last executing test programs: 3.072788495s ago: executing program 0 (id=707): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000003600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x18, 0x40044}}], 0x1, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2.823343081s ago: executing program 0 (id=709): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c636865636b3d7374726963742c756d61736b3d30303030303030303030303030303030303133363033302c756e695f786c6174653d312c756e695f786c6174653d302c666d61736b3d30303030303030303030303030303030303030303034302c757466383d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c74696d655f6f66667365743d3078303030303030303030303030303166622c666c7573682c756e695f786c6174653d302c73686f72746e616d653d77696e39352c00208893fdd4787adad4209069"], 0x6, 0x2b4, &(0x7f0000000280)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) setreuid(0xffffffffffffffff, 0xee01) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) 2.620853617s ago: executing program 0 (id=711): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000026c0)=@deltfilter={0xfa0, 0x2d, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe0}, {0xa, 0x3}, {0x6, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_cgroup={{0xb}, {0xf68, 0x2, [@TCA_CGROUP_ACT={0xf64, 0x1, [@m_connmark={0xa8, 0x0, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xe, 0x7, 0x9, 0x5ff}, 0xe}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x3, 0xffffffffffffffff, 0x5, 0x5854}, 0xfffc}}]}, {0x3d, 0x6, "8603f539b6a7af824d262bf654e2998b1ef3d2c0c3dcff5329f40e2a6613622a8e0c660697488dd9d3852466b5f92790cca8a42cadda0bea24"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_connmark={0x50, 0x14, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x1, 0x20000000, 0x40, 0x2}, 0x8003}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_pedit={0xe68, 0x5, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x1c000000, 0x40, 0x4, 0x7, 0x3fe}, 0xb1, 0x3, [{0xf7b7, 0x5, 0x9, 0xd, 0xdd, 0x5}]}, [{0x3, 0x2, 0xffffffff, 0x3, 0xd8aa, 0x7}, {0xaa2, 0x6, 0x101, 0x6, 0x2, 0x3}, {0x200000, 0x100, 0x0, 0x5c6, 0x6830, 0x8}, {0x2, 0x311, 0x8, 0x4b, 0x82, 0x8}, {0x7, 0x5, 0x2, 0x212, 0x7, 0xe1}, {0x7, 0x4, 0x8d, 0x1ff, 0x1ff, 0x1000}, {0x200, 0x7, 0xffffffff, 0x9, 0x9}, {0x7, 0xfe4, 0x1, 0x0, 0x624, 0xb513}, {0x8, 0x3, 0x7ff, 0x70, 0x6, 0x8000}, {0xfffffffe, 0x0, 0x3ff, 0xb06, 0x1, 0x6}, {0x5, 0x1, 0xdb, 0x6, 0x2, 0x4}, {0x9, 0x4, 0x519f, 0x5, 0x6, 0x31c4}, {0x7, 0x7, 0x3ff, 0x1, 0x8000, 0x5}, {0x7fffffff, 0x1, 0x5, 0xfe45, 0x5, 0xb}, {0xbd, 0x5f05, 0x8, 0xf, 0x1, 0xa}, {0x0, 0x8000, 0x3, 0x7, 0xd17, 0x7}, {0xae, 0x7, 0x2, 0x2, 0x9}, {0x6, 0x4, 0xa, 0x3, 0x1, 0x3}, {0x2, 0xa502, 0x3, 0xfffffff7, 0x81, 0x1}, {0x80, 0x8, 0x9, 0x0, 0x0, 0x7}, {0x9, 0x4, 0x1400000, 0x9, 0xad, 0x6}, {0xc, 0xffffff00, 0x5, 0x3, 0x3, 0x3}, {0x7, 0x32da135, 0xb, 0x8, 0xa93c, 0x6}, {0x3e, 0x5bce, 0x4, 0x7ff, 0x80000001, 0x32b}, {0xffffffff, 0x9, 0x100, 0x1, 0xfffffffb, 0x9}, {0x10001, 0x1, 0xe0cc, 0x8, 0x9, 0x2}, {0xf7, 0x5, 0x800, 0x8, 0x7f}, {0xdbeb, 0x8, 0x1, 0x1, 0x1, 0x80000}, {0x5, 0x0, 0xbaf9, 0x4, 0x28000000, 0x9}, {0x0, 0x8, 0x6, 0x9, 0x5, 0xfffffff4}, {0xadfe, 0x9, 0x1, 0x4, 0xfaf, 0x81}, {0x800, 0x5, 0x3, 0x5, 0x5, 0x1e4}, {0x6, 0x7, 0x8, 0x8, 0xad38, 0x6}, {0xa, 0x4467, 0x9, 0x5, 0x401, 0x1}, {0x1ff, 0x400, 0x9, 0x80000001, 0x7ff, 0xb6}, {0x1000, 0xffff8001, 0x40, 0x2, 0x800, 0x3}, {0x9, 0xb, 0x5, 0x9, 0x4, 0x9}, {0x0, 0xe, 0x4, 0x4, 0x9, 0x6}, {0x5, 0x4, 0x6, 0xfffffffe, 0x4, 0xfff}, {0x5, 0x0, 0x1, 0x5a48, 0x6, 0xfffffff9}, {0xffffffff, 0x80000000, 0x6d, 0x0, 0x8, 0xe}, {0x9, 0xfffffffa, 0xa, 0x6, 0x8, 0x9}, {0x7fff, 0x3, 0x5, 0x3ff, 0x8, 0x7}, {0x10001, 0x7, 0x2, 0x7ff, 0x9, 0x6}, {0x3, 0x9de, 0x4, 0x11, 0x7, 0x9}, {0x3, 0x209, 0x8f, 0xffffdd1a, 0x10, 0x2}, {0x1, 0xa8a9, 0x1, 0x5, 0x7, 0x401}, {0x4, 0xffff, 0x1000, 0x1, 0x6, 0x1}, {0x2a, 0x0, 0x80000000, 0x0, 0xfc, 0x3}, {0xc55b, 0x5, 0xb, 0x8001, 0x4, 0x1ff}, {0x7, 0x6, 0x0, 0x1d, 0x42f, 0x7}, {0xfffffff8, 0x1ff, 0x3, 0x2, 0x7, 0x7}, {0x1, 0x2, 0x5, 0x30, 0xfe68, 0x800}, {0x80000000, 0x2, 0x1, 0x8, 0x0, 0xffffffff}, {0x3, 0x6021db75, 0x7fff, 0x1000, 0xc1, 0x1add65aa}, {0x2, 0x7, 0x4, 0x2, 0xe9, 0x986}, {0xba, 0x8, 0x6, 0x401, 0x4, 0x10}, {0x9, 0x7fffffff, 0xb70f, 0x40, 0x3, 0xfffffffe}, {0x4, 0x3, 0x4, 0xd, 0xb24, 0x6}, {0xbf, 0x3, 0xbf6, 0xfffeffff, 0x2, 0x3}, {0x3, 0x6, 0x4, 0x7c6, 0x80000001, 0x1}, {0x58e2, 0x1, 0x4, 0x7, 0x3ff, 0x4}, {0x6, 0xb4, 0xeb, 0x3, 0x6, 0xe}, {0xc, 0x1, 0x3, 0xf, 0x7, 0xdb10ee8a}, {0x3, 0xf, 0x81, 0x420d, 0xa, 0xad78}, {0x2, 0x4, 0xfffffffc, 0x401, 0x4, 0x2}, {0x4, 0x4, 0x3, 0xf908, 0x2, 0x400}, {0x800, 0x6, 0x2, 0x4, 0x8e20, 0x4}, {0x7ae4fc5e, 0x3, 0xf, 0xf87, 0x2, 0x1}, {0x2, 0x7, 0xed7e, 0x4, 0x5, 0xdc}, {0x4, 0x154, 0xfffffe00, 0x3ff80000, 0x2, 0xa}, {0x6, 0x5, 0x3, 0x3a84, 0x0, 0x1}, {0xeea1, 0x9, 0x55de2144, 0x9, 0x80, 0x7cf}, {0x2, 0x6, 0x8, 0x3, 0x0, 0x7fffffff}, {0x1000, 0x7f, 0x8000, 0xfffffffe, 0x8, 0xd1e}, {0x6, 0x2, 0x6c5, 0xd, 0x4, 0x8}, {0x1, 0x5, 0x10000, 0xc, 0x7ff, 0x5}, {0x4, 0x7, 0x264564e6, 0xea, 0x7fff, 0x1}, {0xa, 0x4, 0x2, 0x3, 0x0, 0x7}, {0x84000000, 0x9, 0x2, 0x8000, 0x5, 0x4}, {0x0, 0x2, 0xa483, 0x9, 0x2, 0x6}, {0x22, 0x2, 0x9, 0x1, 0x3, 0x4}, {0x3, 0x3, 0x7fff, 0x0, 0x46, 0x7fffffff}, {0x6, 0x8, 0xffffc000, 0x1ff, 0x8}, {0xe, 0x1, 0xffffffff, 0x9, 0x9, 0x8}, {0x1000, 0x9, 0xffffffff, 0x100, 0x3ff}, {0x80, 0x1, 0x9, 0x6a59, 0x4, 0x3}, {0x8000, 0x0, 0x100, 0x1, 0x0, 0x4}, {0x0, 0x401, 0xbe5e, 0x0, 0x81, 0xd0}, {0x6, 0xa, 0x146e, 0x43a, 0xe, 0xb08}, {0x7ff, 0x0, 0x4, 0x0, 0x7f, 0x1}, {0xfffffff6, 0x5, 0xe, 0xff, 0x7, 0x6}, {0x0, 0x4c, 0x8, 0xfffffffc, 0x2, 0xd42}, {0xff, 0xfffffffc, 0x2, 0x0, 0xb881, 0x6}, {0x3, 0x8, 0xffffffff, 0xfffffbff, 0x1, 0x96e}, {0x5, 0x6, 0x380000, 0x3, 0x7, 0x2}, {0x0, 0x81, 0x3, 0x1, 0x4, 0x4}, {0x0, 0x7, 0x8, 0x5, 0x3, 0x10}, {0x4, 0x6, 0x3, 0xf, 0xf, 0x9}, {0x7fffffff, 0x8000, 0x3ff, 0x8, 0x505, 0xe3e}, {0x9, 0x1, 0x7, 0xd1, 0x8, 0x1}, {0x4, 0x9da, 0x2, 0x7, 0x9d94bae, 0x101}, {0x6, 0x2, 0x7f, 0x13760, 0x10001, 0x9}, {0x3c, 0x0, 0x409, 0x3, 0xfffeffff}, {0x9, 0x7, 0x0, 0xf5, 0xdc1, 0x7c94}, {0x5, 0x3, 0xfff, 0x5, 0x99, 0x4e}, {0x10, 0x3, 0x8, 0x4516, 0x1, 0xe89c}, {0x21b, 0x9, 0xa, 0x5, 0x7fff}, {0x7f, 0x0, 0x489, 0x1, 0x80000001, 0xe}, {0x5, 0xfffff1f4, 0x7, 0x5, 0x7, 0x9}, {0x4, 0x6, 0x3, 0x5, 0x6, 0x1}, {0xe3e, 0xfffffffd, 0x3, 0x5, 0x8000, 0x2}, {0x101, 0xa2, 0xff, 0xfffffff7, 0x10001, 0x80000000}, {0x14a9, 0x1ff, 0x3, 0x2, 0x7, 0x1}, {0xa82c, 0x570b, 0x9, 0x0, 0x1, 0x5}, {0x2, 0x3, 0x2, 0xffff0000, 0x8, 0x7}, {0x0, 0xd2, 0x1, 0x9, 0x10, 0xfffff000}, {0x5, 0x8, 0x1, 0x0, 0x4, 0x1c5b}, {0x2, 0xffff5a2f, 0x2, 0x5, 0x1, 0x200}, {0x193cfceb, 0x800, 0x3, 0xd, 0x4, 0x5}, {0x8, 0x1fffe, 0x2, 0x9, 0x0, 0xc38c}, {0x9, 0x0, 0x5, 0x4, 0xfffffffd, 0xe0000}, {0xffffffff, 0xec, 0x5, 0x4, 0xc1e7, 0xb64d}, {0x8000, 0x87, 0x7ce, 0x400, 0x0, 0x2d}, {0x9, 0x9, 0x2, 0x18f, 0x3ff, 0x3}, {0x2, 0x5, 0x6, 0xb, 0x7}, {0x81, 0x2, 0x4, 0x0, 0x3, 0x7}, {0x9f8, 0x2, 0x4, 0xe, 0x400, 0x6}], [{0x2}, {0x706c4c185c430530}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x7, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x5}, {0x4}, {}, {0x5, 0x1}, {0x3}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x7, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x4}, {0x5}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x4}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0xec1752f8e3477738, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x433dd36a35789fc3}, {}, {0x3}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xfa0}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400001a0206"], 0x14}}, 0x2) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.386200072s ago: executing program 0 (id=712): r0 = socket$inet_smc(0x2b, 0x1, 0x0) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10) 2.214768116s ago: executing program 1 (id=714): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x549}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000440)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000002, 0x200000005c832, 0xffffffffffffffff, 0x0) close(r0) 2.211014047s ago: executing program 0 (id=722): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010000000000000000000a0304004e22"], 0x54}}, 0x20044010) 2.05264422s ago: executing program 0 (id=717): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000020)) r1 = syz_open_pts(r0, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl(r1, 0x400455c8, 0x0) read(r0, &(0x7f0000000300)=""/100, 0x64) 1.939233783s ago: executing program 1 (id=720): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000180)=0x7, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fe7000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x3, 0x7, 0x801, 0x0, 0x0, {0x7, 0x0, 0x9}}, 0x14}}, 0x40000) recvmmsg(r0, &(0x7f00000000c0), 0x1, 0x40002142, 0x0) 1.807166416s ago: executing program 1 (id=721): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100767266000c00028008000100e8"], 0x48}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000160)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=ANY=[@ANYBLOB="340000001400010605000000000000000a402000", @ANYRES32=r2, @ANYBLOB="14000200200100"/16], 0x34}}, 0x0) 1.488386604s ago: executing program 1 (id=726): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @multicast2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 1.349544497s ago: executing program 1 (id=728): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) 1.046985735s ago: executing program 2 (id=737): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) renameat(r1, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f00000002c0)='./file1\x00') 938.657007ms ago: executing program 2 (id=730): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20004, r1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r0, 0x100000000) 855.112769ms ago: executing program 3 (id=731): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800) r1 = syz_io_uring_setup(0xf08, &(0x7f0000000400)={0x0, 0x595b, 0x1000, 0x2, 0x1000051, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x259a}, 0x1}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 778.261671ms ago: executing program 2 (id=732): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5005}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001240)=@newtfilter={0x44, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r2}, @TCA_ROUTE4_TO={0x8, 0x2, 0x1d}]}}]}, 0x44}}, 0x0) 731.929822ms ago: executing program 3 (id=733): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x1, @mcast2, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x41) 591.147795ms ago: executing program 3 (id=734): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0x6d1, 0x0, 0x0, 0x1000, 0x5}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r0, r6, &(0x7f0000000540)={0x0, 0x1aa5, 0x80, 0x2, 0x20000, 0x0, r1}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x1, 0x1, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x200, 0x0, 0x69, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x4, 0x10000, 0xea}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x2000, 0x3, 0x0, 0x0, r0}}], 0x1, &(0x7f00000003c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r5, '\x00', {0x100, 0xdbd, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0x0, 0xffffffdb, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) 521.232597ms ago: executing program 2 (id=735): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000009c0)="289dcf63936d6dea0cc683381c9a1aefb9ace82935fdb8dfe7e558401c7b6560dc6913006cf8c1eb8710988159390345382be627118f0a480c64cbfebfebd2645c9f0a157cf2fc3f7461917f2f2ff7998c6b21a8c07b1f024cd08222712808f1b785cf", 0x63}], 0x1}, 0x20040054) 348.579411ms ago: executing program 3 (id=736): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8e3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c96e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a030a93611d2170e7f5670e419dc44febf7dc973fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612eb25c1eb4a3ab2e156a97454800000000000000000000000600", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc9c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef69c502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e88050dfd2a4784a5d1453610fb1f1c2bac36c3ecd3e6fb756ef8880debeef3636afd981d8af4ab119928448f90351aec113335eacf52a18c87738d9679d3acc032a16fbefc64776f363610a15b37bcd36e6a7cba931151b9c9ba5779d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a34edee7789f56e7f01bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6760c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b6ff1363ac862a540c7fab584cd051ce7ee951e0f121d43cff75afbdec6bc6f6e8f7db58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141ea4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6fe50b892a69ec6dbecc28f032a745738faa12c2a34222942fef0ec0511da5fe0b565ceac429da7cc25cfe0320b40a514723e2392a6a361032343edb79fd83cd0a354837153542fd61b3156b54c566036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3417cb69c48b8b888ae51256bb4e6c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0684084ec0d693256e280025b23b5a08b7b1ebe7d41fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8f99424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835e1fcfff1da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d928893f983580ea47a012144633b98e02c3e81869534ab985eb3a73e0bac892dac949f85db949285a6a7a490b1075467226af23df82d8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d436878c182aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e61278c871e6dad6ceb89aa4d7245658a63e65cec7b81d307426a60a31cc917844a14e1d9ad83bef1c9f736d1836687c950d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff0f847d6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8528b72e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c4fb1fbbaaa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fbb2fafb76983eabc51a348e55789e997fa25cbe6e5031bd2e33d4e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a086d