last executing test programs: 8m7.881215653s ago: executing program 0 (id=653): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) fcntl$notify(r1, 0x402, 0x21) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x21) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000161000/0x18000)=nil, &(0x7f0000005700)=[@text64={0x40, 0x0}], 0x1, 0x5b, 0x0, 0x0) gettid() futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r4, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8m6.435282556s ago: executing program 0 (id=659): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/kvm_intel/parameters/dump_invalid_vmcs\x00', 0x2, 0x0) write(r3, &(0x7f0000000100)='Y', 0x1) 8m4.771486604s ago: executing program 0 (id=668): dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0xffffffffffffffff, 0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}, 0x1, 0x0, 0x0, 0x20000050}, 0x4000810) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@can_newroute={0x134, 0x18, 0x1, 0x70bd27, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x7a, 0x65, 0x1b, 0x1, 0xe, "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", 0x0, "23f1514edfab8c08cc2e153a589a27aa04cc2973"}}]}, 0x134}}, 0x240448c8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000040)=0x1) readv(r7, &(0x7f00000007c0)=[{0x0}, {&(0x7f0000000700)=""/150, 0x96}], 0x2) close_range(r0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x21404d, &(0x7f0000000340)={[{@data_err_abort}, {@discard}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000000dc0)="$eJzs3M1vG0UbAPBn13H65k0hoZSvlo9AQVQIkqYt0AMHQCBxKBISHOBoJaEqTQtqgkSrSKQcygkhJO6II/8CJ7ggxAmJK9xRpQr1QsvJaL27iZ3YTtPYcYt/P8ntM/vhmce7Y8/u2AlgaE1l/yQReyPi94iYyIutG0zl/12/tjJ349rKXBL1+tt/JY3t/r62MlduWu433lyIJA62qXfpwsUztcXFhfNFeWb57EczSxcuPnf6bO3UwqmFc0dPnDh+bPbFF44+35M8xyMtojfe++rNk1+05L8hjx6Z6rbyqXq9x9UN1l1N8cgA28H2VIrjVW30/4moNB29iXj9s7XCpwNqINA39Xq9Pt559Wod+A9LorWsy8OwKD/oy+vfdtfBL/dt9DF4V1/JL4CyvK8Xj3zNyNodg+qG69temoqId1f/+SZ7RH/uQwAAtPghG/88m412Vuayscf6+CON+5u2u7uYG5qMiHsiYl9E3BvnYn9E3BfR2PaBiHhwm/U3TZI0hpmbxz/plVtO7iZk47+Xirmt1vFfOfqLyUqjdCEvRDV5//TiwpHiNTkc1T1ZebZLHT++9tuXndY1j/+yR1Z/ORYs2nFlZE/rPvO15dqtZ9zq6qWIAyPt8k/WZgKSiHgoIg60e4J06zpOP/Pdw53WbZ1/Fz2YaKp/G/F0fvxXY0P+paT7/OTM/2Jx4chMeVZs9suvl9/qVP+O8u+B7Pj/v+35v5b/ZNI8X7u0/Tou//F5x2uaqWoRbOP8X60t10aTdxrxaLHsk9ry8vnZiNHkZN7o5uVH1/cty+X2Wf6HD7Xv//ti/ZU4GBHZSfxIRDwaEY8Vx+7xiHgiIg51yf/nV5/8YOOysTL/2+D4z2/r+K8Ho9G6JG2zTRZUzvz0fUulk+thkf+N7u9/xxvR4WLJzbz/bW5F+2Cnrx8AAADcCdKI2BtJOr0Wp+n0dP4d/v351Hfm43Pz+W8EJqOalne6Jpruh84Wl/V5+VJE5F8tKNcfi7Rx3/jrylijPD334eL8QDMHxjv0/8yflUG3Dug7P9iC4aX/w/Dq2v+ru9cOYPdt6v9d+/yevrYF2F1tPv/HBtEOYPe1G//7ez8wHDb0f9N+METc/4fhpf/D8NL/YSgtjcXWP5LvGpTPdIu7bxVMROy0hYMJonpbNKNvQaR9r2K0v6dW34LkDmzzpmBw70kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC99G8AAAD//1KFzjw=") 8m3.024605393s ago: executing program 0 (id=670): dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0xffffffffffffffff, 0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}, 0x1, 0x0, 0x0, 0x20000050}, 0x4000810) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@can_newroute={0x134, 0x18, 0x1, 0x70bd27, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x7a, 0x65, 0x1b, 0x1, 0xe, "da9f78f74ad7f50ae6384e7100cf31cbe98a8cc4db5d0e2e03f91985ce622d34ba87517345702e92d349cd33d55edbe096b6d9f0b13b50ba612a1297668af5ac5843577de95f963411dc34e9daae6b2bbb6e29c3ac1a23e26f235d67bcdde5c68b9dbbbc7f2c7eb4a9df9cc81ef10e7e9cd4dd189f77967d392f1a2fce204892851186d3c33689ed58c2b1f98e2218fa2314ee75b0b66d8a0930a4ce4d80c372988d0139a01fb8cffeb9f9c31446161dbd53e4c489b66aaa696c76054b9b5541fae4e2fb4208bf3375d319393a6bf6d66478454fe9d0a41e13f011e42aa903b320ae33c4ed71e2134f180637af9b927d6e59cab03c0b4399212a94ec062f06c0", 0x0, "23f1514edfab8c08cc2e153a589a27aa04cc2973"}}]}, 0x134}}, 0x240448c8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000040)=0x1) close_range(r0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x21404d, &(0x7f0000000340)={[{@data_err_abort}, {@discard}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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") 8m2.648175072s ago: executing program 0 (id=672): r0 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x20000848, &(0x7f0000000640)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r1, @ANYBLOB="00646d61736b3d303030303030303030303030303135322c696f636861720300000069736f383835392d312c6769643d00000000000000", @ANYRESHEX=r2, @ANYRESHEX, @ANYBLOB="1e1456b97f43020078423fad8569494e29e58bd88d6b502cfe943956d9f8efde4f8659ce67cc37b7e1d988638175e2db1b654dccc1a203850b09873b0184822257d4c12aafe95dfe2105301b585b58256d90fffa59ece5882178fb533b8ed99c4c2c6d1ba6d7f5dac0cad0eaeee76479fb488f67037b1b2a880c53fe952d632ba034c8d2758f1bd92565024144b0862cb3639c534e323806be01dd7a6252a5999b81aa1f34d13acf872bbbfc5bb3bd8b2cfe4db9838e949885f82e3d6b7baa61b746aa6867aa79f68807ad6ed9c20047a5a182900259b42b384c47e92173c2e84e9720a16fd1207bfcff5ef02cf5b499ab1d6206e6b0cdddfa7e2173eefd3289ec4f64408d202fab273d7781b00b9f6998f674855cbfebefe527045fc059fc1c53c8cabec0bddbe1423984a989915cc284ec7893afd1503fd0abe873e42948eac099dca2409d2569e17bce29be45a15e7685dac4a84c10c58d3b87ddd73ad97083a9967bc247824ebfe3b23ce9ed8c9a32fdda82c92e28c636ec3b428b15df02c1a9f75a586e80404a47da74750844fac5c41ae8488681c49d472ad2c5c853710d81102f5ce0", @ANYRES64], 0x91, 0x14f5, &(0x7f0000001580)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) utimensat(r3, 0x0, &(0x7f0000000580)={{0x0, 0x3ffffffe}, {0x77359400}}, 0x0) 8m2.414251007s ago: executing program 0 (id=674): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000280)) 7m46.716554762s ago: executing program 32 (id=674): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000280)) 7m25.915758672s ago: executing program 4 (id=707): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2000d4, &(0x7f0000000040)={[{@jqfmt_vfsold}, {@block_validity}]}, 0x1, 0x243, &(0x7f0000000840)="$eJzs3TFoJFUcBvBvZneNuVv01EYQVBARDYSzE2zORiEgIYgIKkREbJREiAl2iZWNhdYqqWyC2BktJU2wUQSrqCliI2iwMFhosTI7icRkRXHjjtz8fjC7M7sz83/Dm++9bYYN0FpXklxL0kkyk6SXpDi9w931cuV4c3N6dzEZDJ74qRjuV2/XTo67nGQjyUNJdsoiL3WTte1nDn7Ze+y+N1d7976//fT0RC/y2OHB/uNH782/8dHcg2tffPXDfJFr6f/pui5eMeKzbpHc+l8U+58ouk23gH9i4bUPv65yf1uSe4b576VM3Xlvrdyw08sD7/7VsW//+OUdk2wrcPEGg141B24MgNYpk/RTlLNJ6vWynJ2tf8N/07lUvry88urMi8urSy80PVIBF6Wf7D/6ydTHl8/k//tOnX/g+lXl/8mFrW+r9aNO060BJqmfTCW5P/IPrVPN/zPPrcs/tNCI/N/cdJuAyTD/Q3vJP7SX/EN7yT+0l/xDe8k/tJf8Q3udzj8A0C6DqaafQAaa0vT4AwAAAAAAAAAAAAAAAAAAnLc5vbt4skyq5mfvJIePJOmOqt8Z/h9xcuPw9dLPRbXbH4r6sLE8e9eYJxjTBw0/fX3Td83W//zOZuuvLyUbrye52u2ev/+K4/vv37vlb77vPT9mgTE9/FSz9X/barb+3F7yaTX+XE02U5zp/zK3D99Hjz/9qv/GrP/Kr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//9ryGqI") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000008e80)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x102b42, 0x9f667fd378a54edc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x8080, 0x83) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000000)={0x6, 0x2000001, 0xfffff}) 7m10.08773988s ago: executing program 33 (id=707): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2000d4, &(0x7f0000000040)={[{@jqfmt_vfsold}, {@block_validity}]}, 0x1, 0x243, &(0x7f0000000840)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000008e80)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x102b42, 0x9f667fd378a54edc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x8080, 0x83) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000000)={0x6, 0x2000001, 0xfffff}) 2m32.114121423s ago: executing program 5 (id=1665): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRES16=r0, @ANYBLOB="010000000000000000001000000044000180060001000a000000080005"], 0x58}}, 0x0) 2m31.975618815s ago: executing program 5 (id=1666): close(0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={r2, 0x8000}, 0x8) 2m31.77410953s ago: executing program 5 (id=1667): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r2, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x0) 2m30.281087214s ago: executing program 5 (id=1671): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080065e0050200000000001177fbac141416e000030a44079f03b180006000000000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x0, 0x2}, 0x26) 2m30.00681213s ago: executing program 5 (id=1674): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRES16=r0, @ANYBLOB="010000000000000000001000000044000180060001000a000000080005"], 0x58}}, 0x0) 2m29.660338988s ago: executing program 5 (id=1679): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x40a8, 0x4) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000200)=0x1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$can_j1939(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x1}}, 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}}, 0xee) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r3, {0x6, 0xc}, {0x5, 0x10}, {0xd, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 2m10.031772862s ago: executing program 34 (id=1679): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x40a8, 0x4) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000200)=0x1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$can_j1939(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x1}}, 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}}, 0xee) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r3, {0x6, 0xc}, {0x5, 0x10}, {0xd, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 56.497654544s ago: executing program 2 (id=1860): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000001040)=ANY=[@ANYBLOB="1b000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x1e, &(0x7f0000000540)=ANY=[], 0x0) syz_emit_ethernet(0xd81, &(0x7f0000001080)={@random="652c1d569d1e", @remote, @val={@val={0x88a8, 0x6, 0x1, 0x204}, {0x8100, 0x0, 0x1, 0x2}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x5, 0xd6b, 0x66, 0x0, 0xfe, 0x32, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}, @private=0xa010101}, "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"}}}}, 0x0) 56.298215748s ago: executing program 2 (id=1862): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(r1) 56.070195323s ago: executing program 2 (id=1864): add_key(&(0x7f0000000400)='rxrpc\x00', &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000600)="0100000002000800ffffff7f010000000011223344556677aabbccddeeff0011", 0x20, 0xfffffffd) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x1800, 0x0) preadv2(r0, &(0x7f0000000680)=[{&(0x7f0000000280)=""/134, 0x86}], 0x1, 0xfffffffd, 0x558, 0x12) 55.913405747s ago: executing program 2 (id=1866): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x10103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf84be000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) syz_ublk_setup_io_uring(0x56ce, &(0x7f0000000000)={0x0, 0x12bf, 0x8, 0x3, 0x1d0}, &(0x7f0000000100)=0x0, 0x0, &(0x7f0000000380)) r5 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x266b, 0x0, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)=0x0) ioctl$UBLK_U_CMD_GET_PARAMS(0xffffffffffffffff, 0x80207509, &(0x7f00000007c0)={0x0, 0xffff, 0x70, &(0x7f0000000740)={0x70}}) syz_io_uring_submit$UBLK(r4, r5, r6, &(0x7f0000000840)=@ublk_ctrl_cmd_sqes={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0207505, 0x0, 0x0, 0x0, 0x0, 0x49f, 0x0, 0x0, '\x00', @start_dev_cmd={r7, 0xffff, 0x0, 0x0, r1}}) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000440), 0x8, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) close(0x3) 49.496816982s ago: executing program 2 (id=1870): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000001040)=ANY=[@ANYBLOB="1b000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x1e, &(0x7f0000000540)=ANY=[], 0x0) syz_emit_ethernet(0xd81, &(0x7f0000001080)={@random="652c1d569d1e", @remote, @val={@val={0x88a8, 0x6, 0x1, 0x204}, {0x8100, 0x0, 0x1, 0x2}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x5, 0xd6b, 0x66, 0x0, 0xfe, 0x32, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}, @private=0xa010101}, "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"}}}}, 0x0) 49.12927083s ago: executing program 2 (id=1874): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffd, 0xfffffffc}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r0 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x30, 0x0, 0x1fd, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) 33.956285723s ago: executing