last executing test programs: 14.073700956s ago: executing program 3 (id=611): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000001300)=ANY=[], 0xd) writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r1, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) 11.141168787s ago: executing program 3 (id=617): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f00000002c0)={0x21, 0x0, 0x0, 0xe0e0e0e0}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x702, 0x36, 0x0, &(0x7f0000000380)="e460334470b8d480eb20c15286dda4fba8285e2e31ca72823a29dad4781041a996430bbe5ecac76a351df831cdb98842af6450b2abf5", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.717585852s ago: executing program 2 (id=622): bind$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) ptrace(0x10, 0x0) r0 = socket(0x1e, 0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = dup3(r2, r0, 0x0) recvmmsg(r3, &(0x7f0000008a80)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/250, 0xfa}], 0x1}, 0xffff}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000780)=""/76, 0x4c}], 0x1}, 0x2}, {{0x0, 0x0, 0x0}, 0x6}], 0x3, 0x40000001, 0x0) 8.59636693s ago: executing program 3 (id=625): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) close(0x3) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) epoll_create1(0x80000) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES16=r0], 0x3c}, 0x1, 0x8000a0ffffffff, 0x0, 0x8086}, 0x0) 8.368128215s ago: executing program 2 (id=628): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="13", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x2, 0x20}, 0xc) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=' ', 0x1}], 0x1}}], 0x1, 0x4040000) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffff7, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 7.313733681s ago: executing program 3 (id=629): prlimit64(0x0, 0xd, &(0x7f0000000140)={0x4, 0x88}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) 6.993514919s ago: executing program 2 (id=633): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000002c0), 0x0) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$6lowpan_control(r4, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 1', 0x1b) 5.805919198s ago: executing program 1 (id=636): listen(0xffffffffffffffff, 0x10040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000100)=0x9) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r3) 5.100644865s ago: executing program 2 (id=637): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) semctl$SEM_STAT_ANY(0x0, 0x3, 0x14, 0x0) 5.091805745s ago: executing program 4 (id=638): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r3) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, r5, 0x48212b8952c3aff5, 0x70bd24, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) 2.86686778s ago: executing program 1 (id=639): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x0, 0x3e8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newtclass={0x44, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x1}, {0x0, 0x1}}, [@tclass_kind_options=@c_hfsc={{0x9}, {0x14, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x0, 0x3e8}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=@newtfilter={0x38, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', 0x1}) r5 = socket$packet(0x11, 0x3, 0x300) bind$packet(r5, &(0x7f0000000500)={0x11, 0x0, r3}, 0x14) sendto(r5, &(0x7f0000000600)="001122", 0x3, 0x0, 0x0, 0x0) 2.86485565s ago: executing program 2 (id=640): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x81, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0xffff, 0xd}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x5}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x6004c090) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 2.86413057s ago: executing program 4 (id=641): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2a}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='(n', @ANYBLOB="020025bd7000fb", @ANYBLOB="0c0099"], 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4000, 0x2, 0x4, 0xefffffdfffffffff, 0x40000000000000, 0x7fffffff8, 0x2000000, 0x200000001ffff, 0x1c, 0x800, 0x5, 0x1], 0x0, 0x1981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.774295582s ago: executing program 4 (id=643): socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}], 0x1) r1 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000001f00)=[{{&(0x7f0000000540)=@rc={0x1f, @fixed}, 0x80, 0x0}}], 0x1, 0x2, 0x0) 2.704601604s ago: executing program 0 (id=644): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) gettid() mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) 2.44997133s ago: executing program 1 (id=645): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x800) fanotify_init(0x4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) signalfd4(0xffffffffffffffff, &(0x7f00000008c0)={[0xdcfe]}, 0x8, 0x80800) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc00c64b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4}) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0xd0, 0x7d, 0x0, 0x8000, 0x4}, 0x0, &(0x7f0000000100)={0x3ff, 0x6, 0x8000, 0x100009, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2.210069436s ago: executing program 0 (id=646): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x3, 0x5, 0x9c, '\x00', 0x1bd}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000005c0)={0x2, 0x0, @ioapic={0x60000, 0x1, 0x2, 0xfffffffe, 0x0, [{0x2, 0x4, 0x3}, {0x9, 0x8, 0x9, '\x00', 0xf}, {0xfd, 0x7f, 0xd3, '\x00', 0xe9}, {0xfd, 0x5, 0xf5, '\x00', 0x13}, {0x7, 0x9, 0xf5, '\x00', 0xb4}, {0xf, 0x4, 0x54, '\x00', 0x2}, {0x75, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x5, 0xc, '\x00', 0x59}, {0x7f, 0x5, 0x4a, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0x9c}, {0xfb, 0x1, 0xff, '\x00', 0x1}, {0xd, 0x5, 0x26}, {0xcf, 0xe, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x1, 0x2, 0x6, '\x00', 0xc}, {0x9, 0x6, 0x2, '\x00', 0x9}, {0x4, 0x11, 0x2, '\x00', 0xe9}, {0x7, 0x2, 0x1, '\x00', 0xc2}, {0x2, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xe, 0x87, '\x00', 0x7d}, {0x10, 0x9, 0x92, '\x00', 0x10}, {0xb8, 0x3, 0xf3, '\x00', 0x4}, {0x7, 0x22, 0xa}]}}) 2.07779965s ago: executing program 1 (id=647): set_mempolicy(0x2, 0x0, 0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x4, 0x6, 0xff, 0x42}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r1}, 0x38) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000240)=0x32) r4 = socket(0xa, 0x3, 0x87) sendmsg(r4, &(0x7f0000000000)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x400409, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7, 0x4}, 0x80, 0x0}, 0x8000) r5 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r5, &(0x7f0000000200)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000300)=[{0x10, 0x110, 0x1}], 0x10}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018007000100637400001c0002800500030081000000080002400000000908000140000000090900"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) dup3(r2, r3, 0x80000) 2.07738539s ago: executing program 4 (id=648): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x11) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r4 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c89770000fdfd", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) 2.0294583s ago: executing program 0 (id=649): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0xfe12) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.886115204s ago: executing program 1 (id=650): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)=0x2001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_clone(0x0, 0x0, 0x29, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace(0x8, r4) wait4(0x0, 0x0, 0x0, 0x0) 1.271504949s ago: executing program 3 (id=651): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe4, 0x2, 0x0, 0x2}) fcntl$getown(0xffffffffffffffff, 0x9) 1.006024325s ago: executing program 0 (id=652): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 987.105426ms ago: executing program 4 (id=653): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40011}, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_delroute={0x1c, 0x20, 0x901, 0x0, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x2000000}}, 0x1c}}, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r2, &(0x7f0000000340)={0x1a, 0x322, 0x0, 0x0, 0x4, 0x90, @random="48bd00"}, 0x10) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x61) sendmmsg$inet(r4, &(0x7f0000005240), 0x4000095, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x440, 0x0, @multicast1=0xe000cc02}}) 255.077534ms ago: executing program 3 (id=654): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x0, 0x1, 0x7ff, 0x1}, {0x6, 0x0, 0x8, 0x6, 0x8, 0x401}, 0x40, 0xd, 0x8ef}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 157.467346ms ago: executing program 2 (id=655): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0xffe0, 0xb}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x77, 0x3, 0x4bb8, 0x7, 0x452a, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x54815}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 53.780169ms ago: executing program 0 (id=656): setsockopt(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x2000000, &(0x7f0000000100)=ANY=[@ANYRES16=0x0, @ANYBLOB="1de1e92f47a0bd958576c0a3b862950d3645a04cc2802f0d74a23d064ec4112d526129d474ed0124a29a46de8d89c7a20a4777f8", @ANYRES32], 0x1, 0x1506, &(0x7f0000002ac0)="$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") r0 = syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) syz_open_dev$video4linux(&(0x7f0000000040), 0x2cf1389d, 0x0) pselect6(0x40, &(0x7f0000000300)={0x0, 0x4000000000000000, 0x10000, 0x1, 0x0, 0x4}, &(0x7f0000000240)={0x18, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000000000000}, 0x0, 0x0, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000003140)='./bus\x00', 0x1248812, &(0x7f0000000400)={[{@grpquota}, {@delalloc}, {@resuid}, {@errors_remount}, {@dioread_nolock}, {@nojournal_checksum}, {@lazytime}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000002000)={0x80000000, 0x0, r2}) ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f0000002040)) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000002080)) 53.454359ms ago: executing program 1 (id=657): r0 = userfaultfd(0x80801) close(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r2, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000205000/0x3000)=nil, 0x3000}}) 40.708089ms ago: executing program 0 (id=658): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xc001) prlimit64(0x0, 0xd, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2800005d) io_uring_setup(0x899, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000800) r0 = socket(0x2a, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x1, &(0x7f0000000100)={0x11, 0x5, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 0s ago: executing program 4 (id=659): socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x108, 0xc, 0x0, 0x1}, 0x50) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000004280)=ANY=[@ANYBLOB="0500000001000000a003000002"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r2, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x0) kernel console output (not intermixed with test programs): ctive interface with an up link [ 61.926067][ T4189] team0: Port device team_slave_0 added [ 61.932794][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.939849][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.966932][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.979113][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.986366][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.012785][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.026199][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.036823][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.048020][ T4189] team0: Port device team_slave_1 added [ 62.054396][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.061978][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.088070][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.099483][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.106858][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.133060][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.181522][ T4188] team0: Port device team_slave_0 added [ 62.204860][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.212193][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.238593][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.261140][ T4188] team0: Port device team_slave_1 added [ 62.268012][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.275108][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.301624][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.315992][ T4191] team0: Port device team_slave_0 added [ 62.329140][ T4191] team0: Port device team_slave_1 added [ 62.351919][ T4187] device hsr_slave_0 entered promiscuous mode [ 62.358668][ T4187] device hsr_slave_1 entered promiscuous mode [ 62.380028][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.387116][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.413143][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.452017][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.459089][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.485321][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.496905][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.504383][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.530734][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.549164][ T4190] device hsr_slave_0 entered promiscuous mode [ 62.556586][ T4190] device hsr_slave_1 entered promiscuous mode [ 62.563643][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.571564][ T4190] Cannot create hsr debugfs directory [ 62.582996][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.589974][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.616098][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.648049][ T4189] device hsr_slave_0 entered promiscuous mode [ 62.654916][ T4189] device hsr_slave_1 entered promiscuous mode [ 62.662822][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.670568][ T4189] Cannot create hsr debugfs directory [ 62.719916][ T4188] device hsr_slave_0 entered promiscuous mode [ 62.727479][ T4188] device hsr_slave_1 entered promiscuous mode [ 62.734508][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.742547][ T4188] Cannot create hsr debugfs directory [ 62.780664][ T4191] device hsr_slave_0 entered promiscuous mode [ 62.787435][ T4191] device hsr_slave_1 entered promiscuous mode [ 62.794769][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.802708][ T4191] Cannot create hsr debugfs directory [ 62.841789][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 62.841789][ T1111] Bluetooth: hci0: command 0x0409 tx timeout [ 62.842282][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 62.848085][ T1111] Bluetooth: hci3: command 0x0409 tx timeout [ 62.857694][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 63.124186][ T4187] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.139638][ T4187] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.158747][ T4187] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.186530][ T4187] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.197766][ T4190] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.221068][ T4190] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.235914][ T4190] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.244813][ T4190] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.296525][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.309057][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.335921][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.346460][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.379949][ T4189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.391118][ T4189] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.425053][ T4189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.453864][ T4189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.509674][ T4191] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.520131][ T4191] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.533823][ T4191] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.549421][ T4191] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.563028][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.598466][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.612789][ T1316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.623508][ T1316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.648763][ T1316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.658163][ T1316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.668667][ T1316] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.675918][ T1316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.686037][ T1316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.696511][ T1316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.705334][ T1316] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.712884][ T1316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.722752][ T1316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.737924][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.765287][ T1316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.775451][ T1316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.785762][ T1316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.797635][ T1316] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.807016][ T1316] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.821308][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.831907][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.866611][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.879816][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.888056][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.897343][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.906655][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.915861][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.925080][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.934206][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.941328][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.949898][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.964556][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.975805][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.991963][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.001505][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.009914][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.017005][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.031227][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.048995][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.059138][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.067906][ T1316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.082257][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.094846][ T1316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.128194][ T1316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.138822][ T1316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.152213][ T1316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.168405][ T1316] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.177549][ T1316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.187243][ T1316] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.198334][ T1316] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.215686][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.226959][ T1316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.242963][ T1316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.258241][ T1316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.268363][ T1316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.285747][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.296312][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.304687][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.339732][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.348983][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.357565][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.364658][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.376917][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.385889][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.394875][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.404192][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.412913][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.419993][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.428010][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.437227][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.446284][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.453407][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.462978][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.471168][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.478797][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.488338][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.498691][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.507192][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.514289][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.524664][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.544596][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.559538][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.577403][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.586254][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.604121][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.617206][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.627375][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.636409][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.645891][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.655601][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.667986][ T1316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.683071][ T1316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.697949][ T1316] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.705115][ T1316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.720922][ T1316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.729655][ T1316] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.763084][ T1316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.782071][ T1316] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.791097][ T1316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.808765][ T1316] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.833832][ T1316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.850565][ T1316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.858925][ T1316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.868366][ T1316] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.877513][ T1316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.886419][ T1316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.894886][ T1316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.903902][ T1316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.912964][ T1316] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.920445][ T1316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.929241][ T1108] Bluetooth: hci3: command 0x041b tx timeout [ 64.934170][ T4188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.945866][ T1108] Bluetooth: hci1: command 0x041b tx timeout [ 64.952103][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.952491][ T1108] Bluetooth: hci2: command 0x041b tx timeout [ 64.969321][ T1108] Bluetooth: hci0: command 0x041b tx timeout [ 64.980234][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.980654][ T1108] Bluetooth: hci4: command 0x041b tx timeout [ 65.001029][ T1316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.009760][ T1316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.032493][ T1316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.049237][ T1316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.058339][ T1316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.074044][ T1316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.089517][ T1316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.120154][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.139422][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.150929][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.159729][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.171640][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.180712][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.189250][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.198611][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.206563][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.220155][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.231389][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.271230][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.279453][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.302053][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.343434][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.362243][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.398046][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.428198][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.459937][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.475274][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.495578][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.507510][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.516317][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.524454][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.536578][ T4190] device veth0_vlan entered promiscuous mode [ 65.545335][ T4187] device veth0_vlan entered promiscuous mode [ 65.554870][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.564706][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.572731][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.581224][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.589189][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.599967][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.611955][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.626488][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.644517][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.652819][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.665622][ T4190] device veth1_vlan entered promiscuous mode [ 65.686766][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.699304][ T4187] device veth1_vlan entered promiscuous mode [ 65.715168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.725403][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.734918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.743335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.752737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.777633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.787364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.796355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.838495][ T4187] device veth0_macvtap entered promiscuous mode [ 65.849338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.859868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.868830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.878640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.888458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.904649][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.914488][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.935936][ T4187] device veth1_macvtap entered promiscuous mode [ 65.949413][ T4188] device veth0_vlan entered promiscuous mode [ 65.957917][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.967640][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.976610][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.984521][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.993306][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.002090][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.011100][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.019556][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.027500][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.039507][ T4191] device veth0_vlan entered promiscuous mode [ 66.055081][ T4191] device veth1_vlan entered promiscuous mode [ 66.067852][ T4188] device veth1_vlan entered promiscuous mode [ 66.081527][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.090083][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.098266][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.107204][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.117499][ T4190] device veth0_macvtap entered promiscuous mode [ 66.142299][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.151652][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.159971][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.168035][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.184899][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.194003][ T4190] device veth1_macvtap entered promiscuous mode [ 66.218508][ T4189] device veth0_vlan entered promiscuous mode [ 66.231808][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.241703][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.249699][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.259905][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.272711][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.290708][ T4191] device veth0_macvtap entered promiscuous mode [ 66.308346][ T4188] device veth0_macvtap entered promiscuous mode [ 66.316169][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.327669][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.340846][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.348844][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.357897][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.368644][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.378100][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.386952][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.396660][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.405443][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.414698][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.428050][ T4189] device veth1_vlan entered promiscuous mode [ 66.437908][ T4191] device veth1_macvtap entered promiscuous mode [ 66.459890][ T4188] device veth1_macvtap entered promiscuous mode [ 66.468499][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.476963][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.497395][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.507064][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.528929][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.538383][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.558433][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.570860][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.581265][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.592196][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.603865][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.614388][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.625303][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.637816][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.666070][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.675821][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.685554][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.694666][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.706093][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.717149][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.727195][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.737793][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.749059][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.764214][ T4189] device veth0_macvtap entered promiscuous mode [ 66.787742][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.796449][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.806686][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.816396][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.825179][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.836220][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.845193][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.854062][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.864119][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.875198][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.886594][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.896787][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.907449][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.917413][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.928214][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.941235][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.949677][ T4189] device veth1_macvtap entered promiscuous mode [ 66.959655][ T4191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.971719][ T4191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.980816][ T4191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.989519][ T4191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.004529][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.011141][ T1108] Bluetooth: hci4: command 0x040f tx timeout [ 67.017158][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.018689][ T1108] Bluetooth: hci0: command 0x040f tx timeout [ 67.027319][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.032634][ T1108] Bluetooth: hci2: command 0x040f tx timeout [ 67.046784][ T1108] Bluetooth: hci1: command 0x040f tx timeout [ 67.049471][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.063715][ T1108] Bluetooth: hci3: command 0x040f tx timeout [ 67.069274][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.080033][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.091649][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.103856][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.114522][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.125493][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.166319][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.176464][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.193680][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.202565][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.213381][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.223003][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.273583][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.285562][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.295776][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.306699][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.317078][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.329376][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.339317][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.349983][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.361452][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.388438][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.403942][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.418591][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.431847][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.442149][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.453037][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.463216][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.473695][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.486091][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.497381][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.508402][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.540981][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.549719][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.573078][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.582552][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.604989][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.618739][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.628191][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.637498][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.648459][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.690704][ T4256] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.698579][ T4256] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.719042][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.756425][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.767121][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.775646][ T1316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.776342][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.791211][ T1316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.800054][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.831668][ T4256] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.839539][ T4256] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.866502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.930638][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.938727][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.987201][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.003703][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.006035][ T1316] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.023239][ T1316] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.036064][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.046200][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.057771][ T1316] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.219636][ T4256] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.241051][ T1316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.248961][ T1316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.728020][ T4275] process 'syz.3.4' launched './file0' with NULL argv: empty string added [ 69.176700][ T1108] Bluetooth: hci3: command 0x0419 tx timeout [ 69.200671][ T1108] Bluetooth: hci1: command 0x0419 tx timeout [ 69.210908][ T1108] Bluetooth: hci2: command 0x0419 tx timeout [ 69.225378][ T1108] Bluetooth: hci0: command 0x0419 tx timeout [ 69.234286][ T1108] Bluetooth: hci4: command 0x0419 tx timeout [ 69.298103][ T4256] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.371324][ T1316] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.371808][ T4284] loop9: detected capacity change from 0 to 7 [ 69.390100][ T1316] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.444199][ T4284] Dev loop9: unable to read RDB block 7 [ 69.454661][ T4284] loop9: unable to read partition table [ 69.477612][ T4284] loop9: partition table beyond EOD, truncated [ 69.512691][ T4288] overlayfs: failed to resolve './bus': -2 [ 69.538220][ T4284] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 69.737433][ T1345] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 70.006216][ T4296] netlink: 'syz.2.8': attribute type 10 has an invalid length. [ 70.291746][ T4296] device geneve0 entered promiscuous mode [ 70.674857][ T4304] xt_ipcomp: unknown flags 1D [ 70.746971][ T4296] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 70.799529][ T4301] device pim6reg1 entered promiscuous mode [ 71.187169][ T4296] syz.2.8 (4296) used greatest stack depth: 21024 bytes left [ 71.266467][ T4313] batman_adv: batadv0: Adding interface: dummy0 [ 71.416476][ T4313] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.737089][ T4313] batman_adv: batadv0: Interface activated: dummy0 [ 71.745716][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.753102][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.770556][ T1345] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.830520][ T1345] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.892858][ T4319] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 71.907510][ T4315] batadv0: mtu less than device minimum [ 71.918734][ T1345] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 71.952263][ T4315] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 71.965418][ T4315] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 71.978215][ T4315] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 71.991595][ T4315] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 72.004298][ T4315] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 72.017118][ T4315] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 72.029844][ T4315] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 72.042817][ T4315] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 72.055690][ T4315] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 72.096302][ T1345] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 72.134586][ T4313] device geneve2 entered promiscuous mode [ 72.149244][ T4313] batman_adv: batadv0: Adding interface: geneve2 [ 72.157920][ T4313] batman_adv: batadv0: Interface activated: geneve2 [ 72.320545][ T1345] usb 2-1: string descriptor 0 read error: -71 [ 72.327035][ T1345] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 72.329118][ T4230] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 72.387502][ T1345] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.589804][ T4321] device syzkaller0 entered promiscuous mode [ 72.610908][ T4230] usb 3-1: Using ep0 maxpacket: 16 [ 72.781088][ T4230] usb 3-1: config 0 has no interfaces? [ 73.050894][ T4230] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 73.070420][ T4230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.130496][ T4230] usb 3-1: Product: syz [ 73.140819][ T1345] usb 2-1: can't set config #1, error -71 [ 73.162168][ T1345] usb 2-1: USB disconnect, device number 2 [ 73.165405][ T4230] usb 3-1: Manufacturer: syz [ 73.194295][ T4230] usb 3-1: SerialNumber: syz [ 73.218186][ T4230] usb 3-1: config 0 descriptor?? [ 73.242695][ T4339] loop0: detected capacity change from 0 to 8 [ 73.302161][ T4339] ======================================================= [ 73.302161][ T4339] WARNING: The mand mount option has been deprecated and [ 73.302161][ T4339] and is ignored by this kernel. Remove the mand [ 73.302161][ T4339] option from the mount to silence this warning. [ 73.302161][ T4339] ======================================================= [ 73.422467][ T4339] SQUASHFS error: lzo decompression failed, data probably corrupt [ 73.445915][ T4339] SQUASHFS error: Failed to read block 0x91: -5 [ 73.459673][ T4339] SQUASHFS error: Unable to read metadata cache entry [8f] [ 73.554467][ T4339] SQUASHFS error: Unable to read inode 0x11f [ 73.613653][ T4345] loop1: detected capacity change from 0 to 2048 [ 73.676213][ T4345] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 74.423410][ T4354] loop4: detected capacity change from 0 to 512 [ 74.447499][ T4354] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 74.475782][ T4354] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 74.528903][ T4354] EXT4-fs (loop4): 1 truncate cleaned up [ 74.575106][ T4354] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,jqfmt=vfsv0,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 74.616493][ T4361] loop1: detected capacity change from 0 to 4096 [ 74.701822][ T4361] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 74.728147][ T4361] ntfs3: loop1: Failed to load $Extend. [ 74.781851][ T4354] EXT4-fs (loop4): pa ffff8880217dd7e0: logic 296, phys. 39, len 216 [ 74.790690][ T4354] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4904: group 0, free 77, pa_free 215 [ 74.825417][ T4354] EXT4-fs (loop4): Remounting filesystem read-only [ 75.393702][ T4354] syz.4.22 (4354) used greatest stack depth: 20976 bytes left [ 76.577424][ T4231] usb 3-1: USB disconnect, device number 2 [ 76.820298][ T26] audit: type=1400 audit(1787592046.900:2): apparmor="STATUS" operation="profile_replace" info="failed to create raw_data dir and files" error=-12 profile="unconfined" pid=4373 comm="syz.1.25" [ 76.907892][ T26] audit: type=1400 audit(1787592046.940:3): apparmor="STATUS" operation="profile_load" info="valid profile in failed atomic policy load" error=-12 profile="unconfined" name="/" pid=4373 comm="syz.1.25" [ 77.987338][ T4390] sched: RT throttling activated [ 78.809545][ T4404] loop1: detected capacity change from 0 to 256 [ 79.919450][ T4400] syz.3.35 uses obsolete (PF_INET,SOCK_PACKET) [ 81.635765][ T4414] net_ratelimit: 30 callbacks suppressed [ 81.635785][ T4414] socket: no more sockets [ 81.752604][ T4424] binder_alloc: 4420: pid 4420 spamming oneway? 2 buffers allocated for a total size of 5120 [ 82.872990][ T4445] ODEBUG: Out of memory. ODEBUG disabled [ 82.945452][ T4445] syz.3.45 (4445): drop_caches: 2 [ 82.970412][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 82.990399][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 83.030397][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 83.070394][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 83.100398][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 83.119918][ T4447] binder: BINDER_SET_CONTEXT_MGR already set [ 83.120402][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 83.156600][ T4447] binder: 4446:4447 ioctl 4018620d 200000004a80 returned -16 [ 83.170399][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 84.337098][ T4457] ieee802154 phy0 wpan0: encryption failed: -22 [ 86.180495][ T4234] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 86.910903][ T4234] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.935828][ T13] cfg80211: failed to load regulatory.db [ 87.201519][ T4234] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 87.495268][ T4234] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.503717][ T4234] usb 5-1: Product: syz [ 87.507919][ T4234] usb 5-1: Manufacturer: syz [ 87.512920][ T4234] usb 5-1: SerialNumber: syz [ 87.633683][ T4234] usb 5-1: config 0 descriptor?? [ 87.685138][ T4234] ims_pcu 5-1:0.0: Missing CDC union descriptor [ 87.792792][ T4234] ims_pcu: probe of 5-1:0.0 failed with error -22 [ 88.509762][ T4501] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 88.660100][ T4462] udc-core: couldn't find an available UDC or it's busy [ 88.733474][ T4462] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 88.992329][ T21] usb 5-1: USB disconnect, device number 2 [ 89.616708][ T4523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.68'. [ 89.745417][ T4528] loop0: detected capacity change from 0 to 512 [ 89.785597][ T4528] EXT4-fs (loop0): Test dummy encryption mode enabled [ 89.820492][ T4528] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 89.913407][ T4528] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 89.971189][ T4528] EXT4-fs (loop0): 1 truncate cleaned up [ 89.976962][ T4528] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000005,debug_want_extra_isize=0x000000000000006a,test_dummy_encryption=v1,errors=remount-ro,nogrpid,. Quota mode: none. [ 90.020543][ T21] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 90.093409][ T4536] loop3: detected capacity change from 0 to 1024 [ 90.241705][ T4536] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 90.421554][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.457722][ T4536] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,bsddf,delalloc,resuid=0x000000000000ee01,init_itable,nodelalloc,grpid,quota,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 90.513348][ T21] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 90.593770][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.691747][ T21] usb 5-1: config 0 descriptor?? [ 90.869852][ T4542] bridge0: port 3(macvlan2) entered blocking state [ 90.878527][ T4542] bridge0: port 3(macvlan2) entered disabled state [ 90.931749][ T4542] device macvlan2 entered promiscuous mode [ 90.949731][ T4542] bridge0: port 3(macvlan2) entered blocking state [ 90.956730][ T4542] bridge0: port 3(macvlan2) entered forwarding state [ 90.994298][ T4542] Zero length message leads to an empty skb [ 91.215311][ T21] savu 0003:1E7D:2D5A.