last executing test programs: 25.33116702s ago: executing program 3 (id=2048): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1}, 0x18) syz_mount_image$f2fs(&(0x7f0000000180), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYRES64=0x0, @ANYBLOB="c3649be801cfa9d37b32e5a81bd8ef65d2d6ae7c55dce6f28d147bd4743ac27b", @ANYRES16, @ANYBLOB="91f895dd7ebcc2b83a83fb121e4e844e5d7a09e7d4a4979f3fdfe200b83e593144c1cf15b5624e3448b3b40065bc381005ed653b2e5aeafdfb38eeddb8c08b04fb2e46eba33d22f32db6a9608832f35ee976140648653030c5dd9306f90fc9f46534c6d9f2b37f945ba052c7197494046b00916b8f07b5b9f05f77f79225aa0700a01e414c5352def7a6078229384108c95320a4abf33afd65548efaf0b3dc54c4c10995d3e08a9017ae0c8828c59983d23cf29ff4ff4a16908f199ba7"], 0x1, 0x556c, &(0x7f000000b980)="$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") pipe(0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000300)='./file0\x00') 24.075612136s ago: executing program 0 (id=2060): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r2, 0x1, {0x0, 0x0, 0x4}, 0xfe}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r4, &(0x7f000000a540), 0x0, 0x41) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r5, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 23.898076806s ago: executing program 3 (id=2061): r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "f1ff5ef2fe010017", "9e8ecc7bb5352776725e1047711330ff2bb17b5508000000000000009bc400", "c60437b0", "46b0dc72b7b1d30e"}, 0x38) openat$tun(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) close(0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@private1={0xfc, 0x1, '\x00', 0x3}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0x9, 0x8, 0x0, 0x400, 0x4, 0x200002, r4}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x34, &(0x7f00000000c0), 0x38) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x14}, 0x1, 0x2, 0x2, 0x6, 0xfffe, 0x4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xd1, 0x35}, [@generic={0x7, 0x3, 0x7, 0x3, 0xc667}]}, &(0x7f0000000340)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x63}, 0x94) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r5, 0x8b32, &(0x7f0000000040)) 23.875907617s ago: executing program 0 (id=2062): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0x42, 0x4, 0x458, 0xffffffff, 0x110, 0x2f0, 0x2f0, 0xffffffff, 0xffffffff, 0x3c0, 0x3c0, 0x3c0, 0xffffffff, 0x4, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x84, 0x2, 0x2}, 0x0, 0xe8, 0x110, 0x0, {0x100000000000000}, [@common=@inet=@multiport={{0x50}, {0x2, 0x0, [0x4e20, 0x4e21, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x4e24, 0x4e22, 0x4e22, 0x4e20, 0x4e21, 0x4e23, 0x4e23, 0x4e20, 0x4e21], [0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x81, 0x1, 0x0, 0x1, 0x0, 0x1], 0x1}}, @common=@unspec=@addrtype1={{0x28}, {0x8, 0x40, 0xd}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'wg1\x00', 'macvlan0\x00', {0xff}, {}, 0x8, 0x0, 0x4}, 0x0, 0x1b8, 0x1e0, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[0x4e20, 0x4e20], [0x4e20, 0x4e22], [0x2d7b, 0x7, 0x4, 0x4, 0xdf4, 0x6, 0xfffffffd, 0xff, 0x6, 0x8, 0x1, 0x8, 0x3, 0xa, 0x1000, 0x6, 0xe, 0xb289, 0x1e, 0x401, 0x2, 0x3, 0x6, 0x60000000, 0x4, 0x0, 0x400, 0x1, 0xfffffff9, 0x10001, 0x0, 0x617, 0x4, 0x7, 0x2, 0x1, 0x7, 0x2, 0x7, 0x1, 0x5, 0x9, 0xd, 0x6, 0x3, 0x0, 0x826, 0x7, 0x2, 0x5, 0x1616, 0x42212, 0x0, 0x2, 0x401, 0x7fff, 0x1266, 0x12, 0x438d46f9, 0x2, 0x3, 0xfff, 0x1c54, 0x32e4], 0x2, [{0x6, 0x9, 0x41}, {0x1, 0x9, 0x65}, {0xfc, 0x8, 0x40}, {0x81, 0x0, 0x48}], 0x0, 0x4, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x9, 0x0, [0x3, 0x1, 0x3a, 0x8, 0x12, 0x9, 0x2d, 0x3b, 0x15, 0x2a, 0x31, 0x3b, 0xc, 0x1, 0x1f, 0x28], 0x1, 0x9, 0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) socket(0x840000000002, 0x3, 0xff) syz_mount_image$ext4(&(0x7f00000022c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x840, &(0x7f0000001780)={[], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@dont_measure}, {@pcr={'pcr', 0x3d, 0x15}}]}, 0x0, 0x543, &(0x7f0000001200)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r5, &(0x7f0000000080)=@known='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) fgetxattr(r5, &(0x7f0000000000)=@known='trusted.overlay.upper\x00', 0x0, 0xffde) 23.729422235s ago: executing program 3 (id=2064): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) syz_emit_ethernet(0x839, &(0x7f0000000480)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00\x00x', 0x803, 0x0, 0x1, @local, @local, {[@routing={0x84}], "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"}}}}}, 0x0) 21.104617834s ago: executing program 0 (id=2072): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r2, 0x1, {0x0, 0x0, 0x4}, 0xfe}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r4, &(0x7f000000a540), 0x0, 0x41) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r5, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 20.587074001s ago: executing program 0 (id=2075): r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x6}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x6}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x4}}, [@snprintf={{0x7, 0x0, 0x8, 0x6}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x6}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x4}, {0x85, 0x0, 0x0, 0xa0}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 13.793168631s ago: executing program 3 (id=2108): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x83, &(0x7f00000022c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b54500", 0x4d, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, {[], @ndisc_ra={0x89, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0xffffffff, [{0x19, 0x7, "a1f90d89bc52a5d0d12f916e22349e2976b86a23a6461052194e4b0306b0994fa901c94703f7092f32768b64079813a3b67d01af214b4740fc2961"}]}}}}}}, 0x0) 12.810107453s ago: executing program 1 (id=2111): r0 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0x6, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r6, 0x3e}, 0x80, &(0x7f0000002080)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x0) 12.235422743s ago: executing program 1 (id=2112): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) fcntl$setlease(r1, 0x400, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x160) open$dir(&(0x7f0000000100)='./file0\x00', 0x4000, 0xc) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) read$watch_queue(r3, &(0x7f00000001c0)=""/178, 0xb2) 8.305077791s ago: executing program 1 (id=2119): pipe2(0x0, 0x80) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000080)=0x82bb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f00000006c0)={0x2, {{0x2, 0x4e1c, @multicast2}}, {{0x2, 0x4e21, @empty}}}, 0x108) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, &(0x7f0000000240)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x8000, @empty}}}, 0x108) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8) pipe2$9p(&(0x7f0000000240), 0x800) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 6.180915304s ago: executing program 1 (id=2122): r0 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0x6, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r6, 0x3e}, 0x80, &(0x7f0000002080)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x0) 5.765805406s ago: executing program 0 (id=2126): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) readlink(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd25, 0x65dfdbfd, {0x0, 0x0, 0x0, r7, {0xc, 0x2}, {0x0, 0xfff3}, {0xd, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff8}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x884) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r2, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x5c47300c868e3a5, &(0x7f0000000340)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2}}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000001c0)="11ebda", 0x3, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, 0x0, 0x1, 0x4, 0x6, @multicast}, 0x14) 5.711932428s ago: executing program 1 (id=2127): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000001080), &(0x7f0000000000)='./file1\x00', 0x2800000, &(0x7f0000000380)=ANY=[], 0x2, 0x5515, &(0x7f0000001300)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xe7c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x441, 0x193) fallocate(r2, 0x10, 0x3ffd, 0x8000) 5.390855685s ago: executing program 4 (id=2129): bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000380)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x4}, 0x50) r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x400000f2, 0x0, 0x2b34988d}]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40440d0}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7ffffffd}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r7, 0x541b, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map, 0x1, 0x0, 0x6daf, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0]}, 0x40) 4.319214512s ago: executing program 2 (id=2132): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) creat(0x0, 0x182) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000580), 0x7, 0xffffffffffffffff, 0x4}, 0x38) r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r0, 0x0, 0x20000040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) r4 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x253, 0x10, &(0x7f0000000000), 0x19f}, 0x48) 4.267843414s ago: executing program 4 (id=2133): pipe2(0x0, 0x80) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000080)=0x82bb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f00000006c0)={0x2, {{0x2, 0x4e1c, @multicast2}}, {{0x2, 0x4e21, @empty}}}, 0x108) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, &(0x7f0000000240)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x8000, @empty}}}, 0x108) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8) pipe2$9p(&(0x7f0000000240), 0x800) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 3.918210813s ago: executing program 3 (id=2134): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 2.601684853s ago: executing program 2 (id=2135): pipe2(0x0, 0x80) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000080)=0x82bb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f00000006c0)={0x2, {{0x2, 0x4e1c, @multicast2}}, {{0x2, 0x4e21, @empty}}}, 0x108) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, &(0x7f0000000240)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x8000, @empty}}}, 0x108) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) chdir(&(0x7f0000000240)='./file0\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) 1.940957657s ago: executing program 1 (id=2136): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x82, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x9f, 0xe, 0x5, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x0, 0x8, 0x1009, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x801, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0xffffffff, 0xc, 0x3, 0x379, 0x9, 0xe, 0x1ff, 0xb, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x7, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0xb, 0x47, 0x2, 0x3, 0x3, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x880, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x40, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x9, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0x7ff, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000fc0)={'syz0\x00', {0x6, 0x9, 0x444, 0x529}, 0x25, [0xf5, 0x8, 0x80000001, 0x6, 0x200, 0x3, 0x8e, 0x9, 0x9, 0x4, 0x1, 0x9, 0x400007, 0x1, 0x71c, 0x38, 0xffffff7f, 0xac, 0x4, 0x3ff, 0x0, 0xea7, 0x1, 0x9be4bf38, 0x0, 0x20002, 0xc, 0x0, 0x8, 0x6, 0x84, 0xd3, 0x8001, 0x3, 0x2001, 0xb, 0x6, 0x5f85, 0x1, 0xc1e, 0x9da, 0x939a, 0x8000, 0x1, 0x5c, 0x8, 0x2, 0xd1, 0xf2b, 0x1, 0x6, 0xfffffffa, 0xffff, 0x8, 0x2, 0x6, 0xffffff80, 0x6eb, 0x6, 0xd2, 0x3ff, 0x5, 0x52, 0x6], [0x5, 0x2, 0xd91, 0x8, 0x3ff, 0xfffffff8, 0x4000000a, 0x5, 0xfffffffe, 0x40a89, 0xffb, 0xffffff4b, 0x1, 0x2, 0x0, 0x1, 0x8, 0x8, 0x2, 0x405, 0x6, 0x9, 0x5, 0x809, 0xd, 0x9, 0x206, 0x9, 0x8008, 0x5, 0xf, 0xb2d1, 0x1, 0x200, 0x10000000, 0xfffffff9, 0x5, 0x9, 0x5, 0x10001, 0x1, 0x865f, 0x80000000, 0x3, 0x801, 0x4, 0x3, 0x29e3, 0x7fc, 0xb4e5, 0x20000, 0x200, 0x6e99, 0x4, 0xff, 0x9, 0x1d, 0x3, 0x8, 0xa, 0x26, 0x2, 0x6, 0x7fff], [0x4343fe9f, 0xfffffffd, 0x101, 0xfff7ffff, 0x7f, 0x8, 0x3, 0xffffffff, 0xc, 0x9, 0xcb06, 0xfffeffff, 0x5, 0x37, 0x5, 0x80003, 0xc8, 0x8, 0x8000, 0x2, 0xdf9e, 0x40005, 0x8, 0xf9b, 0x3, 0x7, 0x401, 0x7, 0x2, 0x2, 0x3, 0x3, 0x1, 0x1, 0x10000004, 0x911, 0x6, 0x8000, 0x31c1, 0x8, 0xb, 0x4, 0x2, 0x1f85, 0x6, 0x3, 0x2, 0x8, 0x7, 0x402, 0xa, 0xffff, 0x40, 0x80000000, 0x3, 0xa, 0x80, 0xf, 0x8, 0x8, 0x9, 0x4, 0x4, 0x6], [0x27b, 0x5, 0x6, 0x10, 0x7, 0x8, 0x8, 0x6, 0x7fffffff, 0xe00e, 0x8000, 0x8, 0xffff7bfb, 0x0, 0x401, 0x100, 0x404, 0x0, 0xa, 0x8, 0x3, 0x8, 0xfffffc00, 0x4, 0x2, 0x4, 0x80, 0x2, 0xc, 0x27, 0x5ca, 0x70, 0x0, 0xffc, 0x400002, 0xc, 0xffffffff, 0x49, 0x80088, 0x10, 0xec, 0x9a2, 0x81, 0x3, 0x400, 0x4, 0x8, 0x5, 0x0, 0xfffffffe, 0x9, 0x6, 0xc3, 0x7, 0x807ff, 0x1, 0x3, 0xfffffbff, 0x0, 0x10001, 0x5, 0x8, 0xa, 0xfffffff7]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x9, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="5953fdfffffffddbdf256b0000000c0099000700000076000000901ac922ddc04d0543dbc284ee0debfb867f54bc21d082dfd24fbbce79b061f9129dbc6c8962d18a15858b8d025d92ec27984ffa824cb346a07b454f1b5bf0e45569546e17288e83337e69807f57f004c34abf3932a85ec2fe1e4077f0286f5e551ab93f640738b541307d2b"], 0x20}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) 1.90583088s ago: executing program 0 (id=2137): r0 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0x6, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r6, 0x3e}, 0x80, &(0x7f0000002080)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x0) 1.606308515s ago: executing program 2 (id=2138): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000300)={[{@rodir}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@fat=@discard}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@numtail}, {@utf8no}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '874'}}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@fat=@check_normal}, {@shortname_winnt}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}]}, 0x3, 0x27b, &(0x7f0000000640)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(r1) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x8002, &(0x7f0000000040), 0x0, 0x62c, &(0x7f00000000c0)="$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") 1.234553875s ago: executing program 4 (id=2139): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00'}, 0x65) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x32, 0x0, &(0x7f0000000300)="e0b9546f5bec20f391e402ccebf9732347dfa0287273cf931fa720dfc83532ead4f77e82f88300"/50, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) 641.906407ms ago: executing program 4 (id=2140): setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0x42, 0x100405, 0x10}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x50}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0x11, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x4e2080, 0x0) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x6, 0x3, 0x7, 0x4, 0x9], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 568.954751ms ago: executing program 2 (id=2141): clock_adjtime(0x0, &(0x7f0000001100)={0xd77, 0xf423f, 0xfffffffffffffffe, 0x0, 0x0, 0x4b, 0x8, 0x0, 0x0, 0xa12, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xefe, 0x4, 0x0, 0x0, 0x2, 0x3, 0x80000000000000}) 522.137813ms ago: executing program 2 (id=2142): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000950000000000000091843bd6ce083d7fa4605c3545be2f83dcb924ae9629aa693c4aa466f0116901804f621ea1866bea8370ecdbc20a4cd735b564f5d2974dd7266eb5628832a9b23541b3b8b0f3bcb09c55c62d06c4640653bb6acb8b5cb37611b337f6bf59c776207f713fc138c71135fed63284f08dcdb85cc83d4c44a8cc3fb19971d6e10e7a426c511f5d60b3c1c76b9d0000"], &(0x7f0000000300)='GPL\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r2, 0x25, 0x4, @val=@uprobe_multi={0x0, 0x0, 0x0, 0xff}}, 0x40) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000000c00)=[{{&(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{0x0}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000080)=[{0x0}], 0x1}}], 0x2, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x17, &(0x7f0000001140)=@sack_info={0x0, 0xef, 0x6}, 0xc) socket(0x2, 0x80805, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000340)) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) 463.650066ms ago: executing program 2 (id=2143): capset(&(0x7f0000000080)={0x20071026}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, 0x0, 0x32600) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, &(0x7f0000004280)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000001400b5952cbd7000ffdbdf250a180000", @ANYRES32=r4, @ANYBLOB="14000600010000000100000001000000feffffff1400020000000000000000000000ff"], 0x40}, 0x1, 0x0, 0x0, 0x20000005}, 0x0) r5 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r5, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x20}, 0x2, r6}) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 331.094063ms ago: executing program 3 (id=2144): syz_emit_ethernet(0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6708100000003aff00034000000000000000ffffac1414aaff0200"/53], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0x8358}, @TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0), 0x0, 0x4, &(0x7f0000000140)={0x11, 0x6, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$netlink(0x10, 0x3, 0x15) r6 = socket$phonet(0x23, 0x2, 0x1) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000680), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r7, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0], 