmulticast mode [ 192.111360][ T24] usb 3-1: USB disconnect, device number 4 [ 193.565276][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.573196][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.751545][ T6887] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 198.112127][ T6886] binder: 6879:6886 ioctl 4018620d 0 returned -22 [ 198.460291][ T6900] usb usb8: usbfs: process 6900 (syz.4.240) did not claim interface 0 before use [ 201.118254][ T6911] xt_CT: No such helper "netbios-ns" [ 201.600569][ T6921] loop0: detected capacity change from 0 to 1024 [ 201.633039][ T6921] EXT4-fs: Ignoring removed orlov option [ 201.726135][ T6921] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.145278][ T6939] syz.0.246 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 202.371525][ T5637] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 202.557446][ T5637] usb 6-1: unable to get BOS descriptor or descriptor too short [ 202.618808][ T5637] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.701647][ T5637] usb 6-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 202.958872][ T5637] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 203.008733][ T5637] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.025012][ T5637] usb 6-1: Product: syz [ 203.041723][ T5637] usb 6-1: Manufacturer: syz [ 203.282404][ T5637] usb 6-1: SerialNumber: syz [ 203.289297][ T5636] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.314146][ T5637] usb 6-1: selecting invalid altsetting 1 [ 203.329701][ T5637] usb 6-1: unit 6 not found! [ 203.416490][ T5637] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 203.473668][ T5637] usb 6-1: selecting invalid altsetting 1 [ 203.710547][ T5637] usb 6-1: unit 6 not found! [ 203.882424][ T5637] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 203.957581][ T6957] binder: 6952:6957 ioctl 4018620d 0 returned -22 [ 204.899405][ T5637] usb 6-1: selecting invalid altsetting 1 [ 205.026428][ T5637] usb 6-1: unit 6 not found! [ 205.183501][ T6974] netlink: 24 bytes leftover after parsing attributes in process `syz.0.256'. [ 205.751424][ T5791] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 206.156880][ T5791] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.277471][ T5791] usb 1-1: config 0 interface 0 has no altsetting 0 [ 206.326921][ T5791] usb 1-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 206.395269][ T5791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.489810][ T5791] usb 1-1: config 0 descriptor?? [ 206.534874][ T5637] snd-usb-audio 6-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 206.605932][ T5637] usb 6-1: USB disconnect, device number 6 [ 206.770321][ T5927] udevd[5927]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 207.040251][ T6974] loop0: detected capacity change from 0 to 1024 [ 207.216264][ T6974] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 207.313014][ T6974] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.394870][ T7006] netlink: 24 bytes leftover after parsing attributes in process `syz.2.262'. [ 207.476658][ T6974] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm syz.0.256: lblock 0 mapped to illegal pblock 0 (length 6) [ 207.545386][ T6974] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 207.636990][ T6974] EXT4-fs (loop0): This should not happen!! Data will be lost [ 207.636990][ T6974] [ 207.752655][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 207.924287][ T10] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.962471][ T7002] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 208.015911][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 208.041833][ T10] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 208.064787][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.102307][ T10] usb 3-1: config 0 descriptor?? [ 208.809434][ T5791] usbhid 1-1:0.0: can't add hid device: -71 [ 208.827319][ T5791] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 208.828768][ T1122] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 48 with error 28 [ 208.904831][ T5791] usb 1-1: USB disconnect, device number 4 [ 208.962565][ T1122] EXT4-fs (loop0): This should not happen!! Data will be lost [ 208.962565][ T1122] [ 208.989058][ T1122] EXT4-fs (loop0): Total free blocks count 0 [ 209.005369][ T1122] EXT4-fs (loop0): Free/Dirty block details [ 209.024435][ T1122] EXT4-fs (loop0): free_blocks=0 [ 209.041158][ T1122] EXT4-fs (loop0): dirty_blocks=48 [ 209.059508][ T1122] EXT4-fs (loop0): Block reservation details [ 209.077961][ T7019] netlink: 24 bytes leftover after parsing attributes in process `syz.3.267'. [ 209.103995][ T6974] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz.0.256: data will be lost [ 209.277606][ T7006] loop2: detected capacity change from 0 to 1024 [ 209.350670][ T7006] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 209.401542][ T5871] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 209.446100][ T7006] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.565243][ T7006] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: comm syz.2.262: lblock 0 mapped to illegal pblock 0 (length 6) [ 209.611365][ T5871] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.619863][ T7006] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 209.675578][ T7011] loop1: detected capacity change from 0 to 40427 [ 209.696685][ T7006] EXT4-fs (loop2): This should not happen!! Data will be lost [ 209.696685][ T7006] [ 209.706034][ T5871] usb 4-1: config 0 interface 0 has no altsetting 0 [ 209.719183][ T7011] F2FS-fs: heap/no_heap options were deprecated [ 209.774721][ T5871] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 209.825558][ T7011] F2FS-fs (loop1): build fault injection rate: 19 [ 209.830454][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.858564][ T7011] F2FS-fs (loop1): build fault injection type: 0x3bfe8c [ 209.875525][ T7031] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 209.904484][ T5871] usb 4-1: config 0 descriptor?? [ 209.923451][ T7011] F2FS-fs (loop1): invalid crc value [ 210.002882][ T7011] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa00/0x18c0 [ 210.334695][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 210.349621][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 210.363516][ T7011] F2FS-fs (loop1): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x21d/0x3d0 [ 210.377201][ T271] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:6: bg 0: block 112: padding at end of block bitmap is not set [ 210.401423][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 210.416659][ T10] usb 3-1: USB disconnect, device number 5 [ 210.441854][ T271] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 48 with error 28 [ 210.464109][ T7011] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 210.499671][ T271] EXT4-fs (loop2): This should not happen!! Data will be lost [ 210.499671][ T271] [ 210.523948][ T7011] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 210.540838][ T271] EXT4-fs (loop2): Total free blocks count 0 [ 210.561679][ T271] EXT4-fs (loop2): Free/Dirty block details [ 210.577448][ T271] EXT4-fs (loop2): free_blocks=0 [ 210.594151][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 210.603040][ T271] EXT4-fs (loop2): dirty_blocks=48 [ 210.619110][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.631349][ T271] EXT4-fs (loop2): Block reservation details [ 210.661366][ T24] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 210.675344][ T7006] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz.2.262: data will be lost [ 210.703930][ T24] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 210.707756][ T7011] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of f2fs_get_dnode_of_data+0xa60/0x1ee0 [ 210.741676][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.758132][ T7019] loop3: detected capacity change from 0 to 1024 [ 210.764668][ T24] usb 1-1: Product: syz [ 210.793047][ T24] usb 1-1: Manufacturer: syz [ 210.819848][ T7019] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 210.821042][ T24] usb 1-1: SerialNumber: syz [ 210.836891][ T7019] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.876493][ T7011] F2FS-fs (loop1): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x3a1/0xdc0 [ 210.905437][ T7019] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: comm syz.3.267: lblock 0 mapped to illegal pblock 0 (length 6) [ 210.942206][ T7011] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of f2fs_get_dnode_of_data+0xa60/0x1ee0 [ 210.990865][ T24] usb 1-1: selecting invalid altsetting 1 [ 211.010872][ T5643] Bluetooth: hci4: command 0x0406 tx timeout [ 211.017363][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 211.018006][ T5646] Bluetooth: hci2: command 0x0406 tx timeout [ 211.023445][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 211.023583][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 211.056761][ T24] usb 1-1: unit 6 not found! [ 211.076134][ T7019] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 211.102136][ T24] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 211.109546][ T7011] F2FS-fs (loop1): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x3a1/0xdc0 [ 211.173040][ T7011] F2FS-fs (loop1): inject no more block in inc_valid_node_count of f2fs_new_node_folio+0x355/0xdc0 [ 211.203150][ T24] usb 1-1: selecting invalid altsetting 1 [ 211.217026][ T7019] EXT4-fs (loop3): This should not happen!! Data will be lost [ 211.217026][ T7019] [ 211.236597][ T7011] syz.1.264: attempt to access beyond end of device [ 211.236597][ T7011] loop1: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 211.269877][ T24] usb 1-1: unit 6 not found! [ 211.293328][ T24] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 211.338343][ T7011] syz.1.264: attempt to access beyond end of device [ 211.338343][ T7011] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 211.366537][ T24] usb 1-1: selecting invalid altsetting 1 [ 211.390248][ T24] usb 1-1: unit 6 not found! [ 211.615831][ T24] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 211.666316][ T24] usb 1-1: USB disconnect, device number 5 [ 211.865005][ T5763] udevd[5763]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 211.900087][ T5871] usbhid 4-1:0.0: can't add hid device: -71 [ 211.904075][ T1122] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:7: bg 0: block 112: padding at end of block bitmap is not set [ 211.930687][ T5871] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 211.939318][ T7011] F2FS-fs (loop1): inject inconsistent footer in f2fs_sanity_check_node_footer of __get_node_folio+0x8c1/0xdf0 [ 212.001102][ T1122] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 48 with error 28 [ 212.049084][ T5871] usb 4-1: USB disconnect, device number 5 [ 212.057046][ T7011] F2FS-fs (loop1): inconsistent node block, node_type:1, nid:3, node_footer[nid:3,ino:3,ofs:0,cpver:1219692001,blkaddr:4098] [ 212.069040][ T1122] EXT4-fs (loop3): This should not happen!! Data will be lost [ 212.069040][ T1122] [ 212.138192][ T1122] EXT4-fs (loop3): Total free blocks count 0 [ 212.174708][ T1122] EXT4-fs (loop3): Free/Dirty block details [ 212.188430][ T7011] F2FS-fs (loop1): inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x110/0xab0 [ 212.189248][ T1122] EXT4-fs (loop3): free_blocks=0 [ 212.250732][ T1122] EXT4-fs (loop3): dirty_blocks=48 [ 212.277917][ T1122] EXT4-fs (loop3): Block reservation details [ 212.299284][ T30] audit: type=1800 audit(1785429319.690:4): pid=7011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.264" name="file1" dev="loop1" ino=29 res=0 errno=0 [ 212.354229][ T7019] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz.3.267: data will be lost [ 212.542852][ T5634] syz-executor: attempt to access beyond end of device [ 212.542852][ T5634] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 212.604740][ T5634] CPU: 0 UID: 0 PID: 5634 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 212.604770][ T5634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 212.604784][ T5634] Call Trace: [ 212.604793][ T5634] [ 212.604802][ T5634] dump_stack_lvl+0xe8/0x150 [ 212.604848][ T5634] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 212.604887][ T5634] f2fs_write_end_io+0x124b/0x1710 [ 212.604947][ T5634] __submit_merged_bio+0x258/0x6a0 [ 212.604978][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 212.605007][ T5634] ? rcu_is_watching+0x15/0xb0 [ 212.605037][ T5634] __submit_merged_write_cond+0x3c9/0x4e0 [ 212.605079][ T5634] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 212.605126][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 212.605163][ T5634] f2fs_write_data_pages+0x2a27/0x36f0 [ 212.605199][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 212.605227][ T5634] ? __lock_acquire+0x683/0x2cf0 [ 212.605298][ T5634] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 212.605382][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 212.605410][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 212.605437][ T5634] ? __bfs+0x153/0x290 [ 212.605471][ T5634] ? __pfx_hlock_conflict+0x10/0x10 [ 212.605500][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 212.605541][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 