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 91.493481][ T21] usb 5-1: USB disconnect, device number 3 [ 91.637781][ T4558] vivid-002: ================= START STATUS ================= [ 91.676370][ T4558] vivid-002: Radio HW Seek Mode: Bounded [ 91.746621][ T4558] vivid-002: Radio Programmable HW Seek: false [ 91.758042][ T4558] vivid-002: RDS Rx I/O Mode: Block I/O [ 91.785695][ T4558] vivid-002: Generate RBDS Instead of RDS: false [ 91.820594][ T4558] vivid-002: RDS Reception: true [ 91.834160][ T4558] vivid-002: RDS Program Type: 0 inactive [ 91.947954][ T4558] vivid-002: RDS PS Name: inactive [ 92.010640][ T4558] vivid-002: RDS Radio Text: inactive [ 92.016199][ T4558] vivid-002: RDS Traffic Announcement: false inactive [ 92.081208][ T4558] vivid-002: RDS Traffic Program: false inactive [ 92.991687][ T4558] vivid-002: RDS Music: false inactive [ 92.997249][ T4558] vivid-002: ================== END STATUS ================== [ 93.765908][ T4577] fuse: root generation should be zero [ 94.228588][ T4586] loop3: detected capacity change from 0 to 512 [ 94.325027][ T4586] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 33619980: comm syz.3.88: invalid block [ 94.363335][ T4586] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.88: invalid indirect mapped block 10 (level 1) [ 94.430145][ T4586] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.88: invalid indirect mapped block 8 (level 1) [ 94.492305][ T4586] EXT4-fs (loop3): 1 truncate cleaned up [ 94.498270][ T4586] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 94.635638][ T4586] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 213 vs 220 free clusters [ 94.658403][ T4594] loop0: detected capacity change from 0 to 512 [ 94.833253][ T4594] EXT4-fs (loop0): inodes count not valid: 40 vs 32 [ 94.930377][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #102!!! [ 95.279767][ T154] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm kworker/u4:2: Invalid inode table block 2053277544 in block_group 0 [ 95.370613][ T2289] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 95.691474][ T2289] usb 2-1: Using ep0 maxpacket: 32 [ 95.840981][ T2289] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 95.906839][ T2289] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 96.020538][ T2289] usb 2-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 96.119096][ T2289] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.350270][ T2289] usb 2-1: config 0 descriptor?? [ 96.385327][ T4592] loop2: detected capacity change from 0 to 32768 [ 97.855243][ T4620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.955113][ T4596] kvm [4595]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x9d00 [ 98.001071][ T4596] kvm [4595]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x9d00 [ 98.048349][ T4625] netlink: 60 bytes leftover after parsing attributes in process `syz.4.100'. [ 98.068182][ T4596] APIC base relocation is unsupported by KVM [ 98.081068][ T4625] unsupported nlmsg_type 40 [ 98.280585][ T2289] usbhid 2-1:0.0: can't add hid device: -71 [ 98.286888][ T2289] usbhid: probe of 2-1:0.0 failed with error -71 [ 98.322375][ T2289] usb 2-1: USB disconnect, device number 3 [ 98.564301][ T4637] vivid-000: ================= START STATUS ================= [ 98.574592][ T4637] vivid-000: Radio HW Seek Mode: Bounded [ 98.594448][ T4637] vivid-000: Radio Programmable HW Seek: false [ 98.603632][ T4637] vivid-000: RDS Rx I/O Mode: Block I/O [ 98.633312][ T4637] vivid-000: Generate RBDS Instead of RDS: false [ 98.665562][ T4637] vivid-000: RDS Reception: true [ 98.678790][ T4637] vivid-000: RDS Program Type: 0 inactive [ 98.706789][ T4637] vivid-000: RDS PS Name: inactive [ 98.712564][ T4637] vivid-000: RDS Radio Text: inactive [ 98.718373][ T4637] vivid-000: RDS Traffic Announcement: false inactive [ 98.734072][ T4637] vivid-000: RDS Traffic Program: false inactive [ 98.756415][ T4637] vivid-000: RDS Music: false inactive [ 98.769729][ T4637] vivid-000: ================== END STATUS ================== [ 98.903489][ T4643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.105'. [ 100.762147][ T4658] syz.4.108 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 100.776080][ T4657] loop3: detected capacity change from 0 to 64 [ 100.812372][ T4658] Illegal XDP return value 4294967282, expect packet loss! [ 101.221626][ T4670] loop4: detected capacity change from 0 to 256 [ 101.250386][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #88!!! [ 101.260386][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 102.082081][ T4670] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 102.948026][ T4688] loop1: detected capacity change from 0 to 1764 [ 103.591698][ T4689] 9pnet: Insufficient options for proto=fd [ 105.727564][ T4677] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.735809][ T4677] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.407447][ T4710] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 107.153935][ T4728] loop1: detected capacity change from 0 to 8 [ 107.275053][ T4728] SQUASHFS error: lzo decompression failed, data probably corrupt [ 107.300488][ T4728] SQUASHFS error: Failed to read block 0x62b: -5 [ 107.340759][ T4728] SQUASHFS error: Unable to read metadata cache entry [629] [ 107.365486][ T4728] SQUASHFS error: Unable to read inode 0x11f [ 107.377093][ T4734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.476340][ T4710] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.502752][ T4710] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 107.590705][ T4710] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 107.617175][ T4710] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 107.657977][ T4710] usb 5-1: SerialNumber: syz [ 107.833250][ T4677] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.879035][ T4677] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.964831][ T4710] usb 5-1: 0:2 : does not exist [ 108.015539][ T4710] usb 5-1: USB disconnect, device number 4 [ 108.293607][ T4265] udevd[4265]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 108.800225][ T4744] vivid-004: ================= START STATUS ================= [ 108.870066][ T4745] netlink: 12 bytes leftover after parsing attributes in process `syz.3.130'. [ 109.497852][ T4744] vivid-004: Radio HW Seek Mode: Bounded [ 109.504221][ T4744] vivid-004: Radio Programmable HW Seek: false [ 109.510905][ T4744] vivid-004: RDS Rx I/O Mode: Block I/O [ 109.516704][ T4744] vivid-004: Generate RBDS Instead of RDS: false [ 109.523762][ T4744] vivid-004: RDS Reception: true [ 109.528883][ T4744] vivid-004: RDS Program Type: 0 inactive [ 109.535107][ T4744] vivid-004: RDS PS Name: inactive [ 109.540788][ T4744] vivid-004: RDS Radio Text: inactive [ 109.546960][ T4744] vivid-004: RDS Traffic Announcement: false inactive [ 109.558876][ T4744] vivid-004: RDS Traffic Program: false inactive [ 109.600475][ T4744] vivid-004: RDS Music: false inactive [ 109.633238][ T4744] vivid-004: ================== END STATUS ================== [ 109.678657][ T4677] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.750467][ T4677] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.766174][ T4677] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.785765][ T4677] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.265628][ T2289] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 111.624487][ T4755] loop2: detected capacity change from 0 to 256 [ 111.831953][ T4755] exfat: Deprecated parameter 'utf8' [ 111.837524][ T4755] exfat: Deprecated parameter 'namecase' [ 111.843842][ T4755] exfat: Deprecated parameter 'namecase' [ 111.849582][ T4755] exfat: Deprecated parameter 'utf8' [ 111.879853][ T4755] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 111.920677][ T2289] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.660613][ T2289] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 113.627776][ T2289] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.636356][ T2289] usb 4-1: Product: syz [ 113.641142][ T2289] usb 4-1: Manufacturer: syz [ 113.645954][ T2289] usb 4-1: SerialNumber: syz [ 113.653029][ T2289] usb 4-1: config 0 descriptor?? [ 113.697267][ T4770] syz.0.139 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 113.711292][ T4770] CPU: 1 PID: 4770 Comm: syz.0.139 Not tainted syzkaller #0 [ 113.718739][ T4770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 113.728929][ T4770] Call Trace: [ 113.732931][ T4770] [ 113.735900][ T4770] dump_stack_lvl+0x188/0x250 [ 113.740831][ T4770] ? show_regs_print_info+0x20/0x20 [ 113.746074][ T4770] ? load_image+0x410/0x410 [ 113.750724][ T4770] ? local_lock_release+0x170/0x170 [ 113.756078][ T4770] ? __rwlock_init+0x140/0x140 [ 113.760978][ T4770] dump_header+0xd9/0x780 [ 113.765498][ T4770] oom_kill_process+0x20e/0x3d0 [ 113.770674][ T4770] out_of_memory+0xdb2/0x1190 [ 113.775891][ T4770] ? mem_cgroup_out_of_memory+0xbd/0x3b0 [ 113.781579][ T4770] ? mutex_lock_io_nested+0x60/0x60 [ 113.786835][ T4770] ? unregister_oom_notifier+0x20/0x20 [ 113.792352][ T4770] mem_cgroup_out_of_memory+0x2b9/0x3b0 [ 113.798047][ T4770] ? mem_cgroup_oom_trylock+0x210/0x210 [ 113.803648][ T4770] ? do_raw_spin_unlock+0x11d/0x230 [ 113.809162][ T4770] try_charge_memcg+0x1075/0x15b0 [ 113.814247][ T4770] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 113.820445][ T4770] ? rcu_lock_acquire+0x30/0x30 [ 113.825367][ T4770] obj_cgroup_charge_pages+0x87/0x190 [ 113.830982][ T4770] ? __memcg_kmem_charge_page+0x380/0x380 [ 113.836883][ T4770] ? rcu_lock_acquire+0x30/0x30 [ 113.841983][ T4770] obj_cgroup_charge+0x19f/0x320 [ 113.846962][ T4770] ? mod_objcg_mlstate+0x2e0/0x2e0 [ 113.852128][ T4770] slab_pre_alloc_hook+0x9d/0xc0 [ 113.857133][ T4770] kmem_cache_alloc_trace+0x47/0x290 [ 113.862735][ T4770] ? fsnotify_alloc_group+0x70/0x3b0 [ 113.868160][ T4770] fsnotify_alloc_group+0x70/0x3b0 [ 113.873330][ T4770] __se_sys_fanotify_init+0x1ae/0x7b0 [ 113.878832][ T4770] ? syscall_enter_from_user_mode+0x21/0x70 [ 113.884977][ T4770] ? lockdep_hardirqs_on+0x94/0x140 [ 113.890374][ T4770] do_syscall_64+0x4c/0xa0 [ 113.894845][ T4770] ? clear_bhb_loop+0x30/0x80 [ 113.896213][ T4778] loop2: detected capacity change from 0 to 2048 [ 113.899559][ T4770] ? clear_bhb_loop+0x30/0x80 [ 113.899613][ T4770] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 113.916712][ T4770] RIP: 0033:0x7f5174b790d9 [ 113.921165][ T4770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.940998][ T4770] RSP: 002b:00007f5172dd1028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 113.949534][ T4770] RAX: ffffffffffffffda RBX: 00007f5174e00fa0 RCX: 00007f5174b790d9 [ 113.957809][ T4770] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000200 [ 113.966092][ T4770] RBP: 00007f5174c10024 R08: 0000000000000000 R09: 0000000000000000 [ 113.974365][ T4770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.983169][ T4770] R13: 00007f5174e01038 R14: 00007f5174e00fa0 R15: 00007ffe7ced5908 [ 113.991211][ T4770] [ 113.996732][ T2289] usb 4-1: can't set config #0, error -71 [ 114.016815][ T2289] usb 4-1: USB disconnect, device number 2 [ 114.028220][ T4770] memory: usage 8kB, limit 8kB, failcnt 21 [ 114.034724][ T4770] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 114.042847][ T4770] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 114.049732][ T4770] Memory cgroup stats for /syz0/test: [ 114.052404][ T4778] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 114.074464][ T4770] anon 0 [ 114.074464][ T4770] file 0 [ 114.074464][ T4770] kernel_stack 0 [ 114.074464][ T4770] pagetables 0 [ 114.074464][ T4770] percpu 0 [ 114.074464][ T4770] sock 0 [ 114.074464][ T4770] shmem 0 [ 114.074464][ T4770] file_mapped 0 [ 114.074464][ T4770] file_dirty 0 [ 114.074464][ T4770] file_writeback 0 [ 114.074464][ T4770] swapcached 0 [ 114.074464][ T4770] anon_thp 0 [ 114.074464][ T4770] file_thp 0 [ 114.074464][ T4770] shmem_thp 0 [ 114.074464][ T4770] inactive_anon 0 [ 114.074464][ T4770] active_anon 0 [ 114.074464][ T4770] inactive_file 0 [ 114.074464][ T4770] active_file 0 [ 114.074464][ T4770] unevictable 0 [ 114.074464][ T4770] slab_reclaimable 1928 [ 114.074464][ T4770] slab_unreclaimable 2704 [ 114.074464][ T4770] slab 4632 [ 114.074464][ T4770] workingset_refault_anon 0 [ 114.074464][ T4770] workingset_refault_file 0 [ 114.074464][ T4770] workingset_activate_anon 0 [ 114.074464][ T4770] workingset_activate_file 0 [ 114.190587][ T4786] loop1: detected capacity change from 0 to 512 [ 114.199000][ T4770] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.139,pid=4769,uid=0 [ 114.215577][ T4770] Memory cgroup out of memory: Killed process 4770 (syz.0.139) total-vm:104292kB, anon-rss:1420kB, file-rss:23080kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 114.365624][ T4793] netlink: 60 bytes leftover after parsing attributes in process `syz.0.145'. [ 114.394527][ T4786] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 114.865890][ T4786] EXT4-fs error (device loop1) in ext4_setattr:5645: Corrupt filesystem [ 115.013672][ T2289] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 115.015703][ T4191] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 115.440947][ T2289] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.514756][ T2289] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 115.581016][ T4787] netlink: 12 bytes leftover after parsing attributes in process `syz.4.144'. [ 115.700990][ T2289] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 115.773331][ T2289] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 115.864638][ T2289] usb 4-1: SerialNumber: syz [ 117.224191][ T2289] usb 4-1: 0:2 : does not exist [ 117.239452][ T2289] usb 4-1: USB disconnect, device number 3 [ 117.448959][ T4814] binder: BINDER_SET_CONTEXT_MGR already set [ 117.474024][ T4814] binder: 4813:4814 ioctl 4018620d 200000000100 returned -16 [ 117.545232][ T26] audit: type=1800 audit(2000000016.660:4): pid=4816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.151" name="bmaControls" dev="configfs" ino=34638 res=0 errno=0 [ 118.021106][ T4265] udevd[4265]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 118.322087][ T4824] loop3: detected capacity change from 0 to 164 [ 118.478636][ T4824] rock: corrupted directory entry. extent=134217760 out of volume (nzones=41) [ 119.513211][ T4830] loop0: detected capacity change from 0 to 1024 [ 119.600565][ T4830] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 119.643463][ T4830] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 119.660198][ T4828] device syzkaller0 entered promiscuous mode [ 119.667561][ T4830] EXT4-fs (loop0): orphan cleanup on readonly fs [ 119.683569][ T4830] EXT4-fs error (device loop0): ext4_free_blocks:6231: comm syz.0.157: Freeing blocks not in datazone - block = 0, count = 4096 [ 119.705405][ T4830] EXT4-fs (loop0): Remounting filesystem read-only [ 119.714779][ T4830] EXT4-fs (loop0): 1 orphan inode deleted [ 119.759120][ T4830] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,barrier=0x0000000000000000,barrier=0x0000000000000009,init_itable=0x0000000000007ab4,jqfmt=vfsv0,. Quota mode: writeback. [ 119.862774][ T4839] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 119.969245][ T4830] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #2: block 16: comm