0x0, 0xe9, &(0x7f0000000500), 0x0, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0xa8, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000a001f00000000006c970000200000001100000095"], &(0x7f00000008c0)='syzkaller\x00', 0xa, 0x0, 0x0, 0x41100, 0x61, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="3401000010000100"/20, @ANYRES32=r6, @ANYBLOB="000000000000000014011a80400002803c00018018002100"], 0x134}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0xe8, 0x44, 0x9, 0x0, 0x4000, {0x3}, [@generic="e57b287e6d0f44d4c84328b90f62d4a2dd4f8def45bc4e5be1b0781c5a47510651c5e8a2b6527bafaf771b443f0d155201c6f05a8a7933744f5897b60a235a67e7cd38e3eb8687211ddd3cdabf7660516515fa7f47622cd7036d2b1125f88cf51809aac9a47cea79b6f601cc54ca7f8d70b3c54fc288971efd140bc0fdfd76ee5224cdcda45c25357988a4071b6d9a8c70b117852932e1f960ac9874d5f4328b8492bed9fd86716ab31bf6e173a5e4ef9f6ddc2c1668d8d5462b33fe3872c3ec930485bea98f4cb50fd1bc21000715b34c6d"]}, 0xe8}}, 0x24004044) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb}, 0xc) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'veth0_to_team\x00', {0x3}, 0x3ff}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x8, 0x3, 0x408, 0x138, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00, 0xff000000], [0xffffffff], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x7fff, 0x56e5, {0x2}}}, @common=@inet=@udplite={{0x30}, {[0x4e23, 0x4e23], [0x4e24, 0x4e21], 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @dev}, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x1d0, 0x200, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x80000001, 0x3, 0x20, 0x0, 'syz1\x00', 0x4}}, @common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x84, 0x25, 0x3}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xffffffff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x468) 14.70321ms ago: executing program 4 (id=2145): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) sendto$inet6(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001c40)=[{{&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, 0x0}}], 0x1, 0x844) 0s ago: executing program 4 (id=2146): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$netlink(0x10, 0x3, 0xa) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x80) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000001c00), 0x12) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, 0x0, 0x20000800) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) unshare(0x64000600) kernel console output (not intermixed with test programs): maxpacket 32 [ 86.332202][ T4227] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 86.345343][ T4227] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 86.354510][ T4227] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.495715][ T13] usb 4-1: New USB device found, idVendor=eb1a, idProduct=e361, bcdDevice=7a.67 [ 86.505696][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.519176][ T13] usb 4-1: Product: syz [ 86.523709][ T13] usb 4-1: Manufacturer: syz [ 86.528340][ T13] usb 4-1: SerialNumber: syz [ 86.544454][ T1111] cfg80211: failed to load regulatory.db [ 86.620675][ T4227] usb 2-1: GET_CAPABILITIES returned 0 [ 86.626333][ T4227] usbtmc 2-1:16.0: can't read capabilities [ 86.840382][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 86.850094][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 86.859228][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 86.868359][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 86.877530][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 86.886649][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 86.893907][ T13] dvb-usb: found a 'MSI Digivox Mini SL' in warm state. [ 86.895814][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 86.911826][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 86.920584][ T13] dvb-usb: bulk message failed: -22 (3/0) [ 86.920977][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 86.935751][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 86.944858][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 86.953952][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 86.963052][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 86.972160][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 86.975479][ T13] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 86.981247][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 86.981319][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 87.016770][ T1111] usb 2-1: USB disconnect, device number 5 [ 87.021846][ T13] dvbdev: DVB: registering new adapter (MSI Digivox Mini SL) [ 87.030999][ T13] usb 4-1: media controller created [ 87.049839][ T13] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 87.087838][ T13] dvb-usb: bulk message failed: -22 (6/0) [ 87.112323][ T13] dvb-usb: bulk message failed: -22 (6/0) [ 87.128630][ T13] dvb-usb: no frontend was attached by 'MSI Digivox Mini SL' [ 87.191970][ T13] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7 [ 87.227978][ T13] dvb-usb: schedule remote query interval to 150 msecs. [ 87.251027][ T13] dvb-usb: MSI Digivox Mini SL successfully initialized and connected. [ 87.300113][ T13] usb 4-1: USB disconnect, device number 4 [ 88.158847][ T13] dvb-usb: MSI Digivox Mini SL successfully deinitialized and disconnected. [ 88.233174][ T4546] device syzkaller1 entered promiscuous mode [ 88.500636][ T21] gspca_ov534_9: reg_r err -71 [ 88.850639][ T4228] Bluetooth: hci1: command 0x2016 tx timeout [ 88.900623][ T21] gspca_ov534_9: Unknown sensor 0000 [ 88.900989][ T21] ov534_9: probe of 5-1:0.0 failed with error -22 [ 89.290206][ T21] usb 5-1: USB disconnect, device number 5 [ 89.652752][ T4585] device sit0 entered promiscuous mode [ 89.796689][ T4588] device batadv_slave_1 entered promiscuous mode [ 89.804618][ T4588] netlink: 'syz.0.101': attribute type 10 has an invalid length. [ 89.824294][ T4588] device veth1_macvtap left promiscuous mode [ 90.700361][ T4587] device batadv_slave_1 left promiscuous mode [ 92.070277][ C0] sched: RT throttling activated [ 92.340829][ T4227] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 92.403098][ T4618] process 'syz.4.110' launched '/dev/fd/5' with NULL argv: empty string added [ 92.458817][ T4617] loop4: detected capacity change from 0 to 256 [ 92.495594][ T4617] ======================================================= [ 92.495594][ T4617] WARNING: The mand mount option has been deprecated and [ 92.495594][ T4617] and is ignored by this kernel. Remove the mand [ 92.495594][ T4617] option from the mount to silence this warning. [ 92.495594][ T4617] ======================================================= [ 92.530711][ C0] vkms_vblank_simulate: vblank timer overrun [ 92.558007][ T4617] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 92.569121][ T4617] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 92.580490][ T4227] usb 4-1: Using ep0 maxpacket: 16 [ 92.600666][ T4617] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 93.470723][ T4227] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 93.672031][ T4227] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 93.706045][ T4227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.714818][ T1111] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 93.723644][ T1111] Bluetooth: hci0: Injecting HCI hardware error event [ 93.731771][ T4196] Bluetooth: hci0: hardware error 0x00 [ 93.781578][ T4227] usb 4-1: Product: syz [ 93.807237][ T4227] usb 4-1: Manufacturer: syz [ 93.834867][ T4227] usb 4-1: SerialNumber: syz [ 93.877405][ T4227] usb 4-1: config 0 descriptor?? [ 93.975537][ T21] usb 4-1: USB disconnect, device number 5 [ 95.205339][ T4227] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 96.698072][ T4680] loop1: detected capacity change from 0 to 256 [ 96.944786][ T4680] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 96.966731][ T4680] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 97.322528][ T4680] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 98.000619][ T4227] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 98.022617][ T4227] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.043509][ T4227] usb 1-1: Product: syz [ 98.056092][ T4227] usb 1-1: Manufacturer: syz [ 98.100590][ T4227] usb 1-1: can't set config #1, error -71 [ 98.122438][ T4227] usb 1-1: USB disconnect, device number 4 [ 98.377310][ T4705] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 100.764166][ T4739] loop3: detected capacity change from 0 to 256 [ 101.081105][ T4739] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 101.315471][ T4739] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 101.613810][ T4739] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 102.224708][ T4753] Cannot find add_set index 0 as target [ 103.067546][ T26] audit: type=1326 audit(1777010710.001:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4759 comm="syz.1.145" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f011fb50dd9 code=0x0 [ 103.625565][ T4787] syz.1.155 (4787) used greatest stack depth: 21008 bytes left [ 103.680492][ T4227] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 104.921417][ T4804] Cannot find add_set index 0 as target [ 105.657951][ T4227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.687729][ T4227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.698062][ T4227] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 105.725279][ T4227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.772775][ T4227] usb 4-1: config 0 descriptor?? [ 106.012695][ T4813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.046451][ T4813] netlink: 'syz.2.164': attribute type 10 has an invalid length. [ 106.115059][ T1111] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 106.139203][ T4813] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 106.277907][ T4227] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 106.296000][ T4227] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 106.321496][ T4227] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 106.335014][ T4227] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 106.350743][ T4227] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 106.372033][ T4227] playstation 0003:054C:0DF2.0004: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 106.516173][ T4227] playstation 0003:054C:0DF2.0004: Invalid reportID received, expected 9 got 0 [ 106.535491][ T4227] playstation 0003:054C:0DF2.0004: Failed to retrieve DualSense pairing info: -22 [ 106.564604][ T4227] playstation 0003:054C:0DF2.0004: Failed to get MAC address from DualSense [ 106.591485][ T4227] playstation 0003:054C:0DF2.0004: Failed to create dualsense. [ 106.612350][ T4227] playstation: probe of 0003:054C:0DF2.0004 failed with error -22 [ 106.690708][ T1111] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 106.704522][ T1111] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.722104][ T4227] usb 4-1: USB disconnect, device number 6 [ 106.739033][ T1111] usb 5-1: Product: syz [ 106.753747][ T1111] usb 5-1: Manufacturer: syz [ 106.770547][ T1111] usb 5-1: SerialNumber: syz [ 106.797171][ T4821] fido_id[4821]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 106.803507][ T1111] usb 5-1: config 0 descriptor?? [ 106.852006][ T4825] loop1: detected capacity change from 0 to 256 [ 106.863179][ T1111] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 106.927893][ T4825] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 106.950425][ T4825] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 106.980198][ T4825] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 108.750491][ T4852] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 109.600681][ T1111] gspca_stk1135: reg_w 0x200 err -71 [ 109.607057][ T1111] gspca_stk1135: serial bus timeout: status=0x00 [ 109.673706][ T1111] gspca_stk1135: Sensor write failed [ 109.679074][ T1111] gspca_stk1135: serial bus timeout: status=0x00 [ 109.755704][ T1111] gspca_stk1135: Sensor write failed [ 109.790340][ T1111] gspca_stk1135: serial bus timeout: status=0x00 [ 109.808885][ T1111] gspca_stk1135: Sensor read failed [ 109.843581][ T1111] gspca_stk1135: serial bus timeout: status=0x00 [ 109.849966][ T1111] gspca_stk1135: Sensor read failed [ 109.876066][ T1111] gspca_stk1135: Detected sensor type unknown (0x0) [ 109.896403][ T1111] gspca_stk1135: serial bus timeout: status=0x00 [ 109.959047][ T1111] gspca_stk1135: Sensor read failed [ 109.991920][ T1111] gspca_stk1135: serial bus timeout: status=0x00 [ 109.998305][ T1111] gspca_stk1135: Sensor read failed [ 110.176491][ T1111] gspca_stk1135: serial bus timeout: status=0x00 [ 110.183429][ T1111] gspca_stk1135: Sensor write failed [ 110.188777][ T1111] gspca_stk1135: serial bus timeout: status=0x00 [ 110.195266][ T1111] gspca_stk1135: Sensor write failed [ 110.200677][ T1111] stk1135: probe of 5-1:0.0 failed with error -71 [ 110.211048][ T1111] usb 5-1: USB disconnect, device number 6 [ 110.217046][ T4227] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 110.241392][ T4876] loop4: detected capacity change from 0 to 256 [ 110.580502][ T4228] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 110.597239][ T4876] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 110.639418][ T4876] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 110.723654][ T4876] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 111.160789][ T4227] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.440926][ T4228] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 111.503621][ T4228] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.629787][ T4228] usb 2-1: Product: syz [ 111.740447][ T4228] usb 2-1: Manufacturer: syz [ 111.904667][ T4228] usb 2-1: SerialNumber: syz [ 112.007252][ T4227] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 112.016414][ T4227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.026188][ T4230] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 112.034741][ T4230] Bluetooth: hci3: Injecting HCI hardware error event [ 112.050825][ T4196] Bluetooth: hci3: hardware error 0x00 [ 112.079399][ T4227] usb 4-1: config 0 descriptor?? [ 112.133852][ T4227] pwc: Askey VC010 type 2 USB webcam detected. [ 112.152577][ T4228] usb 2-1: config 0 descriptor?? [ 112.215806][ T4898] Cannot find add_set index 0 as target [ 113.831699][ T4228] dvb_usb_rtl28xxu 2-1:0.0: chip type detection failed -110 [ 113.854846][ T4228] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -110 [ 113.896265][ T4228] usb 2-1: USB disconnect, device number 6 [ 114.447105][ T4227] pwc: recv_control_msg error -32 req 02 val 2b00 [ 114.500385][ T4231] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 114.587633][ T4227] pwc: recv_control_msg error -32 req 02 val 2700 [ 114.708719][ T4227] pwc: recv_control_msg error -32 req 02 val 2c00 [ 115.081328][ T4231] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 115.173272][ T4231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.481919][ T4231] usb 5-1: config 0 descriptor?? [ 115.532916][ T4231] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 115.574641][ T4227] pwc: recv_control_msg error -32 req 04 val 1000 [ 115.600514][ T4227] pwc: recv_control_msg error -71 req 04 val 1300 [ 115.620451][ T4227] pwc: recv_control_msg error -71 req 04 val 1400 [ 115.644748][ T4227] pwc: recv_control_msg error -71 req 02 val 2000 [ 115.670375][ T4227] pwc: recv_control_msg error -71 req 02 val 2100 [ 115.690399][ T4227] pwc: recv_control_msg error -71 req 04 val 1500 [ 115.723877][ T4227] pwc: recv_control_msg error -71 req 02 val 2500 [ 115.757872][ T4227] pwc: recv_control_msg error -71 req 02 val 2400 [ 115.795309][ T4227] pwc: recv_control_msg error -71 req 02 val 2600 [ 115.830554][ T4227] pwc: recv_control_msg error -71 req 02 val 2900 [ 115.860484][ T4227] pwc: recv_control_msg error -71 req 02 val 2800 [ 116.058319][ T4943] Cannot find add_set index 0 as target [ 116.110413][ T4227] pwc: recv_control_msg error -71 req 04 val 1100 [ 116.150563][ T4227] pwc: recv_control_msg error -71 req 04 val 1200 [ 116.184599][ T4227] pwc: Registered as video103. [ 116.199618][ T4227] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input8 [ 116.253259][ T4227] usb 4-1: USB disconnect, device number 7 [ 116.304914][ T4231] gp8psk: usb out operation failed. [ 116.310189][ T4231] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 116.321255][ T4231] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 116.339170][ T4231] usb 5-1: USB disconnect, device number 7 [ 118.281248][ T4970] Dead loop on virtual device ip6_vti0, fix it urgently! [ 118.494617][ T4978] loop0: detected capacity change from 0 to 256 [ 118.557692][ T4978] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 118.720513][ T4978] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 118.860641][ T4231] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 119.122516][ T4978] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 119.290636][ T4231] usb 2-1: Using ep0 maxpacket: 16 [ 119.560647][ T4231] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 119.973198][ T4231] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 120.028361][ T4231] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.074449][ T4231] usb 2-1: Product: syz [ 120.078709][ T4231] usb 2-1: Manufacturer: syz [ 120.159521][ T4231] usb 2-1: SerialNumber: syz [ 120.364198][ T4231] usb 2-1: config 0 descriptor?? [ 120.423309][ T5002] Cannot find add_set index 0 as target [ 122.583219][ T4226] usb 2-1: USB disconnect, device number 7 [ 124.142287][ T5027] loop0: detected capacity change from 0 to 256 [ 124.642119][ T5027] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 