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948d598980d63c1d7aade89d0637d80a4c102a35eb027a08ef90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f9d55d2152dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e988869fb5cd9612db97e6cc574444f4b5025ec9827bafc55341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038033b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d16607cd4ede16344e60d8707357e82b1089258c56d851a435e23ce0919825e04471dd61a44c43e87c2959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd7799291969851cd4c3f22b5f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3349901d40da2bbdb76eda417c9fafd90fb23504ab150ca0033ea1d00000000000086ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da269560524ffa0f404b73b946edf900ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f711cdb2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed515ac03cfecce67027d579e1226bd7b7381827453550343566508d38790ee838c3bf85c6c91a45e7a44752f57313533a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02dff25f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264b5175be40b3ba84408d0f56762cc720e96c128447be7128748e185be2640115556bac64d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d798bb40d901d001e22cc5ed870d08702f49f0021814cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6874ea95d946da781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f715917df12df4eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddce0236d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070db245c2c424aedd4a4bb9863169454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040685c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71c8787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a49134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928736b96c72fa3406a95adfe6b374ffa27001d37d3bbe725e75c257834572026c511f57dce67153a4008f9e75e07ed9237f600005800ee667c137fc78bc4fd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b62ee8a5d0fd65b739ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de54835c7551154dfa3be11a0d3b5845ac97b2da84410a652e72cd563acbb2b02bb59370cebaaa80014e3ad280944eae6fbf8d5f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b41738b7f1a57c867d5b2ee5d72465657593339506fd0c3807cd6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c04f1035a96c6cfbe6f6c2b754581aac02f8a70e698be6e37fd411cf4b76317b47683f6b0f80dfdeef3a9767c7e5c30dff786093a21477431fea0458023953700"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) bpf$MAP_CREATE(0xefff, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x1100}, 0x48) 348.378281ms ago: executing program 2 (id=738): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0) mount$bind(&(0x7f0000001900)='.\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x24000, 0x0) 281.698553ms ago: executing program 2 (id=739): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) read(r0, &(0x7f00000028c0)=""/4088, 0xff8) 263.416963ms ago: executing program 3 (id=740): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r0, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x801, &(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRESHEX=r1, @ANYRES64, @ANYRESDEC=r0], 0xff, 0x26a, &(0x7f0000000580)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x40000, 0x52) fadvise64(r2, 0x54056, 0x55156, 0x3) 246.168774ms ago: executing program 1 (id=741): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) 0s ago: executing program 3 (id=742): setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={0x44, r2, 0x1, 0x30bd26, 0x25dfdc00, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x56}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.80' (ED25519) to the list of known hosts. [ 73.662377][ T5765] cgroup: Unknown subsys name 'net' [ 73.827593][ T5765] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.147376][ T5765] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.560281][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.571241][ T5787] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.579226][ T5790] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.587508][ T5790] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.595535][ T5790] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.620907][ T5790] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.621285][ T5787] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.637090][ T5787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.644594][ T5790] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.645276][ T5787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.659765][ T5790] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.659845][ T5792] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.675848][ T5789] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.684044][ T5789] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.692075][ T5789] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.699929][ T5789] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.700258][ T5787] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.711501][ T5789] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.715160][ T5787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.722349][ T5789] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.728547][ T5787] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.735441][ T5790] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.751682][ T5787] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.759188][ T5787] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.232162][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 77.276483][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 77.295931][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 77.314448][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 77.448731][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.457179][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.464683][ T5780] bridge_slave_0: entered allmulticast mode [ 77.472283][ T5780] bridge_slave_0: entered promiscuous mode [ 77.514288][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.521913][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.529063][ T5780] bridge_slave_1: entered allmulticast mode [ 77.537970][ T5780] bridge_slave_1: entered promiscuous mode [ 77.574860][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.582270][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.589426][ T5777] bridge_slave_0: entered allmulticast mode [ 77.596346][ T5777] bridge_slave_0: entered promiscuous mode [ 77.614209][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.622241][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.629394][ T5778] bridge_slave_0: entered allmulticast mode [ 77.637510][ T5778] bridge_slave_0: entered promiscuous mode [ 77.646933][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.654250][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.661610][ T5778] bridge_slave_1: entered allmulticast mode [ 77.668631][ T5778] bridge_slave_1: entered promiscuous mode [ 77.675564][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.683931][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.692399][ T5779] bridge_slave_0: entered allmulticast mode [ 77.699083][ T5779] bridge_slave_0: entered promiscuous mode [ 77.707358][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.715649][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.724188][ T5777] bridge_slave_1: entered allmulticast mode [ 77.731025][ T5777] bridge_slave_1: entered promiscuous mode [ 77.757790][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.765232][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.772591][ T5779] bridge_slave_1: entered allmulticast mode [ 77.779281][ T5779] bridge_slave_1: entered promiscuous mode [ 77.807294][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.848533][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.860098][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.871953][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.886347][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.908022][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.918853][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.938435][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.998485][ T5780] team0: Port device team_slave_0 added [ 78.007331][ T5777] team0: Port device team_slave_0 added [ 78.016566][ T5777] team0: Port device team_slave_1 added [ 78.037809][ T5778] team0: Port device team_slave_0 added [ 78.047225][ T5779] team0: Port device team_slave_0 added [ 78.055771][ T5779] team0: Port device team_slave_1 added [ 78.064174][ T5780] team0: Port device team_slave_1 added [ 78.078072][ T5778] team0: Port device team_slave_1 added [ 78.134286][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.142037][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.168155][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.188800][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.197082][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.225589][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.248103][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.256018][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.282031][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.305027][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.312149][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.338370][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.350480][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.357874][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.383930][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.397052][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.404160][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.430370][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.442129][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.449088][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.475523][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.506029][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.513431][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.539837][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.586882][ T5779] hsr_slave_0: entered promiscuous mode [ 78.593335][ T5779] hsr_slave_1: entered promiscuous mode [ 78.634592][ T5777] hsr_slave_0: entered promiscuous mode [ 78.641902][ T5777] hsr_slave_1: entered promiscuous mode [ 78.648289][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.656487][ T5777] Cannot create hsr debugfs directory [ 78.689560][ T5778] hsr_slave_0: entered promiscuous mode [ 78.696271][ T5778] hsr_slave_1: entered promiscuous mode [ 78.704075][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.712081][ T5778] Cannot create hsr debugfs directory [ 78.780665][ T5780] hsr_slave_0: entered promiscuous mode [ 78.786824][ T5786] Bluetooth: hci2: command tx timeout [ 78.792532][ T5088] Bluetooth: hci0: command tx timeout [ 78.798790][ T5787] Bluetooth: hci1: command tx timeout [ 78.798808][ T5782] Bluetooth: hci3: command tx timeout [ 78.799340][ T5780] hsr_slave_1: entered promiscuous mode [ 78.816767][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.824439][ T5780] Cannot create hsr debugfs directory [ 79.182995][ T5779] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.208060][ T5779] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.223192][ T5779] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.234176][ T5779] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.285942][ T5778] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.303335][ T5778] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.313983][ T5778] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.337242][ T5778] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.401927][ T5777] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.413553][ T5777] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.436697][ T5777] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.446914][ T5777] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.558124][ T5780] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.569218][ T5780] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.584410][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.595346][ T5780] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.610363][ T5780] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.664553][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.735724][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.748091][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.755403][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.771873][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.779037][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.809236][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.831626][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.872210][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.879367][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.897348][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.904514][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.934679][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.948584][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.966804][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.973978][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.003046][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.010205][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.038067][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.087802][ T5778] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.128359][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.135684][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.184850][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.192003][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.250642][ T5777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.486576][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.584340][ T5779] veth0_vlan: entered promiscuous mode [ 80.600723][ T5779] veth1_vlan: entered promiscuous mode [ 80.641300][ T5779] veth0_macvtap: entered promiscuous mode [ 80.665599][ T5779] veth1_macvtap: entered promiscuous mode [ 80.685659][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.729722][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.773488][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.800054][ T5779] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.809429][ T5779] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.818854][ T5779] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.827696][ T5779] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.848529][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.862076][ T5786] Bluetooth: hci3: command tx timeout [ 80.862342][ T5782] Bluetooth: hci2: command tx timeout [ 80.867619][ T5786] Bluetooth: hci0: command tx timeout [ 80.879128][ T5787] Bluetooth: hci1: command tx timeout [ 80.912666][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.059226][ T5778] veth0_vlan: entered promiscuous mode [ 81.068128][ T5777] veth0_vlan: entered promiscuous mode [ 81.083729][ T5780] veth0_vlan: entered promiscuous mode [ 81.109733][ T5777] veth1_vlan: entered promiscuous mode [ 81.111304][ T1136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.133069][ T1136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.152976][ T5780] veth1_vlan: entered promiscuous mode [ 81.175402][ T5778] veth1_vlan: entered promiscuous mode [ 81.195284][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.212291][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.272835][ T5777] veth0_macvtap: entered promiscuous mode [ 81.305931][ T5778] veth0_macvtap: entered promiscuous mode [ 81.326513][ T5780] veth0_macvtap: entered promiscuous mode [ 81.336199][ T5777] veth1_macvtap: entered promiscuous mode [ 81.352880][ T5778] veth1_macvtap: entered promiscuous mode [ 81.365303][ T5780] veth1_macvtap: entered promiscuous mode [ 81.397189][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.413217][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.433149][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.465016][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.475743][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.492850][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.514043][ T5777] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.526134][ T5777] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.536701][ T5777] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.549280][ T5777] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.595570][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.621615][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.632602][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.650880][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.672375][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.680012][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.696201][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.706459][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.721521][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.734975][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.747753][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.765281][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.832639][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.859160][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.876050][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.886951][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.909090][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.920696][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.937258][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.947782][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.964640][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.976452][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.995029][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.010226][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.036685][ T5780] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.049290][ T5780] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.058624][ T5780] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.073819][ T5780] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.090294][ T5778] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.105336][ T5778] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.116756][ T5778] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.131411][ T5778] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.193639][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.207767][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.443034][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.453347][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.501278][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.511200][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.519060][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.519539][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.659821][ T1126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.677967][ T1126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.724736][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.741121][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.944346][ T5787] Bluetooth: hci2: command tx timeout [ 82.949818][ T5787] Bluetooth: hci3: command tx timeout [ 82.951469][ T5786] Bluetooth: hci1: command tx timeout [ 82.956040][ T5782] Bluetooth: hci0: command tx timeout [ 83.110645][ T5854] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 83.304717][ T5862] syz.3.7[5862]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 83.332270][ T5862] loop3: detected capacity change from 0 to 512 [ 83.368770][ T5862] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 83.431604][ T5862] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 83.479420][ T5862] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm syz.3.7: bg 0: block 104: invalid block bitmap [ 83.506729][ T5862] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 83.523128][ T5862] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.7: invalid indirect mapped block 1 (level 1) [ 83.542311][ T5862] EXT4-fs (loop3): 1 truncate cleaned up [ 83.552815][ T5862] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.600519][ T5862] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 83.715639][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.884700][ T5882] ip_tables: iptables: counters copy to user failed while replacing table [ 83.987087][ T5886] ======================================================= [ 83.987087][ T5886] WARNING: The mand mount option has been deprecated and [ 83.987087][ T5886] and is ignored by this kernel. Remove the mand [ 83.987087][ T5886] option from the mount to silence this warning. [ 83.987087][ T5886] ======================================================= [ 84.163761][ T5892] loop2: detected capacity change from 0 to 16 [ 84.203042][ T5892] erofs: (device loop2): mounted with root inode @ nid 36. [ 84.367110][ T5898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23'. [ 84.465749][ T5903] loop2: detected capacity change from 0 to 256 [ 84.515436][ T28] audit: type=1800 audit(1791379278.519:2): pid=5903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.24" name="file0" dev="loop2" ino=1048620 res=0 errno=0 [ 84.667362][ T5906] loop0: detected capacity change from 0 to 256 [ 84.743931][ T5906] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xb2f9d067, utbl_chksum : 0xe619d30d) [ 85.021508][ T5787] Bluetooth: hci3: command tx timeout [ 85.026969][ T5787] Bluetooth: hci0: command tx timeout [ 85.033229][ T5782] Bluetooth: hci1: command tx timeout [ 85.033252][ T5786] Bluetooth: hci2: command tx timeout [ 85.707545][ T5939] all: renamed from bridge_slave_0 (while UP) [ 85.947322][ T5952] loop1: detected capacity change from 0 to 2048 [ 85.981639][ C0] Illegal XDP return value 1835008 on prog (id 7) dev bond_slave_0, expect packet loss! [ 86.006479][ T5952] loop1: p2 p4 [ 86.006479][ T5952] p4: [ 86.026302][ T5954] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 86.034255][ T5952] loop1: p2 size 851968 extends beyond EOD, truncated [ 86.078991][ T5952] loop1: p4 size 722688 extends beyond EOD, truncated [ 86.135342][ T5958] syz.3.49 uses obsolete (PF_INET,SOCK_PACKET) [ 86.206582][ T5958] FAULT_INJECTION: forcing a failure. [ 86.206582][ T5958] name failslab, interval 1, probability 0, space 0, times 1 [ 86.234753][ T5958] CPU: 0 PID: 5958 Comm: syz.3.49 Not tainted syzkaller #0 [ 86.242069][ T5958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 86.252175][ T5958] Call Trace: [ 86.255484][ T5958] [ 86.258429][ T5958] dump_stack_lvl+0x18c/0x250 [ 86.263136][ T5958] ? show_regs_print_info+0x20/0x20 [ 86.268344][ T5958] ? load_image+0x420/0x420 [ 86.272860][ T5958] ? __might_sleep+0xe0/0xe0 [ 86.277454][ T5958] ? __lock_acquire+0x7eb0/0x7eb0 [ 86.282483][ T5958] should_fail_ex+0x394/0x4c0 [ 86.287166][ T5958] should_failslab+0x9/0x20 [ 86.291675][ T5958] slab_pre_alloc_hook+0x59/0x300 [ 86.296706][ T5958] ? call_usermodehelper_setup+0x8e/0x260 [ 86.302429][ T5958] __kmem_cache_alloc_node+0x53/0x250 [ 86.307897][ T5958] ? call_usermodehelper_setup+0x8e/0x260 [ 86.313620][ T5958] kmalloc_trace+0x2a/0xe0 [ 86.318075][ T5958] call_usermodehelper_setup+0x8e/0x260 [ 86.323623][ T5958] ? __request_module+0x600/0x600 [ 86.328652][ T5958] __request_module+0x3bb/0x600 [ 86.333509][ T5958] ? module_enforce_rwx_sections+0x150/0x150 [ 86.339496][ T5958] ? bpf_lsm_capable+0x9/0x10 [ 86.344178][ T5958] ? security_capable+0x89/0xb0 [ 86.349035][ T5958] ? dev_load+0x21/0x1f0 [ 86.353282][ T5958] dev_load+0x18b/0x1f0 [ 86.357473][ T5958] devinet_ioctl+0x127/0x1d70 [ 86.362165][ T5958] ? __might_fault+0xc6/0x120 [ 86.366857][ T5958] ? inet_ifa_byprefix+0x2a0/0x2a0 [ 86.371980][ T5958] ? _copy_from_user+0xa5/0xe0 [ 86.376748][ T5958] ? get_user_ifreq+0x12b/0x180 [ 86.381626][ T5958] inet_ioctl+0x42b/0x560 [ 86.385955][ T5958] ? tomoyo_path_number_perm+0x217/0x5e0 [ 86.391599][ T5958] ? inet_shutdown+0x370/0x370 [ 86.396363][ T5958] ? slab_free_freelist_hook+0x130/0x1a0 [ 86.401997][ T5958] ? tomoyo_path_number_perm+0x4b7/0x5e0 [ 86.407662][ T5958] ? __kmem_cache_free+0xba/0x1f0 [ 86.412701][ T5958] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 86.418169][ T5958] ? packet_ioctl+0x26b/0x350 [ 86.422854][ T5958] sock_do_ioctl+0xfc/0x310 [ 86.427366][ T5958] ? sock_show_fdinfo+0xb0/0xb0 [ 86.432229][ T5958] sock_ioctl+0x5be/0x7e0 [ 86.436574][ T5958] ? sock_poll+0x3e0/0x3e0 [ 86.441001][ T5958] ? bpf_lsm_file_ioctl+0x9/0x10 [ 86.445939][ T5958] ? security_file_ioctl+0x80/0xa0 [ 86.451053][ T5958] ? sock_poll+0x3e0/0x3e0 [ 86.455562][ T5958] __se_sys_ioctl+0xfd/0x170 [ 86.460161][ T5958] do_syscall_64+0x55/0xb0 [ 86.464621][ T5958] ? clear_bhb_loop+0x40/0x90 [ 86.469306][ T5958] ? clear_bhb_loop+0x40/0x90 [ 86.473987][ T5958] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 86.479884][ T5958] RIP: 0033:0x7f9d3119e199 [ 86.484300][ T5958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.503927][ T5958] RSP: 002b:00007f9d3215a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 86.512360][ T5958] RAX: ffffffffffffffda RBX: 00007f9d31425fa0 RCX: 00007f9d3119e199 [ 86.520338][ T5958] RDX: 0000200000000180 RSI: 0000000000008914 RDI: 0000000000000003 [ 86.528311][ T5958] RBP: 00007f9d312358e0 R08: 0000000000000000 R09: 0000000000000000 [ 86.536297][ T5958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.544299][ T5958] R13: 00007f9d31426038 R14: 00007f9d31425fa0 R15: 00007ffd388a5158 [ 86.552285][ T5958] [ 86.865425][ T27] cfg80211: failed to load regulatory.db [ 87.507878][ T5983] netlink: 51 bytes leftover after parsing attributes in process `syz.3.59'. [ 87.677243][ T5989] loop0: detected capacity change from 0 to 1024 [ 87.709211][ T5989] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 87.766831][ T5992] loop2: detected capacity change from 0 to 128 [ 87.815485][ T5989] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.829642][ T5992] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 87.911663][ T5992] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.003814][ T28] audit: type=1800 audit(1791379282.019:3): pid=5992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.63" name="file1" dev="loop2" ino=12 res=0 errno=0 [ 88.080593][ T5777] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 88.099971][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.245591][ T5819] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 88.247284][ T6003] netlink: 20 bytes leftover after parsing attributes in process `syz.2.66'. [ 88.451133][ T5819] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 88.474504][ T5819] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 88.497146][ T5819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.771469][ T5819] qmi_wwan 4-1:1.0: cdc-wdm0: USB WDM device [ 88.802126][ T5819] wwan wwan0: port wwan0qmi0 attached [ 89.012362][ C1] qmi_wwan 4-1:1.0: nonzero urb status received: -71 [ 89.019297][ C1] qmi_wwan 4-1:1.0: wdm_int_callback - 0 bytes [ 89.029471][ C1] qmi_wwan 4-1:1.0: nonzero urb status received: -71 [ 89.036201][ C1] qmi_wwan 4-1:1.0: wdm_int_callback - 0 bytes [ 89.080507][ T5819] qmi_wwan 4-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.3-1, WWAN/QMI device, b6:dd:cd:bf:02:fd [ 89.159921][ T5819] usb 4-1: USB disconnect, device number 2 [ 89.169868][ T5819] qmi_wwan 4-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.3-1, WWAN/QMI device [ 89.198608][ T6010] loop0: detected capacity change from 0 to 32768 [ 89.288586][ T6010] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 89.304919][ T5819] wwan wwan0: port wwan0qmi0 disconnected [ 89.318114][ T6010] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 89.613926][ T6010] XFS (loop0): Ending clean mount [ 89.636741][ T6010] XFS (loop0): Quotacheck needed: Please wait. [ 89.675126][ T5819] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 89.702308][ T5819] XFS (loop0): Unmount and run xfs_repair [ 89.708101][ T5819] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 89.756359][ T5819] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 89.786880][ T5819] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80 ................ [ 89.811647][ T5819] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 89.831560][ T5819] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13 .....^.......... [ 89.840451][ T5819] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 89.876874][ T5819] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 89.895130][ T5819] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 89.937749][ T5819] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 89.970490][ T11] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x4 len 4 error 74 [ 90.031941][ T6010] XFS (loop0): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 90.234459][ T5778] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 90.396734][ T5772] udevd[5772]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 90.463372][ T5772] udevd[5772]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 90.937289][ T6068] netlink: 12 bytes leftover after parsing attributes in process `syz.1.83'. [ 91.181561][ T5787] Bluetooth: hci3: command 0x0406 tx timeout [ 91.227879][ T6031] loop2: detected capacity change from 0 to 32768 [ 91.320370][ T5772] udevd[5772]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 91.332297][ T6031] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.75 (6031) [ 91.385267][ T5772] udevd[5772]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 91.431401][ T5819] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 91.449054][ T6086] Bluetooth: MGMT ver 1.22 [ 91.472354][ T6086] Bluetooth: hci0: invalid len left 7, exp >= 116 [ 91.506595][ T6031] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 91.537639][ T6031] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 91.577787][ T6031] BTRFS info (device loop2): using free space tree [ 91.640605][ T6095] loop3: detected capacity change from 0 to 256 [ 91.654501][ T5772] udevd[5772]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 91.664672][ T5819] usb 2-1: config 4 has an invalid interface number: 44 but max is 0 [ 91.675350][ T5819] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 91.712623][ T5819] usb 2-1: config 4 has no interface number 0 [ 91.725654][ T6031] BTRFS info (device loop2): enabling ssd optimizations [ 91.732249][ T5819] usb 2-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 91.732807][ T6031] BTRFS info (device loop2): auto enabling async discard [ 91.782499][ T5819] usb 2-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 91.796881][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.813964][ T5819] usb 2-1: Product: syz [ 91.820192][ T5819] usb 2-1: Manufacturer: syz [ 91.845601][ T5819] usb 2-1: SerialNumber: syz [ 91.858699][ T5772] udevd[5772]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 91.931599][ T5772] udevd[5772]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 92.317128][ T5819] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 92.359644][ T5819] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 92.398651][ T5819] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 92.408498][ T5819] usb 2-1: media controller created [ 92.433735][ T5819] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 92.515693][ T5819] DVB: Unable to find symbol dib7000p_attach() [ 92.531312][ T5819] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 92.542687][ T5777] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 92.680868][ T5819] rc_core: IR keymap rc-dib0700-rc5 not found [ 92.697520][ T5819] Registered IR keymap rc-empty [ 92.724933][ T5819] dvb-usb: could not initialize remote control. [ 92.744474][ T5819] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 92.767261][ T5772] udevd[5772]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 92.814972][ T5819] usb 2-1: USB disconnect, device number 2 [ 92.851955][ T5772] udevd[5772]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 92.966919][ T5819] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 93.382849][ T6142] loop2: detected capacity change from 0 to 128 [ 93.411426][ T5772] udevd[5772]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 93.446673][ T6142] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 93.462728][ T6142] ext4 filesystem being mounted at /21/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 93.618603][ T5777] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 93.898822][ T6162] loop2: detected capacity change from 0 to 512 [ 93.924985][ T6162] EXT4-fs (loop2): orphan cleanup on readonly fs [ 93.938269][ T6162] EXT4-fs error (device loop2): ext4_ext_check_inode:532: inode #4: comm syz.2.111: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 93.963522][ T6162] EXT4-fs error (device loop2): ext4_quota_enable:7147: comm syz.2.111: Bad quota inode: 4, type: 1 [ 93.985649][ T6162] EXT4-fs warning (device loop2): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 94.015135][ T6162] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 94.040569][ T6162] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 94.190104][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.386117][ T6181] pim6reg: entered allmulticast mode [ 94.438247][ T6181] team0: entered allmulticast mode [ 94.444002][ T6181] team_slave_0: entered allmulticast mode [ 94.449918][ T6181] team_slave_1: entered allmulticast mode [ 94.459009][ T6181] pim6reg: left allmulticast mode [ 94.556623][ T6180] team0: left allmulticast mode [ 94.562126][ T6180] team_slave_0: left allmulticast mode [ 94.568445][ T6180] team_slave_1: left allmulticast mode [ 94.681809][ T6189] Zero length message leads to an empty skb [ 95.414475][ T6221] loop0: detected capacity change from 0 to 128 [ 95.466155][ T5772] udevd[5772]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 95.493540][ T6221] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 95.533774][ T6221] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.637640][ T6233] loop2: detected capacity change from 0 to 1764 [ 95.647873][ T5772] udevd[5772]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 95.723252][ T5772] udevd[5772]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 95.745979][ T6233] loop2: detected capacity change from 0 to 256 [ 95.764751][ T5772] udevd[5772]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 95.781647][ T6233] exfat: Unknown parameter 'iso9660' [ 95.801149][ T5772] udevd[5772]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 95.834129][ T5772] udevd[5772]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 95.863460][ T5772] udevd[5772]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 95.900837][ C1] net_ratelimit: 55 callbacks suppressed [ 96.025674][ T6243] FAULT_INJECTION: forcing a failure. [ 96.025674][ T6243] name failslab, interval 1, probability 0, space 0, times 0 [ 96.065327][ T6243] CPU: 1 PID: 6243 Comm: syz.2.144 Not tainted syzkaller #0 [ 96.072659][ T6243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 96.072676][ T6243] Call Trace: [ 96.072686][ T6243] [ 96.089147][ T6243] dump_stack_lvl+0x18c/0x250 [ 96.093874][ T6243] ? show_regs_print_info+0x20/0x20 [ 96.099121][ T6243] ? load_image+0x420/0x420 [ 96.103672][ T6243] ? __might_sleep+0xe0/0xe0 [ 96.108308][ T6243] ? __lock_acquire+0x7eb0/0x7eb0 [ 96.113369][ T6243] should_fail_ex+0x394/0x4c0 [ 96.118099][ T6243] should_failslab+0x9/0x20 [ 96.122638][ T6243] slab_pre_alloc_hook+0x59/0x300 [ 96.127682][ T6243] ? setup_ipc_sysctls+0x55/0x2e0 [ 96.132741][ T6243] ? setup_ipc_sysctls+0x55/0x2e0 [ 96.137778][ T6243] __kmem_cache_alloc_node+0x53/0x250 [ 96.143187][ T6243] ? setup_ipc_sysctls+0x55/0x2e0 [ 96.148280][ T6243] __kmalloc_node_track_caller+0xa4/0x230 [ 96.154040][ T6243] kmemdup+0x2b/0x70 [ 96.157968][ T6243] setup_ipc_sysctls+0x55/0x2e0 [ 96.162851][ T6243] copy_ipcs+0x333/0x500 [ 96.167131][ T6243] create_new_namespaces+0x212/0x700 [ 96.172460][ T6243] unshare_nsproxy_namespaces+0x11a/0x160 [ 96.178211][ T6243] ksys_unshare+0x4fa/0x8f0 [ 96.182750][ T6243] ? sighand_ctor+0x50/0x50 [ 96.187263][ T6243] ? lock_chain_count+0x20/0x20 [ 96.187296][ T6243] ? syscall_enter_from_user_mode+0x25/0x80 [ 96.198170][ T6243] __x64_sys_unshare+0x38/0x40 [ 96.198203][ T6243] do_syscall_64+0x55/0xb0 [ 96.207344][ T6243] ? clear_bhb_loop+0x40/0x90 [ 96.207368][ T6243] ? clear_bhb_loop+0x40/0x90 [ 96.207389][ T6243] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 96.216729][ T6243] RIP: 0033:0x7f477919e199 [ 96.216752][ T6243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.216769][ T6243] RSP: 002b:00007f477a041028 EFLAGS: 00000246 [ 96.222766][ T6243] ORIG_RAX: 0000000000000110 [ 96.222778][ T6243] RAX: ffffffffffffffda RBX: 00007f4779425fa0 RCX: 00007f477919e199 [ 96.222793][ T6243] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008040480 [ 96.222807][ T6243] RBP: 00007f47792358e0 R08: 0000000000000000 R09: 0000000000000000 [ 96.246868][ T6243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.246884][ T6243] R13: 00007f4779426038 R14: 00007f4779425fa0 R15: 00007ffe5a4264c8 [ 96.246912][ T6243] [ 96.431160][ T6245] vxcan1: tx drop: invalid da for name 0xfffffffffffffffd [ 96.510480][ T5778] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 96.559093][ T5772] udevd[5772]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 96.608553][ T5772] udevd[5772]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 98.000854][ T5850] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 98.213157][ T5850] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 98.224632][ T5850] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 98.240579][ T5850] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 98.257032][ T5850] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.503231][ T5850] usb 1-1: usb_control_msg returned -32 [ 98.508853][ T5850] usbtmc 1-1:16.0: can't read capabilities [ 98.855124][ T6308] netlink: 12 bytes leftover after parsing attributes in process `syz.3.173'. [ 98.958880][ T6308] netlink: 60 bytes leftover after parsing attributes in process `syz.3.173'. [ 99.047635][ T6313] FAULT_INJECTION: forcing a failure. [ 99.047635][ T6313] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 99.065692][ T6313] CPU: 0 PID: 6313 Comm: syz.3.175 Not tainted syzkaller #0 [ 99.073031][ T6313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 99.083114][ T6313] Call Trace: [ 99.086413][ T6313] [ 99.089342][ T6313] dump_stack_lvl+0x18c/0x250 [ 99.094057][ T6313] ? show_regs_print_info+0x20/0x20 [ 99.099298][ T6313] ? load_image+0x420/0x420 [ 99.103833][ T6313] ? __lock_acquire+0x7eb0/0x7eb0 [ 99.108888][ T6313] should_fail_ex+0x394/0x4c0 [ 99.113587][ T6313] prepare_alloc_pages+0x1e1/0x5b0 [ 99.118708][ T6313] __alloc_pages+0x134/0x460 [ 99.123311][ T6313] ? zone_statistics+0x170/0x170 [ 99.128255][ T6313] ? alloc_pages+0x4e1/0x740 [ 99.132847][ T6313] ? lock_chain_count+0x20/0x20 [ 99.137708][ T6313] __get_free_pages+0xc/0x30 [ 99.142296][ T6313] __se_sys_mincore+0xe0/0x600 [ 99.147057][ T6313] ? syscall_enter_from_user_mode+0x25/0x80 [ 99.152951][ T6313] ? lockdep_hardirqs_on+0x98/0x150 [ 99.158148][ T6313] do_syscall_64+0x55/0xb0 [ 99.162567][ T6313] ? clear_bhb_loop+0x40/0x90 [ 99.167242][ T6313] ? clear_bhb_loop+0x40/0x90 [ 99.171925][ T6313] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 99.177838][ T6313] RIP: 0033:0x7f9d3119e199 [ 99.182254][ T6313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.201860][ T6313] RSP: 002b:00007f9d3215a028 EFLAGS: 00000246 ORIG_RAX: 000000000000001b [ 99.210281][ T6313] RAX: ffffffffffffffda RBX: 00007f9d31425fa0 RCX: 00007f9d3119e199 [ 99.218250][ T6313] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000ffa000 [ 99.226220][ T6313] RBP: 00007f9d312358e0 R08: 0000000000000000 R09: 0000000000000000 [ 99.234228][ T6313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.242197][ T6313] R13: 00007f9d31426038 R14: 00007f9d31425fa0 R15: 00007ffd388a5158 [ 99.250176][ T6313] [ 99.895644][ T6337] netlink: 48 bytes leftover after parsing attributes in process `syz.3.186'. [ 100.004117][ T6342] loop2: detected capacity change from 0 to 256 [ 100.018049][ T5772] udevd[5772]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 100.029553][ T6342] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 100.049017][ T6342] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 100.066897][ T6342] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 100.086258][ T6342] exFAT-fs (loop2): failed to load alloc-bitmap [ 100.092957][ T6343] loop3: detected capacity change from 0 to 8192 [ 100.094455][ T6342] exFAT-fs (loop2): failed to recognize exfat type [ 100.397243][ T6347] loop3: detected capacity change from 0 to 1024 [ 100.502277][ T6349] loop2: detected capacity change from 0 to 2048 [ 100.534495][ T5772] udevd[5772]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 100.576144][ T6349] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 100.599923][ T5772] udevd[5772]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 100.634851][ T5772] udevd[5772]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 100.725239][ T5772] udevd[5772]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 100.765447][ T5772] udevd[5772]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 100.793467][ T6356] loop3: detected capacity change from 0 to 4096 [ 100.809308][ T5783] usb 1-1: USB disconnect, device number 2 [ 100.831936][ T5768] udevd[5768]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 