syz.0.157: lblock 0 mapped to illegal pblock 16 (length 1) [ 120.207171][ T4846] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 120.413871][ T4854] comedi comedi3: comedi_test: 256 microvolt, 15 microsecond waveform attached [ 121.871184][ T4867] loop0: detected capacity change from 0 to 3904 [ 122.244481][ T4867] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 122.277595][ T4867] ldm_validate_privheads(): Disk read failed. [ 122.309225][ T4867] ldm_parse_tocblock(): TOCBLOCK's first bitmap is 'config', should be ''. [ 122.368116][ T4867] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 122.394922][ T4867] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 2. [ 122.425423][ T4867] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 3. [ 122.484233][ T4877] loop3: detected capacity change from 0 to 256 [ 122.526040][ T4877] exfat: Deprecated parameter 'utf8' [ 122.531734][ T4877] exfat: Deprecated parameter 'namecase' [ 122.537761][ T4877] exfat: Deprecated parameter 'namecase' [ 122.544012][ T4877] exfat: Deprecated parameter 'utf8' [ 122.605704][ T4877] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 122.654600][ T4867] ldm_validate_tocblocks(): Failed to find a valid TOCBLOCK. [ 122.720459][ T2289] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 122.750508][ T4867] loop0: [ 122.821069][ T4867] loop0: partition table partially beyond EOD, truncated [ 123.879264][ T4887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.172'. [ 125.302412][ T2289] usb 3-1: unable to read config index 0 descriptor/all [ 125.310477][ T2289] usb 3-1: can't read configurations, error -71 [ 125.484532][ T4231] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 125.600778][ T4900] device syzkaller0 entered promiscuous mode [ 125.616310][ T4900] 0: reclassify loop, rule prio 0, protocol 700 [ 125.679715][ T4905] xt_policy: output policy not valid in PREROUTING and INPUT [ 125.780503][ T4231] usb 1-1: Using ep0 maxpacket: 16 [ 125.941198][ T4231] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.985554][ T4231] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 126.068367][ T4231] usb 1-1: config 0 interface 0 has no altsetting 0 [ 126.103991][ T4231] usb 1-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 126.231994][ T4231] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.257325][ T4231] usb 1-1: config 0 descriptor?? [ 126.320396][ T4234] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 127.060228][ T4231] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 127.530700][ T4234] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 127.577129][ T4234] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 127.594023][ T4231] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 127.603163][ T4231] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 127.611084][ T4231] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 127.621150][ T4231] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 127.628741][ T4231] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 127.636438][ T4231] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 127.646648][ T4231] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 127.663364][ T4234] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 127.670406][ T4231] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 127.681057][ T4231] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 127.688500][ T4231] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 127.715185][ T4231] magicmouse 0003:05AC:0269.0002: unknown main item tag 0x0 [ 127.737244][ T4231] magicmouse 0003:05AC:0269.0002: unbalanced collection at end of report description [ 127.778245][ T4231] magicmouse 0003:05AC:0269.0002: magicmouse hid parse failed [ 127.804713][ T4231] magicmouse: probe of 0003:05AC:0269.0002 failed with error -22 [ 127.834904][ T4234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.912214][ T4234] spcp8x5 5-1:1.0: SPCP8x5 converter detected [ 127.912927][ T4231] usb 1-1: USB disconnect, device number 2 [ 128.832014][ T4939] syz.2.184 (4939): drop_caches: 2 [ 128.843254][ T4234] usb 5-1: SPCP8x5 converter now attached to ttyUSB0 [ 128.858582][ T4234] usb 5-1: USB disconnect, device number 5 [ 128.879881][ T4234] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 128.889286][ T4234] spcp8x5 5-1:1.0: device disconnected [ 129.678725][ T4949] loop0: detected capacity change from 0 to 256 [ 129.734056][ T4949] exfat: Deprecated parameter 'utf8' [ 129.739606][ T4949] exfat: Deprecated parameter 'namecase' [ 129.746487][ T4949] exfat: Deprecated parameter 'namecase' [ 129.752668][ T4949] exfat: Deprecated parameter 'utf8' [ 129.803239][ T4949] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 130.226394][ T4954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.190'. [ 131.952216][ T4967] loop2: detected capacity change from 0 to 2048 [ 132.180926][ T4967] loop2: p1 < > p4 [ 132.180926][ T4967] p4: [ 132.229395][ T4967] loop2: p4 size 722688 extends beyond EOD, truncated [ 133.125051][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.131477][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.311641][ T4983] device syzkaller0 entered promiscuous mode [ 133.591596][ T4292] udevd[4292]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 134.115096][ T4990] syz.1.200 (4990): drop_caches: 2 [ 134.269886][ T4972] udevd[4972]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 134.299405][ T4998] loop3: detected capacity change from 0 to 256 [ 134.317907][ T4996] device syzkaller0 entered promiscuous mode [ 134.368938][ T4998] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 134.440852][ T4998] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 134.659740][ T4998] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 135.498784][ T5009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.208'. [ 136.497706][ T5017] loop4: detected capacity change from 0 to 256 [ 136.543301][ T5017] exfat: Deprecated parameter 'utf8' [ 136.548880][ T5017] exfat: Deprecated parameter 'namecase' [ 136.555198][ T5017] exfat: Deprecated parameter 'namecase' [ 136.561192][ T5017] exfat: Deprecated parameter 'utf8' [ 136.591619][ T5017] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 137.458375][ T5024] netlink: 60 bytes leftover after parsing attributes in process `syz.3.210'. [ 137.475837][ T5011] kvm [5007]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x9d00 [ 137.481461][ T5029] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 137.487346][ T5011] kvm [5007]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x9d00 [ 137.749628][ T5029] CIFS: Attempting to mount \\127.0.0.1\sø:e[1ý2harefµDŽr=root [ 137.824104][ T5029] CIFS: VFS: No username specified [ 138.665256][ T5040] syz.4.214 (5040): drop_caches: 2 [ 139.390575][ T5052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.428274][ T5056] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 139.916491][ T5056] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 140.105224][ T5056] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 140.378936][ T5061] ieee802154 phy0 wpan0: encryption failed: -22 [ 141.172047][ T5059] orangefs_mount: mount request failed with -4 [ 143.542980][ T5097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.759506][ T5103] syz.0.232 (5103): drop_caches: 2 [ 144.526917][ T5108] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 146.181683][ T5091] bridge0: port 3(macvlan2) entered disabled state [ 146.188390][ T5091] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.196007][ T5091] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.599468][ T5091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.627609][ T5091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.944833][ T5091] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.954500][ T5091] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.963616][ T5091] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.972543][ T5091] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.055591][ T5149] loop2: detected capacity change from 0 to 512 [ 148.548415][ T5153] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.246'. [ 149.200471][ T4231] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 149.209785][ T5149] EXT4-fs (loop2): Test dummy encryption mode enabled [ 149.232979][ T5149] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0022] [ 149.241136][ T5149] System zones: 1-2, 4-12, 8-8 [ 149.262557][ T5149] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.245: iget: bad i_size value: 38620345925642 [ 149.299916][ T5149] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.245: couldn't read orphan inode 15 (err -117) [ 149.320711][ T5149] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,test_dummy_encryption,data_err=ignore,debug,dax=never,i_version,,errors=continue. Quota mode: writeback. [ 149.506995][ T5171] CIFS: Attempting to mount \\127.0.0.1\share [ 149.513559][ T5171] CIFS: VFS: No username specified [ 150.050634][ T5128] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 150.404696][ T5177] fuse: Bad value for 'fd' [ 150.630722][ T4231] usb 4-1: device descriptor read/all, error -71 [ 151.350044][ T5193] CIFS: Attempting to mount \\127.0.0.1\share [ 151.359827][ T5193] CIFS: VFS: Error connecting to socket. Aborting operation. [ 151.367716][ T5193] CIFS: VFS: cifs_mount failed w/return code = -111 [ 152.292265][ T5196] loop1: detected capacity change from 0 to 256 [ 152.561863][ T5128] usb 1-1: unable to get BOS descriptor or descriptor too short [ 153.460461][ T5128] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 153.477134][ T5128] usb 1-1: can't read configurations, error -71 [ 158.513815][ T5253] loop1: detected capacity change from 0 to 64 [ 160.775723][ T5277] loop1: detected capacity change from 0 to 256 [ 161.032168][ T5285] xt_policy: output policy not valid in PREROUTING and INPUT [ 161.810659][ T5277] FAT-fs (loop1): Directory bread(block 64) failed [ 161.844342][ T5277] FAT-fs (loop1): Directory bread(block 65) failed [ 161.850289][ T5291] loop3: detected capacity change from 0 to 1024 [ 161.873047][ T5277] FAT-fs (loop1): Directory bread(block 66) failed [ 161.919580][ T5277] FAT-fs (loop1): Directory bread(block 67) failed [ 161.929824][ T5277] FAT-fs (loop1): Directory bread(block 68) failed [ 161.950058][ T5277] FAT-fs (loop1): Directory bread(block 69) failed [ 161.971232][ T5277] FAT-fs (loop1): Directory bread(block 70) failed [ 161.988285][ T5277] FAT-fs (loop1): Directory bread(block 71) failed [ 162.038548][ T5296] sch_tbf: burst 1520 is lower than device lo mtu (9486) ! [ 162.063701][ T5277] FAT-fs (loop1): Directory bread(block 72) failed [ 162.120509][ T5277] FAT-fs (loop1): Directory bread(block 73) failed [ 163.184676][ T5277] attempt to access beyond end of device [ 163.184676][ T5277] loop1: rw=524288, want=1196, limit=256 [ 163.228617][ T5277] attempt to access beyond end of device [ 163.228617][ T5277] loop1: rw=0, want=1196, limit=256 [ 163.436457][ T26] audit: type=1800 audit(2000000062.550:5): pid=5277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.281" name="file1" dev="loop1" ino=1048625 res=0 errno=0 [ 163.652347][ T5309] attempt to access beyond end of device [ 163.652347][ T5309] loop1: rw=0, want=1196, limit=256 [ 164.102062][ T5312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.291'. [ 164.124249][ T5312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.291'. [ 164.134529][ T5312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.291'. [ 164.146425][ T5312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.291'. [ 164.156425][ T5312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.291'. [ 164.990554][ T26] audit: type=1800 audit(2000000063.620:6): pid=5309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.281" name="file1" dev="loop1" ino=1048625 res=0 errno=0 [ 165.097388][ T26] audit: type=1326 audit(2000000064.210:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5313 comm="syz.0.292" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5174b790d9 code=0x0 [ 165.667299][ T5322] tipc: Started in network mode [ 165.737617][ T5322] tipc: Node identity , cluster identity 4711 [ 165.841534][ T5322] tipc: Failed to obtain node identity [ 165.929949][ T5322] tipc: Enabling of bearer rejected, failed to enable media [ 166.448762][ T5320] loop2: detected capacity change from 0 to 32768 [ 168.475848][ T5333] loop1: detected capacity change from 0 to 32768 [ 168.646370][ T5333] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.298 (5333) [ 168.675626][ T5342] xt_policy: output policy not valid in PREROUTING and INPUT [ 169.363784][ T5333] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 169.373957][ T5333] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 169.384069][ T5333] BTRFS info (device loop1): use lzo compression, level 0 [ 169.391401][ T5333] BTRFS info (device loop1): force clearing of disk cache [ 169.398835][ T5333] BTRFS info (device loop1): using free space tree [ 169.405437][ T5333] BTRFS info (device loop1): has skinny extents [ 170.949305][ T5388] netlink: 20 bytes leftover after parsing attributes in process `syz.4.306'. [ 172.010179][ T5333] BTRFS error (device loop1): open_ctree failed: -22 [ 172.534996][ T5411] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 172.578172][ T5411] kvm: pic: non byte read [ 172.594836][ T5411] kvm: pic: level sensitive irq not supported [ 172.595512][ T5411] kvm: pic: non byte read [ 172.623088][ T5411] kvm: pic: level sensitive irq not supported [ 172.623253][ T5411] kvm: pic: non byte read [ 172.666250][ T5411] kvm: pic: level sensitive irq not supported [ 172.666882][ T5411] kvm: pic: non byte read [ 173.060196][ T5430] xt_policy: output policy not valid in PREROUTING and INPUT [ 174.097591][ T26] audit: type=1326 audit(2000000073.210:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5437 comm="syz.0.319" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5174b790d9 code=0x0 [ 177.136556][ T5482] mmap: syz.3.334 (5482) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 178.275427][ T5493] loop0: detected capacity change from 0 to 16 [ 178.336710][ T5493] erofs: (device loop0): mounted with root inode @ nid 36. [ 178.801381][ T5501] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 327679 of nid 36 [ 178.811972][ T5501] erofs: (device loop0): z_erofs_readahead: readahead error at page 79 @ nid 36 [ 178.821195][ T5501] erofs: (device loop0): z_erofs_readahead: readahead error at page 78 @ nid 36 [ 178.833070][ T5501] erofs: (device loop0): z_erofs_extent_lookback: unknown type 3 @ lcn 75 of nid 36 [ 178.842883][ T5501] erofs: (device loop0): z_erofs_readahead: readahead error at page 76 @ nid 36 [ 178.852081][ T5501] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 311295 of nid 36 [ 178.862287][ T5501] erofs: (device loop0): z_erofs_readahead: readahead error at page 75 @ nid 36 [ 178.871608][ T5501] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 307199 of nid 36 [ 178.881799][ T5501] erofs: (device loop0): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 178.891062][ T5501] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 303103 of nid 36 [ 178.901374][ T5501] erofs: (device loop0): z_erofs_readahead: readahead error at page 73 @ nid 36 [ 178.910536][ T5501] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 299007 of nid 36 [ 178.920767][ T5501] erofs: (device loop0): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 178.930004][ T5501] erofs: (device loop0): z_erofs_readahead: readahead error at page 71 @ nid 36 [ 178.939128][ T5501] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 290815 of nid 36 [ 178.949534][ T5501] erofs: (device loop0): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 178.959410][ T5501] erofs: (device loop0): z_erofs_extent_lookback: unknown type 3 @ lcn 64 of nid 36 [ 178.969037][ T5501] erofs: (device loop0): z_erofs_readahead: readahead error at