124.680363][ T5027] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 124.732510][ T5027] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 124.868059][ T4226] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 124.936550][ T5054] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 125.240371][ T4226] usb 4-1: Using ep0 maxpacket: 8 [ 125.390975][ T4226] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.444667][ T4226] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 125.836971][ T4226] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.081522][ T4226] usb 4-1: config 0 descriptor?? [ 126.310889][ T4226] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 127.740762][ T4226] gspca_vc032x: reg_r err -110 [ 127.877771][ T4226] vc032x: probe of 4-1:0.0 failed with error -110 [ 128.078767][ T4226] usb 4-1: USB disconnect, device number 8 [ 128.900484][ T4226] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 129.077907][ T5093] loop4: detected capacity change from 0 to 256 [ 129.103201][ T5093] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 129.149530][ T5093] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 129.166387][ T5093] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 129.310457][ T4226] usb 4-1: Using ep0 maxpacket: 16 [ 129.327016][ T5102] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 129.509453][ T4231] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 129.590618][ T4226] usb 4-1: unable to get BOS descriptor or descriptor too short [ 129.720935][ T4226] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.762013][ T4226] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 129.847115][ T4226] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 129.920859][ T4231] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 130.065312][ T4226] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 130.111097][ T4231] usb 1-1: config 0 has no interface number 0 [ 130.496353][ T5117] netlink: 'syz.1.257': attribute type 2 has an invalid length. [ 130.800594][ T4226] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.41 [ 130.810178][ T4231] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 130.820347][ T4226] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.829059][ T4226] usb 4-1: Product: syz [ 130.833406][ T4231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.842574][ T4226] usb 4-1: Manufacturer: syz [ 130.847281][ T4226] usb 4-1: SerialNumber: syz [ 130.852138][ T4231] usb 1-1: Product: syz [ 130.856402][ T4231] usb 1-1: Manufacturer: syz [ 130.868476][ T4231] usb 1-1: SerialNumber: syz [ 131.724902][ T4231] usb 1-1: config 0 descriptor?? [ 132.136650][ T5131] tipc: Started in network mode [ 132.167390][ T5131] tipc: Node identity fff, cluster identity 10 [ 132.185874][ T5131] tipc: Node number set to 4095 [ 132.370473][ T4231] dvb_usb_ec168: probe of 1-1:0.1 failed with error -71 [ 132.388142][ T4231] usb 1-1: USB disconnect, device number 5 [ 132.462730][ T4226] usb 4-1: MIDIStreaming interface descriptor not found [ 132.944771][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.951153][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.979557][ T4226] usb 4-1: USB disconnect, device number 9 [ 133.074351][ T5145] Cannot find add_set index 0 as target [ 133.501342][ T4290] udevd[4290]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 138.549759][ T5227] Cannot find add_set index 0 as target [ 139.987010][ T5249] 9pnet: Insufficient options for proto=fd [ 141.878905][ T4227] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 141.979167][ T5272] fuse: Bad value for 'fd' [ 142.250447][ T4227] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 142.271049][ T4227] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 142.311301][ T4227] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 142.430466][ T5285] Cannot find add_set index 0 as target [ 142.681477][ T13] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 142.697540][ T4227] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 142.707822][ T4227] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 142.718989][ T4227] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 142.732461][ T4227] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 142.741644][ T4227] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.761009][ T4227] usb 1-1: config 0 descriptor?? [ 142.780608][ T5253] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 142.930430][ T13] usb 4-1: Using ep0 maxpacket: 16 [ 143.149955][ T5284] 9pnet: Insufficient options for proto=fd [ 143.616606][ T5296] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 143.660780][ T4227] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 143.675650][ T4227] usb 1-1: USB disconnect, device number 6 [ 143.711890][ T4227] usblp0: removed [ 143.790522][ T13] usb 4-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 143.805750][ T13] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 143.814369][ T13] usb 4-1: Product: syz [ 143.818643][ T13] usb 4-1: Manufacturer: syz [ 143.824865][ T13] usb 4-1: SerialNumber: syz [ 143.921225][ T13] usb 4-1: config 0 descriptor?? [ 144.836684][ T4196] Bluetooth: Frame is too long (len 16, expected len 4) [ 144.850658][ T13] peak_usb 4-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 145.190604][ T13] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 145.215413][ T13] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 145.223738][ T13] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 145.321058][ T5324] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 146.150845][ T4196] Bluetooth: Frame is too long (len 10, expected len 4) [ 146.171102][ T13] peak_usb: probe of 4-1:0.0 failed with error -22 [ 146.204515][ T13] usb 4-1: USB disconnect, device number 10 [ 146.285006][ T5343] fuse: Bad value for 'fd' [ 146.483407][ T5345] 9pnet: Insufficient options for proto=fd [ 147.879517][ T150] block nbd1: Attempted send on invalid socket [ 147.887305][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 147.900443][ T21] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 147.940085][ T5357] hpfs: hpfs_map_sector(): read error [ 148.596733][ T5360] device syzkaller1 entered promiscuous mode [ 148.667305][ T5363] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 148.741169][ T21] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 148.760379][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.812149][ T21] usb 5-1: Product: syz [ 148.816368][ T21] usb 5-1: Manufacturer: syz [ 148.835873][ T21] usb 5-1: SerialNumber: syz [ 149.028965][ T21] usb 5-1: config 0 descriptor?? [ 149.112192][ T21] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 149.680364][ T13] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 150.790585][ T13] usb 1-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 150.805420][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.816574][ T13] usb 1-1: config 0 descriptor?? [ 150.862975][ T13] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 150.902616][ T21] gspca_stk1135: reg_w 0xf err -71 [ 150.908806][ T21] gspca_stk1135: serial bus timeout: status=0x00 [ 150.915708][ T21] gspca_stk1135: Sensor write failed [ 150.921136][ T21] gspca_stk1135: serial bus timeout: status=0x00 [ 150.927875][ T21] gspca_stk1135: Sensor write failed [ 150.933353][ T21] gspca_stk1135: serial bus timeout: status=0x00 [ 150.939788][ T21] gspca_stk1135: Sensor read failed [ 150.945092][ T21] gspca_stk1135: serial bus timeout: status=0x00 [ 150.951494][ T21] gspca_stk1135: Sensor read failed [ 150.956703][ T21] gspca_stk1135: Detected sensor type unknown (0x0) [ 150.963401][ T21] gspca_stk1135: serial bus timeout: status=0x00 [ 150.969740][ T21] gspca_stk1135: Sensor read failed [ 150.975182][ T21] gspca_stk1135: serial bus timeout: status=0x00 [ 150.983662][ T21] gspca_stk1135: Sensor read failed [ 150.989193][ T21] gspca_stk1135: serial bus timeout: status=0x00 [ 150.998482][ T21] gspca_stk1135: Sensor write failed [ 151.005656][ T21] gspca_stk1135: serial bus timeout: status=0x00 [ 151.014306][ T21] gspca_stk1135: Sensor write failed [ 151.052832][ T21] stk1135: probe of 5-1:0.0 failed with error -71 [ 151.243625][ T21] usb 5-1: USB disconnect, device number 8 [ 151.989603][ T5419] loop4: detected capacity change from 0 to 256 [ 152.023776][ T5412] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 152.087614][ T5419] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 152.124542][ T13] gspca_sunplus: reg_w_riv err -71 [ 152.129801][ T13] sunplus: probe of 1-1:0.0 failed with error -71 [ 152.140696][ T5419] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 152.183650][ T13] usb 1-1: USB disconnect, device number 7 [ 152.210329][ T5419] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 153.288419][ T5444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.352'. [ 154.352227][ T5455] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 155.540791][ T4231] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 156.011904][ T4231] usb 2-1: Using ep0 maxpacket: 16 [ 156.162480][ T5477] loop0: detected capacity change from 0 to 256 [ 156.193665][ T5477] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 156.233349][ T5477] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 156.585286][ T5477] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 157.596037][ T4231] usb 2-1: unable to read config index 0 descriptor/all [ 157.668374][ T4231] usb 2-1: can't read configurations, error -71 [ 157.801539][ T5501] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 158.664427][ T5518] 9pnet: Insufficient options for proto=fd [ 158.681526][ T4226] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 159.010466][ T4226] usb 1-1: Using ep0 maxpacket: 8 [ 159.151458][ T4226] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 159.310356][ T4226] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 159.375111][ T4226] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 159.460141][ T4226] usb 1-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 159.820807][ T4226] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 159.893719][ T4226] usb 1-1: config 168 interface 0 has no altsetting 0 [ 160.210547][ T4226] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 160.218024][ T4226] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 160.265161][ T4226] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 160.290066][ T5530] 9pnet: Insufficient options for proto=fd [ 160.440676][ T4226] usb 1-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 160.631731][ T4226] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 160.990372][ T4226] usb 1-1: config 168 interface 0 has no altsetting 0 [ 161.169428][ T5538] loop1: detected capacity change from 0 to 256 [ 161.190554][ T4226] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 161.198043][ T4226] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 161.216722][ T5538] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 161.231086][ T4226] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 161.243591][ T4226] usb 1-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 161.255485][ T5538] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 161.264382][ T4226] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 161.288242][ T4226] usb 1-1: config 168 interface 0 has no altsetting 0 [ 161.299869][ T5538] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 161.350493][ T4226] usb 1-1: string descriptor 0 read error: -71 [ 161.356827][ T4226] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 161.413303][ T4226] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.470603][ T4226] usb 1-1: can't set config #168, error -71 [ 161.485785][ T4226] usb 1-1: USB disconnect, device number 8 [ 161.554747][ T5551] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 163.023594][ T5577] 9pnet: Insufficient options for proto=fd [ 163.670829][ T5592] loop1: detected capacity change from 0 to 256 [ 163.756978][ T5592] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 163.807104][ T5592] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 163.848914][ T5592] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 163.941923][ T5607] Cannot find add_set index 0 as target [ 165.027597][ T21] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 165.042300][ T5631] 9pnet: Insufficient options for proto=fd [ 165.260773][ T5633] 9pnet: Insufficient options for proto=fd [ 166.340667][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.358310][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.466119][ T21] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 166.484501][ T21] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 166.509345][ T4232] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 166.513882][ T21] usb 1-1: Manufacturer: syz [ 166.567695][ T21] usb 1-1: config 0 descriptor?? [ 166.841318][ T5659] Cannot find add_set index 0 as target [ 167.030509][ T4232] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 167.049941][ T4232] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.060086][ T4232] usb 5-1: Product: syz [ 167.070712][ T4232] usb 5-1: Manufacturer: syz [ 167.080953][ T4232] usb 5-1: SerialNumber: syz [ 167.097534][ T4232] usb 5-1: config 0 descriptor?? [ 167.152618][ T4232] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 167.544899][ T21] input: syz Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0005/input/input9 [ 167.624437][ T21] input: syz Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0005/input/input10 [ 167.647489][ T21] uclogic 0003:256C:006D.0005: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.0-1/input0 [ 167.749730][ T13] usb 1-1: USB disconnect, device number 9 [ 168.000387][ T21] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 168.665398][ T21] usb 4-1: Using ep0 maxpacket: 16 [ 169.390628][ T21] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 130, using maximum allowed: 30 [ 169.426770][ T21] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 169.474935][ T21] usb 4-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 169.494476][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.596941][ T21] usb 4-1: config 0 descriptor?? [ 169.635755][ T4232] gspca_stk1135: reg_w 0xd err -71 [ 169.642010][ T4232] gspca_stk1135: serial bus timeout: status=0x00 [ 169.648375][ T4232] gspca_stk1135: Sensor write failed [ 169.654189][ T4232] gspca_stk1135: serial bus timeout: status=0x00 [ 169.660601][ T4232] gspca_stk1135: Sensor write failed [ 169.665938][ T4232] gspca_stk1135: serial bus timeout: status=0x00 [ 169.673328][ T4232] gspca_stk1135: Sensor read failed [ 169.678571][ T4232] gspca_stk1135: serial bus timeout: status=0x00 [ 169.684971][ T4232] gspca_stk1135: Sensor read failed [ 169.690208][ T4232] gspca_stk1135: Detected sensor type unknown (0x0) [ 169.697359][ T4232] gspca_stk1135: serial bus timeout: status=0x00 [ 169.703960][ T4232] gspca_stk1135: Sensor read failed [ 169.709222][ T4232] gspca_stk1135: serial bus timeout: status=0x00 [ 169.715871][ T4232] gspca_stk1135: Sensor read failed [ 169.721327][ T4232] gspca_stk1135: serial bus timeout: status=0x00 [ 169.727675][ T4232] gspca_stk1135: Sensor write failed [ 169.734069][ T4232] gspca_stk1135: serial bus timeout: status=0x00 [ 169.740633][ T4232] gspca_stk1135: Sensor write failed [ 169.745986][ T4232] stk1135: probe of 5-1:0.0 failed with error -71 [ 169.780885][ T4232] usb 5-1: USB disconnect, device number 9 [ 169.860733][ T5665] udc-core: couldn't find an available UDC or it's busy [ 169.867736][ T5665] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 170.055170][ T5702] netlink: 12 bytes leftover after parsing attributes in process `syz.2.436'. [ 170.113259][ T21] lenovo 0003:17EF:6062.0006: unknown main item tag 0x0 [ 170.125872][ T21] lenovo 0003:17EF:6062.0006: unknown main item tag 0x0 [ 170.133618][ T21] lenovo 0003:17EF:6062.0006: unknown main item tag 0x0 [ 170.141512][ T21] lenovo 0003:17EF:6062.0006: unknown main item tag 0x0 [ 170.150675][ T4232] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 170.153435][ T21] lenovo 0003:17EF:6062.0006: unknown main item tag 0x0 [ 170.168629][ T21] lenovo 0003:17EF:6062.0006: unknown main item tag 0x0 [ 170.177842][ T21] lenovo 0003:17EF:6062.0006: unknown main item tag 0x0 [ 170.191106][ T21] lenovo 0003:17EF:6062.0006: unknown main item tag 0x0 [ 170.199790][ T21] lenovo 0003:17EF:6062.0006: unknown main item tag 0x0 [ 170.212746][ T21] lenovo 0003:17EF:6062.0006: unknown main item tag 0x0 [ 170.219728][ T21] lenovo 0003:17EF:6062.0006: unknown main item tag 0x0 [ 170.229267][ T21] lenovo 0003:17EF:6062.0006: unknown main item tag 0x0 [ 170.239721][ T21] lenovo 0003:17EF:6062.0006: unknown main item tag 0x0 [ 170.253230][ T21] lenovo 0003:17EF:6062.0006: item fetching failed at offset 32/41 [ 170.263757][ T21] lenovo 0003:17EF:6062.0006: hid_parse failed [ 170.269956][ T21] lenovo: probe of 0003:17EF:6062.0006 failed with error -22 [ 170.315593][ T13] usb 4-1: USB disconnect, device number 11 [ 170.400489][ T4232] usb 5-1: Using ep0 maxpacket: 32 [ 170.520551][ T4232] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 170.530603][ T4232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.547506][ T4232] usb 5-1: config 0 descriptor?? [ 170.602523][ T4232] gspca_main: sunplus-2.14.0 probing 041e:400b [ 171.920735][ T5729] ODEBUG: Out of memory. ODEBUG disabled [ 172.177738][ T5734] netlink: 12 bytes leftover after parsing attributes in process `syz.2.443'. [ 172.408742][ T5749] syz.0.448 sent an empty control message without MSG_MORE. [ 172.670478][ T4232] gspca_sunplus: reg_w_riv err -71 [ 172.675736][ T4232] sunplus: probe of 5-1:0.0 failed with