212.605568][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 212.605596][ T5634] ? __lock_acquire+0x13e8/0x2cf0 [ 212.605680][ T5634] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 212.605718][ T5634] do_writepages+0x338/0x560 [ 212.605756][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 212.605787][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 212.605819][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 212.605847][ T5634] ? do_raw_spin_unlock+0xf5/0x210 [ 212.605881][ T5634] filemap_fdatawrite+0x1e9/0x2f0 [ 212.605923][ T5634] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 212.606000][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 212.606031][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 212.606064][ T5634] ? do_raw_spin_unlock+0xf5/0x210 [ 212.606098][ T5634] f2fs_sync_dirty_inodes+0x30e/0x830 [ 212.606153][ T5634] f2fs_write_checkpoint+0xa3d/0x2710 [ 212.606228][ T5634] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 212.606330][ T5634] kill_f2fs_super+0x2f6/0x700 [ 212.606376][ T5634] ? __pfx_kill_f2fs_super+0x10/0x10 [ 212.606428][ T5634] ? call_rcu+0x64b/0x8b0 [ 212.606451][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 212.606479][ T5634] ? lockdep_hardirqs_on+0x7a/0x110 [ 212.606506][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 212.606549][ T5634] deactivate_locked_super+0xbc/0x130 [ 212.606590][ T5634] cleanup_mnt+0x3d3/0x460 [ 212.606619][ T5634] task_work_run+0x1d9/0x270 [ 212.606654][ T5634] ? __pfx_task_work_run+0x10/0x10 [ 212.606690][ T5634] exit_to_user_mode_loop+0x1fa/0x730 [ 212.606723][ T5634] ? rcu_is_watching+0x15/0xb0 [ 212.606748][ T5634] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.606775][ T5634] do_syscall_64+0x353/0x580 [ 212.606802][ T5634] ? trace_irq_disable+0x3b/0x140 [ 212.606841][ T5634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.606866][ T5634] RIP: 0033:0x7f485f59f1d7 [ 212.606887][ T5634] Code: a2 c7 05 1c 35 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 212.606906][ T5634] RSP: 002b:00007fff6f336688 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 212.606934][ T5634] RAX: 0000000000000000 RBX: 00007f485f634314 RCX: 00007f485f59f1d7 [ 212.606950][ T5634] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff6f336740 [ 212.606965][ T5634] RBP: 00007fff6f336740 R08: 00007fff6f337740 R09: 00000000ffffffff [ 212.606982][ T5634] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff6f3377d0 [ 212.606997][ T5634] R13: 00007f485f634314 R14: 0000000000033d52 R15: 00007fff6f337810 [ 212.607034][ T5634] [ 212.989195][ T5634] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 213.073529][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 213.207044][ T7052] loop5: detected capacity change from 0 to 32768 [ 213.253253][ T24] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.264815][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 213.530297][ T24] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 213.541305][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.864181][ T7082] batman_adv: batadv0: Adding interface: dummy0 [ 213.883695][ T24] usb 3-1: config 0 descriptor?? [ 213.903563][ T7082] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.011006][ T7052] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 214.067654][ T7079] can: request_module (can-proto-0) failed. [ 214.122655][ T7082] batman_adv: batadv0: Interface activated: dummy0 [ 214.297020][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 214.324807][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 214.394677][ T24] usb 3-1: USB disconnect, device number 6 [ 214.693447][ T5635] ocfs2: Unmounting device (7,5) on (node local) [ 215.885514][ T7101] vlan2: entered allmulticast mode [ 215.890700][ T7101] veth0_vlan: entered allmulticast mode [ 215.946613][ T7102] vlan2: left allmulticast mode [ 215.951737][ T7102] veth0_vlan: left allmulticast mode [ 216.593504][ T7105] loop2: detected capacity change from 0 to 1024 [ 216.613590][ T7086] loop3: detected capacity change from 0 to 32768 [ 216.628963][ T7105] EXT4-fs: Ignoring removed orlov option [ 216.651909][ T7086] btrfs: Deprecated parameter 'usebackuproot' [ 216.681804][ T7086] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 217.189366][ T7105] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.771516][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 218.110752][ T7119] syzkaller0: entered promiscuous mode [ 218.185090][ T7119] syzkaller0: entered allmulticast mode [ 218.650465][ T7138] can: request_module (can-proto-0) failed. [ 219.973146][ T7166] syzkaller0: entered promiscuous mode [ 219.985514][ T7168] syz.3.303 uses obsolete (PF_INET,SOCK_PACKET) [ 219.995367][ T7166] syzkaller0: entered allmulticast mode [ 220.036035][ T7166] tipc: Started in network mode [ 220.071094][ T7166] tipc: Node identity 9e6fc56dbcbf, cluster identity 4711 [ 220.115029][ T7166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.123872][ T7166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.134330][ T5648] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.209393][ T7166] tipc: Enabled bearer , priority 0 [ 220.243474][ T7170] tipc: Resetting bearer [ 220.251407][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.259993][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.292132][ T7170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.346508][ T7165] tipc: Resetting bearer [ 220.408132][ T7165] tipc: Disabling bearer [ 222.184772][ T7200] team0: Port device xfrm0 removed [ 222.190933][ T7200] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 222.319330][ T7173] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 222.657926][ T7228] ieee802154 phy0 wpan0: encryption failed: -22 [ 223.249659][ T7250] netlink: 'syz.3.328': attribute type 4 has an invalid length. [ 223.334842][ T7253] netlink: 'syz.3.328': attribute type 4 has an invalid length. [ 223.958962][ T7266] netlink: 48 bytes leftover after parsing attributes in process `syz.3.333'. [ 224.034371][ T7272] openvswitch: netlink: Port 856954028 exceeds max allowable 65535 [ 224.091020][ T7275] netlink: 16 bytes leftover after parsing attributes in process `syz.5.337'. [ 224.198923][ T7275] bond0: entered promiscuous mode [ 224.250743][ T7275] bond0: left promiscuous mode [ 224.935882][ T7313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.344'. [ 225.100402][ T7308] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 225.262636][ T7318] netlink: 132 bytes leftover after parsing attributes in process `syz.2.346'. [ 225.554019][ T7324] warning: `syz.0.348' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 226.229679][ T7340] netlink: 4 bytes leftover after parsing attributes in process `syz.5.352'. [ 226.896236][ T6440] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 226.959091][ T7362] Driver unsupported XDP return value 0 on prog (id 24) dev N/A, expect packet loss! [ 227.022725][ T7355] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 227.706295][ T7375] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 227.718283][ T7375] netlink: 44 bytes leftover after parsing attributes in process `syz.5.362'. [ 228.675833][ T7402] sctp: [Deprecated]: syz.4.369 (pid 7402) Use of int in max_burst socket option. [ 228.675833][ T7402] Use struct sctp_assoc_value instead [ 228.993995][ T7408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.370'. [ 229.038490][ T7408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.370'. [ 229.050335][ T7411] netlink: 'syz.0.370': attribute type 13 has an invalid length. [ 229.088580][ T7411] netlink: 'syz.0.370': attribute type 17 has an invalid length. [ 229.661646][ T7408] netlink: 'syz.0.370': attribute type 13 has an invalid length. [ 229.723227][ T7408] netlink: 'syz.0.370': attribute type 17 has an invalid length. [ 229.839167][ T7421] bond1: option primary_reselect: invalid value (6) [ 229.905698][ T7421] bond1 (unregistering): Released all slaves [ 230.375407][ T7411] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 230.422445][ T6440] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.442408][ T6440] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.805750][ T7408] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 230.885357][ T6440] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.914229][ T6440] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.953108][ T7450] syzkaller0: entered promiscuous mode [ 230.971625][ T7450] syzkaller0: entered allmulticast mode [ 231.208183][ T7465] syzkaller0: entered promiscuous mode [ 231.237558][ T7465] syzkaller0: entered allmulticast mode [ 231.446920][ T7472] syzkaller0: left promiscuous mode [ 231.467489][ T7478] netlink: 20 bytes leftover after parsing attributes in process `syz.5.380'. [ 231.489969][ T7472] syzkaller0: left allmulticast mode [ 231.528360][ T7478] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 232.300970][ T7294] Set syz1 is full, maxelem 65536 reached [ 232.477070][ T7506] syzkaller0: entered promiscuous mode [ 232.504282][ T7506] syzkaller0: entered allmulticast mode [ 232.527895][ T7504] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 232.594094][ T7511] netlink: 40 bytes leftover after parsing attributes in process `syz.1.390'. [ 232.645608][ T7511] netlink: 12 bytes leftover after parsing attributes in process `syz.1.390'. [ 232.699208][ T7511] vlan3: entered promiscuous mode [ 232.734977][ T7511] batadv0: entered promiscuous mode [ 232.853936][ T7516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.392'. [ 232.914590][ T7520] netlink: 'syz.5.395': attribute type 1 has an invalid length. [ 232.949799][ T7520] netlink: 756 bytes leftover after parsing attributes in process `syz.5.395'. [ 233.553619][ T7539] netlink: 'syz.5.401': attribute type 1 has an invalid length. [ 233.735326][ T7546] netlink: 20 bytes leftover after parsing attributes in process `syz.3.402'. [ 233.767653][ T7542] bond2: (slave geneve3): making interface the new active one [ 233.780458][ T7542] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 233.847632][ T6440] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 233.923160][ T7546] bond_slave_0: entered promiscuous mode [ 233.954091][ T7546] bond_slave_0: entered allmulticast mode [ 234.027197][ T6118] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 234.072196][ T6118] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 234.142008][ T6118] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 234.714914][ T7554] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 234.736926][ T7574] netlink: 'syz.0.409': attribute type 12 has an invalid length. [ 234.868475][ T7580] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 234.950857][ T7577] netlink: 'syz.5.410': attribute type 1 has an invalid length. [ 234.992390][ T7577] netlink: 224 bytes leftover after parsing attributes in process `syz.5.410'. [ 236.449636][ T7652] pim6reg: entered allmulticast mode [ 236.521485][ T7652] pim6reg: left allmulticast mode [ 237.545993][ T7688] Cannot find set identified by id 65534 to match [ 237.716926][ T7692] netlink: 'syz.0.444': attribute type 1 has an invalid length. [ 237.754595][ T7692] 8021q: adding VLAN 0 to HW filter on device bond1 [ 237.810016][ T7692] bond1: (slave veth3): Enslaving as an active interface with a down link [ 237.899590][ T7692] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 237.932846][ T7696] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 237.942699][ T7696] bond1: (slave batadv1): making interface the new active one [ 237.952418][ T7696] batadv1: entered promiscuous mode [ 237.958147][ T7696] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 237.986937][ T7698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.446'. [ 237.999837][ T7698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.446'. [ 238.325663][ T7710] xt_hashlimit: size too large, truncated to 1048576 [ 238.492420][ T7603] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 239.086893][ T7742] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2567 [ 239.380231][ T7749] veth1_to_bridge: entered promiscuous mode [ 240.598852][ T7794] "syz.3.482" (7794) uses obsolete ecb(arc4) skcipher [ 241.954595][ T7732] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 242.446083][ T7820] batadv0: entered promiscuous mode [ 242.454573][ T7820] vlan2: entered promiscuous mode [ 242.619595][ T7824] syzkaller0: entered promiscuous mode [ 242.631144][ T7824] syzkaller0: entered allmulticast mode [ 243.150498][ T7838] netlink: 8 bytes leftover after parsing attributes in process `syz.4.498'. [ 243.953514][ T7833] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 246.410024][ T271] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.581642][ T271] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.635414][ T271] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.680290][ T271] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.705335][ T7980] xt_hashlimit: size too large, truncated to 1048576 [ 248.118448][ T7993] syzkaller0: entered promiscuous mode [ 248.155720][ T7993] syzkaller0: entered allmulticast mode [ 248.450587][ T8004] vlan3: entered promiscuous mode [ 