100.952312][ T6362] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 100.967109][ T6356] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 100.995960][ T6364] netlink: 36 bytes leftover after parsing attributes in process `syz.1.198'. [ 101.021264][ T6356] NILFS (loop3): mounting fs with errors [ 101.097405][ T6356] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 101.107358][ C1] net_ratelimit: 41 callbacks suppressed [ 101.115408][ T6356] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 101.125298][ T6356] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 101.142619][ T28] audit: type=1800 audit(1791379295.149:4): pid=6356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.194" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 101.365884][ T6371] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 159744 [ 101.404660][ T6371] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=15) [ 101.438343][ T6371] NILFS (loop3): error -5 truncating bmap (ino=15) [ 101.455771][ T6382] warning: `syz.2.202' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 101.491157][ T5783] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 101.551908][ T6356] syz.3.194 (6356) used greatest stack depth: 19760 bytes left [ 101.676965][ T5772] udevd[5772]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 101.695712][ T5783] usb 1-1: config 4 has an invalid interface number: 44 but max is 0 [ 101.714423][ T5783] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 101.726429][ T5772] udevd[5772]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 101.760854][ T5783] usb 1-1: config 4 has no interface number 0 [ 101.767016][ T5783] usb 1-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 101.811403][ T5783] usb 1-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 101.820488][ T5783] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.849830][ T5783] usb 1-1: Product: syz [ 101.859944][ T5783] usb 1-1: Manufacturer: syz [ 101.869435][ T5783] usb 1-1: SerialNumber: syz [ 102.315145][ T5783] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 102.335745][ T5783] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 102.348071][ T5783] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 102.366529][ T5783] usb 1-1: media controller created [ 102.389928][ T5783] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 102.631019][ T5783] DVB: Unable to find symbol dib7000p_attach() [ 102.637232][ T5783] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 102.830877][ T5783] rc_core: IR keymap rc-dib0700-rc5 not found [ 102.836996][ T5783] Registered IR keymap rc-empty [ 102.843299][ T5783] dvb-usb: could not initialize remote control. [ 102.850318][ T5783] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 102.874154][ T5783] usb 1-1: USB disconnect, device number 3 [ 102.995499][ T5783] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 103.384962][ T6437] team0: Device ipvlan1 failed to register rx_handler [ 103.655457][ T6451] "syz.0.221" (6451) uses obsolete ecb(arc4) skcipher [ 103.851147][ T5819] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 103.983299][ T11] wlan1: Trigger new scan to find an IBSS to join [ 103.999602][ T6459] Bluetooth: ISO socket layer initialized [ 104.051584][ T5819] usb 4-1: Using ep0 maxpacket: 8 [ 104.067454][ T5819] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 104.093850][ T5819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 104.110966][ T5819] usb 4-1: Product: syz [ 104.123507][ T5819] usb 4-1: Manufacturer: syz [ 104.123526][ T5819] usb 4-1: SerialNumber: syz [ 104.140289][ T5819] usb 4-1: config 0 descriptor?? [ 104.158197][ T5819] gspca_main: sq905-2.14.0 probing 2770:9120 [ 104.371051][ T970] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 104.574884][ T970] usb 3-1: config 4 has an invalid interface number: 44 but max is 0 [ 104.597096][ T970] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 104.627848][ T970] usb 3-1: config 4 has no interface number 0 [ 104.637966][ T970] usb 3-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 104.665434][ T5783] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 104.675633][ T970] usb 3-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 104.705124][ T970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.724002][ T970] usb 3-1: Product: syz [ 104.731005][ T970] usb 3-1: Manufacturer: syz [ 104.735745][ T970] usb 3-1: SerialNumber: syz [ 104.884135][ T5783] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.913291][ T5783] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.938346][ T5783] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 104.965095][ T5783] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 104.977875][ T5783] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.995096][ T5783] usb 2-1: config 0 descriptor?? [ 105.176899][ T970] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 105.189473][ T970] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 105.201143][ T970] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 105.208818][ T970] usb 3-1: media controller created [ 105.215373][ T5819] gspca_sq905: bulk read fail (-22) len 0/4 [ 105.222590][ T5819] sq905: probe of 4-1:0.0 failed with error -5 [ 105.259486][ T970] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 105.452253][ T970] DVB: Unable to find symbol dib7000p_attach() [ 105.458575][ T970] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 105.477935][ T5783] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 105.534632][ T174] usb 4-1: USB disconnect, device number 3 [ 105.564726][ T5783] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 105.581669][ T970] rc_core: IR keymap rc-dib0700-rc5 not found [ 105.605257][ T970] Registered IR keymap rc-empty [ 105.620475][ T970] dvb-usb: could not initialize remote control. [ 105.629883][ T970] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 105.669545][ T970] usb 3-1: USB disconnect, device number 2 [ 105.739125][ T970] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 106.300829][ C1] net_ratelimit: 59 callbacks suppressed [ 106.309821][ T6507] netlink: 20 bytes leftover after parsing attributes in process `syz.2.235'. [ 106.424848][ T6507] nbd: socks must be embedded in a SOCK_ITEM attr [ 106.436605][ T5772] udevd[5772]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 106.514080][ T5772] udevd[5772]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 106.676457][ T6516] FAULT_INJECTION: forcing a failure. [ 106.676457][ T6516] name failslab, interval 1, probability 0, space 0, times 0 [ 106.704313][ T6516] CPU: 0 PID: 6516 Comm: syz.3.239 Not tainted syzkaller #0 [ 106.711665][ T6516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 106.721744][ T6516] Call Trace: [ 106.725048][ T6516] [ 106.728001][ T6516] dump_stack_lvl+0x18c/0x250 [ 106.732719][ T6516] ? show_regs_print_info+0x20/0x20 [ 106.737957][ T6516] ? load_image+0x420/0x420 [ 106.742582][ T6516] ? __might_sleep+0xe0/0xe0 [ 106.747206][ T6516] ? __lock_acquire+0x7eb0/0x7eb0 [ 106.752246][ T6516] should_fail_ex+0x394/0x4c0 [ 106.756945][ T6516] should_failslab+0x9/0x20 [ 106.756976][ T6516] slab_pre_alloc_hook+0x59/0x300 [ 106.757006][ T6516] ? aa_get_newest_label+0xfd/0x5c0 [ 106.771761][ T6516] ? sk_prot_alloc+0xe7/0x210 [ 106.776471][ T6516] ? sk_prot_alloc+0xe7/0x210 [ 106.781159][ T6516] __kmem_cache_alloc_node+0x53/0x250 [ 106.781200][ T6516] ? sk_prot_alloc+0xe7/0x210 [ 106.781220][ T6516] __kmalloc+0xa7/0x240 [ 106.781250][ T6516] sk_prot_alloc+0xe7/0x210 [ 106.781270][ T6516] ? sk_alloc+0x24/0x350 [ 106.781292][ T6516] sk_alloc+0x3a/0x350 [ 106.781316][ T6516] packet_create+0xff/0x790 [ 106.781351][ T6516] __sock_create+0x49e/0x940 [ 106.781383][ T6516] __sys_socket+0xd7/0x1b0 [ 106.781409][ T6516] __x64_sys_socket+0x7a/0x90 [ 106.781434][ T6516] do_syscall_64+0x55/0xb0 [ 106.781460][ T6516] ? clear_bhb_loop+0x40/0x90 [ 106.787019][ T6516] ? clear_bhb_loop+0x40/0x90 [ 106.787050][ T6516] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 106.787080][ T6516] RIP: 0033:0x7f9d3119e199 [ 106.795982][ T6516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.796003][ T6516] RSP: 002b:00007f9d3215a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 106.796027][ T6516] RAX: ffffffffffffffda RBX: 00007f9d31425fa0 RCX: 00007f9d3119e199 [ 106.804737][ T6516] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000011 [ 106.804755][ T6516] RBP: 00007f9d312358e0 R08: 0000000000000000 R09: 0000000000000000 [ 106.804767][ T6516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.804783][ T6516] R13: 00007f9d31426038 R14: 00007f9d31425fa0 R15: 00007ffd388a5158 [ 106.804812][ T6516] [ 107.028956][ T42] wlan1: Trigger new scan to find an IBSS to join [ 107.515281][ T6540] FAULT_INJECTION: forcing a failure. [ 107.515281][ T6540] name failslab, interval 1, probability 0, space 0, times 0 [ 107.542538][ T6540] CPU: 0 PID: 6540 Comm: syz.0.250 Not tainted syzkaller #0 [ 107.549859][ T6540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 107.549874][ T6540] Call Trace: [ 107.549883][ T6540] [ 107.549893][ T6540] dump_stack_lvl+0x18c/0x250 [ 107.563232][ T6540] ? show_regs_print_info+0x20/0x20 [ 107.563268][ T6540] ? load_image+0x420/0x420 [ 107.570865][ T6540] ? __might_sleep+0xe0/0xe0 [ 107.570894][ T6540] ? __lock_acquire+0x7eb0/0x7eb0 [ 107.570922][ T6540] should_fail_ex+0x394/0x4c0 [ 107.580603][ T6540] should_failslab+0x9/0x20 [ 107.590187][ T6540] slab_pre_alloc_hook+0x59/0x300 [ 107.604469][ T6540] ? aa_get_newest_label+0xfd/0x5c0 [ 107.608239][ T5823] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 107.609680][ T6540] ? sk_prot_alloc+0xe7/0x210 [ 107.609707][ T6540] ? sk_prot_alloc+0xe7/0x210 [ 107.626540][ T6540] __kmem_cache_alloc_node+0x53/0x250 [ 107.631931][ T6540] ? sk_prot_alloc+0xe7/0x210 [ 107.636611][ T6540] __kmalloc+0xa7/0x240 [ 107.636645][ T6540] sk_prot_alloc+0xe7/0x210 [ 107.640967][ T6540] ? sk_alloc+0x24/0x350 [ 107.640993][ T6540] sk_alloc+0x3a/0x350 [ 107.649863][ T6540] packet_create+0xff/0x790 [ 107.649899][ T6540] __sock_create+0x49e/0x940 [ 107.658626][ T6540] __sys_socket+0xd7/0x1b0 [ 107.658658][ T6540] __x64_sys_socket+0x7a/0x90 [ 107.667630][ T6540] do_syscall_64+0x55/0xb0 [ 107.667661][ T6540] ? clear_bhb_loop+0x40/0x90 [ 107.676730][ T6540] ? clear_bhb_loop+0x40/0x90 [ 107.686059][ T6540] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 107.686091][ T6540] RIP: 0033:0x7ff564f9e199 [ 107.686111][ T6540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.696370][ T6540] RSP: 002b:00007ff565e8d028 EFLAGS: 00000246 [ 107.722227][ T6540] ORIG_RAX: 0000000000000029 [ 107.722239][ T6540] RAX: ffffffffffffffda RBX: 00007ff565225fa0 RCX: 00007ff564f9e199 [ 107.722257][ T6540] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000011 [ 107.734981][ T6540] RBP: 00007ff5650358e0 R08: 0000000000000000 R09: 0000000000000000 [ 107.750914][ T6540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.750932][ T6540] R13: 00007ff565226038 R14: 00007ff565225fa0 R15: 00007ffca555d388 [ 107.750961][ T6540] [ 107.925196][ T5823] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 107.937900][ T5823] usb 4-1: config 0 interface 0 has no altsetting 0 [ 107.971025][ T5823] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 107.980107][ T5823] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 108.010042][ T5823] usb 4-1: Product: syz [ 108.020690][ T5823] usb 4-1: Manufacturer: syz [ 108.029488][ T5823] usb 4-1: SerialNumber: syz [ 108.045178][ T5783] usb 2-1: USB disconnect, device number 3 [ 108.054964][ T5823] usb 4-1: config 0 descriptor?? [ 108.095996][ T5823] usb 4-1: selecting invalid altsetting 0 [ 108.469060][ T174] usb 4-1: USB disconnect, device number 4 [ 108.611471][ T6552] sch_tbf: burst 7 is lower than device bridge0 mtu (1514) ! [ 108.689672][ T6556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.256'. [ 108.703849][ T6556] sch_tbf: burst 0 is lower than device bridge0 mtu (1514) ! [ 108.942037][ T1100] wlan1: Trigger new scan to find an IBSS to join [ 109.098904][ T6570] FAULT_INJECTION: forcing a failure. [ 109.098904][ T6570] name failslab, interval 1, probability 0, space 0, times 0 [ 109.112153][ T6570] CPU: 0 PID: 6570 Comm: syz.2.262 Not tainted syzkaller #0 [ 109.119465][ T6570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 109.129508][ T6570] Call Trace: [ 109.129521][ T6570] [ 109.129531][ T6570] dump_stack_lvl+0x18c/0x250 [ 109.129568][ T6570] ? show_regs_print_info+0x20/0x20 [ 109.129599][ T6570] ? load_image+0x420/0x420 [ 109.150382][ T6570] ? __might_sleep+0xe0/0xe0 [ 109.154976][ T6570] ? __lock_acquire+0x7eb0/0x7eb0 [ 109.159997][ T6570] should_fail_ex+0x394/0x4c0 [ 109.164688][ T6570] should_failslab+0x9/0x20 [ 109.169190][ T6570] slab_pre_alloc_hook+0x59/0x300 [ 109.174201][ T6570] ? aa_get_newest_label+0xfd/0x5c0 [ 109.174234][ T6570] ? sk_prot_alloc+0xe7/0x210 [ 109.179589][ T6570] ? sk_prot_alloc+0xe7/0x210 [ 109.179614][ T6570] __kmem_cache_alloc_node+0x53/0x250 [ 109.194604][ T6570] ? sk_prot_alloc+0xe7/0x210 [ 109.194631][ T6570] __kmalloc+0xa7/0x240 [ 109.194661][ T6570] sk_prot_alloc+0xe7/0x210 [ 109.194683][ T6570] ? sk_alloc+0x24/0x350 [ 109.194705][ T6570] sk_alloc+0x3a/0x350 [ 109.194728][ T6570] packet_create+0xff/0x790 [ 109.199583][ T6570] __sock_create+0x49e/0x940 [ 109.208213][ T6570] __sys_socket+0xd7/0x1b0 [ 109.216480][ T6570] __x64_sys_socket+0x7a/0x90 [ 109.225536][ T6570] do_syscall_64+0x55/0xb0 [ 109.225569][ T6570] ? clear_bhb_loop+0x40/0x90 [ 109.225589][ T6570] ? clear_bhb_loop+0x40/0x90 [ 109.225609][ T6570] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 109.225638][ T6570] RIP: 0033:0x7f477919e199 [ 109.225658][ T6570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.225677][ T6570] RSP: 002b:00007f477a041028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 109.225698][ T6570] RAX: ffffffffffffffda RBX: 00007f4779425fa0 RCX: 00007f477919e199 [ 109.225714][ T6570] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000011 [ 109.225726][ T6570] RBP: 00007f47792358e0 R08: 0000000000000000 R09: 0000000000000000 [ 109.225739][ T6570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.225752][ T6570] R13: 00007f4779426038 R14: 00007f4779425fa0 R15: 00007ffe5a4264c8 [ 109.225782][ T6570] [ 109.426067][ T6574] loop3: detected capacity change from 0 to 512 [ 109.436258][ T6574] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 109.443450][ T5772] udevd[5772]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 109.467275][ T6576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.265'. [ 109.477611][ T6574] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.264: invalid indirect mapped block 32768 (level 2) [ 109.494253][ T23] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 109.510052][ T6574] EXT4-fs (loop3): 1 orphan inode deleted [ 109.516468][ T6574] EXT4-fs (loop3): 1 truncate cleaned up [ 109.524385][ T6574] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.548761][ T6574] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, [ 109.557649][ T6574] block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 109.610657][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.637357][ T5772] udevd[5772]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 109.676343][ T5772] udevd[5772]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 109.690118][ T23] usb 2-1: not running at top speed; connect to a high speed hub [ 109.712983][ T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.728717][ T23] usb 2-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 109.738119][ T23] usb 2-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 109.747287][ T23] usb 2-1: Product: syz [ 109.751769][ T23] usb 2-1: Manufacturer: syz [ 109.774678][ T23] usb 2-1: Found UVC 1.00 device syz (225a:e1d4) [ 109.984927][ T23] usb 2-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 110.020235][ T23] uvcvideo 2-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 110.044781][ T23] uvcvideo 2-1:1.1: Failed to initialize the device (-71). [ 110.087499][ T28] audit: type=1326 audit(1791379304.099:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6591 comm="syz.2.271" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f477919e199 code=0x0 [ 110.147599][ T23] usb 2-1: USB disconnect, device number 4 [ 110.570905][ T174] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 110.760956][ T174] usb 4-1: Using ep0 maxpacket: 8 [ 110.774135][ T174] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 110.794809][ T174] usb 4-1: config 0 has no interface number 0 [ 110.804229][ T174] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 110.815727][ T174] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 110.825938][ T174] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.839595][ T174] usb 4-1: config 0 descriptor?? [ 110.872183][ T174] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 111.032408][ T11] wlan1: Trigger new scan to find an IBSS to join [ 111.094719][ T6623] FAULT_INJECTION: forcing a failure. [ 111.094719][ T6623] name failslab, interval 1, probability 0, space 0, times 0 [ 111.125653][ T6623] CPU: 0 PID: 6623 Comm: syz.1.285 Not tainted syzkaller #0 [ 111.132978][ T6623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 111.132993][ T6623] Call Trace: [ 111.133003][ T6623] [ 111.146330][ T6623] dump_stack_lvl+0x18c/0x250 [ 111.153920][ T6623] ? show_regs_print_info+0x20/0x20 [ 111.153956][ T6623] ? load_image+0x420/0x420 [ 111.163667][ T6623] ? __might_sleep+0xe0/0xe0 [ 111.168269][ T6623] ? __lock_acquire+0x7eb0/0x7eb0 [ 111.168318][ T5823] usb 4-1: USB disconnect, device number 5 [ 111.173305][ T6623] should_fail_ex+0x394/0x4c0 [ 111.173341][ T6623] should_failslab+0x9/0x20 [ 111.173367][ T6623] slab_pre_alloc_hook+0x59/0x300 [ 111.183832][ T6623] ? lockdep_softirqs_off+0x440/0x440 [ 111.183862][ T6623] kmem_cache_alloc+0x5a/0x2c0 [ 111.183914][ T6623] ? security_inode_alloc+0x34/0x110 [ 111.183945][ T6623] security_inode_alloc+0x34/0x110 [ 111.183972][ T6623] inode_init_always+0x914/0xc90 [ 111.184000][ T6623] new_inode_pseudo+0x95/0x1d0 [ 111.184026][ T6623] __sock_create+0x12d/0x940 [ 111.184055][ T6623] __sys_socketpair+0x236/0x550 [ 111.184081][ T6623] __x64_sys_socketpair+0x9b/0xb0 [ 111.184107][ T6623] do_syscall_64+0x55/0xb0 [ 111.184133][ T6623] ? clear_bhb_loop+0x40/0x90 [ 111.184151][ T6623] ? clear_bhb_loop+0x40/0x90 [ 111.184173][ T6623] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 111.184202][ T6623] RIP: 0033:0x7f11fdf9e199 [ 111.184223][ T6623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.184242][ T6623] RSP: 002b:00007f11fee9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 111.184265][ T6623] RAX: ffffffffffffffda RBX: 00007f11fe225fa0 RCX: 00007f11fdf9e199 [ 111.184280][ T6623] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 111.184294][ T6623] RBP: 00007f11fe0358e0 R08: 0000000000000000 R09: 0000000000000000 [ 111.184307][ T6623] R10: 0000200000010280 R11: 0000000000000246 R12: 0000000000000000 [ 111.184321][ T6623] R13: 00007f11fe226038 R14: 00007f11fe225fa0 R15: 00007fffd8158ca8 [ 111.184350][ T6623] [ 111.365710][ C0] net_ratelimit: 41 callbacks suppressed [ 111.765680][ T174] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 111.824257][ T5786] Bluetooth: hci3: command 0x0406 tx timeout [ 111.946759][ T174] usb 1-1: not running at top speed; connect to a high speed hub [ 111.962182][ T174] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.985613][ T174] usb 1-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 111.996635][ T174] usb 1-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 112.008627][ T174] usb 1-1: Product: syz [ 112.013981][ T174] usb 1-1: Manufacturer: syz [ 112.042812][ T174] usb 1-1: Found UVC 1.00 device syz (225a:e1d4) [ 112.137993][ T11] wlan1: Creating new IBSS network, BSSID 7a:04:e6:01:ab:1d [ 112.140039][ T6654] netlink: 7 bytes leftover after parsing attributes in process `syz.1.298'. [ 112.246714][ T174] usb 1-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 112.265065][ T174] uvcvideo 1-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 112.275873][ T174] uvcvideo 1-1:1.1: Failed to initialize the device (-71). [ 112.306773][ T174] usb 1-1: USB disconnect, device number 4 [ 112.462432][ T5786] Bluetooth: hci0: command tx timeout [ 112.704691][ T6664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.302'. [ 112.872380][ T6667] netlink: 4 bytes leftover after parsing attributes in process `syz.1.303'. [ 112.910570][ T6667] netlink: 14 bytes leftover after parsing attributes in process `syz.1.303'. [ 113.501859][ T5786] Bluetooth: hci2: command tx timeout [ 113.672955][ T6695] program syz.3.314 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.917731][ T5772] udevd[5772]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 113.981446][ T1136] wlan1: Trigger new scan to find an IBSS to join [ 114.877102][ T42] wlan1: Creating new IBSS network, BSSID 42:8f:d9:74:0e:d5 [ 115.999111][ T6675] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 116.700830][ C1] net_ratelimit: 49 callbacks suppressed [ 116.931002][ T27] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 117.143190][ T27] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.162809][ T27] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 117.178446][ T27] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 117.189188][ T27] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 117.199695][ T27] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 117.213074][ T27] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 117.222454][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.235998][ T6765] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 117.254810][ T27] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 117.280661][ T27] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 117.302676][ T27] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 117.338758][ T27] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 117.355424][ T27] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 117.383017][ T27] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 117.423948][ T27] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 117.518728][ T6795] netlink: 'syz.0.345': attribute type 10 has an invalid length. [ 117.566728][ T6795] team0: Port device dummy0 added [ 117.744434][ T8] usb 4-1: USB disconnect, device number 6 [ 117.798519][ T8] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 117.835204][ T8] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 117.868125][ T8] keyspan 4-1:1.0: device disconnected [ 118.880867][ T27] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 118.976733][ T6839] mmap: syz.3.363 (6839) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 119.088669][ T27] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 119.116487][ T27] usb 1-1: config 0 interface 0 has no altsetting 0 [ 119.133569][ T27] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 119.143938][ T27] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 119.153277][ T27] usb 1-1: Product: syz [ 119.157703][ T27] usb 1-1: Manufacturer: syz [ 119.164004][ T27] usb 1-1: SerialNumber: syz [ 119.175406][ T27] usb 1-1: config 0 descriptor?? [ 119.208187][ T27] usb 1-1: selecting invalid altsetting 0 [ 119.427395][ T6851] netlink: 4 bytes leftover after parsing attributes in process `syz.3.367'. [ 119.498837][ T27] usb 1-1: USB disconnect, device number 5 [ 119.556802][ T6851] bond0: (slave bond_slave_1): Releasing backup interface [ 120.421021][ T6868] FAULT_INJECTION: forcing a failure. [ 120.421021][ T6868] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 120.441214][ T6868] CPU: 1 PID: 6868 Comm: syz.0.376 Not tainted syzkaller #0 [ 120.448552][ T6868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 120.458633][ T6868] Call Trace: [ 120.461901][ T6868] [ 120.461912][ T6868] dump_stack_lvl+0x18c/0x250 [ 120.469504][ T6868] ? show_regs_print_info+0x20/0x20 [ 120.469539][ T6868] ? load_image+0x420/0x420 [ 120.479217][ T6868] ? __might_fault+0xaa/0x120 [ 120.479247][ T6868] ? __lock_acquire+0x7eb0/0x7eb0 [ 120.488921][ T6868] ? __virt_addr_valid+0x10c/0x380 [ 120.488955][ T6868] should_fail_ex+0x394/0x4c0 [ 120.498710][ T6868] _copy_to_user+0x2f/0xa0 [ 120.498747][ T6868] bpf_verifier_vlog+0x5ac/0x840 [ 120.508306][ T6868] btf_verifier_log+0x11e/0x1a0 [ 120.513167][ T6868] ? btf_parse_graph_root+0xb00/0xb00 [ 120.513193][ T6868] ? __btf_verifier_log+0xe3/0x140 [ 120.513224][ T6868] ? btf_check_sec_info+0x350/0x350 [ 120.513255][ T6868] btf_func_proto_log+0x474/0x850 [ 120.523712][ T6868] __btf_verifier_log_type+0x457/0x690 [ 120.523761][ T6868] ? btf_int_show+0x2810/0x2810 [ 120.533963][ T6868] btf_func_proto_check_meta+0xc0/0x150 [ 120.533998][ T6868] btf_check_all_metas+0x371/0xaf0 [ 120.544262][ T6868] btf_parse_type_sec+0xfc/0x1960 [ 120.544283][ T6868] ? btf_check_sec_info+0x350/0x350 [ 120.544315][ T6868] ? __virt_addr_valid+0x10c/0x380 [ 120.554940][ T6868] ? btf_verifier_log+0x1a0/0x1a0 [ 120.554970][ T6868] ? btf_parse_hdr+0x545/0x700 [ 120.565151][ T6868] ? btf_parse_str_sec+0x20d/0x2a0 [ 120.565180][ T6868] btf_new_fd+0x440/0x9e0 [ 120.575290][ T6868] ? bpf_btf_show_fdinfo+0x80/0x80 [ 120.575323][ T6868] ? capable+0x88/0xe0 [ 120.585167][ T6868] __sys_bpf+0x670/0x890 [ 120.585195][ T6868] ? bpf_link_show_fdinfo+0x560/0x560 [ 120.594625][ T6868] ? lock_chain_count+0x20/0x20 [ 120.594658][ T6868] __x64_sys_bpf+0x7c/0x90 [ 120.594681][ T6868] do_syscall_64+0x55/0xb0 [ 120.602962][ T6868] ? clear_bhb_loop+0x40/0x90 [ 120.602984][ T6868] ? clear_bhb_loop+0x40/0x90 [ 120.603005][ T6868] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 120.613225][ T6868] RIP: 0033:0x7ff564f9e199 [ 120.613251][ T6868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.661357][ T6868] RSP: 002b:00007ff565e8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 120.669793][ T6868] RAX: ffffffffffffffda RBX: 00007ff565225fa0 RCX: 00007ff564f9e199 [ 120.677770][ T6868] RDX: 0000000000000028 RSI: 0000200000000100 RDI: 0000000000000012 [ 120.685748][ T6868] RBP: 00007ff5650358e0 R08: 0000000000000000 R09: 0000000000000000 [ 120.693727][ T6868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.701700][ T6868] R13: 00007ff565226038 R14: 00007ff565225fa0 R15: 00007ffca555d388 [ 120.709686][ T6868] [ 120.797349][ T8] IPVS: starting estimator thread 0... [ 120.891204][ T6873] IPVS: using max 18 ests per chain, 43200 per kthread [ 121.181232][ T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 121.372979][ T8] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 121.387025][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.398068][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.408030][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 121.430641][ T8] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 121.439850][ T8] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 121.448018][ T8] usb 3-1: Manufacturer: syz [ 121.455679][ T8] usb 3-1: config 0 descriptor?? [ 121.641485][ T6829] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 121.750811][ C1] net_ratelimit: 41 callbacks suppressed [ 121.885620][ T8] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 121.911737][ T8] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 121.946037][ T8] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 122.179562][ T8] usb 3-1: USB disconnect, device number 3 [ 122.442127][ T6913] loop3: detected capacity change from 0 to 2048 [ 122.453794][ T5772] udevd[5772]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 122.476011][ T6913] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 122.565382][ T28] audit: type=1800 audit(1791380084.575:6): pid=6913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.394" name="file2" dev="loop3" ino=1347 res=0 errno=0 [ 122.757470][ T5772] udevd[5772]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 122.797495][ T5772] udevd[5772]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 123.119025][ T6937] loop3: detected capacity change from 0 to 1024 [ 123.134845][ T5772] udevd[5772]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 123.263660][ T5772] udevd[5772]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 123.297633][ T5772] udevd[5772]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 123.536650][ T5772] udevd[5772]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory [ 123.579856][ T5772] udevd[5772]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory [ 124.288525][ T6977] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 124.303911][ T5786] block nbd1: Receive control failed (result -32) [ 124.337632][ T6951] block nbd1: shutting down sockets [ 125.470319][ T7008] loop2: detected capacity change from 0 to 32768 [ 125.491916][ T5772] udevd[5772]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 125.531055][ T7008] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 125.556994][ T7029] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 125.590876][ T174] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 125.642448][ T7008] XFS (loop2): Ending clean mount [ 125.778180][ T7008] XFS (loop2): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 125.808874][ T174] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.819519][ T174] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 125.849934][ T174] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 125.864734][ T174] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 125.875265][ T174] usb 4-1: SerialNumber: syz [ 125.942816][ T5777] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 125.993478][ T7044] veth1_to_bond: entered promiscuous mode [ 126.000459][ T7044] veth1_to_bond: entered allmulticast mode [ 126.008182][ T7044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.448'. [ 126.103492][ T7044] veth1_to_bond (unregistering): left allmulticast mode [ 126.111092][ T174] usb 4-1: 0:2 : does not exist [ 126.125962][ T7044] veth1_to_bond (unregistering): left promiscuous mode [ 126.144473][ T5771] udevd[5771]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 126.238667][ T174] usb 4-1: USB disconnect, device number 7 [ 126.269141][ T7044] bond0: (slave bond_slave_1): Releasing backup interface [ 126.376737][ T7046] process 'syz.2.447' launched './file0' with NULL argv: empty string added [ 126.568675][ T7054] gadgetfs: bound to dummy_udc driver [ 126.851230][ T174] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 126.866031][ C0] gadgetfs: connected [ 126.872180][ T7064] FAULT_INJECTION: forcing a failure. [ 126.872180][ T7064] name failslab, interval 1, probability 0, space 0, times 0 [ 126.885309][ T7064] CPU: 1 PID: 7064 Comm: syz.0.455 Not tainted syzkaller #0 [ 126.892601][ T7064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 126.892668][ T7064] Call Trace: [ 126.892678][ T7064] [ 126.892686][ T7064] dump_stack_lvl+0x18c/0x250 [ 126.892731][ T7064] ? show_regs_print_info+0x20/0x20 [ 126.892757][ T7064] ? load_image+0x420/0x420 [ 126.892780][ T7064] ? mark_lock+0x94/0x320 [ 126.892808][ T7064] ? __lock_acquire+0x1431/0x7eb0 [ 126.892839][ T7064] should_fail_ex+0x394/0x4c0 [ 126.892874][ T7064] should_failslab+0x9/0x20 [ 126.892902][ T7064] slab_pre_alloc_hook+0x59/0x300 [ 126.892939][ T7064] kmem_cache_alloc+0x5a/0x2c0 [ 126.892967][ T7064] ? radix_tree_node_alloc+0x7e/0x3a0 [ 126.892995][ T7064] radix_tree_node_alloc+0x7e/0x3a0 [ 126.893023][ T7064] idr_get_free+0x28f/0xa10 [ 126.893058][ T7064] idr_alloc_cyclic+0x28a/0x610 [ 126.893090][ T7064] ? idr_alloc+0x2e0/0x2e0 [ 126.893114][ T7064] ? do_raw_spin_lock+0x11f/0x2b0 [ 126.893151][ T7064] ? bpf_prog_alloc_id+0x23/0xf0 [ 126.893178][ T7064] bpf_prog_alloc_id+0x42/0xf0 [ 126.893209][ T7064] bpf_prog_load+0x114f/0x1610 [ 126.893247][ T7064] ? map_freeze+0x420/0x420 [ 126.893287][ T7064] ? __might_fault+0xaa/0x120 [ 126.893310][ T7064] ? __might_fault+0xc6/0x120 [ 126.893330][ T7064] ? __might_fault+0xaa/0x120 [ 126.893352][ T7064] ? bpf_lsm_bpf+0x9/0x10 [ 126.893377][ T7064] ? security_bpf+0x7e/0xa0 [ 126.893403][ T7064] __sys_bpf+0x5ba/0x890 [ 126.893426][ T7064] ? bpf_link_show_fdinfo+0x560/0x560 [ 126.893461][ T7064] ? lock_chain_count+0x20/0x20 [ 126.893494][ T7064] __x64_sys_bpf+0x7c/0x90 [ 126.893516][ T7064] do_syscall_64+0x55/0xb0 [ 126.893542][ T7064] ? clear_bhb_loop+0x40/0x90 [ 126.893562][ T7064] ? clear_bhb_loop+0x40/0x90 [ 126.893589][ T7064] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 126.914540][ T7064] RIP: 0033:0x7ff564f9e199 [ 126.914565][ T7064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.924475][ T7064] RSP: 002b:00007ff565e8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 126.924499][ T7064] RAX: ffffffffffffffda RBX: 00007ff565225fa0 RCX: 00007ff564f9e199 [ 126.924513][ T7064] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005 [ 126.924526][ T7064] RBP: 00007ff5650358e0 R08: 0000000000000000 R09: 0000000000000000 [ 126.924539][ T7064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.933901][ T7064] R13: 00007ff565226038 R14: 00007ff565225fa0 R15: 00007ffca555d388 [ 126.933938][ T7064] [ 126.950958][ C1] net_ratelimit: 51 callbacks suppressed [ 126.953304][ T174] gadgetfs: disconnected [ 127.260995][ T7068] netlink: 112 bytes leftover after parsing attributes in process `syz.3.457'. [ 127.750848][ T174] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 127.932988][ T174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.947480][ T174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.968350][ T174] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 127.981510][ T174] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.003941][ T174] usb 1-1: config 0 descriptor?? [ 128.017492][ T7079] loop3: detected capacity change from 0 to 32768 [ 128.045738][ T5772] udevd[5772]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 128.059826][ T7079] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.462 (7079) [ 128.108552][ T7079] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 128.136898][ T7079] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 128.157178][ T7079] BTRFS info (device loop3): setting nodatacow, compression disabled [ 128.174605][ T7079] BTRFS info (device loop3): enabling auto defrag [ 128.188151][ T7079] BTRFS info (device loop3): max_inline at 0 [ 128.201010][ T7079] BTRFS info (device loop3): using free space tree [ 128.286526][ T7079] BTRFS info (device loop3): auto enabling async discard [ 128.455474][ T174] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 128.480951][ T174] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 128.495857][ T174] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0003/input/input8 [ 128.541731][ T174] cm6533_jd 0003:0D8C:0022.0003: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 128.769952][ T174] usb 1-1: USB disconnect, device number 7 [ 129.009945][ T5780] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 129.108619][ T5772] udevd[5772]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 129.152673][ T5772] udevd[5772]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 129.187385][ T7124] netlink: 'syz.2.473': attribute type 6 has an invalid length. [ 129.766711][ T7147] loop3: detected capacity change from 0 to 1024 [ 129.787127][ T7145] ªªªªªª: renamed from vlan0 (while UP) [ 129.797192][ T5772] udevd[5772]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 130.064495][ T5772] udevd[5772]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 130.094602][ T5772] udevd[5772]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 130.152299][ T7157] loop3: detected capacity change from 0 to 164 [ 130.163679][ T5772] udevd[5772]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 130.278699][ T5772] udevd[5772]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 130.330300][ T5772] udevd[5772]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 130.391189][ T174] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 130.574687][ T7165] loop3: detected capacity change from 0 to 512 [ 130.586420][ T5772] udevd[5772]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 130.602383][ T174] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 130.605034][ T5767] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 130.621306][ T174] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.665871][ T7165] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.688834][ T7165] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.803354][ T5767] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 130.813565][ T5767] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.825266][ T5767] usb 1-1: config 0 descriptor?? [ 130.912049][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.367765][ T7180] jffs2: notice: (7180) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 131.655008][ T174] usb 2-1: ATUSB: AT86RF231 version 3 [ 131.867321][ T174] usb 2-1: Firmware version (0.0) predates our first public release. [ 131.886756][ T174] usb 2-1: Please update to version 0.2 or newer [ 131.969393][ T174] usb 2-1: USB disconnect, device number 5 [ 132.114983][ T5767] usb 1-1: Cannot set autoneg [ 132.127232][ T5767] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71 [ 132.179462][ T5767] usb 1-1: USB disconnect, device number 8 [ 132.232132][ C1] net_ratelimit: 47 callbacks suppressed [ 132.341516][ T5783] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 132.535968][ T5783] usb 3-1: Using ep0 maxpacket: 8 [ 132.552032][ T5783] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 132.561117][ T5783] usb 3-1: config 0 has no interface number 0 [ 132.567260][ T5783] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 132.582921][ T5783] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 132.592268][ T5783] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.605391][ T5783] usb 3-1: config 0 descriptor?? [ 132.630518][ T5783] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 132.913801][ T5783] usb 3-1: USB disconnect, device number 4 [ 132.948910][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.960838][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.690388][ T27] IPVS: starting estimator thread 0... [ 133.791041][ T7248] IPVS: using max 18 ests per chain, 43200 per kthread [ 134.154906][ T174] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 134.178704][ T174] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 134.729429][ T7277] loop3: detected capacity change from 0 to 1764 [ 134.756403][ T5772] udevd[5772]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 134.767721][ T7277] isofs_fill_super: get root inode failed [ 134.805134][ T5772] udevd[5772]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 134.829677][ T5772] udevd[5772]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 135.125515][ T7287] bond0: entered promiscuous mode [ 135.134028][ T7287] bond_slave_0: entered promiscuous mode [ 135.139913][ T7287] bond_slave_1: entered promiscuous mode [ 135.141138][ T7286] device-mapper: dirty region log: unrecognised sync argument to dirty region log: n [ 135.173835][ T7286] device-mapper: table: 248:1: mirror: Error creating mirror dirty log (-EINVAL) [ 135.183373][ T7286] device-mapper: ioctl: error adding target to table [ 135.507578][ T7303] netlink: 8 bytes leftover after parsing attributes in process `syz.3.546'. [ 135.686195][ T7314] netlink: 36 bytes leftover after parsing attributes in process `syz.0.548'. [ 136.269030][ T7347] tipc: Started in network mode [ 136.275166][ T7347] tipc: Node identity ac1414aa, cluster identity 4711 [ 136.286480][ T7347] tipc: Enabled bearer , priority 10 [ 137.260985][ C0] net_ratelimit: 41 callbacks suppressed [ 137.404853][ T174] tipc: Node number set to 2886997162 [ 137.714390][ T7405] netlink: 'syz.0.581': attribute type 12 has an invalid length. [ 138.098795][ T7414] loop3: detected capacity change from 0 to 1024 [ 138.112389][ T5772] udevd[5772]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 138.154913][ T7414] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 138.167556][ T7414] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.270898][ T7414] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.586: bg 0: block 112: padding at end of block bitmap is not set [ 138.295199][ T7414] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 52 with error 28 [ 138.310632][ T7414] EXT4-fs (loop3): This should not happen!! Data will be lost [ 138.310632][ T7414] [ 138.336905][ T7414] EXT4-fs (loop3): Total free blocks count 0 [ 138.342974][ T7414] EXT4-fs (loop3): Free/Dirty block details [ 138.349363][ T7414] EXT4-fs (loop3): free_blocks=0 [ 138.383290][ T7414] EXT4-fs (loop3): dirty_blocks=64 [ 138.430232][ T7414] EXT4-fs (loop3): Block reservation details [ 138.451104][ T7414] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 138.643086][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 138.745741][ T5772] udevd[5772]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 138.746026][ T7438] x86/PAT: syz.2.591:7438 freeing invalid memtype [mem 0xfe004000-0xfe008fff] [ 138.776301][ T5772] udevd[5772]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 138.820633][ T7438] x86/PAT: syz.2.591:7438 freeing invalid memtype [mem 0xfe009000-0xfe00efff] [ 138.838909][ T7438] x86/PAT: syz.2.591:7438 freeing invalid memtype [mem 0xfe000000-0xfe003fff] [ 138.841770][ T28] audit: type=1326 audit(1791380100.845:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7440 comm="syz.1.595" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f11fdf9e199 code=0x0 [ 139.698031][ T7460] trusted_key: syz.2.601 sent an empty control message without MSG_MORE. [ 139.845047][ T7467] loop8: detected capacity change from 0 to 8 [ 139.864329][ T7467] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 139.870616][ T7467] loop8: partition table partially beyond EOD, truncated [ 139.884051][ T7467] loop8: p1 size 2645487272 extends beyond EOD, truncated [ 139.885688][ T5772] udevd[5772]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory [ 139.916397][ T5772] udevd[5772]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory [ 139.957087][ T5772] udevd[5772]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 140.023293][ T5772] udevd[5772]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory [ 140.071028][ T5772] udevd[5772]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory [ 140.191252][ T5823] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 140.407384][ T5823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.420881][ T5823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.450949][ T5823] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 140.470938][ T5823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.491569][ T5823] usb 2-1: config 0 descriptor?? [ 140.576909][ T7483] device-mapper: ioctl: device name cannot contain '/' [ 140.587777][ T7483] device-mapper: ioctl: Invalid ioctl structure: name >ª W•tÉ¥ìÿŸ¿%Uó./dev, dev 178f517437743bef [ 140.730662][ T7473] loop3: detected capacity change from 0 to 32768 [ 140.747727][ T5772] udevd[5772]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 140.787880][ T7473] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 140.847331][ T7473] XFS (loop3): Ending clean mount [ 140.931283][ T5823] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 140.942957][ T5823] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 140.949977][ T5823] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 140.957806][ T5823] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 140.964898][ T5823] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 140.973043][ T5823] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 140.980058][ T5823] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 141.002078][ T5823] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 141.023956][ T5780] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 141.108072][ T5768] udevd[5768]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 141.132899][ T5823] cp2112 0003:10C4:EA90.0005: error requesting version [ 141.163653][ T5823] cp2112: probe of 0003:10C4:EA90.0005 failed with error -71 [ 141.186092][ T5768] udevd[5768]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 141.230065][ T5823] usb 2-1: USB disconnect, device number 6 [ 141.568821][ T5783] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 141.616360][ T5783] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 142.172125][ T1136] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 142.306785][ T7536] netlink: 32 bytes leftover after parsing attributes in process `syz.3.628'. [ 142.540823][ C0] net_ratelimit: 38 callbacks suppressed [ 142.548231][ T7542] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 142.595367][ T7542] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 144.825538][ T7614] netlink: 'syz.3.664': attribute type 4 has an invalid length. [ 144.906200][ T7614] netlink: 'syz.3.664': attribute type 4 has an invalid length. [ 145.020996][ T5786] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 145.022532][ T5787] Bluetooth: hci4: command 0x1003 tx timeout [ 145.282506][ T7629] ip6gre1: entered promiscuous mode [ 145.288509][ T7629] ip6gre1: entered allmulticast mode [ 145.300434][ T7627] pim6reg1: entered promiscuous mode [ 145.308705][ T7629] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 145.310874][ T7627] pim6reg1: entered allmulticast mode [ 145.338878][ T7633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.672'. [ 145.396145][ T7633] bond1: option ad_actor_sys_prio: invalid value (0) [ 145.407802][ T7633] bond1: option ad_actor_sys_prio: allowed values 1 - 65535 [ 145.418423][ T7633] bond1 (unregistering): Released all slaves [ 145.583626][ T11] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 145.623182][ T5823] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 145.633954][ T11] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 145.744797][ T5823] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 146.626537][ T5823] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 146.891033][ T5783] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 146.936908][ T7691] bond1: entered allmulticast mode [ 146.966937][ T7695] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 146.988312][ T7695] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 147.026448][ T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 147.097443][ T5783] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.108955][ T5783] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 147.127041][ T5783] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 147.148090][ T5783] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 147.158834][ T5783] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 147.180880][ T5783] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 147.219486][ T5783] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.247156][ T7679] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 147.265889][ T5783] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 147.286994][ T5783] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 147.318195][ T5783] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 147.327645][ T5783] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 147.357179][ T5783] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 147.368556][ T5783] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 147.387032][ T5783] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 147.681099][ T27] usb 2-1: USB disconnect, device number 7 [ 147.724403][ T27] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 147.758714][ T27] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 147.783004][ T27] keyspan 2-1:1.0: device disconnected [ 147.821009][ C1] net_ratelimit: 47 callbacks suppressed [ 149.296589][ T7748] gretap0: entered promiscuous mode [ 149.483951][ T7760] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 149.739468][ T7766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.721'. [ 149.901259][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 151.148921][ T7805] loop3: detected capacity change from 0 to 16 [ 151.169334][ T5772] udevd[5772]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 151.187961][ T7805] erofs: (device loop3): mounted with root inode @ nid 36. [ 151.232369][ T7805] erofs: (device loop3): z_erofs_readahead: readahead error at folio 87 @ nid 36 [ 151.243613][ T7805] erofs: (device loop3): z_erofs_readahead: readahead error at folio 86 @ nid 36 [ 151.262597][ T7805] syz.3.740: attempt to access beyond end of device [ 151.262597][ T7805] loop3: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 151.302437][ T7807] bond1: entered allmulticast mode [ 151.355482][ T5772] udevd[5772]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 151.375987][ T5783] ------------[ cut here ]------------ [ 151.382030][ T5783] sysfs group 'byte_queue_limits' not found for kobject 'tx-0' [ 151.404745][ T5772] udevd[5772]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 151.422257][ T5787] Bluetooth: hci4: command 0x1003 tx timeout [ 151.429595][ T5786] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 151.466703][ T5783] WARNING: CPU: 0 PID: 5783 at fs/sysfs/group.c:284 sysfs_remove_group+0x17b/0x290 [ 151.476461][ T5783] Modules linked in: [ 151.480387][ T5783] CPU: 0 PID: 5783 Comm: kworker/0:3 Not tainted syzkaller #0 [ 151.488251][ T5783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 151.499167][ T5783] Workqueue: events delete_netdev [ 151.505355][ T5783] RIP: 0010:sysfs_remove_group+0x17b/0x290 [ 151.511562][ T5783] Code: 8b 1b 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 f7 19 c9 ff 49 8b 17 48 c7 c7 00 c1 da 8a 48 89 de e8 d5 30 3a ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 1f 72 70 ff [ 151.531398][ T5783] RSP: 0018:ffffc900046af840 EFLAGS: 00010246 [ 151.537501][ T5783] RAX: 855879221eb71c00 RBX: ffffffff8bc5b940 RCX: ffff88807a450000 [ 151.546800][ T5783] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 151.554859][ T5783] RBP: 000000000000005e R08: ffffc900046af447 R09: 1ffff920008d5e88 [ 151.562930][ T5783] R10: dffffc0000000000 R11: fffff520008d5e89 R12: 1ffffffff178b624 [ 151.571001][ T5783] R13: dffffc0000000000 R14: ffff8880778a2aa8 R15: ffff88802f9adc20 [ 151.579002][ T5783] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 151.588109][ T5783] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 151.595492][ T5783] CR2: 00005580b014f940 CR3: 0000000030ae3000 CR4: 00000000003506f0 [ 151.603709][ T5783] Call Trace: [ 151.607011][ T5783] [ 151.609963][ T5783] ? netdev_queue_update_kobjects+0x3a6/0x480 [ 151.616130][ T5783] netdev_queue_update_kobjects+0x3e1/0x480 [ 151.622140][ T5783] netdev_unregister_kobject+0x108/0x250 [ 151.627802][ T5783] unregister_netdevice_many_notify+0x1449/0x1910 [ 151.634312][ T5783] ? __rwlock_init+0x150/0x150 [ 151.639116][ T5783] ? unregister_netdevice_many+0x20/0x20 [ 151.644824][ T5783] ? do_raw_spin_unlock+0x121/0x230 [ 151.650055][ T5783] ? __mutex_lock+0x923/0xc80 [ 151.654809][ T5783] ? __mutex_lock+0x4d2/0xc80 [ 151.659510][ T5783] unregister_netdevice_queue+0x2e9/0x330 [ 151.665433][ T5783] ? list_netdevice+0x730/0x730 [ 151.670327][ T5783] ? read_lock_is_recursive+0x20/0x20 [ 151.675771][ T5783] lowpan_unregister_netdev+0x1c/0x30 [ 151.681243][ T5783] unregister_dev+0x70/0x1a0 [ 151.685870][ T5783] ? process_scheduled_works+0x975/0x1600 [ 151.691655][ T5783] process_scheduled_works+0xa60/0x1600 [ 151.697730][ T5783] ? worker_attach_to_pool+0x370/0x370 [ 151.703370][ T5783] ? assign_work+0x3cc/0x5d0 [ 151.707992][ T5783] worker_thread+0xa5e/0xfe0 [ 151.712695][ T5783] ? _raw_spin_unlock+0x40/0x40 [ 151.717564][ T5783] ? __kthread_parkme+0x71/0x1c0 [ 151.722531][ T5783] kthread+0x2fa/0x390 [ 151.726597][ T5783] ? pr_cont_work+0x550/0x550 [ 151.731362][ T5783] ? kthread_blkcg+0xd0/0xd0 [ 151.735967][ T5783] ret_from_fork+0x48/0x80 [ 151.740399][ T5783] ? kthread_blkcg+0xd0/0xd0 [ 151.745225][ T5783] ret_from_fork_asm+0x11/0x20 [ 151.750027][ T5783] [ 151.753177][ T5783] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 151.760463][ T5783] CPU: 0 PID: 5783 Comm: kworker/0:3 Not tainted syzkaller #0 [ 151.767910][ T5783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 151.777966][ T5783] Workqueue: events delete_netdev [ 151.783025][ T5783] Call Trace: [ 151.786311][ T5783] [ 151.789239][ T5783] dump_stack_lvl+0x18c/0x250 [ 151.793928][ T5783] ? show_regs_print_info+0x20/0x20 [ 151.799133][ T5783] ? load_image+0x420/0x420 [ 151.803649][ T5783] panic+0x2ca/0x720 [ 151.807549][ T5783] ? bpf_jit_dump+0xd0/0xd0 [ 151.810958][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888030840fd8 is addr:2001:: for cmd:0 at entry:ffff88802d0a5a80 [ 151.810995][ C1] sctp: sctp_addr_wq_timeout_handler: this is on DAD, trying 500 sec later [ 151.833780][ T5783] ? ret_from_fork_asm+0x11/0x20 [ 151.838722][ T5783] __warn+0x2e0/0x470 [ 151.842697][ T5783] ? sysfs_remove_group+0x17b/0x290 [ 151.847889][ T5783] ? sysfs_remove_group+0x17b/0x290 [ 151.853085][ T5783] report_bug+0x2be/0x4f0 [ 151.857415][ T5783] ? sysfs_remove_group+0x17b/0x290 [ 151.862611][ T5783] ? sysfs_remove_group+0x17b/0x290 [ 151.867802][ T5783] ? sysfs_remove_group+0x17d/0x290 [ 151.872998][ T5783] handle_bug+0xcf/0x120 [ 151.877235][ T5783] exc_invalid_op+0x1a/0x50 [ 151.881910][ T5783] asm_exc_invalid_op+0x1a/0x20 [ 151.886763][ T5783] RIP: 0010:sysfs_remove_group+0x17b/0x290 [ 151.892666][ T5783] Code: 8b 1b 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 f7 19 c9 ff 49 8b 17 48 c7 c7 00 c1 da 8a 48 89 de e8 d5 30 3a ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 1f 72 70 ff [ 151.912305][ T5783] RSP: 0018:ffffc900046af840 EFLAGS: 00010246 [ 151.918372][ T5783] RAX: 855879221eb71c00 RBX: ffffffff8bc5b940 RCX: ffff88807a450000 [ 151.926336][ T5783] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 151.934301][ T5783] RBP: 000000000000005e R08: ffffc900046af447 R09: 1ffff920008d5e88 [ 151.942267][ T5783] R10: dffffc0000000000 R11: fffff520008d5e89 R12: 1ffffffff178b624 [ 151.950254][ T5783] R13: dffffc0000000000 R14: ffff8880778a2aa8 R15: ffff88802f9adc20 [ 151.958253][ T5783] ? netdev_queue_update_kobjects+0x3a6/0x480 [ 151.964333][ T5783] netdev_queue_update_kobjects+0x3e1/0x480 [ 151.970232][ T5783] netdev_unregister_kobject+0x108/0x250 [ 151.975869][ T5783] unregister_netdevice_many_notify+0x1449/0x1910 [ 151.982293][ T5783] ? __rwlock_init+0x150/0x150 [ 151.987053][ T5783] ? unregister_netdevice_many+0x20/0x20 [ 151.992686][ T5783] ? do_raw_spin_unlock+0x121/0x230 [ 151.997883][ T5783] ? __mutex_lock+0x923/0xc80 [ 152.002557][ T5783] ? __mutex_lock+0x4d2/0xc80 [ 152.007236][ T5783] unregister_netdevice_queue+0x2e9/0x330 [ 152.012963][ T5783] ? list_netdevice+0x730/0x730 [ 152.017812][ T5783] ? read_lock_is_recursive+0x20/0x20 [ 152.023181][ T5783] lowpan_unregister_netdev+0x1c/0x30 [ 152.028549][ T5783] unregister_dev+0x70/0x1a0 [ 152.033149][ T5783] ? process_scheduled_works+0x975/0x1600 [ 152.038867][ T5783] process_scheduled_works+0xa60/0x1600 [ 152.044432][ T5783] ? worker_attach_to_pool+0x370/0x370 [ 152.049890][ T5783] ? assign_work+0x3cc/0x5d0 [ 152.054482][ T5783] worker_thread+0xa5e/0xfe0 [ 152.059080][ T5783] ? _raw_spin_unlock+0x40/0x40 [ 152.063927][ T5783] ? __kthread_parkme+0x71/0x1c0 [ 152.068867][ T5783] kthread+0x2fa/0x390 [ 152.072926][ T5783] ? pr_cont_work+0x550/0x550 [ 152.077597][ T5783] ? kthread_blkcg+0xd0/0xd0 [ 152.082177][ T5783] ret_from_fork+0x48/0x80 [ 152.086587][ T5783] ? kthread_blkcg+0xd0/0xd0 [ 152.091170][ T5783] ret_from_fork_asm+0x11/0x20 [ 152.095940][ T5783] [ 152.099212][ T5783] Kernel Offset: disabled [ 152.103607][ T5783] Rebooting in 86400 seconds..