error -71 [ 172.713550][ T4232] usb 5-1: USB disconnect, device number 10 [ 172.866108][ T5741] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.874534][ T5741] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.433892][ T5741] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.459246][ T5741] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.687376][ T5741] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.696646][ T5741] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.706468][ T5741] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.715993][ T5741] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.952616][ T5741] syz.3.447 (5741) used greatest stack depth: 20304 bytes left [ 175.138690][ T5816] netlink: 12 bytes leftover after parsing attributes in process `syz.2.463'. [ 175.306795][ T5824] IPVS: set_ctl: invalid protocol: 8 100.1.1.2:19999 [ 176.108998][ T5816] 8021q: adding VLAN 0 to HW filter on device bond1 [ 176.166482][ T5818] bond1: (slave macvlan1): Enslaving as an active interface with an up link [ 176.241027][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 176.337723][ T5832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.467'. [ 176.455463][ T5843] netlink: 12 bytes leftover after parsing attributes in process `syz.3.472'. [ 176.459262][ T5832] device bond1 entered promiscuous mode [ 176.471871][ T5832] 8021q: adding VLAN 0 to HW filter on device bond1 [ 176.486278][ T5847] bridge0: port 3(bond0) entered blocking state [ 176.509843][ T5847] bridge0: port 3(bond0) entered disabled state [ 176.519486][ T5847] device bond0 entered promiscuous mode [ 176.525230][ T5847] device bond_slave_0 entered promiscuous mode [ 176.531695][ T5847] device bond_slave_1 entered promiscuous mode [ 176.538727][ T5847] bridge0: port 3(bond0) entered blocking state [ 176.545288][ T5847] bridge0: port 3(bond0) entered forwarding state [ 176.783566][ T5853] loop4: detected capacity change from 0 to 256 [ 176.804749][ T5858] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 176.864980][ T5853] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 176.893211][ T5853] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 176.927051][ T5853] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 179.191307][ T5885] netlink: 12 bytes leftover after parsing attributes in process `syz.4.485'. [ 179.230410][ T5887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.483'. [ 179.571157][ T5899] sctp: [Deprecated]: syz.0.488 (pid 5899) Use of struct sctp_assoc_value in delayed_ack socket option. [ 179.571157][ T5899] Use struct sctp_sack_info instead [ 179.674899][ T5904] loop4: detected capacity change from 0 to 256 [ 179.756007][ T5904] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 179.813311][ T5904] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 179.879301][ T5904] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 182.279442][ T5890] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 182.313084][ T5942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.504'. [ 182.322551][ T5942] unsupported nla_type 216 [ 182.490791][ T5949] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 182.507916][ T5949] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 182.524787][ T5949] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 182.546376][ T5949] device bridge_slave_0 left promiscuous mode [ 182.581138][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.623749][ T5949] device bridge_slave_1 left promiscuous mode [ 182.646360][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.718793][ T5949] bond0: (slave bond_slave_0): Releasing backup interface [ 182.776897][ T5949] bond0: (slave bond_slave_1): Releasing backup interface [ 182.888753][ T5949] team0: Port device team_slave_0 removed [ 182.948209][ T5949] team0: Port device team_slave_1 removed [ 182.956422][ T5949] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.964469][ T5949] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.976342][ T5949] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.984806][ T5949] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.008922][ T5949] bond1: (slave macvlan1): Releasing backup interface [ 183.054975][ T5949] bond0: (slave wlan1): Releasing backup interface [ 183.173118][ T5969] device dummy0 entered promiscuous mode [ 183.179019][ T5969] device vlan2 entered promiscuous mode [ 183.523148][ T6003] sctp: [Deprecated]: syz.2.525 (pid 6003) Use of struct sctp_assoc_value in delayed_ack socket option. [ 183.523148][ T6003] Use struct sctp_sack_info instead [ 183.597018][ T6007] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.764467][ T4227] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 184.074504][ T6023] loop1: detected capacity change from 0 to 256 [ 184.152092][ T6023] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 184.192791][ T6023] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 184.237456][ T6023] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 184.755317][ T6048] tipc: Enabling of bearer rejected, failed to enable media [ 185.030463][ T6060] syz.4.548 (6060) used obsolete PPPIOCDETACH ioctl [ 185.039916][ T6062] loop1: detected capacity change from 0 to 256 [ 185.073620][ T6060] netlink: 56 bytes leftover after parsing attributes in process `syz.4.548'. [ 185.123281][ T6062] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 185.142867][ T6068] netlink: 12 bytes leftover after parsing attributes in process `syz.3.551'. [ 185.157747][ T6062] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 185.295417][ T6062] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 185.626317][ T6081] netlink: 'syz.3.556': attribute type 10 has an invalid length. [ 185.642782][ T6081] team0: Port device dummy0 added [ 186.260686][ T6084] device veth0 entered promiscuous mode [ 186.490333][ T6086] device bond0 entered promiscuous mode [ 186.495953][ T6086] device bond_slave_0 entered promiscuous mode [ 186.521238][ T6086] device bond_slave_1 entered promiscuous mode [ 186.599512][ T4590] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.609811][ T6096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.560'. [ 186.639538][ T4590] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.706352][ T6096] netlink: 24 bytes leftover after parsing attributes in process `syz.1.560'. [ 186.788152][ T6099] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 186.811632][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 186.851061][ T6099] ipt_CLUSTERIP: Please specify destination IP [ 187.830105][ T6081] device bond0 left promiscuous mode [ 187.852187][ T6081] device bond_slave_0 left promiscuous mode [ 187.868299][ T6081] device bond_slave_1 left promiscuous mode [ 187.885329][ T6081] device veth0 left promiscuous mode [ 187.905656][ T6081] syz.3.556 (6081) used greatest stack depth: 20272 bytes left [ 187.999483][ T6107] device syzkaller0 entered promiscuous mode [ 188.130359][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 188.172681][ T6116] netlink: 12 bytes leftover after parsing attributes in process `syz.1.566'. [ 188.350027][ T6123] netlink: 32 bytes leftover after parsing attributes in process `syz.4.568'. [ 188.367669][ T6123] netlink: 'syz.4.568': attribute type 12 has an invalid length. [ 189.197649][ T6133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.572'. [ 189.214726][ T6133] netlink: 20 bytes leftover after parsing attributes in process `syz.3.572'. [ 189.257031][ T6133] netlink: 12 bytes leftover after parsing attributes in process `syz.3.572'. [ 189.269103][ T6133] netlink: 31 bytes leftover after parsing attributes in process `syz.3.572'. [ 189.285278][ T6133] netlink: 'syz.3.572': attribute type 3 has an invalid length. [ 189.299892][ T6133] netlink: 'syz.3.572': attribute type 2 has an invalid length. [ 189.314147][ T6133] netlink: 31 bytes leftover after parsing attributes in process `syz.3.572'. [ 189.371036][ T6133] netlink: 'syz.3.572': attribute type 2 has an invalid length. [ 189.471603][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a9b9000: rx timeout, send abort [ 190.081969][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a9b9000: abort rx timeout. Force session deactivation [ 190.751799][ T6161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.580'. [ 191.017004][ T4291] Bluetooth: hci1: command 0x0406 tx timeout [ 191.024907][ T4291] Bluetooth: hci2: command 0x0406 tx timeout [ 191.042858][ T4291] Bluetooth: hci4: command 0x0406 tx timeout [ 191.315913][ T6179] device ip6gretap0 entered promiscuous mode [ 191.345198][ T6179] device macsec1 entered promiscuous mode [ 191.365808][ T6179] device vlan2 entered promiscuous mode [ 191.369815][ T6182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.588'. [ 191.393618][ T6179] device vlan2 left promiscuous mode [ 191.399307][ T6179] device ip6gretap0 left promiscuous mode [ 191.971769][ T6191] netlink: 52 bytes leftover after parsing attributes in process `syz.1.590'. [ 193.328318][ T6239] netlink: 'syz.4.601': attribute type 11 has an invalid length. [ 193.339764][ T6239] netlink: 'syz.4.601': attribute type 6 has an invalid length. [ 193.350296][ T6239] netlink: 232 bytes leftover after parsing attributes in process `syz.4.601'. [ 193.369304][ T6239] netlink: 'syz.4.601': attribute type 11 has an invalid length. [ 193.392657][ T6239] netlink: 5252 bytes leftover after parsing attributes in process `syz.4.601'. [ 193.406821][ T6238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.026127][ T6260] device ipvlan2 entered promiscuous mode [ 194.084146][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.090709][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.249632][ T6270] netlink: 'syz.0.611': attribute type 2 has an invalid length. [ 194.436908][ T6275] crypto_alloc_aead failed rc=-2 [ 195.151959][ T6305] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 195.631257][ T6338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.636'. [ 195.870124][ T6343] tipc: Enabled bearer , priority 0 [ 195.926899][ T6343] device syzkaller0 entered promiscuous mode [ 196.041237][ T6343] tipc: Resetting bearer [ 196.061750][ T6342] tipc: Resetting bearer [ 196.097456][ T6342] tipc: Disabling bearer [ 196.167253][ T6359] loop0: detected capacity change from 0 to 256 [ 196.217028][ T6359] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 196.244515][ T6365] Zero length message leads to an empty skb [ 196.324166][ T6359] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 196.349062][ T6369] Illegal XDP return value 4294967295, expect packet loss! [ 196.380790][ T6359] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 196.617449][ T6380] netlink: 'syz.0.652': attribute type 3 has an invalid length. [ 196.855054][ T6387] netlink: 12 bytes leftover after parsing attributes in process `syz.2.654'. [ 197.250374][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 197.436616][ T6416] netlink: 12 bytes leftover after parsing attributes in process `syz.4.665'. [ 198.040200][ T6429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.670'. [ 198.280125][ T6431] device syzkaller0 entered promiscuous mode [ 198.353152][ T6442] netlink: 'syz.2.672': attribute type 39 has an invalid length. [ 198.882209][ T6452] raw_sendmsg: syz.4.675 forgot to set AF_INET. Fix it! [ 198.909470][ T6454] netlink: 12 bytes leftover after parsing attributes in process `syz.0.676'. [ 199.032591][ T6457] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 199.169851][ T6461] sctp: [Deprecated]: syz.2.677 (pid 6461) Use of int in max_burst socket option. [ 199.169851][ T6461] Use struct sctp_assoc_value instead [ 199.399230][ T4185] block nbd0: Receive control failed (result -1) [ 199.411432][ T6454] nbd0: detected capacity change from 0 to 137438953472 [ 199.438746][ T150] block nbd0: Dead connection, failed to find a fallback [ 199.446218][ T150] block nbd0: shutting down sockets [ 199.452012][ T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 199.464877][ T150] Buffer I/O error on dev nbd0, logical block 0, async page read [ 199.475401][ T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 199.487049][ T150] Buffer I/O error on dev nbd0, logical block 0, async page read [ 199.495953][ T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 199.507317][ T150] Buffer I/O error on dev nbd0, logical block 0, async page read [ 199.516212][ T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 199.527906][ T150] Buffer I/O error on dev nbd0, logical block 0, async page read [ 199.537367][ T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 199.548771][ T150] Buffer I/O error on dev nbd0, logical block 0, async page read [ 199.557480][ T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 199.568838][ T150] Buffer I/O error on dev nbd0, logical block 0, async page read [ 199.579392][ T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 199.590817][ T150] Buffer I/O error on dev nbd0, logical block 0, async page read [ 199.598917][ T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 199.610370][ T150] Buffer I/O error on dev nbd0, logical block 0, async page read [ 199.618504][ T4540] ldm_validate_partition_table(): Disk read failed. [ 199.640391][ T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 199.651279][ T150] Buffer I/O error on dev nbd0, logical block 0, async page read [ 199.659477][ T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 199.670986][ T150] Buffer I/O error on dev nbd0, logical block 0, async page read [ 199.679065][ T4540] Dev nbd0: unable to read RDB block 0 [ 199.710529][ T4540] nbd0: unable to read partition table [ 199.722030][ T4540] ldm_validate_partition_table(): Disk read failed. [ 199.729064][ T4540] Dev nbd0: unable to read RDB block 0 [ 199.736275][ T4540] nbd0: unable to read partition table [ 200.048916][ T6493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.686'. [ 200.069803][ T6493] device bond0 entered promiscuous mode [ 200.086549][ T6493] device bond_slave_0 entered promiscuous mode [ 200.098254][ T6493] device bond_slave_1 entered promiscuous mode [ 200.118255][ T6493] device batadv_slave_0 entered promiscuous mode [ 200.445668][ T6508] netlink: 'syz.4.690': attribute type 39 has an invalid length. [ 200.936496][ T6527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.697'. [ 201.598695][ T6536] IPVS: set_ctl: invalid protocol: 33 100.1.1.0:20002 [ 201.623565][ T6545] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 202.157076][ T6558] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 202.887915][ T6563] netlink: 24 bytes leftover after parsing attributes in process `syz.0.707'. [ 203.023773][ T6570] device syzkaller0 entered promiscuous mode [ 203.275903][ T6588] netlink: 12 bytes leftover after parsing attributes in process `syz.3.714'. [ 203.456200][ T6594] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 203.479401][ T6594] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 203.589631][ T6594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.629637][ T6594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.690152][ T6594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.766213][ T6594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.823641][ T6594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.855930][ T6594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.890963][ T6594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.916843][ T6594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.108189][ T6584] syz.0.713 (6584) used greatest stack depth: 18512 bytes left [ 204.730460][ T6615] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 205.771853][ T6619] netlink: 'syz.0.721': attribute type 2 has an invalid length. [ 206.632976][ T6626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.722'. [ 206.697792][ T6626] netlink: 20 bytes leftover after parsing attributes in process `syz.1.722'. [ 206.744374][ T6626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.722'. [ 206.789240][ T6626] netlink: 31 bytes leftover after parsing attributes in process `syz.1.722'. [ 206.861085][ T6626] netlink: 'syz.1.722': attribute type 3 has an invalid length. [ 206.869200][ T6626] netlink: 'syz.1.722': attribute type 2 has an invalid length. [ 206.930877][ T6626] netlink: 31 bytes leftover after parsing attributes in process `syz.1.722'. [ 206.962306][ T6626] netlink: 'syz.1.722': attribute type 2 has an invalid length. [ 207.291075][ T6649] sctp: [Deprecated]: syz.4.730 (pid 6649) Use of int in max_burst socket option. [ 207.291075][ T6649] Use struct sctp_assoc_value instead [ 207.408882][ T6651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.731'. [ 207.888117][ T6674] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 208.833444][ T6681] netlink: 14 bytes leftover after parsing attributes in process `syz.4.740'. [ 208.929669][ T6689] sctp: [Deprecated]: syz.3.743 (pid 6689) Use of int in max_burst socket option. [ 208.929669][ T6689] Use struct sctp_assoc_value instead [ 209.003011][ T6681] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.022131][ T6681] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.036198][ T6681] bond0 (unregistering): Released all slaves [ 209.059673][ T6692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.745'. [ 209.084907][ T6692] netlink: 20 bytes leftover after parsing attributes in process `syz.3.745'. [ 209.096572][ T6692] netlink: 12 bytes leftover after parsing attributes in process `syz.3.745'. [ 209.138278][ T6692] netlink: 'syz.3.745': attribute type 3 has an invalid length. [ 209.174696][ T6692] netlink: 'syz.3.745': attribute type 2 has an invalid length. [ 209.188361][ T6692] netlink: 'syz.3.745': attribute type 2 has an invalid