248.479070][ T8004] gretap0: entered promiscuous mode [ 248.690724][ T8014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.550'. [ 248.774163][ T8008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.550'. [ 249.034825][ T6118] batadv1: left promiscuous mode [ 249.078096][ T8029] netlink: 36 bytes leftover after parsing attributes in process `syz.3.555'. [ 249.278391][ T8039] syzkaller0: entered promiscuous mode [ 249.299887][ T8039] syzkaller0: entered allmulticast mode [ 249.643174][ T8054] netlink: 16 bytes leftover after parsing attributes in process `syz.1.563'. [ 250.429875][ T8086] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2567 [ 251.505178][ T8136] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2567 [ 252.877548][ T8184] netlink: 16 bytes leftover after parsing attributes in process `syz.5.610'. [ 254.394861][ T8241] Bluetooth: MGMT ver 1.23 [ 254.532065][ T5283] veth0_macvtap: left promiscuous mode [ 254.972089][ T8268] vcan0: tx drop: invalid sa for name 0xfffffffffffffffd [ 255.004718][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.445838][ T8290] netlink: 24 bytes leftover after parsing attributes in process `syz.4.630'. [ 256.528614][ T8324] syzkaller0: entered promiscuous mode [ 256.554835][ T8324] syzkaller0: entered allmulticast mode [ 257.244392][ T8362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.670'. [ 257.276680][ T8362] netlink: 20 bytes leftover after parsing attributes in process `syz.4.670'. [ 257.312176][ T8364] Cannot find set identified by id 65534 to match [ 257.411971][ T8362] geneve2: entered promiscuous mode [ 257.438450][ T8362] geneve2: entered allmulticast mode [ 258.143745][ T8388] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.330721][ T8399] syzkaller0: entered promiscuous mode [ 258.373227][ T8399] syzkaller0: entered allmulticast mode [ 259.773205][ T8459] syzkaller0: entered promiscuous mode [ 259.792274][ T8459] syzkaller0: entered allmulticast mode [ 261.021325][ T8513] syzkaller0: entered promiscuous mode [ 261.043996][ T8513] syzkaller0: entered allmulticast mode [ 261.071078][ T8517] Cannot find set identified by id 65534 to match [ 261.996972][ T8556] Cannot find set identified by id 65534 to match [ 262.239971][ T8566] IPv6: Can't replace route, no match found [ 262.249989][ T8564] syzkaller0: entered promiscuous mode [ 262.268614][ T8564] syzkaller0: entered allmulticast mode [ 262.493176][ T8573] syzkaller0: entered promiscuous mode [ 262.505780][ T8573] syzkaller0: entered allmulticast mode [ 262.982203][ T8592] Cannot find set identified by id 65534 to match [ 263.481279][ T5645] Bluetooth: hci3: command 0x0406 tx timeout [ 264.009095][ T8619] syzkaller0: entered promiscuous mode [ 264.015404][ T8619] syzkaller0: entered allmulticast mode [ 264.174819][ T8521] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 265.094673][ T8665] vlan3: entered promiscuous mode [ 265.100456][ T8665] dummy0: entered promiscuous mode [ 265.562397][ T5645] Bluetooth: hci3: command 0x0406 tx timeout [ 267.387765][ T8770] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 267.890135][ T8796] 8021q: VLANs not supported on nlmon0 [ 268.190339][ T8669] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 268.211004][ T8809] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 268.497790][ T8816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.832'. [ 268.566572][ T8818] Cannot find set identified by id 65534 to match [ 272.076162][ T8845] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 272.119206][ T8878] netlink: 4 bytes leftover after parsing attributes in process `syz.0.849'. [ 272.538714][ T8972] netlink: 'syz.1.863': attribute type 13 has an invalid length. [ 272.561390][ T8975] netlink: 'syz.5.864': attribute type 1 has an invalid length. [ 272.572727][ T8972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.863'. [ 273.101685][ T9007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.879'. [ 273.533380][ T9028] netlink: 44 bytes leftover after parsing attributes in process `syz.3.883'. [ 273.621859][ T5645] block nbd0: Receive control failed (result -32) [ 274.037140][ T9049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.894'. [ 277.215271][ T9060] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 277.231835][ T9105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.914'. [ 277.530660][ T9117] syzkaller0: entered promiscuous mode [ 277.553685][ T9117] syzkaller0: entered allmulticast mode [ 277.812907][ T9127] Cannot find set identified by id 65534 to match [ 278.233680][ T9148] netlink: 'syz.2.931': attribute type 1 has an invalid length. [ 278.379511][ T9148] 8021q: adding VLAN 0 to HW filter on device bond1 [ 278.645253][ T9157] bond1: (slave veth3): Enslaving as an active interface with a down link [ 278.840855][ T9160] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 278.928741][ T9184] Cannot find set identified by id 65534 to match [ 279.026381][ T9148] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 279.120945][ T9148] bond1: (slave batadv1): making interface the new active one [ 279.172962][ T9148] batadv1: entered promiscuous mode [ 279.186695][ T9148] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 279.291482][ T9185] syzkaller0: entered promiscuous mode [ 279.343931][ T9185] syzkaller0: entered allmulticast mode [ 279.719533][ T9223] netlink: 128 bytes leftover after parsing attributes in process `syz.4.945'. [ 279.747383][ T9223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.945'. [ 280.208148][ T9249] Cannot find set identified by id 65534 to match [ 280.288785][ T9251] netlink: 'syz.4.958': attribute type 1 has an invalid length. [ 280.447149][ T9251] 8021q: adding VLAN 0 to HW filter on device bond1 [ 280.668651][ T9259] bond1: (slave veth3): Enslaving as an active interface with a down link [ 280.727057][ T9264] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 280.851670][ T9251] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 280.891040][ T9251] bond1: (slave batadv1): making interface the new active one [ 280.934263][ T9251] batadv1: entered promiscuous mode [ 280.952390][ T9251] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 280.982807][ T9275] syzkaller0: entered promiscuous mode [ 281.012559][ T9275] syzkaller0: entered allmulticast mode [ 281.574395][ T9290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.610873][ T9290] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.629378][ T9290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.760440][ T9290] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 281.771845][ T9290] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 281.787514][ T9290] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 282.551899][ T271] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.579622][ T271] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.659322][ T271] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.694133][ T271] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.990352][ T9340] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 283.325129][ T9352] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.362095][ T9352] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 283.610155][ T9352] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.652212][ T9352] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 283.883435][ T9352] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.922057][ T9352] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 284.140040][ T9352] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.178421][ T9352] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 284.302490][ T9389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1008'. [ 284.320025][ T9383] syzkaller0: entered promiscuous mode [ 284.339358][ T9383] syzkaller0: entered allmulticast mode [ 284.577640][ T6278] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 284.603844][ T6278] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 284.640742][ T9394] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 284.726777][ T6278] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 284.745380][ T6278] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 284.879886][ T6047] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 284.901443][ T6047] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 284.989194][ T12] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 285.006704][ T12] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 285.233692][ T9407] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1013'. [ 286.879310][ T9463] 8021q: VLANs not supported on nlmon0 [ 287.088328][ T9471] syz.5.1040: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 287.103709][ T9384] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 287.103778][ T9471] CPU: 1 UID: 0 PID: 9471 Comm: syz.5.1040 Not tainted syzkaller #0 PREEMPT(full) [ 287.103805][ T9471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 287.103819][ T9471] Call Trace: [ 287.103828][ T9471] [ 287.103838][ T9471] dump_stack_lvl+0xe8/0x150 [ 287.103879][ T9471] warn_alloc+0x24c/0x270 [ 287.103911][ T9471] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.103942][ T9471] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.103969][ T9471] ? stack_depot_save_flags+0x3ec/0x800 [ 287.104005][ T9471] ? __pfx_warn_alloc+0x10/0x10 [ 287.104040][ T9471] ? kasan_save_track+0x3e/0x80 [ 287.104071][ T9471] ? __kasan_kmalloc+0x93/0xb0 [ 287.104107][ T9471] ? xsk_setsockopt+0x52a/0x960 [ 287.104128][ T9471] ? do_sock_setsockopt+0x17c/0x1b0 [ 287.104154][ T9471] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 287.104178][ T9471] ? do_syscall_64+0x174/0x580 [ 287.104205][ T9471] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.104241][ T9471] __vmalloc_node_range_noprof+0x12c/0x1730 [ 287.104307][ T9471] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 287.104343][ T9471] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.104370][ T9471] ? __kasan_kmalloc+0x93/0xb0 [ 287.104406][ T9471] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.104433][ T9471] ? __kmalloc_cache_noprof+0x32d/0x660 [ 287.104467][ T9471] ? __kmalloc_cache_noprof+0x150/0x660 [ 287.104503][ T9471] vmalloc_user_noprof+0xad/0xe0 [ 287.104535][ T9471] ? xskq_create+0xbf/0x170 [ 287.104562][ T9471] xskq_create+0xbf/0x170 [ 287.104590][ T9471] xsk_init_queue+0x8a/0xe0 [ 287.104618][ T9471] xsk_setsockopt+0x52a/0x960 [ 287.104640][ T9471] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.104671][ T9471] ? __pfx_xsk_setsockopt+0x10/0x10 [ 287.104716][ T9471] ? __pfx_aa_sk_perm+0x10/0x10 [ 287.104741][ T9471] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.104776][ T9471] ? aa_sock_opt_perm+0xff/0x1a0 [ 287.104806][ T9471] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.104834][ T9471] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.104861][ T9471] ? __pfx_xsk_setsockopt+0x10/0x10 [ 287.104902][ T9471] do_sock_setsockopt+0x17c/0x1b0 [ 287.104934][ T9471] __x64_sys_setsockopt+0x13d/0x1b0 [ 287.104964][ T9471] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.104991][ T9471] do_syscall_64+0x174/0x580 [ 287.105018][ T9471] ? trace_irq_disable+0x3b/0x140 [ 287.105057][ T9471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.105082][ T9471] RIP: 0033:0x7f84fe59df99 [ 287.105103][ T9471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.105122][ T9471] RSP: 002b:00007f84ff428028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 287.105145][ T9471] RAX: ffffffffffffffda RBX: 00007f84fe825fa0 RCX: 00007f84fe59df99 [ 287.105162][ T9471] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 287.105177][ T9471] RBP: 00007f84fe634ec4 R08: 0000000000000004 R09: 0000000000000000 [ 287.105191][ T9471] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 287.105206][ T9471] R13: 00007f84fe826038 R14: 00007f84fe825fa0 R15: 00007ffc3d626a78 [ 287.105244][ T9471] [ 287.109556][ T9471] Mem-Info: [ 287.514211][ T9471] active_anon:6805 inactive_anon:0 isolated_anon:0 [ 287.514211][ T9471] active_file:0 inactive_file:58961 isolated_file:0 [ 287.514211][ T9471] unevictable:768 dirty:203 writeback:0 [ 287.514211][ T9471] slab_reclaimable:10823 slab_unreclaimable:119086 [ 287.514211][ T9471] mapped:35189 shmem:1289 pagetables:1359 [ 287.514211][ T9471] sec_pagetables:0 bounce:0 [ 287.514211][ T9471] kernel_misc_reclaimable:0 [ 287.514211][ T9471] free:1276894 free_pcp:9915 free_cma:0 [ 287.575298][ T9471] Node 0 active_anon:27220kB inactive_anon:0kB active_file:0kB inactive_file:235636kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:140756kB dirty:808kB writeback:0kB shmem:3620kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13476kB pagetables:5232kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 287.674016][ T9471] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:104kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 287.710325][ T9471] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 287.748974][ T9471] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 287.755078][ T9471] Node 0 DMA32 free:1156028kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27620kB inactive_anon:0kB active_file:0kB inactive_file:235636kB