page 65 @ nid 36 [ 178.978369][ T5501] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 266239 of nid 36 [ 178.988529][ T5501] erofs: (device loop0): z_erofs_readahead: readahead error at page 64 @ nid 36 [ 178.998104][ T5501] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 262143 of nid 36 [ 179.008338][ T5501] erofs: (device loop0): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 179.017925][ T5501] erofs: (device loop0): z_erofs_readahead: readahead error at page 61 @ nid 36 [ 179.027042][ T5501] erofs: (device loop0): z_erofs_readahead: readahead error at page 60 @ nid 36 [ 179.036439][ T5501] erofs: (device loop0): z_erofs_readahead: readahead error at page 59 @ nid 36 [ 179.045589][ T5501] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 179.054944][ T5501] erofs: (device loop0): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 179.064213][ T5501] erofs: (device loop0): z_erofs_readahead: readahead error at page 57 @ nid 36 [ 179.073476][ T5501] erofs: (device loop0): z_erofs_readahead: readahead error at page 56 @ nid 36 [ 179.082716][ T5501] erofs: (device loop0): z_erofs_readahead: readahead error at page 55 @ nid 36 [ 179.092649][ T5501] erofs: (device loop0): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 179.101912][ T5501] erofs: (device loop0): z_erofs_readahead: readahead error at page 53 @ nid 36 [ 179.111463][ T5501] erofs: (device loop0): z_erofs_readahead: readahead error at page 49 @ nid 36 [ 179.120610][ T5501] erofs: (device loop0): z_erofs_readahead: readahead error at page 48 @ nid 36 [ 179.129787][ T5501] erofs: (device loop0): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 179.139004][ T5501] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 179.148348][ T5501] erofs: (device loop0): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 179.157660][ T5501] erofs: (device loop0): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 179.167668][ T5501] erofs: (device loop0): z_erofs_readahead: readahead error at page 44 @ nid 36 [ 179.177171][ T5501] erofs: (device loop0): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 179.186541][ T5501] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 179.196020][ T5501] erofs: (device loop0): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 179.205197][ T5501] erofs: (device loop0): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 179.214470][ T5501] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 179.224102][ T5501] erofs: (device loop0): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 179.233574][ T5501] erofs: (device loop0): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 179.243117][ T5501] erofs: (device loop0): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 179.254473][ T5501] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 179.264421][ T5501] erofs: (device loop0): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 179.274722][ T5501] erofs: (device loop0): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 179.283883][ T5501] erofs: (device loop0): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 179.293380][ T5501] erofs: (device loop0): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 179.302674][ T5501] erofs: (device loop0): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 179.312248][ T5501] erofs: (device loop0): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 179.322699][ T5501] erofs: (device loop0): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36 [ 179.332406][ T5501] erofs: (device loop0): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 179.342192][ T5501] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36 [ 179.352372][ T5501] erofs: (device loop0): z_erofs_readahead: readahead error at page 15 @ nid 36 [ 179.362015][ T5501] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 61439 of nid 36 [ 179.371982][ T5501] erofs: (device loop0): z_erofs_readahead: readahead error at page 14 @ nid 36 [ 179.381263][ T5501] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 57343 of nid 36 [ 179.391924][ T5501] erofs: (device loop0): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 179.401837][ T5501] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 36863 of nid 36 [ 179.412484][ T5501] erofs: (device loop0): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 179.422024][ T5501] erofs: (device loop0): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 179.431169][ T5501] erofs: (device loop0): z_erofs_readahead: readahead error at page 5 @ nid 36 [ 179.440367][ T5501] erofs: (device loop0): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 179.449839][ T5501] erofs: (device loop0): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36 [ 179.459449][ T5501] erofs: (device loop0): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 179.469036][ T5501] attempt to access beyond end of device [ 179.469036][ T5501] loop0: rw=524288, want=312, limit=16 [ 179.481977][ T5501] attempt to access beyond end of device [ 179.481977][ T5501] loop0: rw=524288, want=1049280, limit=16 [ 179.494286][ T5501] attempt to access beyond end of device [ 179.494286][ T5501] loop0: rw=524288, want=736, limit=16 [ 179.505942][ T5501] attempt to access beyond end of device [ 179.505942][ T5501] loop0: rw=524288, want=776, limit=16 [ 179.517745][ T5501] attempt to access beyond end of device [ 179.517745][ T5501] loop0: rw=524288, want=848, limit=16 [ 179.529504][ T5501] attempt to access beyond end of device [ 179.529504][ T5501] loop0: rw=524288, want=13478624104, limit=16 [ 179.542080][ T5501] attempt to access beyond end of device [ 179.542080][ T5501] loop0: rw=524288, want=13478624080, limit=16 [ 179.554670][ T5501] attempt to access beyond end of device [ 179.554670][ T5501] loop0: rw=524288, want=56, limit=16 [ 179.566586][ T5501] attempt to access beyond end of device [ 179.566586][ T5501] loop0: rw=524288, want=40, limit=16 [ 179.578737][ T5501] attempt to access beyond end of device [ 179.578737][ T5501] loop0: rw=524288, want=96, limit=16 [ 181.226370][ T5503] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.842831][ T5512] netlink: 'syz.0.342': attribute type 1 has an invalid length. [ 182.461388][ T5512] 8021q: adding VLAN 0 to HW filter on device bond1 [ 182.646010][ T5522] loop3: detected capacity change from 0 to 512 [ 182.739363][ T5521] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.797907][ T5521] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.806956][ T5521] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.815903][ T5521] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.826917][ T5521] bond1: (slave geneve2): making interface the new active one [ 182.836957][ T5521] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 182.863984][ T5523] device bridge_slave_0 left promiscuous mode [ 182.870246][ T5523] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.880841][ T5522] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 182.968144][ T5522] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 183.005974][ T5521] syz.0.342 (5521) used greatest stack depth: 19280 bytes left [ 183.025326][ T5523] device bridge_slave_1 left promiscuous mode [ 183.060108][ T5523] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.106104][ T5523] bond0: (slave bond_slave_0): Releasing backup interface [ 183.129826][ T5523] bond0: (slave bond_slave_1): Releasing backup interface [ 183.186805][ T5523] team0: Port device team_slave_0 removed [ 183.241089][ T5523] team0: Port device team_slave_1 removed [ 183.256267][ T5523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.279921][ T5523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.312813][ T5523] device macvlan2 left promiscuous mode [ 183.320031][ T5523] bridge0: port 3(macvlan2) entered disabled state [ 183.343653][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 183.985466][ T5570] loop1: detected capacity change from 0 to 1024 [ 184.510770][ T5582] netlink: 12 bytes leftover after parsing attributes in process `syz.2.355'. [ 185.571693][ T26] audit: type=1326 audit(2000000084.690:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5584 comm="syz.4.362" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9763d20d9 code=0x7ffc0000 [ 185.681810][ T26] audit: type=1326 audit(2000000084.730:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5584 comm="syz.4.362" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9763d20d9 code=0x7ffc0000 [ 185.708219][ T26] audit: type=1326 audit(2000000084.730:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5584 comm="syz.4.362" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9763d20d9 code=0x7ffc0000 [ 186.361410][ T5594] hfsplus: extend alloc file! (16384,256,150995124) [ 187.295741][ T5128] Bluetooth: hci1: command 0x0406 tx timeout [ 187.305170][ T5128] Bluetooth: hci2: command 0x0406 tx timeout [ 187.311758][ T5128] Bluetooth: hci4: command 0x0406 tx timeout [ 187.318030][ T5128] Bluetooth: hci3: command 0x0406 tx timeout [ 187.324348][ T5128] Bluetooth: hci0: command 0x0406 tx timeout [ 187.354215][ T26] audit: type=1326 audit(2000000084.730:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5584 comm="syz.4.362" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fb9763d20d9 code=0x7ffc0000 [ 187.445484][ T26] audit: type=1326 audit(2000000084.730:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5584 comm="syz.4.362" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9763d20d9 code=0x7ffc0000 [ 187.520525][ T26] audit: type=1326 audit(2000000084.730:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5584 comm="syz.4.362" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9763d20d9 code=0x7ffc0000 [ 187.622379][ T26] audit: type=1326 audit(2000000084.730:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5584 comm="syz.4.362" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9763d20d9 code=0x7ffc0000 [ 187.706591][ T26] audit: type=1326 audit(2000000084.730:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5584 comm="syz.4.362" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb9763d20d9 code=0x7ffc0000 [ 187.738832][ T26] audit: type=1326 audit(2000000084.730:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5584 comm="syz.4.362" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9763d20d9 code=0x7ffc0000 [ 187.792804][ T26] audit: type=1326 audit(2000000084.730:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5584 comm="syz.4.362" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9763d20d9 code=0x7ffc0000 [ 191.349902][ T5661] binder_alloc: 5657: binder_alloc_buf, no vma [ 191.362028][ T5659] binder: 5657:5659 ioctl c0306201 2000000003c0 returned -14 [ 191.436260][ T5662] capability: warning: `syz.0.377' uses 32-bit capabilities (legacy support in use) [ 194.286243][ T5693] device syzkaller0 entered promiscuous mode [ 194.562544][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.575287][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.243282][ T5703] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.428807][ T5703] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.533181][ T5702] loop2: detected capacity change from 0 to 256 [ 195.571686][ T5703] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.587274][ T5715] batman_adv: batadv0: Adding interface: dummy0 [ 196.034788][ T5715] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.504151][ T5702] FAT-fs (loop2): Directory bread(block 64) failed [ 196.519042][ T5715] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 196.530494][ T5702] FAT-fs (loop2): Directory bread(block 65) failed [ 196.610561][ T5702] FAT-fs (loop2): Directory bread(block 66) failed [ 196.619105][ T5702] FAT-fs (loop2): Directory bread(block 67) failed [ 196.642723][ T5702] FAT-fs (loop2): Directory bread(block 68) failed [ 196.649439][ T5702] FAT-fs (loop2): Directory bread(block 69) failed [ 196.693740][ T5702] FAT-fs (loop2): Directory bread(block 70) failed [ 196.705517][ T5703] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.744151][ T5702] FAT-fs (loop2): Directory bread(block 71) failed [ 196.766305][ T5702] FAT-fs (loop2): Directory bread(block 72) failed [ 196.796153][ T5702] FAT-fs (loop2): Directory bread(block 73) failed [ 196.982550][ T5703] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.063672][ T5703] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.128635][ T5703] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.146882][ T5703] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.896038][ T5740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.404'. [ 198.100478][ T4230] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 198.500931][ T4230] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.552990][ T4230] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 198.610659][ T4230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.683481][ T4230] usb 2-1: config 0 descriptor?? [ 198.799645][ T4230] pwc: Askey VC010 type 2 USB webcam detected. [ 199.190604][ T4230] pwc: recv_control_msg error -32 req 02 val 2b00 [ 199.283462][ T4230] pwc: recv_control_msg error -32 req 02 val 2700 [ 199.360529][ T4230] pwc: recv_control_msg error -32 req 02 val 2c00 [ 199.410577][ T4230] pwc: recv_control_msg error -32 req 04 val 1000 [ 199.461194][ T4230] pwc: recv_control_msg error -32 req 04 val 1300 [ 199.520509][ T4230] pwc: recv_control_msg error -32 req 04 val 1400 [ 199.567663][ T4230] pwc: recv_control_msg error -32 req 02 val 2000 [ 199.633513][ T4230] pwc: recv_control_msg error -32 req 02 val 2100 [ 199.706590][ T4230] pwc: recv_control_msg error -32 req 04 val 1500 [ 199.900350][ T4230] pwc: recv_control_msg error -32 req 02 val 2500 [ 199.950680][ T4230] pwc: recv_control_msg error -32 req 02 val 2400 [ 199.984212][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 200.214909][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 200.652205][ T5763] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 200.761278][ T4230] pwc: recv_control_msg error -71 req 02 val 2900 [ 200.790493][ T4230] pwc: recv_control_msg error -71 req 02 val 2800 [ 200.810732][ T4230] pwc: recv_control_msg error -71 req 04 val 1100 [ 200.830448][ T4230] pwc: recv_control_msg error -71 req 04 val 1200 [ 200.862768][ T4230] pwc: Registered as video103. [ 200.869825][ T4230] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7 [ 200.933402][ T5775] binder: BINDER_SET_CONTEXT_MGR already set [ 200.986253][ T5775] binder: 5774:5775 ioctl 4018620d 200000004a80 returned -16 [ 201.040017][ T4230] usb 2-1: USB disconnect, device number 4 [ 202.217564][ T5793] netlink: 48 bytes leftover after parsing attributes in process `syz.2.421'. [ 203.229517][ T5809] tipc: Started in network mode [ 203.261623][ T5809] tipc: Node identity 4, cluster identity 4711 [ 203.298786][ T5809] tipc: Node number set to 4 [ 207.164679][ T5847] netlink: 64 bytes leftover after parsing attributes in process `syz.4.436'. [ 207.971260][ T5853] device bridge_slave_0 left promiscuous mode [ 207.978162][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.152295][ T5856] loop2: detected capacity change from 0 to 2048 [ 208.274117][ T5856] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 211.392419][ T5853] device bridge_slave_1 left promiscuous mode [ 211.575309][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.879758][ T5853] bond0: (slave bond_slave_0): Releasing backup interface [ 211.910863][ T5853] bond0: (slave bond_slave_1): Releasing backup interface [ 211.957803][ T5853] team0: Port device team_slave_0 removed [ 211.988647][ T5853] team0: Port device team_slave_1 removed [ 211.997102][ T5853] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.031033][ T5853] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.084253][ T5853] bond1: (slave geneve2): Releasing active interface [ 212.097009][ T5853] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.106594][ T5853] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.115647][ T5853] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.126656][ T5853] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.155723][ T5857] team0: Mode changed to "loadbalance" [ 212.327149][ T5873] device syzkaller0 entered promiscuous mode [ 212.813078][ T5883] device syzkaller0 entered promiscuous mode [ 213.908108][ T5896] loop3: detected capacity change from 0 to 2048 [ 213.963895][ T5896] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 215.778868][ T5909] loop2: detected capacity change from 0 to 512 [ 215.800951][ T5911] netlink: 'syz.3.452': attribute type 12 has an invalid length. [ 215.811705][ T5911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.452'. [ 215.946525][ T5909] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 215.968000][ T5909] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.179155][ T5909] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 216.210025][ T5909] EXT4-fs error (device loop2): ext4_dirty_inode:6077: inode #15: comm syz.2.454: mark_inode_dirty error [ 216.394816][ T5929] loop1: detected capacity change from 0 to 2048 [ 217.093797][ T5909] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 217.168824][ T5909] EXT4-fs error (device loop2): ext4_dirty_inode:6077: inode #15: comm syz.2.454: mark_inode_dirty error [ 217.230998][ T5909] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 217.545029][ T5929] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 217.955858][ T5909] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #15: comm syz.2.454: mark_inode_dirty error [ 217.971037][ T5909] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 217.990645][ T5909] EXT4-fs error (device loop2): ext4_dirty_inode:6077: inode #15: comm syz.2.454: mark_inode_dirty error [ 218.092506][ T5909] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 218.181137][ T5909] EXT4-fs error (device loop2): ext4_ext_truncate:4487: inode #15: comm syz.2.454: mark_inode_dirty error [ 220.593090][ T5959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.467'. [ 221.299079][ T5969] netlink: 'syz.4.470': attribute type 2 has an invalid length. [ 221.384158][ T5971] capability: warning: `syz.0.472' uses deprecated v2 capabilities in a way that may be insecure [ 222.185124][ T5971] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 222.209804][ T5975] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 222.276163][ T5975] batman_adv: batadv0: Interface deactivated: dummy0 [ 222.310776][ T5975] batman_adv: batadv0: Removing interface: dummy0 [ 222.321482][ T5975] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 222.341568][ T5975] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 222.350688][ T5975] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 222.362848][ T5975] device bridge_slave_0 left promiscuous mode [ 222.369201][ T5975] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.388638][ T5975] device bridge_slave_1 left promiscuous mode [ 222.395835][ T5975] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.417334][ T5975] bond0: (slave bond_slave_0): Releasing backup interface [ 222.433371][ T5975] bond0: (slave bond_slave_1): Releasing backup interface [ 222.470943][ T5975] team0: Port device team_slave_0 removed [ 222.491828][ T5975] team0: Port device team_slave_1 removed [ 222.498225][ T5975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.506315][ T5975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.517468][ T5975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.526001][ T5975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.538837][ T5975] batman_adv: batadv0: Interface deactivated: geneve2 [ 222.546039][ T5975] batman_adv: batadv0: Removing interface: geneve2 [ 222.625348][ T5978] team0: Mode changed to "loadbalance" [ 222.871171][ T5999] loop1: detected capacity change from 0 to 2048 [ 223.145274][ T4265] loop1: p1 < > p4 [ 223.145274][ T4265] p4: [ 223.632354][ T6013] netlink: 64 bytes leftover after parsing attributes in process `syz.3.483'. [ 223.734892][ T4265] loop1: p4 size 722688 extends beyond EOD, truncated [ 223.797957][ T5999] loop1: p1 < > p4 [ 223.797957][ T5999] p4: [ 223.834263][ T5999] loop1: p4 size 722688 extends beyond EOD, truncated [ 224.108296][ T6024] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 224.194049][ T4292] udevd[4292]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 224.283702][ T4265] udevd[4265]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 224.812369][ T4292] udevd[4292]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 224.861696][ T4265] udevd[4265]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 226.217718][ T6046] batman_adv: batadv0: Removing interface: dummy0 [ 226.284795][ T6046] team0: Mode changed to "loadbalance" [ 226.501737][ T26] kauditd_printk_skb: 63 callbacks suppressed [ 226.501759][ T26] audit: type=1326 audit(2000000125.590:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.3.497" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059805d0d9 code=0x7ffc0000 [ 226.639449][ T26] audit: type=1326 audit(2000000125.590:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.3.497" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059805d0d9 code=0x7ffc0000 [ 226.739474][ T6059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.498'. [ 226.830739][ T4233] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 226.891647][ T26] audit: type=1326 audit(2000000125.660:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.3.497" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f059801d90e code=0x7ffc0000 [ 227.364852][ T26] audit: type=1326 audit(2000000125.660:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.3.497" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f059805cd6b code=0x7ffc0000 [ 227.434189][ T26] audit: type=1326 audit(2000000125.660:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.3.497" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f059805cd6b code=0x7ffc0000 [ 227.520433][ T26] audit: type=1326 audit(2000000125.670:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.3.497" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f059805cd6b code=0x7ffc0000 [ 227.527174][ T6061] device hsr0 entered promiscuous mode [ 227.560640][ T4233] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 227.569822][ T4233] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.597293][ T26] audit: type=1326 audit(2000000125.670:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.3.497" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f059805cd6b code=0x7ffc0000 [ 227.610369][ T4233] usb 4-1: Product: syz [ 227.656366][ T4233] usb 4-1: Manufacturer: syz [ 227.659445][ T6061] netlink: 12 bytes leftover after parsing attributes in process `syz.0.509'. [ 227.670440][ T4233] usb 4-1: SerialNumber: syz [ 227.695698][ T4233] usb 4-1: config 0 descriptor?? [ 227.701249][ T26] audit: type=1326 audit(2000000126.000:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.3.497" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f059805cd6b code=0x7ffc0000 [ 227.740704][ T6061] device hsr_slave_0 left promiscuous mode [ 227.762397][ T4233] hub 4-1:0.0: bad descriptor, ignoring hub [ 227.768364][ T4233] hub: probe of 4-1:0.0 failed with error -5 [ 227.774760][ T26] audit: type=1326 audit(2000000126.030:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.3.497" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f059805cd6b code=0x7ffc0000 [ 227.799177][ T6061] device hsr_slave_1 left promiscuous mode [ 227.827457][ T6061] device hsr0 left promiscuous mode [ 227.852139][ T26] audit: type=1326 audit(2000000126.300:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.3.497" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f059805cd6b code=0x7ffc0000 [ 228.000682][ T4233] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 228.046702][ T4233] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 228.133437][ T4233] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 228.349939][ T4233] usb 4-1: media controller created [ 228.434523][ T6070] loop2: detected capacity change from 0 to 1024 [ 228.478003][ T4233] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 230.640153][ T4233] DVB: Unable to find symbol dib7000p_attach() [ 230.646868][ T4233] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 230.968705][ T4233] rc_core: IR keymap rc-dib0700-rc5 not found [ 230.988195][ T4233] Registered IR keymap rc-empty [ 231.064791][ T4233] dvb-usb: could not initialize remote control. [ 231.075493][ T4233] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 231.146437][ T4233] usb 4-1: USB disconnect, device number 6 [ 231.805099][ T4233] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 232.258052][ T6090] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 232.740930][ T6090] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 232.782718][ T6119] loop3: detected capacity change from 0 to 2048 [ 232.829828][ T6119] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=2362, location=2362 [ 232.874078][ T6119] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 232.893710][ T6119] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 232.956471][ T6119] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 234.228529][ T6119] overlayfs: unrecognized mount option "subj_role=workdir" or missing value [ 234.229821][ T6129] loop1: detected capacity change from 0 to 1024 [ 235.438412][ T6146] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 236.237747][ T6159] device syzkaller0 entered promiscuous mode [ 236.344902][ T6162] netlink: 60 bytes leftover after parsing attributes in process `syz.1.528'. [ 236.536040][ T6165] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 236.854850][ T6174] input: syz0 as /devices/virtual/input/input9 [ 238.066518][ T6186] ip_tables: iptables: counters copy to user failed while replacing table [ 239.267199][ T6210] CIFS: Attempting to mount \\127.0.0.1\share [ 240.103275][ T6210] CIFS: VFS: Error connecting to socket. Aborting operation. [ 240.110890][ T6210] CIFS: VFS: cifs_mount failed w/return code = -4 [ 240.262859][ T6214] device syzkaller0 entered promiscuous mode [ 241.946419][ T6238] loop3: detected capacity change from 0 to 512 [ 242.196061][ T6238] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 242.434223][ T6240] netlink: 'syz.2.553': attribute type 15 has an invalid length. [ 242.590748][ T6240] netlink: 11834 bytes leftover after parsing attributes in process `syz.2.553'. [ 242.608062][ T6238] EXT4-fs (loop3): 1 truncate cleaned up [ 242.613955][ T6238] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,nojournal_checksum,grpjquota=,,errors=continue. Quota mode: none. [ 242.857119][ T6246] jffs2: notice: (6246) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 243.482028][ T6265] netlink: 32 bytes leftover after parsing attributes in process `syz.1.561'. [ 243.534181][ T6265] sch_tbf: burst 1520 is lower than device lo mtu (9486) ! [ 243.550383][ T1108] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 243.926787][ T1108] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.947473][ T1108] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 243.986270][ T1108] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 244.016885][ T1108] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 244.061750][ T1108] usb 3-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice= 0.00 [ 244.096653][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.162945][ T1108] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 244.383271][ T2426] pvrusb2: Failed to submit write-control URB status=-90 [ 244.408952][ T1108] usb 3-1: USB disconnect, device number 5 [ 244.515317][ T2426] usb 3-1: Direct firmware load for v4l-pvrusb2-24xxx-01.fw failed with error -2 [ 245.296825][ T2426] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-24xxx-01.fw [ 246.649145][ T6291] tipc: Started in network mode [ 246.736307][ T6291] tipc: Node identity 080211000001, cluster identity 4711 [ 246.811528][ T6291] tipc: Enabled bearer , priority 0 [ 248.789590][ T4229] tipc: Node number set to 134418688 [ 248.964697][ T6315] netlink: 20 bytes leftover after parsing attributes in process `syz.1.575'. [ 249.590857][ T26] kauditd_printk_skb: 27 callbacks suppressed [ 249.590873][ T26] audit: type=1326 audit(2000000148.710:119): auid=4294967295 uid=255 gid=0 ses=4294967295 subj=unconfined pid=6316 comm="syz.4.577" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb9763d20d9 code=0x0 [ 251.980370][ T6337] device syzkaller0 left promiscuous mode [ 252.180676][ T26] audit: type=1326 audit(2000000151.300:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6344 comm="syz.4.588" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9763d20d9 code=0x7ffc0000 [ 252.370426][ T26] audit: type=1326 audit(2000000151.320:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6344 comm="syz.4.588" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb97639290e code=0x7ffc0000 [ 252.916139][ T26] audit: type=1326 audit(2000000151.320:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6344 comm="syz.4.588" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9763d20d9 code=0x7ffc0000 [ 253.190811][ T6358] fuse: Bad value for 'fd' [ 253.334237][ T26] audit: type=1326 audit(2000000151.320:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6344 comm="syz.4.588" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb9763d1d6b code=0x7ffc0000 [ 253.694326][ T26] audit: type=1326 audit(2000000151.320:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6344 comm="syz.4.588" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9763d20d9 code=0x7ffc0000 [ 253.870401][ T26] audit: type=1326 audit(2000000151.320:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6344 comm="syz.4.588" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb97639290e code=0x7ffc0000 [ 254.030468][ T26] audit: type=1326 audit(2000000151.320:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6344 comm="syz.4.588" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9763d20d9 code=0x7ffc0000 [ 254.674091][ T26] audit: type=1326 audit(2000000151.320:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6344 comm="syz.4.588" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb9763d20d9 code=0x7ffc0000 [ 255.002349][ T26] audit: type=1326 audit(2000000151.970:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6344 comm="syz.4.588" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9763d20d9 code=0x7ffc0000 [ 255.110510][ T26] audit: type=1326 audit(2000000151.970:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6344 comm="syz.4.588" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9763d20d9 code=0x7ffc0000 [ 255.181858][ T26] audit: type=1326 audit(2000000152.850:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6344 comm="syz.4.588" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fb9763d20d9 code=0x7ffc0000 [ 255.256586][ T26] audit: type=1326 audit(2000000152.850:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6344 comm="syz.4.588" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9763d20d9 code=0x7ffc0000 [ 255.317449][ T6369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.593'. [ 255.330395][ T26] audit: type=1326 audit(2000000152.850:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6344 comm="syz.4.588" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9763d20d9 code=0x7ffc0000 [ 255.373237][ T26] audit: type=1326 audit(2000000152.900:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6344 comm="syz.4.588" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb9763d20d9 code=0x7ffc0000 [ 255.403173][ T26] audit: type=1326 audit(2000000152.900:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6344 comm="syz.4.588" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9763d20d9 code=0x7ffc0000 [ 255.493956][ T26] audit: type=1326 