length. [ 209.287756][ T6703] IPVS: sh: FWM 3 0x00000003 - no destination available [ 209.320904][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 209.329196][ T6703] IPVS: sh: FWM 3 0x00000003 - no destination available [ 209.359156][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 209.370048][ T6706] device syzkaller0 entered promiscuous mode [ 209.741351][ T6732] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 210.035479][ T6759] IPv6: NLM_F_CREATE should be specified when creating new route [ 210.054657][ T6759] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 210.062446][ T6759] IPv6: NLM_F_CREATE should be set when creating new route [ 210.069726][ T6759] IPv6: NLM_F_CREATE should be set when creating new route [ 210.076989][ T6759] IPv6: NLM_F_CREATE should be set when creating new route [ 210.122372][ T6746] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 210.135401][ T6764] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 210.156706][ T6759] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 210.930060][ T6789] device syzkaller0 entered promiscuous mode [ 211.071178][ T6799] IPv6: NLM_F_CREATE should be specified when creating new route [ 211.097589][ T6799] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 211.104902][ T6799] IPv6: NLM_F_CREATE should be set when creating new route [ 211.112211][ T6799] IPv6: NLM_F_CREATE should be set when creating new route [ 211.119564][ T6799] IPv6: NLM_F_CREATE should be set when creating new route [ 211.144341][ T6802] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 211.151632][ T6802] IPv6: NLM_F_CREATE should be set when creating new route [ 211.222599][ T6799] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 211.692700][ T6819] ipt_CLUSTERIP: Please specify destination IP [ 213.322662][ T6870] __nla_validate_parse: 6 callbacks suppressed [ 213.322681][ T6870] netlink: 12 bytes leftover after parsing attributes in process `syz.3.803'. [ 213.476528][ T6877] tipc: Started in network mode [ 213.528636][ T6877] tipc: Node identity , cluster identity 4711 [ 213.608172][ T6877] tipc: Failed to obtain node identity [ 213.639394][ T6877] tipc: Enabling of bearer rejected, failed to enable media [ 213.659016][ T6882] netlink: 3 bytes leftover after parsing attributes in process `syz.0.806'. [ 213.740482][ T6882] 0ªX¹¦À: renamed from caif0 [ 213.760633][ T6882] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 213.791819][ T6890] Cannot find add_set index 0 as target [ 213.805321][ T6889] device syzkaller0 entered promiscuous mode [ 215.170365][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 216.219626][ T6940] tipc: Started in network mode [ 216.246545][ T6940] tipc: Node identity 9614e4672d81, cluster identity 4711 [ 216.276706][ T6940] tipc: Enabled bearer , priority 0 [ 216.314154][ T6942] device syzkaller0 entered promiscuous mode [ 216.345148][ T6940] tipc: Resetting bearer [ 216.362691][ T6939] tipc: Resetting bearer [ 216.389517][ T6939] tipc: Disabling bearer [ 216.660020][ T6968] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 216.827746][ T6972] device syzkaller0 entered promiscuous mode [ 217.009296][ T6980] netlink: 'syz.4.838': attribute type 2 has an invalid length. [ 217.027361][ T6980] netlink: 36 bytes leftover after parsing attributes in process `syz.4.838'. [ 217.091593][ T5775] Bluetooth: hci4: command 0x0405 tx timeout [ 217.167462][ T6985] netlink: 14 bytes leftover after parsing attributes in process `syz.1.841'. [ 217.251997][ T6985] device bond0 left promiscuous mode [ 217.262552][ T6985] device bond_slave_0 left promiscuous mode [ 217.276123][ T6985] device bond_slave_1 left promiscuous mode [ 217.294980][ T6985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.334121][ T6985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.371476][ T6985] bond0 (unregistering): Released all slaves [ 217.399136][ T6991] IPv6: NLM_F_CREATE should be specified when creating new route [ 217.429550][ T6991] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.436864][ T6991] IPv6: NLM_F_CREATE should be set when creating new route [ 217.444217][ T6991] IPv6: NLM_F_CREATE should be set when creating new route [ 217.451512][ T6991] IPv6: NLM_F_CREATE should be set when creating new route [ 217.472121][ T6993] tipc: Started in network mode [ 217.491312][ T6993] tipc: Node identity , cluster identity 4711 [ 217.497548][ T6993] tipc: Failed to obtain node identity [ 217.530956][ T6993] tipc: Enabling of bearer rejected, failed to enable media [ 217.586664][ T6993] netlink: 3 bytes leftover after parsing attributes in process `syz.2.844'. [ 217.605714][ T6993] 0ªX¹¦À: renamed from caif0 [ 217.621238][ T6993] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 217.648111][ T6997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.845'. [ 217.664651][ T6997] netlink: 20 bytes leftover after parsing attributes in process `syz.4.845'. [ 217.729229][ T6997] netlink: 12 bytes leftover after parsing attributes in process `syz.4.845'. [ 217.772027][ T6997] netlink: 31 bytes leftover after parsing attributes in process `syz.4.845'. [ 217.809108][ T6997] netlink: 'syz.4.845': attribute type 3 has an invalid length. [ 217.838440][ T6997] netlink: 'syz.4.845': attribute type 2 has an invalid length. [ 217.857804][ T6997] netlink: 31 bytes leftover after parsing attributes in process `syz.4.845'. [ 217.885329][ T6997] netlink: 'syz.4.845': attribute type 2 has an invalid length. [ 218.133917][ T7022] netlink: 'syz.4.851': attribute type 39 has an invalid length. [ 218.569985][ T7034] netlink: 'syz.4.857': attribute type 2 has an invalid length. [ 218.643471][ T7034] netlink: 36 bytes leftover after parsing attributes in process `syz.4.857'. [ 218.686400][ T7038] netlink: 20 bytes leftover after parsing attributes in process `syz.1.859'. [ 218.729210][ T7039] tipc: Enabled bearer , priority 0 [ 218.783064][ T7039] device syzkaller0 entered promiscuous mode [ 218.822136][ T7037] tipc: Resetting bearer [ 218.881970][ T7037] tipc: Disabling bearer [ 218.906916][ T7044] netlink: 'syz.1.863': attribute type 10 has an invalid length. [ 218.974958][ T7044] team0: Port device dummy0 added [ 219.059864][ T7044] device veth0 entered promiscuous mode [ 219.137555][ T7059] netlink: 'syz.2.866': attribute type 12 has an invalid length. [ 219.453749][ T7078] netlink: 12 bytes leftover after parsing attributes in process `syz.3.871'. [ 219.536872][ T4185] block nbd1: Receive control failed (result -1) [ 219.869170][ T7089] netlink: 12 bytes leftover after parsing attributes in process `syz.0.873'. [ 219.869519][ C0] hrtimer: interrupt took 95077 ns [ 220.309525][ T7089] device bond1 entered promiscuous mode [ 220.323857][ T7089] 8021q: adding VLAN 0 to HW filter on device bond1 [ 220.337098][ T7046] device veth0 left promiscuous mode [ 220.394933][ T7095] 8021q: adding VLAN 0 to HW filter on device bond1 [ 220.407522][ T7095] bond1: (slave sit1): The slave device specified does not support setting the MAC address [ 220.435711][ T7095] bond1: (slave sit1): Error -95 calling set_mac_address [ 222.170522][ T7152] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 223.308619][ T7159] tipc: Started in network mode [ 223.345584][ T7159] tipc: Node identity 76b0d9b02a88, cluster identity 4711 [ 223.366614][ T7159] tipc: Enabled bearer , priority 0 [ 223.419627][ T7162] netlink: 28 bytes leftover after parsing attributes in process `syz.2.894'. [ 223.465074][ T7162] netlink: 28 bytes leftover after parsing attributes in process `syz.2.894'. [ 223.538151][ T7163] device syzkaller0 entered promiscuous mode [ 223.602019][ T7161] netlink: 'syz.3.892': attribute type 2 has an invalid length. [ 223.618163][ T7161] netlink: 36 bytes leftover after parsing attributes in process `syz.3.892'. [ 223.720929][ T7163] tipc: Resetting bearer [ 223.802764][ T7163] tipc: Disabling bearer [ 223.894523][ T7171] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 225.785447][ T7232] netlink: 16 bytes leftover after parsing attributes in process `syz.1.912'. [ 225.884721][ T7230] netlink: 'syz.3.911': attribute type 8 has an invalid length. [ 225.971346][ T7230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.911'. [ 226.247407][ T7248] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 227.016250][ T7273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.926'. [ 227.703060][ T7297] device syzkaller0 entered promiscuous mode [ 228.116727][ T7312] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 228.496315][ T7324] device syzkaller1 entered promiscuous mode [ 228.588399][ T7327] netlink: 12 bytes leftover after parsing attributes in process `syz.2.943'. [ 228.703766][ T7327] device bond2 entered promiscuous mode [ 228.746055][ T7327] 8021q: adding VLAN 0 to HW filter on device bond2 [ 228.816380][ T7330] 8021q: adding VLAN 0 to HW filter on device bond2 [ 228.845165][ T7330] bond2: (slave sit1): The slave device specified does not support setting the MAC address [ 228.884335][ T7330] bond2: (slave sit1): Error -95 calling set_mac_address [ 228.955960][ T7331] netlink: 'syz.4.944': attribute type 39 has an invalid length. [ 229.963163][ T7376] netlink: 'syz.3.959': attribute type 39 has an invalid length. [ 231.515908][ T7420] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 231.548881][ T7423] netlink: 'syz.4.974': attribute type 12 has an invalid length. [ 232.437580][ T7440] netlink: 16 bytes leftover after parsing attributes in process `syz.2.981'. [ 232.974804][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.994715][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.089572][ T7453] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 233.435550][ T7461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.478500][ T7461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.532666][ T7465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.989'. [ 233.570910][ T7464] netlink: 'syz.2.990': attribute type 11 has an invalid length. [ 233.631501][ T7461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.638967][ T7461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.869291][ T7467] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 233.914939][ T7467] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 234.468595][ T7484] netlink: 12 bytes leftover after parsing attributes in process `syz.0.995'. [ 234.554754][ T7489] netlink: 'syz.1.996': attribute type 39 has an invalid length. [ 235.177762][ T7503] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1002'. [ 235.747338][ T7515] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1005'. [ 235.846876][ T4185] block nbd2: Receive control failed (result -1) [ 236.488884][ T7532] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1008'. [ 236.507720][ T7533] netlink: 'syz.4.1007': attribute type 3 has an invalid length. [ 236.586755][ T7533] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1007'. [ 237.382351][ T7560] netlink: 'syz.4.1013': attribute type 39 has an invalid length. [ 237.408899][ T7562] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1015'. [ 238.206957][ T7589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1022'. [ 238.564566][ T7595] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.592016][ T7595] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.618222][ T7597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1023'. [ 238.816427][ T7603] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1025'. [ 239.050920][ T7608] device syzkaller0 entered promiscuous mode [ 239.179995][ T7613] netlink: 'syz.4.1028': attribute type 10 has an invalid length. [ 239.372554][ T7613] team0: Port device dummy0 added [ 239.521524][ T7615] netlink: 'syz.4.1028': attribute type 10 has an invalid length. [ 239.702455][ T7615] team0: Port device dummy0 removed [ 239.735632][ T7637] netlink: 'syz.0.1031': attribute type 39 has an invalid length. [ 240.271679][ T7651] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.291179][ T7651] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.326738][ T7651] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.350431][ T7651] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.426715][ T7660] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1041'. [ 240.463172][ T7660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1041'. [ 240.685778][ T7663] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1042'. [ 240.943339][ T7674] device syzkaller0 entered promiscuous mode [ 241.333878][ T7686] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1049'. [ 241.474767][ T7686] device bond2 entered promiscuous mode [ 241.483353][ T7686] 8021q: adding VLAN 0 to HW filter on device bond2 [ 241.586612][ T7696] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1053'. [ 241.608172][ T7696] x_tables: ip_tables: osf match: only valid for protocol 6 [ 241.801440][ T7706] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1057'. [ 243.583813][ T7751] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1071'. [ 243.993951][ T7766] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 244.647627][ T7794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1083'. [ 246.525082][ T7832] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1097'. [ 246.587288][ T7837] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1099'. [ 246.603441][ T7832] netlink: 212 bytes leftover after parsing attributes in process `syz.2.1097'. [ 247.016923][ T7860] tipc: Enabling of bearer rejected, failed to enable media [ 247.138250][ T7849] device syzkaller0 entered promiscuous mode [ 247.190146][ T7868] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 248.125997][ T7889] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1111'. [ 248.225408][ T4185] block nbd3: Receive control failed (result -1) [ 248.243150][ T7896] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1114'. [ 248.465647][ T4383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.475845][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.524847][ T7903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1116'. [ 249.709256][ T7934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.718879][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.655476][ T7964] device syzkaller0 entered promiscuous mode [ 250.684209][ T7969] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 250.941995][ T4241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.952194][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.010545][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 252.227390][ T8033] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1160'. [ 253.409660][ T8086] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1174'. [ 253.784208][ T8101] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1179'. [ 253.816141][ T8104] netlink: 'syz.3.1184': attribute type 39 has an invalid length. [ 253.877547][ T8101] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 253.903120][ T8101] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 254.211917][ T4384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.222442][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.295404][ T8122] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1187'. [ 254.358660][ T8122] device bond0 entered promiscuous mode [ 254.368320][ T8122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.493464][ T8130] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 254.824376][ T8143] netlink: 'syz.0.1196': attribute type 39 has an invalid length. [ 254.893036][ T8145] device vlan2 entered promiscuous mode [ 254.908173][ T8145] device bridge0 entered promiscuous mode [ 255.153084][ T8157] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 255.494071][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.501314][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.562702][ T8167] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 256.132296][ T4241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.143042][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.076058][ T8209] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1221'. [ 257.098674][ T8211] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1222'. [ 257.164493][ T4185] block nbd4: Receive control failed (result -1) [ 257.291507][ T8211] device bond3 entered promiscuous mode [ 257.315111][ T8211] 8021q: adding VLAN 0 to HW filter on device bond3 [ 257.414187][ T5778] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.547211][ T8265] device syzkaller0 entered promiscuous mode [ 258.944573][ T8277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1240'. [ 259.182263][ T8282] netlink: 'syz.1.1241': attribute type 4 has an invalid length. [ 259.971593][ T4384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.980087][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.825842][ T8245] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 261.052894][ T8302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.088474][ T8302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.177602][ T8302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.221425][ T8300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.264886][ T8300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.687493][ T8335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1256'. [ 261.719511][ T8336] tipc: Enabling of bearer rejected, failed to enable media [ 261.891709][ T144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.902016][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.276316][ T8351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.322527][ T8351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.392916][ T8351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.817332][ T8370] tipc: Enabling of bearer rejected, failed to enable media [ 262.984294][ T8377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1273'. [ 264.015632][ T8423] netlink: 'syz.4.1287': attribute type 39 has an invalid length. [ 264.284761][ T8430] tipc: Enabling of bearer rejected, failed to enable media [ 265.815192][ T8488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1306'. [ 266.252304][ T8510] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1315'. [ 266.450668][ C1] net_ratelimit: 18 callbacks suppressed [ 266.450688][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.878277][ T8534] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1325'. [ 266.997716][ T8545] netlink: 'syz.0.1323': attribute type 39 has an invalid length. [ 267.509746][ T8559] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 267.651793][ T4754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.660313][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.716728][ T8559] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.726490][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.843005][ T8605] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1349'. [ 269.133293][ T8615] netlink: 'syz.4.1353': attribute type 39 has an invalid length. [ 269.432372][ T8626] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.459856][ T8626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.483259][ T8626] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.516555][ T8626] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.633770][ T8627] tipc: Enabled bearer , priority 0 [ 269.785207][ T8638] tipc: Disabling bearer [ 269.800214][ T8640] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1363'. [ 270.055760][ T8647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.086190][ T8648] netlink: 'syz.0.1367': attribute type 39 has an invalid length. [ 270.117611][ T8647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.336587][ T8660] netlink: 'syz.3.1369': attribute type 39 has an invalid length. [ 270.851910][ T4590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.871992][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.016501][ T8693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1378'. [ 271.203239][ T8700] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1382'. [ 271.355459][ T4185] block nbd5: Receive control failed (result -1) [ 271.924455][ T8722] can: request_module (can-proto-3) failed. [ 272.167086][ T8738] netlink: 'syz.3.1393': attribute type 39 has an invalid length. [ 272.433738][ T8752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1399'. [ 272.515611][ T8758] netlink: 'syz.2.1401': attribute type 29 has an invalid length. [ 272.642714][ T8759] device syzkaller0 entered promiscuous mode [ 272.665075][ T8758] netlink: 'syz.2.1401': attribute type 29 has an invalid length. [ 272.694997][ T8765] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1405'. [ 272.702575][ T8754] netlink: 'syz.2.1401': attribute type 29 has an invalid length. [ 272.771201][ T4331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.779582][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.832044][ T8767] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1406'. [ 272.909627][ T8760] netlink: 'syz.2.1401': attribute type 29 has an invalid length. [ 272.927280][ T8767] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1406'. [ 272.956719][ T8770] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1406'. [ 273.132267][ T8777] netlink: 'syz.2.1410': attribute type 39 has an invalid length. [ 273.705998][ T8808] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1424'. [ 273.775976][ T4185] block nbd6: Receive control failed (result -1) [ 274.168942][ T8823] netlink: 'syz.3.1427': attribute type 39 has an invalid length. [ 274.418969][ T8833] netlink: 'syz.1.1430': attribute type 8 has an invalid length. [ 274.496129][ T8833] netlink: 'syz.1.1430': attribute type 7 has an invalid length. [ 274.833614][ T8844] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1432'. [ 275.051899][ T8853] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1437'. [ 275.652123][ T8872] netlink: 'syz.4.1444': attribute type 39 has an invalid length. [ 275.973481][ T4754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.982835][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.079732][ T8879] __nla_validate_parse: 5 callbacks suppressed [ 276.079798][ T8879] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1448'. [ 276.170759][ T8879] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 276.298983][ T8889] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1451'. [ 276.615237][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.315021][ T8919] validate_nla: 2 callbacks suppressed [ 277.315042][ T8919] netlink: 'syz.2.1465': attribute type 29 has an invalid length. [ 277.373719][ T8919] netlink: 'syz.2.1465': attribute type 29 has an invalid length. [ 277.409329][ T8921] netlink: 'syz.2.1465': attribute type 29 has an invalid length. [ 277.456866][ T8924] netlink: 'syz.2.1465': attribute type 29 has an invalid length. [ 277.491612][ T8923] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1466'. [ 277.558517][ T8919] netlink: 'syz.2.1465': attribute type 29 has an invalid length. [ 277.654399][ T8926] netlink: 'syz.0.1468': attribute type 10 has an invalid length. [ 277.694426][ T8928] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1467'. [ 277.700568][ T8926] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1468'. [ 277.894838][ T4590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.907326][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.318678][ T8950] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1477'. [ 279.503640][ T8958] netlink: 'syz.4.1478': attribute type 39 has an invalid length. [ 280.361759][ T8980] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1486'. [ 280.397726][ T8982] netlink: 'syz.0.1485': attribute type 39 has an invalid length. [ 280.817783][ T8990] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 280.844785][ T8990] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 281.118840][ T9000] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1492'. [ 281.739061][ T4590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.751489][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.651804][ T4754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.661479][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.003959][ T9065] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1512'. [ 284.096874][ T9068] netlink: 'syz.2.1513': attribute type 39 has an invalid length. [ 284.365198][ T9066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.386967][ T9075] loop0: detected capacity change from 0 to 512 [ 284.411002][ T9066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.429619][ T9066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.448205][ T9066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.470449][ T9066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.511640][ T9066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.529871][ T9075] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 284.563530][ T9075] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 284.587643][ T9066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.626617][ T9066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.657153][ T9075] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 284.674924][ T9075] EXT4-fs (loop0): 1 truncate cleaned up [ 284.682256][ T9075] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,auto_da_alloc=0x0000000000000eb0,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,inode_readahead_blks=0x0000000004000000,noquota,,errors=continue. Quota mode: none. [ 285.024361][ T9094] netlink: 272 bytes leftover after parsing attributes in process `syz.4.1526'. [ 285.193473][ T9101] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1529'. [ 285.328680][ T9111] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1527'. [ 286.315063][ T9143] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 286.493791][ T9155] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1544'. [ 287.164631][ T9174] device syzkaller0 entered promiscuous mode [ 287.518362][ T9192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1555'. [ 288.328880][ T9214] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 289.412793][ T4241] net_ratelimit: 1578 callbacks suppressed [ 289.412811][ T4241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.427820][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.688649][ T9253] capability: warning: `syz.4.1560' uses deprecated v2 capabilities in a way that may be insecure [ 292.573817][ T9276] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 292.979218][ T9289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1585'. [ 293.253990][ T4241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.266947][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.387604][ T9267] loop0: detected capacity change from 0 to 40427 [ 293.464390][ T9267] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 293.527163][ T9267] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 293.639216][ T9267] F2FS-fs (loop0): invalid crc value [ 293.727962][ T9267] F2FS-fs (loop0): Found nat_bits in checkpoint [ 294.014411][ T9329] netlink: 'syz.4.1595': attribute type 39 has an invalid length. [ 294.255114][ T9336] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1598'. [ 294.711382][ T9342] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1600'. [ 295.171422][ T4383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.179900][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.859515][ T4227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.182349][ T9392] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1613'. [ 300.341081][ T4384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.349459][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.849949][ T9411] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1621'. [ 300.931506][ T4241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.951531][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.289032][ T9425] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 301.357334][ T9427] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1625'. [ 301.457500][ T9435] netlink: 'syz.2.1626': attribute type 39 has an invalid length. [ 301.917327][ T9449] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1631'. [ 302.381650][ T4229] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 302.813943][ C0] vcan0: j1939_tp_rxtimer: 0xffff888024c63c00: rx timeout, send abort [ 302.961276][ T4229] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 302.991013][ T4229] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 303.019327][ T4229] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 303.321968][ T4229] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 303.348474][ T4229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 303.406247][ T4229] usb 1-1: Product: syz [ 303.452744][ T4229] usb 1-1: Manufacturer: syz [ 303.483248][ T4229] usb 1-1: SerialNumber: syz [ 304.014679][ T9458] loop0: detected capacity change from 0 to 256 [ 304.025413][ T4229] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 304.354256][ C0] vcan0: j1939_tp_rxtimer: 0xffff888024c63800: rx timeout, send abort [ 304.364211][ C0] vcan0: j1939_tp_rxtimer: 0xffff888024c63c00: abort rx timeout. Force session deactivation [ 304.463706][ T9491] loop0: detected capacity change from 0 to 512 [ 304.486942][ T9491] EXT4-fs (loop0): Ignoring removed orlov option [ 304.496051][ T9491] EXT4-fs (loop0): Test dummy encryption mode enabled [ 304.504492][ T9491] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 304.580725][ T9491] EXT4-fs (loop0): 1 truncate cleaned up [ 304.587552][ T9491] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,quota,barrier=0x0000000000000003,orlov,test_dummy_encryption=v1,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 304.864212][ C0] vcan0: j1939_tp_rxtimer: 0xffff888024c63800: abort rx timeout. Force session deactivation [ 305.233494][ T9522] device batadv_slave_1 entered promiscuous mode [ 305.266776][ T9520] device batadv_slave_1 left promiscuous mode [ 305.422042][ T4241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.431920][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.739692][ T4229] usb 1-1: USB disconnect, device number 10 [ 305.854645][ T4229] usblp0: removed [ 306.414657][ T9543] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1660'. [ 306.689281][ T9551] overlayfs: failed to resolve './file0': -2 [ 306.699563][ T4590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.709655][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.609991][ T9613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.619272][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.074752][ T9622] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 310.284821][ T9639] loop0: detected capacity change from 0 to 256 [ 310.347583][ T9617] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1685'. [ 310.608417][ T26] audit: type=1326 audit(1777010917.541:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9647 comm="syz.3.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff482438dd9 code=0x7ffc0000 [ 310.706065][ T26] audit: type=1326 audit(1777010917.591:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9647 comm="syz.3.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ff482438dd9 code=0x7ffc0000 [ 310.874551][ T26] audit: type=1326 audit(1777010917.591:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9647 comm="syz.3.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff482438dd9 code=0x7ffc0000 [ 311.056264][ T9658] loop0: detected capacity change from 0 to 1024 [ 311.118751][ T9658] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 311.165453][ T9663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1703'. [ 311.182065][ T4754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.190450][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.282394][ T9658] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000004,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,journal_ioprio=0x0000000. Quota mode: none. [ 311.311039][ C1] vkms_vblank_simulate: vblank timer overrun [ 311.832701][ T9680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1710'. [ 311.904184][ T9680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1710'. [ 312.731310][ T4590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.742994][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.014170][ T4227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.484237][ T9737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.573590][ T9737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.624830][ T9744] netlink: 'syz.0.1729': attribute type 39 has an invalid length. [ 316.714098][ T9737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.767186][ T9742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.851832][ T9742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.923127][ T9742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.936086][ T4754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.945732][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.949391][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.967273][ T9737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.987257][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.052678][ T9737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.163873][ T9752] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1735'. [ 319.138902][ T9775] netlink: 'syz.3.1742': attribute type 16 has an invalid length. [ 319.191396][ T9775] netlink: 'syz.3.1742': attribute type 17 has an invalid length. [ 319.221625][ T9775] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 319.267460][ T9775] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 319.293146][ T9775] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 319.341684][ T9775] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 319.364893][ T9775] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 319.405658][ T9775] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 319.437220][ T9775] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 319.474235][ T9775] IPv6: ADDRCONF(NETDEV_CHANGE): sit0: link becomes ready [ 319.516083][ T9782] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1745'. [ 319.526445][ T9775] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 319.547896][ T9775] IPv6: ADDRCONF(NETDEV_CHANGE): ip6gre0: link becomes ready [ 319.585595][ T9775] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 319.616057][ T9775] IPv6: ADDRCONF(NETDEV_CHANGE): ip6gretap0: link becomes ready [ 319.657953][ T9775] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 319.695091][ T9775] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 319.705642][ T9775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.714194][ T9775] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 319.725540][ T9775] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.749291][ T9775] IPv6: ADDRCONF(NETDEV_CHANGE): nlmon0: link becomes ready [ 319.791370][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 320.243871][ T26] audit: type=1326 audit(1777010927.181:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9795 comm="syz.4.1752" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa549fdbdd9 code=0x0 [ 320.348010][ T9798] tipc: Enabling of bearer rejected, failed to enable media [ 320.413124][ T9803] device syzkaller0 entered promiscuous mode [ 