unevictable:1536kB writepending:808kB zspages:0kB present:3129332kB managed:2548580kB mlocked:0kB bounce:0kB free_pcp:38256kB local_pcp:19948kB free_cma:0kB [ 287.873401][ T9471] lowmem_reserve[]: 0 0 0 0 0 [ 287.887423][ T9471] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:260kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 287.929740][ T9471] lowmem_reserve[]: 0 0 0 0 0 [ 287.973599][ T9471] Node 1 Normal free:3936188kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:1004kB local_pcp:0kB free_cma:0kB [ 288.085123][ T9471] lowmem_reserve[]: 0 0 0 0 0 [ 288.094504][ T9471] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 288.142447][ T9471] Node 0 DMA32: 2653*4kB (UME) 1226*8kB (UM) 36*16kB (UME) 433*32kB (UM) 182*64kB (UM) 159*128kB (UME) 61*256kB (UME) 17*512kB (UM) 10*1024kB (M) 9*2048kB (UM) 253*4096kB (UM) = 1156132kB [ 288.194008][ T9471] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 288.224708][ T9471] Node 1 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 1*32kB (M) 4*64kB (UM) 5*128kB (UM) 4*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 3*2048kB (U) 958*4096kB (M) = 3936188kB [ 288.274572][ T9471] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 288.312850][ T9471] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 288.360316][ T9471] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 288.394990][ T9471] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 288.412630][ T9471] 60245 total pagecache pages [ 288.427382][ T9471] 0 pages in swap cache [ 288.439653][ T9471] Free swap = 124996kB [ 288.455564][ T9471] Total swap = 124996kB [ 288.470773][ T9471] 2097051 pages RAM [ 288.490167][ T9471] 0 pages HighMem/MovableOnly [ 288.506647][ T9471] 428226 pages reserved [ 288.522013][ T9471] 0 pages cma reserved [ 290.043677][ T9581] syzkaller0: entered promiscuous mode [ 290.049292][ T9581] syzkaller0: entered allmulticast mode [ 290.470987][ T9590] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1084'. [ 290.593878][ T9592] bond2: (slave macvlan1): Enslaving as an active interface with an up link [ 290.629446][ T9593] bond2 (unregistering): (slave macvlan1): Releasing backup interface [ 290.682175][ T9492] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 290.683579][ T9593] bond2 (unregistering): Released all slaves [ 291.689718][ T9603] ieee802154 phy1 wpan1: encryption failed: -22 [ 291.971602][ T3314] batadv1: left promiscuous mode [ 292.735528][ T9660] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1111'. [ 292.853701][ T9664] bond2: (slave macvlan1): Enslaving as an active interface with an up link [ 292.872728][ T9664] bond2 (unregistering): (slave macvlan1): Releasing backup interface [ 292.897514][ T9664] bond2 (unregistering): Released all slaves [ 294.527188][ T9622] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 294.816422][ T9698] syzkaller0: entered promiscuous mode [ 294.839604][ T9698] syzkaller0: entered allmulticast mode [ 296.968244][ T9805] 8021q: VLANs not supported on nlmon0 [ 297.909359][ T9848] 8021q: VLANs not supported on nlmon0 [ 298.819290][ T9891] 8021q: VLANs not supported on nlmon0 [ 299.354671][ T9916] syzkaller0: entered promiscuous mode [ 299.387174][ T9916] syzkaller0: entered allmulticast mode [ 300.229699][ T9954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.238147][ T9954] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.249242][ T9954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.373800][ T9954] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 300.391531][ T9954] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 300.466577][ T9954] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 301.287518][T10008] 8021q: VLANs not supported on nlmon0 [ 301.656014][T10025] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1240'. [ 301.978603][T10034] bond3: (slave macvlan1): Enslaving as an active interface with an up link [ 301.998657][T10043] Cannot find set identified by id 65534 to match [ 302.084987][T10036] bond3 (unregistering): (slave macvlan1): Releasing backup interface [ 302.232420][T10036] bond3 (unregistering): Released all slaves [ 302.387435][T10057] 8021q: VLANs not supported on nlmon0 [ 303.083612][T10095] Cannot find set identified by id 65534 to match [ 303.462443][T10114] 8021q: VLANs not supported on nlmon0 [ 304.213239][T10141] Cannot find set identified by id 65534 to match [ 305.392988][ T5645] block nbd1: Receive control failed (result -32) [ 305.748491][T10206] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1302'. [ 305.762940][T10212] loop4: detected capacity change from 0 to 512 [ 305.797743][T10212] EXT4-fs: Ignoring removed bh option [ 305.827308][T10212] EXT4-fs: inline encryption not supported [ 305.853616][T10212] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 305.889383][T10218] loop2: detected capacity change from 0 to 512 [ 305.930722][T10218] EXT4-fs: Ignoring removed nobh option [ 305.959921][T10212] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 306.033868][T10218] EXT4-fs: Ignoring removed mblk_io_submit option [ 306.483232][T10218] EXT4-fs (loop2): orphan cleanup on readonly fs [ 306.553909][T10218] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 306.795702][T10209] syzkaller0: entered promiscuous mode [ 306.811251][T10209] syzkaller0: entered allmulticast mode [ 306.847278][T10218] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.1307: attempt to clear invalid blocks 2 len 1 [ 306.940162][T10218] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 306.941229][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 306.956917][ C0] EXT4-fs (loop2): initial error at time 1785429414: ext4_clear_blocks:876: inode 13 [ 306.966518][ C0] EXT4-fs (loop2): last error at time 1785429414: ext4_clear_blocks:876: inode 13 [ 306.991570][T10218] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 307.007008][T10218] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1307: invalid indirect mapped block 1819239214 (level 0) [ 307.024396][T10218] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 307.025142][T10218] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1307: invalid indirect mapped block 1819239214 (level 1) [ 307.048633][T10218] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 307.049972][T10218] EXT4-fs (loop2): 1 truncate cleaned up [ 307.070046][T10218] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 307.099863][ T5647] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 307.144522][T10218] EXT4-fs: Ignoring removed nobh option [ 307.152509][T10218] EXT4-fs: Ignoring removed mblk_io_submit option [ 307.323973][T10218] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 307.805719][ T5648] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.064496][T10234] team0: Port device xfrm0 removed [ 310.078459][T10234] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 310.122207][T10237] tipc: Enabling of bearer rejected, already enabled [ 310.284678][ T6440] tipc: Resetting bearer [ 310.544029][T10277] 8021q: VLANs not supported on nlmon0 [ 311.501827][T10325] 8021q: VLANs not supported on nlmon0 [ 311.999828][T10352] netlink: 'syz.4.1352': attribute type 1 has an invalid length. [ 312.197178][T10361] xt_hashlimit: size too large, truncated to 1048576 [ 312.313491][T10368] 8021q: VLANs not supported on nlmon0 [ 314.278126][T10450] Cannot find set identified by id 65534 to match [ 315.029318][ T5645] block nbd2: Receive control failed (result -32) [ 315.651274][T10493] Cannot find set identified by id 65534 to match [ 315.897553][T10497] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 316.452441][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.542532][T10524] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1411'. [ 318.237221][ T5645] block nbd3: Receive control failed (result -32) [ 318.534163][ T5645] Bluetooth: hci5: command 0x0406 tx timeout [ 318.535096][T10599] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 318.552234][ T5784] IPVS: starting estimator thread 0... [ 318.661265][T10609] IPVS: using max 25 ests per chain, 60000 per kthread [ 320.265994][T10680] openvswitch: netlink: Flow key attr not present in new flow. [ 320.286712][T10675] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1462'. [ 324.177293][T10836] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1514'. [ 326.243067][T10878] 8021q: VLANs not supported on nlmon0 [ 326.349678][T10895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1531'. [ 326.360093][T10895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1531'. [ 326.369757][T10895] netlink: 'syz.1.1531': attribute type 34 has an invalid length. [ 326.883566][ T3314] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 326.914944][ T3314] netdevsim netdevsim5 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 326.941668][ T3314] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 326.974226][ T3314] netdevsim netdevsim5 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 326.993348][ T3314] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 327.006647][ T3314] netdevsim netdevsim5 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 327.036877][ T3314] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 327.059172][ T3314] netdevsim netdevsim5 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 327.100687][T10922] netlink: 'syz.4.1542': attribute type 23 has an invalid length. [ 327.110412][T10923] xt_hashlimit: size too large, truncated to 1048576 [ 327.142404][T10922] netlink: 'syz.4.1542': attribute type 21 has an invalid length. [ 327.173255][T10922] IPv6: NLM_F_CREATE should be specified when creating new route [ 327.226503][T10926] tipc: Enabled bearer , priority 0 [ 327.281077][T10926] syzkaller0: entered promiscuous mode [ 327.308880][T10926] syzkaller0: entered allmulticast mode [ 327.366355][T10926] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 327.447199][T10932] 8021q: VLANs not supported on nlmon0 [ 327.514785][T10926] tipc: Resetting bearer [ 327.579172][T10924] tipc: Resetting bearer [ 327.655398][T10944] Cannot find set identified by id 65534 to match [ 327.672784][T10924] tipc: Disabling bearer [ 327.750666][T10949] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1552'. [ 327.853407][T10951] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 327.893611][ T10] IPVS: starting estimator thread 0... [ 327.987547][T10963] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1555'. [ 327.996790][T10957] IPVS: using max 30 ests per chain, 72000 per kthread [ 328.452144][T10981] xt_hashlimit: size too large, truncated to 1048576 [ 328.609334][T10987] Cannot find set identified by id 65534 to match [ 329.256890][T11016] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 329.505762][T11029] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 329.802163][T11041] syzkaller0: entered promiscuous mode [ 329.851456][T11041] syzkaller0: entered allmulticast mode [ 330.269950][T11056] xt_hashlimit: size too large, truncated to 1048576 [ 330.807994][T11078] syzkaller0: entered promiscuous mode [ 330.829276][T11078] syzkaller0: entered allmulticast mode [ 331.782750][T11117] xt_hashlimit: size too large, truncated to 1048576 [ 331.845785][T11120] 8021q: VLANs not supported on nlmon0 [ 331.877917][T11123] syzkaller0: entered promiscuous mode [ 331.892673][T11123] syzkaller0: entered allmulticast mode [ 332.514262][T11144] Cannot find set identified by id 65534 to match [ 333.075051][T11170] syzkaller0: entered promiscuous mode [ 333.096312][T11170] syzkaller0: entered allmulticast mode [ 333.358284][T11180] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1636'. [ 333.447214][T11181] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1636'. [ 334.024219][T11201] Cannot find set identified by id 65534 to match [ 334.760787][T11227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1652'. [ 334.794813][T11227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1652'. [ 334.855648][T11227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1652'. [ 334.906617][T11227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1652'. [ 335.398444][T11248] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1657'. [ 335.541429][T11243] bridge1: entered promiscuous mode [ 335.554602][T11243] bridge1: entered allmulticast mode [ 335.589644][T11243] team0: Device bridge1 is of different type [ 335.693088][T11252] 8021q: VLANs not supported on nlmon0 [ 337.030405][T11293] syzkaller0: entered promiscuous mode [ 337.046556][T11293] syzkaller0: entered allmulticast mode [ 337.080179][T11298] tipc: Cannot configure node identity twice [ 337.158822][T11301] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 339.200882][T11349] xt_hashlimit: size too large, truncated to 1048576 [ 340.520040][T11373] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1698'. [ 342.229957][T11400] xt_hashlimit: size too large, truncated to 1048576 [ 342.436267][T11407] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1711'. [ 342.655878][T11411] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 344.155529][T11449] xt_hashlimit: size too large, truncated to 1048576 [ 344.247760][ T5871] IPVS: starting estimator thread 0... [ 