audit(2000000152.900:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6344 comm="syz.4.588" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9763d20d9 code=0x7ffc0000 [ 255.527658][ T26] audit: type=1326 audit(2000000152.910:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6344 comm="syz.4.588" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fb9763d20d9 code=0x7ffc0000 [ 255.551021][ T6376] loop2: detected capacity change from 0 to 1024 [ 255.763461][ T6376] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 255.892344][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.899508][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.525877][ T6405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.600'. [ 260.856058][ T6431] overlayfs: failed to clone upperpath [ 262.739399][ T26] kauditd_printk_skb: 211 callbacks suppressed [ 262.739417][ T26] audit: type=1326 audit(2000000161.850:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6440 comm="syz.1.615" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b3556e0d9 code=0x7ffc0000 [ 262.911017][ T6449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.619'. [ 263.072203][ T26] audit: type=1326 audit(2000000161.900:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6440 comm="syz.1.615" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2b3552e90e code=0x7ffc0000 [ 263.150498][ T26] audit: type=1326 audit(2000000161.910:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6440 comm="syz.1.615" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b3556e0d9 code=0x7ffc0000 [ 264.141517][ T26] audit: type=1326 audit(2000000161.910:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6440 comm="syz.1.615" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b3556e0d9 code=0x7ffc0000 [ 264.233083][ T26] audit: type=1326 audit(2000000161.910:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6440 comm="syz.1.615" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b3556dd6b code=0x7ffc0000 [ 264.356539][ T26] audit: type=1326 audit(2000000161.910:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6440 comm="syz.1.615" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b3556e0d9 code=0x7ffc0000 [ 264.665439][ T26] audit: type=1326 audit(2000000161.910:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6440 comm="syz.1.615" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b3556e0d9 code=0x7ffc0000 [ 264.974549][ T26] audit: type=1326 audit(2000000161.920:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6440 comm="syz.1.615" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2b3552e90e code=0x7ffc0000 [ 265.383765][ T6472] netdevsim netdevsim10 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.393060][ T6472] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.401475][ T6472] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.409854][ T6472] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.418304][ T6472] netdevsim netdevsim3 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.502004][ T6472] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 265.535508][ T26] audit: type=1326 audit(2000000161.920:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6440 comm="syz.1.615" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b3556e0d9 code=0x7ffc0000 [ 266.424005][ T26] audit: type=1326 audit(2000000161.920:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6440 comm="syz.1.615" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b3556e0d9 code=0x7ffc0000 [ 270.966554][ T6489] binder: BINDER_SET_CONTEXT_MGR already set [ 270.972843][ T6489] binder: 6488:6489 ioctl 4018620d 200000004a80 returned -16 [ 271.026115][ T6532] tipc: Enabled bearer , priority 0 [ 271.063111][ T6532] netlink: 12 bytes leftover after parsing attributes in process `syz.0.642'. [ 272.923085][ T6569] netlink: 'syz.4.653': attribute type 12 has an invalid length. [ 272.971678][ T6569] netlink: 4 bytes leftover after parsing attributes in process `syz.4.653'. [ 273.202710][ T6574] device syzkaller0 entered promiscuous mode [ 273.228586][ T6574] tipc: Started in network mode [ 273.238566][ T6574] tipc: Node identity 4e16a8d2eb8c, cluster identity 4711 [ 273.252300][ T6574] tipc: Enabled bearer , priority 0 [ 273.367376][ T6573] tipc: Resetting bearer [ 273.517430][ T6573] tipc: Disabling bearer [ 273.783690][ T6579] device syzkaller0 entered promiscuous mode [ 273.843023][ T6579] ================================================================== [ 273.851756][ T6579] BUG: KASAN: use-after-free in ieee80211_monitor_select_queue+0x23a/0x240 [ 273.860486][ T6579] Read of size 2 at addr ffff88801fc3adfb by task syz.3.654/6579 [ 273.868514][ T6579] [ 273.871062][ T6579] CPU: 0 PID: 6579 Comm: syz.3.654 Not tainted syzkaller #0 [ 273.878558][ T6579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 273.888758][ T6579] Call Trace: [ 273.892072][ T6579] [ 273.895037][ T6579] dump_stack_lvl+0x188/0x250 [ 273.899764][ T6579] ? show_regs_print_info+0x20/0x20 [ 273.905017][ T6579] ? _printk+0xda/0x130 [ 273.909218][ T6579] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 273.915521][ T6579] ? load_image+0x410/0x410 [ 273.920310][ T6579] print_address_description+0x60/0x2d0 [ 273.925914][ T6579] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 273.932206][ T6579] kasan_report+0xdf/0x130 [ 273.936677][ T6579] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 273.937137][ T6590] netlink: 'syz.4.659': attribute type 14 has an invalid length. [ 273.942960][ T6579] ieee80211_monitor_select_queue+0x23a/0x240 [ 273.943035][ T6579] ? ieee80211_recalc_smps_work+0x20/0x20 [ 273.943058][ T6579] netdev_core_pick_tx+0x12c/0x300 [ 273.943085][ T6579] __dev_queue_xmit+0x797/0x2e50 [ 273.943106][ T6579] ? __might_sleep+0xf0/0xf0 [ 273.943138][ T6579] ? dev_queue_xmit+0x20/0x20 [ 273.943158][ T6579] ? virtio_net_hdr_to_skb+0xb00/0x11e0 [ 273.943191][ T6579] ? packet_cached_dev_get+0x270/0x270 [ 273.943222][ T6579] packet_sendmsg+0x3d31/0x5080 [ 273.943242][ T6579] ? finish_lock_switch+0x12d/0x290 [ 273.943277][ T6579] ? cgroup_rstat_updated+0xce/0x350 [ 273.998051][ T6590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.659'. [ 273.998737][ T6579] ? __might_sleep+0xf0/0xf0 [ 273.998782][ T6579] ? aa_sk_perm+0x7dc/0x910 [ 274.027797][ T6579] ? packet_getsockopt+0x9a0/0x9a0 [ 274.033121][ T6579] ? unpack_secmark+0x10a6/0x1a40 [ 274.038199][ T6579] ? apparmor_socket_sendmsg+0x88/0x230 [ 274.043793][ T6579] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 274.049136][ T6579] ? security_socket_sendmsg+0x7c/0xa0 [ 274.054643][ T6579] ? packet_getsockopt+0x9a0/0x9a0 [ 274.060324][ T6579] ____sys_sendmsg+0x5be/0x8f0 [ 274.065493][ T6579] ? __sys_sendmsg_sock+0x30/0x30 [ 274.070567][ T6579] ? import_iovec+0x6f/0xa0 [ 274.075611][ T6579] ___sys_sendmsg+0x236/0x2e0 [ 274.080506][ T6579] ? __sys_sendmsg+0x290/0x290 [ 274.085304][ T6579] __se_sys_sendmsg+0x1b7/0x2a0 [ 274.090164][ T6579] ? __x64_sys_sendmsg+0x80/0x80 [ 274.095449][ T6579] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 274.101532][ T6579] ? lockdep_hardirqs_on+0x94/0x140 [ 274.106738][ T6579] do_syscall_64+0x4c/0xa0 [ 274.111161][ T6579] ? clear_bhb_loop+0x30/0x80 [ 274.115849][ T6579] ? clear_bhb_loop+0x30/0x80 [ 274.120536][ T6579] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 274.126538][ T6579] RIP: 0033:0x7f059805d0d9 [ 274.131323][ T6579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.153097][ T6579] RSP: 002b:00007f05962b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 274.161623][ T6579] RAX: ffffffffffffffda RBX: 00007f05982e4fa0 RCX: 00007f059805d0d9 [ 274.169683][ T6579] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 274.177828][ T6579] RBP: 00007f05980f4024 R08: 0000000000000000 R09: 0000000000000000 [ 274.185831][ T6579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.193904][ T6579] R13: 00007f05982e5038 R14: 00007f05982e4fa0 R15: 00007ffeb5774058 [ 274.202066][ T6579] [ 274.205086][ T6579] [ 274.207422][ T6579] Allocated by task 6170: [ 274.211978][ T6579] __kasan_slab_alloc+0x92/0xc0 [ 274.216846][ T6579] slab_post_alloc_hook+0x4c/0x380 [ 274.221955][ T6579] kmem_cache_alloc+0x15d/0x280 [ 274.226816][ T6579] getname_flags+0xb7/0x4f0 [ 274.231581][ T6579] __x64_sys_symlinkat+0x78/0xa0 [ 274.236669][ T6579] do_syscall_64+0x4c/0xa0 [ 274.241149][ T6579] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 274.247050][ T6579] [ 274.249376][ T6579] Freed by task 6170: [ 274.253373][ T6579] kasan_set_track+0x4b/0x70 [ 274.257997][ T6579] kasan_set_free_info+0x1f/0x40 [ 274.263047][ T6579] ____kasan_slab_free+0xd5/0x110 [ 274.268227][ T6579] slab_free_freelist_hook+0xec/0x170 [ 274.273635][ T6579] kmem_cache_free+0x8f/0x210 [ 274.278335][ T6579] do_symlinkat+0x5d7/0x6b0 [ 274.282855][ T6579] __x64_sys_symlinkat+0x95/0xa0 [ 274.288121][ T6579] do_syscall_64+0x4c/0xa0 [ 274.292561][ T6579] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 274.298461][ T6579] [ 274.300971][ T6579] The buggy address belongs to the object at ffff88801fc3a200 [ 274.300971][ T6579] which belongs to the cache names_cache of size 4096 [ 274.315605][ T6579] The buggy address is located 3067 bytes inside of [ 274.315605][ T6579] 4096-byte region [ffff88801fc3a200, ffff88801fc3b200) [ 274.329589][ T6579] The buggy address belongs to the page: [ 274.335681][ T6579] page:ffffea00007f0e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1fc38 [ 274.345937][ T6579] head:ffffea00007f0e00 order:3 compound_mapcount:0 compound_pincount:0 [ 274.354273][ T6579] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 274.362736][ T6579] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016ddd500 [ 274.371337][ T6579] raw: 0000000000000000 0000000000070007 00000001ffffffff 0000000000000000 [ 274.380003][ T6579] page dumped because: kasan: bad access detected [ 274.386409][ T6579] page_owner tracks the page as allocated [ 274.392118][ T6579] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 3560, ts 208002258282, free_ts 207998231016 [ 274.412991][ T6579] get_page_from_freelist+0x24f6/0x2670 [ 274.418549][ T6579] __alloc_pages+0x1ee/0x480 [ 274.423418][ T6579] new_slab+0xc0/0x4b0 [ 274.427507][ T6579] ___slab_alloc+0x807/0xdd0 [ 274.432097][ T6579] kmem_cache_alloc+0xf0/0x280 [ 274.436945][ T6579] getname_flags+0xb7/0x4f0 [ 274.441548][ T6579] user_path_at_empty+0x2a/0x190 [ 274.446494][ T6579] do_readlinkat+0xd9/0x490 [ 274.451008][ T6579] __x64_sys_readlink+0x7b/0x90 [ 274.455984][ T6579] do_syscall_64+0x4c/0xa0 [ 274.460576][ T6579] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 274.466503][ T6579] page last free stack trace: [ 274.471175][ T6579] free_unref_page_prepare+0x637/0x6c0 [ 274.476758][ T6579] free_unref_page+0x8f/0x2a0 [ 274.481553][ T6579] __unfreeze_partials+0x188/0x1e0 [ 274.486692][ T6579] put_cpu_partial+0x12d/0x190 [ 274.491903][ T6579] qlist_free_all+0x35/0x90 [ 274.496542][ T6579] kasan_quarantine_reduce+0x150/0x160 [ 274.502131][ T6579] __kasan_slab_alloc+0x2f/0xc0 [ 274.509091][ T6579] slab_post_alloc_hook+0x4c/0x380 [ 274.515717][ T6579] kmem_cache_alloc+0x15d/0x280 [ 274.520588][ T6579] __se_sys_flock+0x14f/0x570 [ 274.527623][ T6579] do_syscall_64+0x4c/0xa0 [ 274.532053][ T6579] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 274.537979][ T6579] [ 274.541383][ T6579] Memory state around the buggy address: [ 274.547042][ T6579] ffff88801fc3ac80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 274.555239][ T6579] ffff88801fc3ad00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 274.563341][ T6579] >ffff88801fc3ad80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 274.571562][ T6579] ^ [ 274.579548][ T6579] ffff88801fc3ae00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 274.587873][ T6579] ffff88801fc3ae80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 274.596227][ T6579] ================================================================== [ 274.604393][ T6579] Disabling lock debugging due to kernel taint [ 274.611506][ T6579] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 274.618719][ T6579] CPU: 0 PID: 6579 Comm: syz.3.654 Tainted: G B syzkaller #0 [ 274.627691][ T6579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 274.637961][ T6579] Call Trace: [ 274.641271][ T6579] [ 274.644227][ T6579] dump_stack_lvl+0x188/0x250 [ 274.648952][ T6579] ? show_regs_print_info+0x20/0x20 [ 274.654282][ T6579] ? load_image+0x410/0x410 [ 274.659006][ T6579] panic+0x2f8/0x850 [ 274.662940][ T6579] ? bpf_jit_dump+0xd0/0xd0 [ 274.667469][ T6579] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 274.673478][ T6579] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 274.679403][ T6579] ? _raw_spin_unlock+0x40/0x40 [ 274.680720][ T6587] batman_adv: batadv0: Adding interface: dummy0 [ 274.684272][ T6579] ? print_memory_metadata+0x314/0x400 [ 274.684302][ T6579] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 274.684324][ T6579] check_panic_on_warn+0x80/0xa0 [ 274.692271][ T6587] batman_adv: batadv0: The MTU of interface dummy0 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.696033][ T6579] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 274.696063][ T6579] end_report+0x6d/0xf0 [ 274.703680][ T6587] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 274.707320][ T6579] kasan_report+0x102/0x130 [ 274.707348][ T6579] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 274.735410][ T6585] tipc: Enabled bearer , priority 0 [ 274.739145][ T6579] ieee80211_monitor_select_queue+0x23a/0x240 [ 274.739176][ T6579] ? ieee80211_recalc_smps_work+0x20/0x20 [ 274.749927][ T6585] device syzkaller0 entered promiscuous mode [ 274.753178][ T6579] netdev_core_pick_tx+0x12c/0x300 [ 274.753212][ T6579] __dev_queue_xmit+0x797/0x2e50 [ 274.753231][ T6579] ? __might_sleep+0xf0/0xf0 [ 274.753253][ T6579] ? dev_queue_xmit+0x20/0x20 [ 274.753271][ T6579] ? virtio_net_hdr_to_skb+0xb00/0x11e0 [ 274.753297][ T6579] ? packet_cached_dev_get+0x270/0x270 [ 274.753319][ T6579] packet_sendmsg+0x3d31/0x5080 [ 274.825376][ T6579] ? finish_lock_switch+0x12d/0x290 [ 274.830674][ T6579] ? cgroup_rstat_updated+0xce/0x350 [ 274.836065][ T6579] ? __might_sleep+0xf0/0xf0 [ 274.840670][ T6579] ? aa_sk_perm+0x7dc/0x910 [ 274.845186][ T6579] ? packet_getsockopt+0x9a0/0x9a0 [ 274.850395][ T6579] ? unpack_secmark+0x10a6/0x1a40 [ 274.855435][ T6579] ? apparmor_socket_sendmsg+0x88/0x230 [ 274.861018][ T6579] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 274.866417][ T6579] ? security_socket_sendmsg+0x7c/0xa0 [ 274.872241][ T6579] ? packet_getsockopt+0x9a0/0x9a0 [ 274.877451][ T6579] ____sys_sendmsg+0x5be/0x8f0 [ 274.882340][ T6579] ? __sys_sendmsg_sock+0x30/0x30 [ 274.887644][ T6579] ? import_iovec+0x6f/0xa0 [ 274.892324][ T6579] ___sys_sendmsg+0x236/0x2e0 [ 274.897021][ T6579] ? __sys_sendmsg+0x290/0x290 [ 274.902132][ T6579] __se_sys_sendmsg+0x1b7/0x2a0 [ 274.906979][ T6579] ? __x64_sys_sendmsg+0x80/0x80 [ 274.912184][ T6579] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 274.918532][ T6579] ? lockdep_hardirqs_on+0x94/0x140 [ 274.923893][ T6579] do_syscall_64+0x4c/0xa0 [ 274.928320][ T6579] ? clear_bhb_loop+0x30/0x80 [ 274.933095][ T6579] ? clear_bhb_loop+0x30/0x80 [ 274.938316][ T6579] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 274.944663][ T6579] RIP: 0033:0x7f059805d0d9 [ 274.949081][ T6579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.969257][ T6579] RSP: 002b:00007f05962b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 274.977766][ T6579] RAX: ffffffffffffffda RBX: 00007f05982e4fa0 RCX: 00007f059805d0d9 [ 274.985754][ T6579] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 274.993922][ T6579] RBP: 00007f05980f4024 R08: 0000000000000000 R09: 0000000000000000 [ 275.001902][ T6579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.009886][ T6579] R13: 00007f05982e5038 R14: 00007f05982e4fa0 R15: 00007ffeb5774058 [ 275.017921][ T6579] [ 275.021211][ T6579] Kernel Offset: disabled [ 275.025562][ T6579] Rebooting in 86400 seconds..