320.624897][ T9808] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1757'. [ 322.002955][ T9814] netlink: 'syz.0.1760': attribute type 39 has an invalid length. [ 325.251998][ T4754] net_ratelimit: 321 callbacks suppressed [ 325.252017][ T4754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.267146][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.403524][ T9837] loop0: detected capacity change from 0 to 512 [ 325.452453][ T9837] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 325.507680][ T9837] EXT4-fs (loop0): 1 truncate cleaned up [ 325.514772][ T9837] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,auto_da_alloc=0x0000000000000eb0,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,inode_readahead_blks=0x0000000004000000,noquota,,errors=continue. Quota mode: none. [ 325.931244][ T9851] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1770'. [ 326.004172][ T9853] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1766'. [ 326.095498][ T9856] tipc: Enabling of bearer rejected, failed to enable media [ 326.243255][ T9863] loop0: detected capacity change from 0 to 256 [ 326.255392][ T9860] xt_hashlimit: size too large, truncated to 1048576 [ 326.342926][ T9865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.356919][ T9863] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xd9218ae8, utbl_chksum : 0xe619d30d) [ 326.702239][ T9863] exFAT-fs (loop0): error, invalid access to FAT free cluster (entry 0x00000008) [ 326.806622][ T9863] exFAT-fs (loop0): Filesystem has been set read-only [ 327.905155][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 328.217657][ T9877] device syzkaller0 entered promiscuous mode [ 329.165945][ T9890] loop0: detected capacity change from 0 to 512 [ 330.373677][ T4754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.383161][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.028105][ T4590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.037088][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.212928][ T9898] tipc: Enabling of bearer rejected, failed to enable media [ 335.111755][ T4227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.154783][ T4590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.249029][ T9959] netlink: 'syz.2.1804': attribute type 39 has an invalid length. [ 335.326523][ T9967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1805'. [ 335.724507][ T9978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.734675][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.151611][ T4384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.159959][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.893849][ T4590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.903270][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.943367][ T9972] loop0: detected capacity change from 0 to 40427 [ 337.969126][ T9972] F2FS-fs (loop0): invalid crc value [ 338.012417][ T9972] F2FS-fs (loop0): Found nat_bits in checkpoint [ 338.140076][ T9972] F2FS-fs (loop0): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 338.658385][T10019] netlink: 'syz.4.1820': attribute type 39 has an invalid length. [ 339.337416][T10035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1823'. [ 339.428058][T10039] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1827'. [ 340.611823][ T144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.014286][T10060] overlayfs: failed to clone upperpath [ 341.044964][T10060] overlayfs: failed to clone upperpath [ 341.185582][T10016] overlayfs: failed to clone upperpath [ 341.294614][T10070] netlink: 'syz.1.1835': attribute type 39 has an invalid length. [ 341.495136][T10074] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1840'. [ 341.538779][T10076] netlink: 'syz.0.1839': attribute type 39 has an invalid length. [ 341.891743][ T4241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.900152][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.145224][T10096] loop0: detected capacity change from 0 to 256 [ 342.266456][T10096] FAT-fs (loop0): Directory bread(block 64) failed [ 342.305420][T10096] FAT-fs (loop0): Directory bread(block 65) failed [ 342.492015][T10096] FAT-fs (loop0): Directory bread(block 66) failed [ 342.507186][T10096] FAT-fs (loop0): Directory bread(block 67) failed [ 342.530616][T10096] FAT-fs (loop0): Directory bread(block 68) failed [ 342.537306][T10096] FAT-fs (loop0): Directory bread(block 69) failed [ 342.546276][ T144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.669314][T10096] FAT-fs (loop0): Directory bread(block 70) failed [ 342.712620][T10096] FAT-fs (loop0): Directory bread(block 71) failed [ 342.743450][T10096] FAT-fs (loop0): Directory bread(block 72) failed [ 342.768709][T10096] FAT-fs (loop0): Directory bread(block 73) failed [ 343.257306][T10104] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1849'. [ 343.712487][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.256352][T10127] loop0: detected capacity change from 0 to 512 [ 345.149897][T10132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1856'. [ 345.657901][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.918643][T10127] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 345.931282][T10127] ext4 filesystem being mounted at /347/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 345.976776][T10125] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present [ 345.988688][T10125] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 345.999274][T10125] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.1854: Failed to acquire dquot type 0 [ 346.085307][T10143] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1859'. [ 346.398779][T10150] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1861'. [ 347.650788][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.025205][ T4241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.044398][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.056601][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.536102][T10161] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1865'. [ 349.702930][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.765636][T10167] 9pnet: Insufficient options for proto=fd [ 350.032545][T10176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.043730][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.890461][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.347777][T10203] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1873'. [ 351.374044][T10204] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1875'. [ 351.454583][T10205] netlink: 'syz.0.1874': attribute type 39 has an invalid length. [ 351.577826][T10212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.634850][T10212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.727431][T10212] net_ratelimit: 284 callbacks suppressed [ 353.727450][T10212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.970194][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 353.990183][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 354.000185][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 354.010187][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 354.020182][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 354.030185][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 354.040186][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 354.050187][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 354.060198][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 354.070187][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 354.112890][T10212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.127024][T10212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.137434][T10212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.146572][T10212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.171038][T10212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.225851][T10212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.274435][T10212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.449583][T10212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.543009][T10212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.346461][ T4590] net_ratelimit: 10 callbacks suppressed [ 360.346494][ T4590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.376667][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.456801][T10295] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1901'. [ 361.817566][T10311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.872026][T10311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.213980][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.223770][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.197034][T10336] 9pnet: Insufficient options for proto=fd [ 363.419664][T10342] loop0: detected capacity change from 0 to 512 [ 363.818355][T10347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.827912][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.933292][ T4754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.957195][T10342] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.1913: missing EA_INODE flag [ 364.009071][T10342] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.1913: error while reading EA inode 12 err=-117 [ 364.058034][T10342] EXT4-fs (loop0): 1 orphan inode deleted [ 364.067640][T10342] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 365.398358][T10388] loop0: detected capacity change from 0 to 256 [ 366.211756][ T144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.220129][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.615280][ T4754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.012920][T10430] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1940'. [ 368.432054][T10430] device bond3 entered promiscuous mode [ 368.451578][T10430] 8021q: adding VLAN 0 to HW filter on device bond3 [ 368.903552][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.183984][ T144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.514170][T10464] loop0: detected capacity change from 0 to 1024 [ 369.560063][T10464] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 369.603585][T10464] EXT4-fs (loop0): Ignoring removed orlov option [ 369.632483][T10464] EXT4-fs (loop0): test_dummy_encryption requires encrypt feature [ 371.113564][T10479] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.148523][T10479] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.299037][T10481] netlink: 'syz.1.1951': attribute type 16 has an invalid length. [ 371.348893][T10481] netlink: 'syz.1.1951': attribute type 17 has an invalid length. [ 371.410775][T10481] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 371.441657][T10481] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 371.568823][T10481] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 371.967516][T10504] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1959'. [ 371.978865][ T4245] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.988400][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.139164][T10504] device bond4 entered promiscuous mode [ 372.166803][T10493] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 372.185465][T10504] 8021q: adding VLAN 0 to HW filter on device bond4 [ 372.588984][T10523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.599915][T10523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.619717][T10523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.637637][T10523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.686996][T10523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.724581][T10526] netlink: 'syz.2.1963': attribute type 39 has an invalid length. [ 372.861867][T10523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.870571][T10523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.472239][T10546] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1970'. [ 374.867623][T10552] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1973'. [ 374.973359][T10552] device bond5 entered promiscuous mode [ 375.072482][T10552] 8021q: adding VLAN 0 to HW filter on device bond5 [ 376.294537][T10585] netlink: 'syz.1.1978': attribute type 39 has an invalid length. [ 376.440404][T10593] loop0: detected capacity change from 0 to 512 [ 376.507233][T10593] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 376.576057][T10593] EXT4-fs error (device loop0): ext4_get_journal_inode:5187: comm syz.0.1982: inode #1792: comm syz.0.1982: iget: illegal inode # [ 376.639660][T10593] EXT4-fs (loop0): Remounting filesystem read-only [ 376.662875][T10593] EXT4-fs (loop0): no journal found [ 376.678729][T10597] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1984'. [ 376.692133][T10593] EXT4-fs (loop0): can't get journal size [ 376.773549][T10593] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 376.874930][T10593] EXT4-fs (loop0): failed to initialize system zone (-22) [ 376.891516][T10593] EXT4-fs (loop0): mount failed [ 376.902332][T10601] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1985'. [ 376.995429][T10601] device bond6 entered promiscuous mode [ 377.022163][T10601] 8021q: adding VLAN 0 to HW filter on device bond6 [ 377.425059][T10610] net_ratelimit: 1021 callbacks suppressed [ 377.425095][T10610] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.481502][T10610] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.615613][T10621] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1990'. [ 377.626033][T10621] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1990'. [ 377.731675][ T4245] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.739997][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.019074][T10635] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1997'. [ 378.169307][T10635] device bond1 entered promiscuous mode [ 378.177995][T10635] 8021q: adding VLAN 0 to HW filter on device bond1 [ 378.383057][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.390809][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.431812][T10647] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2000'. [ 378.657459][T10652] xt_TPROXY: Can be used only with -p tcp or -p udp [ 379.053453][ T4241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.062762][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.728285][ T4590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.292942][T10671] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 380.625398][T10680] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2013'. [ 381.601562][T10696] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2017'. [ 381.876466][T10702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.937879][T10702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.975249][T10722] device syzkaller0 entered promiscuous mode [ 383.142817][ T4384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.151275][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.295468][T10727] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 383.611298][T10731] loop0: detected capacity change from 0 to 16 [ 383.694830][T10731] erofs: (device loop0): mounted with root inode @ nid 36. [ 384.950534][T10747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2035'. [ 385.229825][ T4383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.241843][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.878409][ T4383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.079586][T10770] netlink: 'syz.3.2039': attribute type 39 has an invalid length. [ 386.182817][T10774] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2041'. [ 386.438494][T10786] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2044'. [ 386.515220][T10791] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2042'. [ 386.583665][T10786] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2044'. [ 386.859581][T10804] loop0: detected capacity change from 0 to 128 [ 386.980376][T10804] FAT-fs (loop0): bread failed, FSINFO block (sector = 257) [ 387.145193][T10815] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 387.211025][T10795] 9pnet: Insufficient options for proto=fd [ 387.247470][T10819] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2054'. [ 387.292338][T10795] loop0: detected capacity change from 0 to 512 [ 387.361202][T10795] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 387.460862][T10795] EXT4-fs error (device loop0): ext4_iget_extra_inode:4573: inode #15: comm syz.0.2045: corrupted in-inode xattr [ 387.476693][T10795] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.2045: couldn't read orphan inode 15 (err -117) [ 387.490411][T10795] EXT4-fs (loop0): mounted filesystem without journal. Opts: lazytime,inode_readahead_blks=0x0000000000000001,grpid,noload,delalloc,max_batch_time=0x0000000000000001,discard,inode_readahead_blks=0x0000000000004000,nomblk_io_submit,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 387.744380][T10835] device syzkaller0 entered promiscuous mode [ 388.115090][T10839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2060'. [ 388.213463][T10848] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 388.239311][T10848] loop0: detected capacity change from 0 to 512 [ 388.262865][T10848] EXT4-fs (loop0): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 388.329258][T10853] xt_hashlimit: size too large, truncated to 1048576 [ 388.614719][ T4245] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.623158][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.660185][T10857] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2065'. [ 389.038242][T10857] device bond7 entered promiscuous mode [ 389.075958][T10857] 8021q: adding VLAN 0 to HW filter on device bond7 [ 391.115544][T10895] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2072'. [ 391.360603][ T4384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.368943][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.925369][T10916] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2078'. [ 392.033991][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.173689][T10916] device bond8 entered promiscuous mode [ 392.180033][T10916] 8021q: adding VLAN 0 to HW filter on device bond8 [ 392.876643][T10947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2085'. [ 393.329610][T10961] netlink: 'syz.4.2090': attribute type 39 has an invalid length. [ 393.788043][T10979] print_req_error: 24 callbacks suppressed [ 393.788061][T10979] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 393.957818][T10979] FAT-fs (loop3): unable to read boot sector [ 394.011046][T10982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2095'. [ 394.055587][T10982] 8021q: VLANs not supported on ip6gre0 [ 394.097320][T10990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.159434][T10990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.194570][T10990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.246831][T10993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.297459][T10993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.339404][T10993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.370344][T10993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.405728][T10993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.420054][T10993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.459179][T10993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.666582][T11019] netlink: 'syz.1.2104': attribute type 39 has an invalid length. [ 398.194924][ T26] audit: type=1326 audit(1777011003.874:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11031 comm="syz.4.