344.253528][T11447] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 344.361389][T11454] IPVS: using max 26 ests per chain, 62400 per kthread [ 344.385485][T11460] tipc: Started in network mode [ 344.440416][T11460] tipc: Node identity 464cb687c7b2, cluster identity 4711 [ 344.521394][T11460] tipc: Enabled bearer , priority 0 [ 344.528734][T11453] syzkaller0: entered promiscuous mode [ 344.536005][T11453] syzkaller0: entered allmulticast mode [ 344.572155][T11457] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 344.700005][T11453] tipc: Resetting bearer [ 344.747882][T11451] tipc: Resetting bearer [ 344.884853][T11451] tipc: Disabling bearer [ 346.150829][T11507] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 346.172014][ T5871] IPVS: starting estimator thread 0... [ 346.281742][T11511] IPVS: using max 25 ests per chain, 60000 per kthread [ 346.641086][T11517] 8021q: VLANs not supported on nlmon0 [ 346.991911][T11529] nbd: must specify at least one socket [ 347.040939][T11532] netlink: 'syz.2.1757': attribute type 10 has an invalid length. [ 347.230056][T11532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.282692][T11537] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 347.290001][T11537] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 347.311901][T11532] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.385797][T11532] bond0: (slave team0): Enslaving as an active interface with an up link [ 347.708746][T11549] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 347.833020][T11552] 8021q: VLANs not supported on nlmon0 [ 348.177932][T11553] syzkaller0: entered promiscuous mode [ 348.198438][T11553] syzkaller0: entered allmulticast mode [ 348.624202][T11573] nbd: must specify at least one socket [ 348.633264][T11574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1773'. [ 349.043438][T11584] geneve0: entered promiscuous mode [ 349.068300][T11584] geneve0: left promiscuous mode [ 349.458410][T11595] 8021q: VLANs not supported on nlmon0 [ 349.905964][T11605] syzkaller0: entered promiscuous mode [ 349.933747][T11605] syzkaller0: entered allmulticast mode [ 350.058643][T11611] nbd: must specify at least one socket [ 351.186898][T11641] bridge0: port 1(macvlan2) entered blocking state [ 351.210694][T11641] bridge0: port 1(macvlan2) entered disabled state [ 351.247677][T11641] macvlan2: entered allmulticast mode [ 351.268262][T11641] syz_tun: entered allmulticast mode [ 351.304622][T11641] macvlan2: entered promiscuous mode [ 352.786561][T11656] syzkaller0: entered promiscuous mode [ 352.792454][T11656] syzkaller0: entered allmulticast mode [ 353.367461][T11619] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 354.509649][T11689] syzkaller0: entered promiscuous mode [ 354.520721][ T5871] IPVS: starting estimator thread 0... [ 354.523377][T11687] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 354.553063][T11689] syzkaller0: entered allmulticast mode [ 354.612400][T11696] IPVS: using max 26 ests per chain, 62400 per kthread [ 354.779858][T11690] syzkaller0: entered promiscuous mode [ 354.786418][T11690] syzkaller0: entered allmulticast mode [ 357.513671][T11695] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 357.949897][T11751] 8021q: VLANs not supported on nlmon0 [ 358.101894][T11755] syzkaller0: entered promiscuous mode [ 358.115287][T11759] x_tables: duplicate underflow at hook 2 [ 358.126312][T11755] syzkaller0: entered allmulticast mode [ 358.175790][T11759] netlink: 'syz.2.1842': attribute type 4 has an invalid length. [ 358.252708][T11760] netlink: 'syz.2.1842': attribute type 4 has an invalid length. [ 358.623964][T11774] netlink: 'syz.1.1847': attribute type 1 has an invalid length. [ 358.646966][T11776] netlink: 'syz.5.1848': attribute type 13 has an invalid length. [ 358.700284][T11777] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1848'. [ 358.772096][T11778] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1847'. [ 359.847614][T11813] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1857'. [ 359.992647][T11817] syzkaller0: entered promiscuous mode [ 360.014634][T11817] syzkaller0: entered allmulticast mode [ 360.392481][T11822] syzkaller0: entered promiscuous mode [ 360.417370][T11822] syzkaller0: entered allmulticast mode [ 360.488351][T11826] bridge0: port 1(macvlan2) entered blocking state [ 360.511070][T11826] bridge0: port 1(macvlan2) entered disabled state [ 360.531895][T11826] macvlan2: entered allmulticast mode [ 360.548152][T11826] syz_tun: entered allmulticast mode [ 360.572445][T11826] macvlan2: entered promiscuous mode [ 360.588612][T11826] bridge0: port 1(macvlan2) entered blocking state [ 360.597771][T11826] bridge0: port 1(macvlan2) entered forwarding state [ 361.290067][T11842] xt_hashlimit: size too large, truncated to 1048576 [ 361.629304][T11856] syz_tun: entered allmulticast mode [ 361.904948][T11788] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 362.380037][T11875] 8021q: VLANs not supported on nlmon0 [ 362.725061][T11886] x_tables: duplicate underflow at hook 2 [ 362.888138][T11895] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 363.605220][T11922] 8021q: VLANs not supported on nlmon0 [ 364.088368][T11933] Cannot find set identified by id 65534 to match [ 364.696720][T11951] 8021q: VLANs not supported on nlmon0 [ 365.827839][T11968] Cannot find set identified by id 65534 to match [ 366.028603][T11899] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 366.040039][T11919] netlink: 'syz.3.1899': attribute type 23 has an invalid length. [ 366.209573][T11973] sock: sock_set_timeout: `syz.1.1924' (pid 11973) tries to set negative timeout [ 366.540485][T11982] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 367.037877][T11998] Cannot find set identified by id 65534 to match [ 367.825843][T12024] syzkaller0: entered promiscuous mode [ 367.854100][T12024] syzkaller0: entered allmulticast mode [ 369.017642][T12075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1961'. [ 369.125857][T12078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1961'. [ 369.316823][ T5649] block nbd4: Receive control failed (result -32) [ 369.616701][T12092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1967'. [ 369.826625][T12108] x_tables: duplicate underflow at hook 2 [ 370.196243][T12115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1974'. [ 370.373762][T12129] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1977'. [ 370.437104][T12129] xfrm0: Caught tx_queue_len zero misconfig [ 371.188730][T12154] x_tables: duplicate underflow at hook 2 [ 371.494408][T12166] geneve4: entered promiscuous mode [ 371.539719][T12172] netlink: 'syz.5.1991': attribute type 61 has an invalid length. [ 371.551110][T12168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1992'. [ 371.599177][ T6440] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.649295][ T6440] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.649530][T12166] trusted_key: syz.5.1991 sent an empty control message without MSG_MORE. [ 371.670879][ T6440] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.748136][ T6440] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.849618][T12166] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 372.874476][T12203] x_tables: duplicate underflow at hook 2 [ 373.189543][T12212] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 373.197469][T12212] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 373.208134][T12212] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 373.214608][T12212] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 373.244435][T12212] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 373.250994][T12212] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 373.287465][T12212] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 373.294025][T12212] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 373.340616][T12212] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 373.557978][T12217] tipc: Started in network mode [ 373.572904][T12217] tipc: Node identity 5acb764dc0d2, cluster identity 4711 [ 373.595774][T12217] tipc: Enabled bearer , priority 0 [ 373.630187][T12219] syzkaller0: entered promiscuous mode [ 373.670511][T12219] syzkaller0: entered allmulticast mode [ 373.708761][T12213] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 373.817222][T12224] tipc: Resetting bearer [ 373.879362][T12211] tipc: Resetting bearer [ 374.036726][T12211] tipc: Disabling bearer [ 375.750468][T12271] tipc: Enabled bearer , priority 0 [ 375.777662][T12271] syzkaller0: entered promiscuous mode [ 375.790047][T12271] syzkaller0: entered allmulticast mode [ 375.813975][T12271] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 376.094508][T12284] tipc: Resetting bearer [ 376.147137][T12269] tipc: Resetting bearer [ 376.246820][T12269] tipc: Disabling bearer [ 377.497479][T12335] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2053'. [ 377.668298][T12348] syzkaller0: entered promiscuous mode [ 377.716998][T12348] syzkaller0: entered allmulticast mode [ 377.884579][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.466855][T12395] bond1: entered promiscuous mode [ 379.473642][T12395] bond1: entered allmulticast mode [ 379.479245][T12395] 8021q: adding VLAN 0 to HW filter on device bond1 [ 380.125611][T12318] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 380.536890][T12404] syzkaller0: entered promiscuous mode [ 380.558310][T12404] syzkaller0: entered allmulticast mode [ 380.867809][T12418] x_tables: duplicate underflow at hook 2 [ 381.782153][T12449] tipc: Enabled bearer , priority 0 [ 381.834265][T12442] syzkaller0: entered promiscuous mode [ 381.866481][T12442] syzkaller0: entered allmulticast mode [ 381.897823][T12450] syzkaller0: entered promiscuous mode [ 381.923603][T12450] syzkaller0: entered allmulticast mode [ 381.987160][T12442] tipc: Resetting bearer [ 382.131076][T12441] tipc: Resetting bearer [ 382.229431][T12441] tipc: Disabling bearer [ 382.709613][T12479] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2099'. [ 383.692369][T12514] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2111'. [ 383.903954][T12529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2114'. [ 383.912827][T12503] syzkaller0: entered promiscuous mode [ 383.914809][T12529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2114'. [ 383.943975][T12503] syzkaller0: entered allmulticast mode [ 383.964939][T12523] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2111'. [ 384.002513][T12523] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2111'. [ 384.028112][T12523] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2111'. [ 384.080590][T12523] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2111'. [ 384.110369][T12523] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2111'. [ 384.150644][T12523] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2111'. [ 384.331775][T12523] tipc: Resetting bearer [ 384.499136][T12545] Cannot find set identified by id 65534 to match [ 386.913670][ T6047] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.922850][ T6047] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.942198][ T6047] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.116333][ T6047] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.718943][T12594] Cannot find set identified by id 65534 to match [ 387.887657][T12599] __nla_validate_parse: 152 callbacks suppressed [ 387.887677][T12599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2132'. [ 387.936997][T12599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2132'. [ 388.145183][T12603] syzkaller0: entered promiscuous mode [ 388.183052][T12603] syzkaller0: entered allmulticast mode [ 389.765272][T12661] syzkaller0: entered promiscuous mode [ 389.792266][T12661] syzkaller0: entered allmulticast mode [ 390.626929][T12697] Cannot find set identified by id 65534 to match [ 390.760241][T12690] bond3: entered promiscuous mode [ 390.801862][T12690] bond3: entered allmulticast mode [ 390.823152][T12690] 8021q: adding VLAN 0 to HW filter on device bond3 [ 392.030627][T12735] syzkaller0: entered promiscuous mode [ 392.050029][T12735] syzkaller0: entered allmulticast mode [ 392.096127][T12738] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2181'. [ 392.126377][T12738] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 392.134673][T12738] IPv6: NLM_F_CREATE should be set when creating new route [ 392.154333][T12738] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2181'. [ 392.165328][T12738] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 392.810934][T12756] bond2: entered promiscuous mode [ 392.817348][T12756] bond2: entered allmulticast mode [ 392.823150][T12756] 8021q: adding VLAN 0 to HW filter on device bond2 [ 392.932611][T12764] net_ratelimit: 1279 callbacks suppressed [ 392.932630][T12764] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 393.156759][T12769] xt_hashlimit: size too large, truncated to 1048576 [ 394.146420][T12713] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 394.585315][T12806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2207'. [ 394.595504][T12806] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2207'. [ 394.703780][T12806] geneve2: entered promiscuous mode [ 394.714012][T12806] geneve2: entered allmulticast mode [ 394.916164][ T6278] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.940809][ T6278] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.244884][ T6278] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.280453][ T6278] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.556574][T12839] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 396.375335][T12874] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2225'. [ 396.430514][T12874] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2225'. [ 396.589802][T12874] geneve2: entered promiscuous mode [ 396.639178][T12874] geneve2: entered allmulticast mode [ 396.791495][ T6439] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.874371][ T6439] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.916028][ T6439] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.007027][ T6439] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.817788][T12945] bond1: entered promiscuous mode [ 398.828759][T12945] bond1: entered allmulticast mode [ 398.842217][T12945] 8021q: adding VLAN 0 to HW filter on device bond1 [ 400.377314][T12903] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 400.396909][T12965] netlink: 'syz.4.2255': attribute type 1 has an invalid length. [ 400.431440][T12965] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2255'. [ 400.803926][T12971] tipc: Started in network mode [ 400.824808][T12971] tipc: Node identity aabc8eae40e4, cluster identity 4711 [ 400.860102][T12971] tipc: Enabled bearer , priority 0 [ 400.893526][T12976] syzkaller0: entered promiscuous mode [ 400.916896][T12976] syzkaller0: entered allmulticast mode [ 401.030170][T12971] tipc: Resetting bearer [ 401.166672][T12967] tipc: Resetting bearer [ 401.312192][T12967] tipc: Disabling bearer [ 401.664464][T13003] xt_hashlimit: size too large, truncated to 1048576 [ 401.710516][T13003] xt_hashlimit: max too large, truncated to 1048576 [ 401.940055][T13015] syzkaller0: entered promiscuous mode [ 401.969199][T13015] syzkaller0: entered allmulticast mode [ 402.020208][T13022] syzkaller0: entered promiscuous mode [ 402.043663][T13022] syzkaller0: entered allmulticast mode [ 402.865049][T13054] syzkaller0: entered promiscuous mode [ 402.903505][T13054] syzkaller0: entered allmulticast mode [ 404.103702][T13093] syzkaller0: entered promiscuous mode [ 404.131713][T13093] syzkaller0: entered allmulticast mode [ 405.596032][T13045] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 406.179886][T13139] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2309'. [ 406.661070][T13139] netlink: 'syz.3.2309': attribute type 1 has an invalid length. [ 406.703052][T13139] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2309'. [ 406.745378][T13147] syzkaller0: entered promiscuous mode [ 406.764746][T13147] syzkaller0: entered allmulticast mode [ 407.694359][T13180] syzkaller0: entered promiscuous mode [ 407.734582][T13180] syzkaller0: entered allmulticast mode [ 408.265929][T13202] xt_hashlimit: size too large, truncated to 1048576 [ 408.674902][T13213] syzkaller0: entered promiscuous mode [ 408.700291][T13213] syzkaller0: entered allmulticast mode [ 408.740117][T13212] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.070066][T13212] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.163111][T13222] tipc: Enabled bearer , priority 0 [ 409.207148][T13220] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 409.263653][T13212] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.417974][T13231] tipc: Resetting bearer [ 410.159113][T13219] tipc: Disabling bearer [ 410.422644][T13212] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.657225][T13254] syzkaller0: entered promiscuous mode [ 410.697165][T13254] syzkaller0: entered allmulticast mode [ 413.209106][ T6047] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.266793][ T12] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.316052][ T78] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.420032][T13307] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2356'. [ 413.430414][ T78] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.475594][T13307] vlan3: entered promiscuous mode [ 413.488335][T13307] batadv0: entered promiscuous mode [ 414.269438][T13334] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.309619][T13291] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 414.858479][T13350] syzkaller0: entered promiscuous mode [ 414.890442][T13350] syzkaller0: entered allmulticast mode [ 415.123876][T13360] xt_hashlimit: size too large, truncated to 1048576 [ 416.924676][T13398] syzkaller0: entered promiscuous mode [ 416.943284][T13398] syzkaller0: entered allmulticast mode [ 416.962799][T13400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2390'. [ 417.315519][T13423] syzkaller0: entered promiscuous mode [ 417.339593][T13423] syzkaller0: entered allmulticast mode [ 418.099637][T13441] xt_hashlimit: size too large, truncated to 1048576 [ 421.767794][T13469] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 421.967522][T13513] ªªªªªª: renamed from vlan0 [ 422.378789][T13529] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2417'. [ 422.508831][T13530] xt_hashlimit: size too large, truncated to 1048576 [ 423.989023][T13565] syzkaller0: entered promiscuous mode [ 424.012692][T13565] syzkaller0: entered allmulticast mode [ 424.123844][T13574] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2431'. [ 424.701280][T13594] netlink: 'syz.4.2437': attribute type 1 has an invalid length. [ 424.990322][T13603] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2438'. [ 425.289692][T13594] bond2: option mode: invalid value (7) [ 425.352469][T13594] bond2 (unregistering): Released all slaves [ 425.608194][T13603] vlan3: entered promiscuous mode [ 425.614049][T13603] batadv0: entered promiscuous mode [ 426.868445][T13654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2458'. [ 426.945191][T13657] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2460'. [ 427.303024][T13657] vlan3: entered promiscuous mode [ 427.884437][T13684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2466'. [ 428.522041][T13704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2475'. [ 428.579153][T13704] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2475'. [ 428.679421][T13704] geneve2: entered promiscuous mode [ 428.707286][T13704] geneve2: entered allmulticast mode [ 430.292812][T13672] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 430.886784][T13783] tipc: Enabled bearer , priority 25 [ 431.910417][T13819] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2514'. [ 431.924170][T13821] syzkaller0: entered promiscuous mode [ 431.973584][T13821] syzkaller0: entered allmulticast mode [ 432.059655][T13819] vlan3: entered promiscuous mode [ 432.295151][T13824] syzkaller0: entered promiscuous mode [ 432.335376][T13824] syzkaller0: entered allmulticast mode [ 433.221040][T13850] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2528'. [ 433.645212][T13867] syzkaller0: entered promiscuous mode [ 433.659058][T13867] syzkaller0: entered allmulticast mode [ 434.184201][T13876] xt_hashlimit: size too large, truncated to 1048576 [ 434.687261][T13809] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 435.251934][T13892] syzkaller0: entered promiscuous mode [ 435.303496][T13892] syzkaller0: entered allmulticast mode [ 435.839424][T13917] syzkaller0: entered promiscuous mode [ 435.866647][T13917] syzkaller0: entered allmulticast mode [ 436.217887][T13941] xt_hashlimit: size too large, truncated to 1048576 [ 436.354884][T13936] syzkaller0: entered promiscuous mode [ 436.368101][T13936] syzkaller0: entered allmulticast mode [ 437.001804][T13962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2560'. [ 437.046031][T13962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2560'. [ 438.275405][T13902] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 439.665004][T13990] syzkaller0: entered promiscuous mode [ 439.670723][T13990] syzkaller0: entered allmulticast mode [ 439.986884][T14003] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2573'. [ 440.902523][T14045] syzkaller0: entered promiscuous mode [ 440.908647][T14045] syzkaller0: entered allmulticast mode [ 441.093160][T14049] syzkaller0: entered promiscuous mode [ 441.098788][T14049] syzkaller0: entered allmulticast mode [ 441.340650][T14053] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2589'. [ 441.364194][T14053] vlan3: entered promiscuous mode [ 441.869992][T14061] syzkaller0: entered promiscuous mode [ 441.880645][T14061] syzkaller0: entered allmulticast mode [ 442.410555][T14082] syzkaller0: entered promiscuous mode [ 442.416689][T14082] syzkaller0: entered allmulticast mode [ 442.428340][T14083] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 443.015769][T14007] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 443.785137][T14115] syzkaller0: entered promiscuous mode [ 443.800593][T14115] syzkaller0: entered allmulticast mode [ 444.037832][T14122] syzkaller0: entered promiscuous mode [ 444.060990][T14122] syzkaller0: entered allmulticast mode [ 445.270815][T14154] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2626'. [ 445.339376][T14154] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2626'. [ 445.487511][T14157] xt_hashlimit: size too large, truncated to 1048576 [ 445.930423][T14165] syzkaller0: entered promiscuous mode [ 445.950966][T14165] syzkaller0: entered allmulticast mode [ 446.185635][T14174] syzkaller0: entered promiscuous mode [ 446.218501][T14174] syzkaller0: entered allmulticast mode [ 446.446790][T14183] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2633'. [ 447.547577][T14215] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2641'. [ 447.586310][T14215] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2641'. [ 448.563842][T14233] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2648'. [ 448.618142][T14235] syzkaller0: entered promiscuous mode [ 448.625779][T14235] syzkaller0: entered allmulticast mode [ 449.463209][T14186] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 449.506751][T14245] netlink: 'syz.5.2652': attribute type 1 has an invalid length. [ 449.563288][T14245] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2652'. [ 450.057587][T14261] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2655'. [ 450.104678][T14261] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2655'. [ 450.551970][T14272] syzkaller0: entered promiscuous mode [ 450.566059][T14277] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2662'. [ 450.572467][T14272] syzkaller0: entered allmulticast mode [ 452.226789][T14331] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2675'. [ 452.802623][T14344] xt_hashlimit: size too large, truncated to 1048576 [ 452.883774][T14345] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2679'. [ 453.696314][T14376] syzkaller0: entered promiscuous mode [ 453.712309][T14376] syzkaller0: entered allmulticast mode [ 453.817926][T14378] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2689'. [ 453.982612][T14288] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 454.317136][T14387] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2694'. [ 454.538061][T14397] netlink: 'syz.3.2696': attribute type 2 has an invalid length. [ 454.608119][T14397] netlink: 'syz.3.2696': attribute type 2 has an invalid length. [ 455.654097][T14424] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2702'. [ 455.939907][T14420] syzkaller0: entered promiscuous mode [ 455.961701][T14420] syzkaller0: entered allmulticast mode [ 457.125538][T14454] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2710'. [ 459.329719][T14436] syzkaller0: entered promiscuous mode [ 459.351434][T14436] syzkaller0: entered allmulticast mode [ 459.572154][T14444] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 459.660329][T14472] syzkaller0: entered promiscuous mode [ 459.686569][T14472] syzkaller0: entered allmulticast mode [ 459.924434][T14478] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2722'. [ 460.126509][T14478] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2722'. [ 460.148691][T14478] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2722'. [ 460.160637][T14478] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2722'. [ 460.172700][T14478] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2722'. [ 460.215675][T14478] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2722'. [ 460.979507][T14510] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2731'. [ 461.261333][T14515] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2732'. [ 461.343891][T14516] syzkaller0: entered promiscuous mode [ 461.376531][T14516] syzkaller0: entered allmulticast mode [ 461.424355][T14518] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2733'. [ 462.142166][T14537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2741'. [ 462.247651][T14542] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2742'. [ 463.444978][ T5763] udevd[5763]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 463.526052][ T5763] udevd[5763]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 463.743788][T14566] syzkaller0: entered promiscuous mode [ 463.782303][T14566] syzkaller0: entered allmulticast mode [ 464.117196][T14590] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2758'. [ 466.111252][T14594] tipc: New replicast peer: 255.255.255.255 [ 466.118218][T14594] tipc: Enabled bearer , priority 10 [ 467.059711][T14623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2769'. [ 467.236796][ T990] tipc: Node number set to 2180953735 [ 467.266988][T14630] tipc: Enabling of bearer rejected, failed to enable media [ 467.827162][T14646] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2775'. [ 469.770385][T14698] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2789'. [ 471.462673][T14707] tipc: Enabling of bearer rejected, failed to enable media [ 471.828047][T14723] xt_hashlimit: size too large, truncated to 1048576 [ 474.013694][T14789] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2813'. [ 476.668173][T14794] tipc: Enabling of bearer rejected, failed to enable media [ 477.973772][T14874] tipc: Enabling of bearer rejected, failed to enable media [ 478.435182][T14894] IPVS: sh: FWM 3 0x00000003 - no destination available [ 479.446408][T14905] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2841'. [ 480.029219][T14927] syzkaller0: entered promiscuous mode [ 480.041311][T14927] syzkaller0: entered allmulticast mode [ 480.725752][T14966] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2853'. [ 483.324575][T15003] tipc: Enabling of bearer rejected, failed to enable media [ 484.828618][T15043] bond3: entered promiscuous mode [ 484.833904][T15043] bond3: entered allmulticast mode [ 484.839562][T15043] 8021q: adding VLAN 0 to HW filter on device bond3 [ 484.868897][T15041] syzkaller0: entered promiscuous mode [ 484.905370][T15041] syzkaller0: entered allmulticast mode [ 485.269892][T15062] Cannot find set identified by id 65534 to match [ 485.886666][T15084] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2885'. [ 485.967053][T15083] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 487.557639][T15118] netlink: 'syz.0.2898': attribute type 18 has an invalid length. [ 487.682570][T15118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2898'. [ 487.836648][T15118] netlink: 'syz.0.2898': attribute type 18 has an invalid length. [ 487.856826][T15118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2898'. [ 490.094053][T15188] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2919'. [ 490.915011][T15210] capability: warning: `syz.1.2925' uses deprecated v2 capabilities in a way that may be insecure [ 491.509342][T15227] xt_hashlimit: size too large, truncated to 1048576 [ 492.062842][T15236] bond3: entered promiscuous mode [ 492.091703][T15236] bond3: entered allmulticast mode [ 492.174419][T15236] 8021q: adding VLAN 0 to HW filter on device bond3 [ 495.413962][T15330] tipc: Started in network mode [ 495.547544][T15330] tipc: Node identity 86dbc9516a9f, cluster identity 4711 [ 495.610908][T15330] tipc: Enabled bearer , priority 0 [ 495.788989][T15324] tipc: Disabling bearer [ 496.096412][T15342] syzkaller0: entered promiscuous mode [ 496.105042][T15342] syzkaller0: entered allmulticast mode [ 497.513740][T15394] bond2: entered promiscuous mode [ 497.520576][T15394] bond2: entered allmulticast mode [ 497.528440][T15394] 8021q: adding VLAN 0 to HW filter on device bond2 [ 498.849603][T15073] Set syz1 is full, maxelem 65536 reached [ 499.436868][T15463] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2991'. [ 500.334964][T15492] syzkaller0: entered promiscuous mode [ 500.340740][T15492] syzkaller0: entered allmulticast mode [ 500.749856][T15498] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3002'. [ 500.760378][T15498] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3002'. [ 500.794390][T15498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3002'. [ 500.805722][T15501] syzkaller0: entered promiscuous mode [ 500.811846][T15501] syzkaller0: entered allmulticast mode [ 500.822686][T15501] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 501.906618][T15440] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 502.257544][T15541] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3017'. [ 502.297336][T15541] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3017'. [ 502.322730][T15543] bridge0: port 1(syz_tun) entered blocking state [ 502.338603][T15543] bridge0: port 1(syz_tun) entered disabled state [ 502.347038][T15541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3017'. [ 502.363370][T15543] syz_tun: entered allmulticast mode [ 502.394104][T15543] syz_tun: entered promiscuous mode [ 502.688240][T15546] bond6: entered promiscuous mode [ 502.698554][T15546] bond6: entered allmulticast mode [ 502.705490][T15546] 8021q: adding VLAN 0 to HW filter on device bond6 [ 502.713492][T15540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3019'. [ 503.345223][T15561] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3025'. [ 503.979394][T15603] netlink: 'syz.2.3034': attribute type 3 has an invalid length. [ 506.347657][T15616] syzkaller0: entered promiscuous mode [ 506.364066][T15616] syzkaller0: entered allmulticast mode [ 506.660900][T15631] bond2: entered promiscuous mode [ 506.667059][T15631] bond2: entered allmulticast mode [ 506.673363][T15631] 8021q: adding VLAN 0 to HW filter on device bond2 [ 506.711454][T15639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3041'. [ 506.786662][T15594] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 506.895379][T15644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3044'. [ 507.392102][T15657] netlink: 'syz.3.3048': attribute type 3 has an invalid length. [ 508.209780][T15687] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3055'. [ 511.362113][T15734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3062'. [ 511.449260][T15692] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 511.539187][T15736] netlink: 'syz.5.3065': attribute type 3 has an invalid length. [ 512.250593][T15765] loop0: detected capacity change from 0 to 512 [ 512.282875][T15765] EXT4-fs: Ignoring removed bh option [ 512.304237][T15765] EXT4-fs: inline encryption not supported [ 512.330655][T15765] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 512.352649][T15767] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3075'. [ 512.416495][T15765] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 513.421521][ T990] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 513.487590][ T5636] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 513.502896][T15792] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3083'. [ 513.643098][ T990] usb 2-1: unable to get BOS descriptor or descriptor too short [ 513.698818][ T990] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 513.766329][ T990] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 513.813761][ T990] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 513.882070][ T990] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.946253][ T990] usb 2-1: Product: syz [ 513.987360][ T990] usb 2-1: Manufacturer: syz [ 514.003747][ T990] usb 2-1: SerialNumber: syz [ 514.074071][ T990] usb 2-1: selecting invalid altsetting 1 [ 514.083562][T15819] loop5: detected capacity change from 0 to 512 [ 514.104281][T15819] EXT4-fs: Ignoring removed nobh option [ 514.128375][ T990] usb 2-1: unit 6 not found! [ 514.157740][T15819] EXT4-fs: Ignoring removed mblk_io_submit option [ 514.186074][ T990] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 514.252723][T15819] EXT4-fs (loop5): orphan cleanup on readonly fs [ 514.266160][ T990] usb 2-1: selecting invalid altsetting 1 [ 514.292905][ T990] usb 2-1: unit 6 not found! [ 514.304235][ T990] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 514.332222][ T990] usb 2-1: selecting invalid altsetting 1 [ 514.341971][ T990] usb 2-1: unit 6 not found! [ 514.344468][T15819] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 514.413104][T15819] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.3089: attempt to clear invalid blocks 2 len 1 [ 514.474476][T15819] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 514.481113][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 514.496816][ C0] EXT4-fs (loop5): initial error at time 1785429621: ext4_clear_blocks:876: inode 13 [ 514.506392][ C0] EXT4-fs (loop5): last error at time 1785429621: ext4_clear_blocks:876: inode 13 [ 514.524477][T15819] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 514.542324][T15819] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.3089: invalid indirect mapped block 1819239214 (level 0) [ 514.572843][T15819] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 514.573447][T15819] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.3089: invalid indirect mapped block 1819239214 (level 1) [ 514.613338][T15831] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3090'. [ 514.665446][ T990] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 514.679756][T15819] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 514.683510][T15819] EXT4-fs (loop5): 1 truncate cleaned up [ 514.720098][ T990] usb 2-1: USB disconnect, device number 3 [ 514.766342][T15819] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 514.889483][ T5927] udevd[5927]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 515.145321][ T5635] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.557811][T15849] smpboot: CPU 1 is now offline [ 515.995432][T15861] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3100'. [ 516.049998][T15863] loop1: detected capacity change from 0 to 512 [ 516.137976][T15863] EXT4-fs: Ignoring removed bh option [ 516.236578][T15863] EXT4-fs: inline encryption not supported [ 516.317682][T15855] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 516.334172][T15863] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 516.523150][T15791] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 516.574961][T15863] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 517.306421][T15880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3107'. [ 517.390673][T15869] 0: reclassify loop, rule prio 0, protocol 03 [ 517.720030][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 518.008731][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 518.115724][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 518.267873][ T10] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 518.406454][ T10] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 518.450823][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.530578][ T10] usb 3-1: Product: syz [ 518.572268][ T10] usb 3-1: Manufacturer: syz [ 518.642517][ T10] usb 3-1: SerialNumber: syz [ 518.742088][ T5634] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 518.828052][ T10] usb 3-1: selecting invalid altsetting 1 [ 518.850930][ T10] usb 3-1: unit 6 not found! [ 518.883003][ T10] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 518.943011][ T10] usb 3-1: selecting invalid altsetting 1 [ 518.962012][ T10] usb 3-1: unit 6 not found! [ 518.968030][ T10] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 519.049698][ T10] usb 3-1: selecting invalid altsetting 1 [ 519.078179][ T10] usb 3-1: unit 6 not found! [ 519.096762][T15907] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3116'. [ 519.602702][T15917] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 519.739133][ T10] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 519.776645][ T10] usb 3-1: USB disconnect, device number 7 [ 520.010440][ T5927] udevd[5927]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 520.967770][T15950] loop1: detected capacity change from 0 to 512 [ 520.994768][T15950] EXT4-fs: Ignoring removed bh option [ 521.000966][T15950] EXT4-fs: inline encryption not supported [ 521.013744][T15950] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 521.025666][T15948] loop4: detected capacity change from 0 to 32768 [ 521.089381][T15950] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 521.110088][ T30] audit: type=1800 audit(1785429628.480:5): pid=15948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3126" name="bus" dev="loop4" ino=7 res=0 errno=0 [ 522.467889][T15914] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 522.477195][T15921] tipc: Enabled bearer , priority 0 [ 523.251376][ T5634] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 523.601889][ T803] tipc: Node number set to 3963930961 [ 524.235080][T15995] xt_hashlimit: size too large, truncated to 1048576 [ 524.404093][T16003] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3142'. [ 524.464689][T15993] bond3: entered promiscuous mode [ 524.503842][T15993] bond3: entered allmulticast mode [ 524.549056][T15993] 8021q: adding VLAN 0 to HW filter on device bond3 [ 524.582142][T15997] syzkaller0: entered promiscuous mode [ 524.613088][T15997] syzkaller0: entered allmulticast mode [ 525.014005][T16027] syzkaller0: entered promiscuous mode [ 525.036803][T16027] syzkaller0: entered allmulticast mode [ 525.068384][T16027] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 525.245418][T16034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3148'. [ 525.424678][T16038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3150'. [ 