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa549fdbdd9 code=0x7ffc0000 [ 398.329947][ T26] audit: type=1326 audit(1777011003.874:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11031 comm="syz.4.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa549fdbdd9 code=0x7ffc0000 [ 398.366223][T11040] xt_hashlimit: size too large, truncated to 1048576 [ 398.429341][ T26] audit: type=1326 audit(1777011003.874:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11031 comm="syz.4.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa549fdbdd9 code=0x7ffc0000 [ 398.568522][ T26] audit: type=1326 audit(1777011003.902:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11031 comm="syz.4.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fa549fdbdd9 code=0x7ffc0000 [ 398.638726][ T26] audit: type=1326 audit(1777011003.912:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11031 comm="syz.4.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa549fdbdd9 code=0x7ffc0000 [ 398.687440][ T26] audit: type=1326 audit(1777011003.912:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11031 comm="syz.4.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa549fdbdd9 code=0x7ffc0000 [ 398.906300][ T26] audit: type=1326 audit(1777011003.912:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11031 comm="syz.4.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa549fdbdd9 code=0x7ffc0000 [ 399.001292][ T26] audit: type=1326 audit(1777011003.912:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11031 comm="syz.4.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa549fdbdd9 code=0x7ffc0000 [ 399.098115][ T26] audit: type=1326 audit(1777011003.912:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11031 comm="syz.4.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa549fdbdd9 code=0x7ffc0000 [ 399.239162][ T26] audit: type=1326 audit(1777011003.912:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11031 comm="syz.4.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa549fdbdd9 code=0x7ffc0000 [ 400.155147][ T4384] net_ratelimit: 15 callbacks suppressed [ 400.155165][ T4384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.170266][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.372915][T11062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.385082][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.660043][ T155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.668556][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.459854][ T4590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.979849][ T4590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.994178][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.347600][ T4383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.355991][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.647519][T11168] device syzkaller0 entered promiscuous mode [ 410.810113][ T4383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.607681][T11181] netlink: 'syz.2.2143': attribute type 4 has an invalid length. [ 522.882556][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 522.889652][ C1] rcu: 0-...!: (1 GPs behind) idle=411/1/0x4000000000000000 softirq=25473/25475 fqs=299 [ 522.900775][ C1] (detected by 1, t=10504 jiffies, g=37757, q=840) [ 522.907401][ C1] Sending NMI from CPU 1 to CPUs 0: [ 522.912678][ C0] NMI backtrace for cpu 0 [ 522.912693][ C0] CPU: 0 PID: 11166 Comm: syz.1.2136 Not tainted syzkaller #0 [ 522.912712][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 522.912728][ C0] RIP: 0010:rcu_is_watching+0x4/0xa0 [ 522.912757][ C0] Code: 3b 44 24 70 75 1b 48 8d 65 e8 5b 41 5e 41 5f 5d c3 e8 a0 f9 57 08 41 f7 c7 00 02 00 00 75 bd eb bc e8 80 f9 57 08 41 57 41 56 <53> 65 ff 05 9c 8f 9d 7e e8 7f 09 58 08 89 c3 83 f8 08 73 5c 49 bf [ 522.912776][ C0] RSP: 0018:ffffc90000007c88 EFLAGS: 00000002 [ 522.912792][ C0] RAX: ffffffff8817178c RBX: 0000000000000001 RCX: ffff888078ae9dc0 [ 522.912806][ C0] RDX: 0000000000010000 RSI: 0000000000000001 RDI: 0000000000000000 [ 522.912817][ C0] RBP: ffff88807e75c360 R08: ffff88807e75c18f R09: 1ffff1100fceb831 [ 522.912831][ C0] R10: dffffc0000000000 R11: ffffed100fceb832 R12: ffff88807e75c2e8 [ 522.912845][ C0] R13: dffffc0000000000 R14: ffff88807e75c000 R15: 18a93705c7dcf8eb [ 522.912871][ C0] FS: 00007f011dd896c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 522.912887][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 522.912899][ C0] CR2: 00007f011dd68d58 CR3: 000000001eb49000 CR4: 00000000003506f0 [ 522.912915][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 522.912926][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 522.912937][ C0] Call Trace: [ 522.912943][ C0] [ 522.912952][ C0] advance_sched+0x765/0x940 [ 522.912985][ C0] ? taprio_free_sched_cb+0x190/0x190 [ 522.913005][ C0] __hrtimer_run_queues+0x4f2/0xb70 [ 522.913034][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 522.913053][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 522.913075][ C0] hrtimer_interrupt+0x3bb/0x8d0 [ 522.913106][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 522.913126][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 522.913148][ C0] [ 522.913152][ C0] [ 522.913158][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 522.913177][ C0] RIP: 0010:__put_user_nocheck_4+0xa/0x11 [ 522.913198][ C0] Code: 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 90 90 90 90 90 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb 89 01 31 c9 0f 01 ca 90 90 90 90 90 90 48 bb f9 ef ff ff ff 7f 00 00 48 39 d9 73 14 [ 522.913212][ C0] RSP: 0018:ffffc90002f4f8f8 EFLAGS: 00000246 [ 522.913226][ C0] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000000000000000 [ 522.913237][ C0] RDX: ffffc90002f4fd90 RSI: 0000000000000002 RDI: 00000000ffffffff [ 522.913249][ C0] RBP: ffffc90002f4fa90 R08: ffffc90002f4f6e7 R09: 1ffff920005e9edc [ 522.913262][ C0] R10: dffffc0000000000 R11: fffff520005e9edd R12: dffffc0000000000 [ 522.913275][ C0] R13: 00002000003dde80 R14: 0000000000000000 R15: 0000000000000000 [ 522.913295][ C0] ____sys_recvmsg+0x399/0x5e0 [ 522.913322][ C0] ? __sys_recvmsg_sock+0x40/0x40 [ 522.913348][ C0] ? import_iovec+0x6f/0xa0 [ 522.913369][ C0] ___sys_recvmsg+0x21a/0x5c0 [ 522.913388][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 522.913409][ C0] ? __sys_recvmsg+0x280/0x280 [ 522.913438][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 522.913462][ C0] ? __might_fault+0xb3/0x110 [ 522.913481][ C0] do_recvmmsg+0x382/0x850 [ 522.913504][ C0] ? __sys_recvmmsg+0x290/0x290 [ 522.913530][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 522.913554][ C0] __x64_sys_recvmmsg+0x195/0x250 [ 522.913576][ C0] ? do_recvmmsg+0x850/0x850 [ 522.913596][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 522.913616][ C0] do_syscall_64+0x4c/0xa0 [ 522.913632][ C0] ? clear_bhb_loop+0x30/0x80 [ 522.913649][ C0] ? clear_bhb_loop+0x30/0x80 [ 522.913666][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 522.913684][ C0] RIP: 0033:0x7f011fb50dd9 [ 522.913710][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 522.913725][ C0] RSP: 002b:00007f011dd89028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 522.913742][ C0] RAX: ffffffffffffffda RBX: 00007f011fdca090 RCX: 00007f011fb50dd9 [ 522.913755][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 522.913767][ C0] RBP: 00007f011fbe6d69 R08: 0000000000000000 R09: 0000000000000000 [ 522.913778][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 522.913788][ C0] R13: 00007f011fdca128 R14: 00007f011fdca090 R15: 00007fffba09de98 [ 522.913809][ C0] [ 522.914671][ C1] rcu: rcu_preempt kthread starved for 9055 jiffies! g37757 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 523.354207][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 523.364195][ C1] rcu: RCU grace-period kthread stack dump: [ 523.370100][ C1] task:rcu_preempt state:R running task stack:27384 pid: 15 ppid: 2 flags:0x00004000 [ 523.380923][ C1] Call Trace: [ 523.384229][ C1] [ 523.387181][ C1] __schedule+0x11ef/0x43c0 [ 523.391714][ C1] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 523.397213][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 523.402433][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 523.408346][ C1] ? _raw_spin_unlock+0x40/0x40 [ 523.413225][ C1] ? release_firmware_map_entry+0x190/0x190 [ 523.419156][ C1] ? __mod_timer+0x91e/0xd00 [ 523.423880][ C1] schedule+0x11b/0x1e0 [ 523.428063][ C1] schedule_timeout+0x184/0x2d0 [ 523.433026][ C1] ? console_conditional_schedule+0x40/0x40 [ 523.438949][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 523.444874][ C1] ? update_process_times+0x200/0x200 [ 523.450280][ C1] ? prepare_to_swait_event+0x331/0x350 [ 523.455867][ C1] rcu_gp_fqs_loop+0x2be/0x11d0 [ 523.460754][ C1] ? dyntick_save_progress_counter+0x230/0x230 [ 523.466935][ C1] ? rcu_gp_init+0x10f0/0x10f0 [ 523.471724][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 523.477136][ C1] rcu_gp_kthread+0x9b/0x370 [ 523.481747][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 523.487667][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 523.492804][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 523.498730][ C1] ? __kthread_parkme+0x157/0x1b0 [ 523.503787][ C1] kthread+0x436/0x520 [ 523.507879][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 523.513018][ C1] ? kthread_blkcg+0xd0/0xd0 [ 523.517634][ C1] ret_from_fork+0x1f/0x30 [ 523.522091][ C1] [ 523.525131][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 523.531609][ C1] NMI backtrace for cpu 1 [ 523.535979][ C1] CPU: 1 PID: 4590 Comm: kworker/u4:12 Not tainted syzkaller #0 [ 523.543630][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 523.553706][ C1] Workqueue: writeback wb_workfn (flush-8:0) [ 523.559724][ C1] Call Trace: [ 523.563039][ C1] [ 523.566012][ C1] dump_stack_lvl+0x188/0x250 [ 523.570828][ C1] ? show_regs_print_info+0x20/0x20 [ 523.576050][ C1] ? load_image+0x400/0x400 [ 523.580580][ C1] ? irq_work_queue+0xbf/0x140 [ 523.585384][ C1] nmi_cpu_backtrace+0x3a2/0x3d0 [ 523.590348][ C1] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 523.596521][ C1] ? _printk+0xda/0x130 [ 523.600705][ C1] ? cpu_online+0x1d/0x30 [ 523.605067][ C1] ? load_image+0x400/0x400 [ 523.609596][ C1] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 523.615788][ C1] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 523.621787][ C1] rcu_check_gp_kthread_starvation+0x1cd/0x250 [ 523.627958][ C1] print_other_cpu_stall+0x1110/0x1270 [ 523.633523][ C1] ? print_cpu_stall+0x5f0/0x5f0 [ 523.638478][ C1] ? timekeeping_advance+0x7f6/0xac0 [ 523.643778][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 523.648831][ C1] rcu_sched_clock_irq+0x843/0x1120 [ 523.654055][ C1] ? rcutree_dead_cpu+0x20/0x20 [ 523.658954][ C1] ? account_process_tick+0x22a/0x3a0 [ 523.664356][ C1] update_process_times+0x193/0x200 [ 523.669693][ C1] tick_sched_timer+0x37d/0x560 [ 523.674572][ C1] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 523.680151][ C1] __hrtimer_run_queues+0x4b4/0xb70 [ 523.685399][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 523.690542][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 523.696648][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 523.701655][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 523.707672][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 523.713331][ C1] [ 523.716286][ C1] [ 523.719235][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 523.725237][ C1] RIP: 0010:smp_call_function_many_cond+0xbb5/0xd90 [ 523.731860][ C1] Code: b6 44 05 00 84 c0 0f 85 9d 00 00 00 41 8b 1c 24 89 de 83 e6 01 31 ff e8 b9 62 0b 00 83 e3 01 75 07 e8 4f 5f 0b 00 eb 43 f3 90 <48> b8 00 00 00 00 00 fc ff df 41 0f b6 44 05 00 84 c0 75 11 41 f7 [ 523.751491][ C1] RSP: 0018:ffffc900044be680 EFLAGS: 00000293 [ 523.757607][ C1] RAX: ffffffff816dd568 RBX: 0000000000000001 RCX: ffff888028b53b80 [ 523.765603][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 523.773597][ C1] RBP: ffffc900044be7c0 R08: ffff8880b903b407 R09: 1ffff11017207680 [ 523.781594][ C1] R10: dffffc0000000000 R11: ffffed1017207681 R12: ffff8880b9042848 [ 523.789591][ C1] R13: 1ffff11017208509 R14: ffff8880b913b3c0 R15: 0000000000000000 [ 523.797595][ C1] ? smp_call_function_many_cond+0xbd8/0xd90 [ 523.803614][ C1] ? native_flush_tlb_multi+0xd0/0xd0 [ 523.809012][ C1] ? flush_tlb_func+0x5b0/0x5b0 [ 523.813883][ C1] ? smp_call_function_many+0x30/0x30 [ 523.819284][ C1] ? rcu_is_watching+0x11/0xa0 [ 523.824075][ C1] ? flush_tlb_func+0x5b0/0x5b0 [ 523.828959][ C1] ? native_flush_tlb_multi+0xd0/0xd0 [ 523.834352][ C1] on_each_cpu_cond_mask+0x3b/0x80 [ 523.839492][ C1] flush_tlb_mm_range+0x365/0x580 [ 523.844542][ C1] ? flush_tlb_multi+0x50/0x50 [ 523.849338][ C1] ptep_clear_flush+0x112/0x140 [ 523.854237][ C1] page_mkclean_one+0x1eb/0x3e0 [ 523.859126][ C1] ? page_mkclean+0x400/0x400 [ 523.863824][ C1] ? __might_sleep+0xf0/0xf0 [ 523.868471][ C1] ? vma_address+0x254/0x460 [ 523.873097][ C1] ? page_mkclean+0x400/0x400 [ 523.877796][ C1] rmap_walk_file+0x408/0x610 [ 523.882517][ C1] page_mkclean+0x2f4/0x400 [ 523.887040][ C1] ? rmap_walk+0x170/0x170 [ 523.891487][ C1] ? page_mkclean+0x400/0x400 [ 523.896194][ C1] ? page_mkclean_one+0x3e0/0x3e0 [ 523.901330][ C1] ? page_mapping+0x30e/0x440 [ 523.906039][ C1] clear_page_dirty_for_io+0x3f8/0x9f0 [ 523.911520][ C1] ? wait_on_page_writeback+0x180/0x180 [ 523.917110][ C1] mpage_submit_page+0x8a/0x210 [ 523.921992][ C1] mpage_process_page_bufs+0x6d8/0x8b0 [ 523.927482][ C1] mpage_prepare_extent_to_map+0xbc2/0xfe0 [ 523.933331][ C1] ? trace_ext4_writepages+0x1c0/0x1c0 [ 523.938824][ C1] ? rcu_is_watching+0x11/0xa0 [ 523.943613][ C1] ? ext4_init_io_end+0x25/0x120 [ 523.948581][ C1] ext4_writepages+0xa9a/0x2df0 [ 523.953465][ C1] ? __lock_acquire+0x13bc/0x7d10 [ 523.958522][ C1] ? mark_lock+0x94/0x320 [ 523.962865][ C1] ? ext4_readpage+0x2e0/0x2e0 [ 523.967757][ C1] ? __lock_acquire+0x13bc/0x7d10 [ 523.972796][ C1] ? verify_lock_unused+0x140/0x140 [ 523.978012][ C1] ? deref_stack_reg+0xd0/0x120 [ 523.982904][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 523.987947][ C1] ? do_raw_spin_lock+0x128/0x2f0 [ 523.993095][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 523.998311][ C1] ? ext4_readpage+0x2e0/0x2e0 [ 524.003091][ C1] do_writepages+0x476/0x6e0 [ 524.007706][ C1] ? __writepage+0x130/0x130 [ 524.012319][ C1] ? writeback_sb_inodes+0x67d/0x1680 [ 524.017710][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 524.022748][ C1] ? do_raw_spin_lock+0x128/0x2f0 [ 524.027789][ C1] __writeback_single_inode+0x153/0xda0 [ 524.033355][ C1] writeback_sb_inodes+0xa4e/0x1680 [ 524.038604][ C1] ? queue_io+0x550/0x550 [ 524.042979][ C1] __writeback_inodes_wb+0x12a/0x3f0 [ 524.048291][ C1] wb_writeback+0x46f/0xbe0 [ 524.052829][ C1] ? rcu_lock_release+0x20/0x20 [ 524.057692][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 524.063694][ C1] ? mark_lock+0x94/0x320 [ 524.068053][ C1] wb_workfn+0xb15/0xf20 [ 524.072342][ C1] ? inode_wait_for_writeback+0x220/0x220 [ 524.078103][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 524.084110][ C1] ? read_lock_is_recursive+0x10/0x10 [ 524.089559][ C1] ? __schedule+0x11f7/0x43c0 [ 524.094287][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 524.099509][ C1] process_one_work+0x85f/0x1010 [ 524.104486][ C1] ? worker_detach_from_pool+0x240/0x240 [ 524.110143][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 524.115451][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 524.120584][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 524.126143][ C1] ? wq_worker_running+0x97/0x170 [ 524.131193][ C1] worker_thread+0xaa6/0x1290 [ 524.135898][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 524.141823][ C1] kthread+0x436/0x520 [ 524.145908][ C1] ? rcu_lock_release+0x20/0x20 [ 524.150775][ C1] ? kthread_blkcg+0xd0/0xd0 [ 524.155396][ C1] ret_from_fork+0x1f/0x30 [ 524.159844][ C1]