525.452224][T16038] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3150'. [ 525.510606][ T1158] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.520078][T16038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3150'. [ 525.535923][ T1158] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.546724][T16038] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3150'. [ 525.557754][ T1158] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.568860][ T1158] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.877633][T16052] usb usb8: usbfs: process 16052 (syz.1.3154) did not claim interface 0 before use [ 527.138561][T16057] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3156'. [ 527.565421][T16014] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 528.079253][T16071] xt_hashlimit: size too large, truncated to 1048576 [ 528.230439][T16062] bond3: entered promiscuous mode [ 528.252914][T16062] bond3: entered allmulticast mode [ 528.290598][T16062] 8021q: adding VLAN 0 to HW filter on device bond3 [ 528.483322][T16081] syzkaller0: entered promiscuous mode [ 528.544707][T16081] syzkaller0: entered allmulticast mode [ 634.341023][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 634.348009][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P16071/1:b..l [ 634.356696][ C1] rcu: (detected by 1, t=10504 jiffies, g=90693, q=93 ncpus=2) [ 634.364331][ C1] task:syz.5.3161 state:R running task stack:25136 pid:16071 tgid:16069 ppid:5635 task_flags:0x400140 flags:0x00080002 [ 634.379596][ C1] Call Trace: [ 634.382890][ C1] [ 634.385822][ C1] __schedule+0x17d9/0x56c0 [ 634.390361][ C1] ? __lock_acquire+0x683/0x2cf0 [ 634.395314][ C1] ? __pfx___schedule+0x10/0x10 [ 634.400163][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 634.405796][ C1] ? __lock_acquire+0x683/0x2cf0 [ 634.411020][ C1] preempt_schedule_irq+0x4d/0xa0 [ 634.416046][ C1] irqentry_exit+0x14f/0x8f0 [ 634.420639][ C1] ? trace_irq_disable+0x3b/0x140 [ 634.425708][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 634.431688][ C1] RIP: 0010:lock_acquire+0x221/0x350 [ 634.436982][ C1] Code: ff ff ff e8 61 3f 2e 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 4b 5a ca 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 1b 7b 6d ff cc 48 8d 3d 38 5b b8 [ 634.456583][ C1] RSP: 0018:ffffc9000d9ef1d0 EFLAGS: 00000282 [ 634.462649][ C1] RAX: a1c9ccfdd0064c00 RBX: 0000000000000000 RCX: 0000000000000046 [ 634.470614][ C1] RDX: 0000000039882134 RSI: ffffffff8e4b277d RDI: ffffffff8c4bdd80 [ 634.478578][ C1] RBP: ffffffff81d765a6 R08: ffffffff81d765a6 R09: 0000000000000000 [ 634.486542][ C1] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: 0000000000000002 [ 634.494508][ C1] R13: ffffffff8eb59c60 R14: 0000000000000000 R15: 0000000000000246 [ 634.502474][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 634.507682][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 634.512900][ C1] is_bpf_text_address+0x47/0x2b0 [ 634.517929][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 634.523133][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 634.528766][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 634.533977][ C1] kernel_text_address+0xa5/0xe0 [ 634.538917][ C1] __kernel_text_address+0xd/0x30 [ 634.543939][ C1] unwind_get_return_address+0x4d/0x90 [ 634.549396][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 634.555551][ C1] arch_stack_walk+0xfb/0x150 [ 634.560240][ C1] stack_trace_save+0xa9/0x100 [ 634.565009][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 634.570390][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 634.576024][ C1] kasan_save_stack+0x3e/0x60 [ 634.580704][ C1] ? kasan_save_stack+0x3e/0x60 [ 634.585555][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 634.590924][ C1] ? call_rcu+0xee/0x8b0 [ 634.595165][ C1] ? nf_unregister_net_hooks+0xcb/0x140 [ 634.600713][ C1] ? nf_defrag_ipv6_disable+0x95/0xe0 [ 634.606093][ C1] ? nf_ct_netns_put+0x375/0x520 [ 634.611035][ C1] ? cleanup_entry+0x298/0x360 [ 634.615801][ C1] ? translate_table+0x1e26/0x2040 [ 634.620922][ C1] ? do_ip6t_set_ctl+0xa5c/0xe30 [ 634.625864][ C1] ? nf_setsockopt+0x26f/0x290 [ 634.630635][ C1] ? rawv6_setsockopt+0x276/0x5e0 [ 634.635652][ C1] ? do_sock_setsockopt+0x17c/0x1b0 [ 634.640889][ C1] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 634.646259][ C1] ? do_syscall_64+0x174/0x580 [ 634.651020][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.657133][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 634.662331][ C1] ? __pfx___nf_hook_entries_free+0x10/0x10 [ 634.668228][ C1] call_rcu+0xee/0x8b0 [ 634.672292][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 634.678096][ C1] ? __nf_unregister_net_hook+0x4df/0x6d0 [ 634.683836][ C1] nf_unregister_net_hooks+0xcb/0x140 [ 634.689224][ C1] nf_defrag_ipv6_disable+0x95/0xe0 [ 634.694434][ C1] nf_ct_netns_put+0x375/0x520 [ 634.699207][ C1] ? __pfx_connmark_tg_destroy+0x10/0x10 [ 634.704839][ C1] cleanup_entry+0x298/0x360 [ 634.709439][ C1] ? __pfx_cleanup_entry+0x10/0x10 [ 634.714567][ C1] ? xt_find_target+0x216/0x260 [ 634.719433][ C1] translate_table+0x1e26/0x2040 [ 634.724401][ C1] ? __pfx_translate_table+0x10/0x10 [ 634.729691][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 634.735326][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 634.740983][ C1] ? _copy_from_user+0x94/0xb0 [ 634.745755][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 634.751391][ C1] do_ip6t_set_ctl+0xa5c/0xe30 [ 634.756171][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 634.761804][ C1] ? rcu_is_watching+0x15/0xb0 [ 634.766569][ C1] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 634.771865][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 634.777506][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 634.783136][ C1] ? __mutex_unlock_slowpath+0x731/0x900 [ 634.788779][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 634.794762][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 634.800395][ C1] ? taprio_dequeue+0x250/0x540 [ 634.805255][ C1] nf_setsockopt+0x26f/0x290 [ 634.809867][ C1] rawv6_setsockopt+0x276/0x5e0 [ 634.814715][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 634.820349][ C1] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 634.825729][ C1] ? aa_sock_opt_perm+0xff/0x1a0 [ 634.830761][ C1] ? sock_common_setsockopt+0x36/0xc0 [ 634.836139][ C1] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 634.842043][ C1] do_sock_setsockopt+0x17c/0x1b0 [ 634.847069][ C1] __x64_sys_setsockopt+0x13d/0x1b0 [ 634.852267][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.858331][ C1] do_syscall_64+0x174/0x580 [ 634.862929][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.868817][ C1] RIP: 0033:0x7f84fe59df99 [ 634.873229][ C1] RSP: 002b:00007f84ff428028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 634.881639][ C1] RAX: ffffffffffffffda RBX: 00007f84fe825fa0 RCX: 00007f84fe59df99 [ 634.889604][ C1] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 634.897562][ C1] RBP: 00007f84fe634ec4 R08: 0000000000000590 R09: 0000000000000000 [ 634.905524][ C1] R10: 0000200000000980 R11: 0000000000000246 R12: 0000000000000000 [ 634.913485][ C1] R13: 00007f84fe826038 R14: 00007f84fe825fa0 R15: 00007ffc3d626a78 [ 634.921468][ C1] [ 634.924479][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10499 jiffies! g90693 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 634.936792][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=36524 [ 634.944669][ C1] rcu: rcu_preempt kthread starved for 10500 jiffies! g90693 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 634.956027][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 634.965986][ C1] rcu: RCU grace-period kthread stack dump: [ 634.971867][ C1] task:rcu_preempt state:I stack:27496 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 634.983805][ C1] Call Trace: [ 634.987088][ C1] [ 634.990015][ C1] __schedule+0x17d9/0x56c0 [ 634.994536][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 635.000192][ C1] ? __pfx___schedule+0x10/0x10 [ 635.005051][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 635.010694][ C1] ? schedule+0x90/0x2b0 [ 635.014941][ C1] schedule+0x164/0x2b0 [ 635.019102][ C1] schedule_timeout+0x152/0x2c0 [ 635.023972][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 635.029375][ C1] ? __pfx_process_timeout+0x10/0x10 [ 635.034682][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 635.040321][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 635.046230][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 635.051875][ C1] ? prepare_to_swait_event+0x322/0x350 [ 635.057437][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 635.062340][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 635.068519][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 635.073824][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 635.079037][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 635.083643][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 635.088851][ C1] ? __kthread_parkme+0x71/0x1f0 [ 635.093793][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 635.099423][ C1] ? __kthread_parkme+0x196/0x1f0 [ 635.104456][ C1] kthread+0x388/0x470 [ 635.108532][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 635.113736][ C1] ? __pfx_kthread+0x10/0x10 [ 635.118340][ C1] ret_from_fork+0x514/0xb70 [ 635.122941][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 635.128058][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 635.133692][ C1] ? __switch_to+0xc89/0x1420 [ 635.138385][ C1] ? __pfx_kthread+0x10/0x10 [ 635.142985][ C1] ret_from_fork_asm+0x1a/0x30 [ 635.147763][ C1] [ 635.150773][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 635.157079][ C1] Sending NMI from CPU 1 to CPUs 0: [ 635.162277][ C0] NMI backtrace for cpu 0 [ 635.162293][ C0] CPU: 0 UID: 0 PID: 6439 Comm: kworker/u8:14 Not tainted syzkaller #0 PREEMPT(full) [ 635.162317][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 635.162331][ C0] Workqueue: 0x0 (bond6) [ 635.162359][ C0] RIP: 0010:taprio_set_budgets+0x1/0x3a0 [ 635.162391][ C0] Code: 0f f8 ff ff 4c 89 f7 e8 fd 6a 56 f8 e9 02 f8 ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 <41> 57 41 56 41 55 41 54 53 48 83 ec 30 48 89 14 24 48 89 f5 48 89 [ 635.162410][ C0] RSP: 0018:ffffc90000007d00 EFLAGS: 00000046 [ 635.162427][ C0] RAX: 18c71fd322db0ca1 RBX: ffff888053a5b800 RCX: ffff888031cedd00 [ 635.162444][ C0] RDX: ffff888053a5b800 RSI: ffff888053a5a800 RDI: ffff88805335e280 [ 635.162460][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 635.162474][ C0] R10: dffffc0000000000 R11: fffff52000000f90 R12: ffff888053a5b800 [ 635.162490][ C0] R13: ffff88805335e000 R14: dffffc0000000000 R15: ffff88805335e300 [ 635.162509][ C0] FS: 0000000000000000(0000) GS:ffff888124f4e000(0000) knlGS:0000000000000000 [ 635.162527][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 635.162542][ C0] CR2: 000000110c2664b0 CR3: 0000000035242000 CR4: 0000000000350ef0 [ 635.162560][ C0] Call Trace: [ 635.162569][ C0] [ 635.162577][ C0] advance_sched+0x970/0xc80 [ 635.162611][ C0] ? __pfx_advance_sched+0x10/0x10 [ 635.162641][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 635.162668][ C0] ? __pfx_advance_sched+0x10/0x10 [ 635.162697][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 635.162735][ C0] hrtimer_interrupt+0x448/0x910 [ 635.162779][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 635.162805][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 635.162831][ C0] [ 635.162844][ C0] [ 635.162852][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 635.162877][ C0] RIP: 0010:finish_task_switch+0x417/0xc60 [ 635.162902][ C0] Code: 04 00 00 41 c7 84 24 20 0e 00 00 00 00 00 00 e9 d5 06 00 00 49 83 c4 48 4c 89 e7 e8 f3 1b 3e 0a e8 0e ac 39 00 fb 4c 8b 65 c8 <49> 8d bc 24 f8 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 635.162920][ C0] RSP: 0018:ffffc90007187a60 EFLAGS: 00000202 [ 635.162938][ C0] RAX: 00000000001b324f RBX: ffff8880b863bf20 RCX: 0000000080000001 [ 635.162952][ C0] RDX: 0000000000000000 RSI: ffffffff8e22d5e4 RDI: ffffffff8c4bdd80 [ 635.162967][ C0] RBP: ffffc90007187ab0 R08: ffffffff90579237 R09: 1ffffffff20af246 [ 635.162984][ C0] R10: dffffc0000000000 R11: fffffbfff20af247 R12: ffff888031cedd00 [ 635.163000][ C0] R13: ffff8880b863bee8 R14: dffffc0000000000 R15: 1ffff110170c77e4 [ 635.163035][ C0] __schedule+0x17e1/0x56c0 [ 635.163077][ C0] ? __pfx___schedule+0x10/0x10 [ 635.163105][ C0] ? schedule+0x90/0x2b0 [ 635.163129][ C0] schedule+0x164/0x2b0 [ 635.163152][ C0] worker_thread+0xc12/0xfb0 [ 635.163182][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 635.163214][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 635.163239][ C0] ? __kthread_parkme+0x71/0x1f0 [ 635.163274][ C0] kthread+0x388/0x470 [ 635.163307][ C0] ? __pfx_worker_thread+0x10/0x10 [ 635.163332][ C0] ? __pfx_kthread+0x10/0x10 [ 635.163365][ C0] ret_from_fork+0x514/0xb70 [ 635.163401][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 635.163433][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 635.163458][ C0] ? __switch_to+0xc89/0x1420 [ 635.163488][ C0] ? __pfx_kthread+0x10/0x10 [ 635.163521][ C0] ret_from_fork_asm+0x1a/0x30 [ 635.163554][ C0]