program 35 (id=1874): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffd, 0xfffffffc}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r0 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x30, 0x0, 0x1fd, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) 16.284791442s ago: executing program 6 (id=1932): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(r1) close(0x4) 10.561904551s ago: executing program 6 (id=1942): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000d40)=ANY=[@ANYRES8=r0, @ANYRESOCT=r0, @ANYRES64=r0, @ANYRESHEX=0x0, @ANYRES32=r0, @ANYRES16=r0, @ANYRES8=r0, @ANYBLOB="d0767617e7ed679060c4f14e8cc3674f9fb2a5cf9eacdb7eb9659a7e139d198fab71b2230662ea19431cee2dc42520d80f9af29e07f8496b8513ec46dd97cb55775b5b6ccae9ed4e7a9e6bf5dd4afdd9d1330e8b7c2782e19afce7491e0141e0a3815379cc4dac616a4995dc09e1e3d8f4f980c600b4b5c536dd8bea9bac9662b663d14a16875935aac77e", @ANYRES32=r0], 0x0, 0x56, 0xffffffffffffff09, 0x1}, 0x28) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x51) r1 = socket(0x2c, 0x3, 0x5) recvfrom(r1, 0x0, 0x0, 0x60, &(0x7f00000007c0)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) readv(r2, &(0x7f0000000680), 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r4) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000600fc000000080011000700000008000e00800000000800", @ANYRES64=r4], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80) 10.114253082s ago: executing program 6 (id=1945): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x1, 0x0) syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) bind$l2tp(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0xb, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0xfa0f, 0xffffffff}, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) epoll_create1(0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000300)="8b", 0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) shutdown(r3, 0x1) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, &(0x7f0000000180)={0x2000004, {{0xa, 0x4e22, 0x6f0, @mcast1, 0xfffffffd}}, {{0xa, 0x4e24, 0x8, @empty, 0x492}}}, 0x108) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001d40)=ANY=[@ANYBLOB="581800004400010029bd700004000000010000000400488040180180"], 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) 9.740131521s ago: executing program 3 (id=1948): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000100001040000ca9b3f00000000000000", @ANYBLOB="00240000000000001800128008000100677470000c0002800500050000000000080003"], 0x40}}, 0x4000000) 9.666095092s ago: executing program 6 (id=1949): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(r1) close(0x4) 9.31398113s ago: executing program 3 (id=1950): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@bridge_newneigh={0x1c, 0x1c, 0x1, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r1, 0x80, 0x7f, 0xa}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) 6.482838054s ago: executing program 1 (id=1954): openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x1}, 0x50) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000f303010000000000000000000000000a14000000ea03010000000000000000000000000ac967951cf2da70e68e5cd57ab1e9003e38f8"], 0x28}}, 0x4008000) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000004280)=ANY=[@ANYBLOB="0500000001000000a003000002"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r2, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x0) 2.442043155s ago: executing program 3 (id=1955): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0}) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) 2.441875225s ago: executing program 6 (id=1956): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027bd7046b57d5400fddbdf25", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076657468315f766c616e"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'vlan1\x00', &(0x7f0000000180)=@ethtool_ringparam={0x11, 0x2, 0x3, 0xd, 0x82, 0x200, 0x3, 0xffff, 0x4}}) 2.207673801s ago: executing program 1 (id=1957): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="00240000000000001800128008000100677470000c0002800500050000000000080003"], 0x40}}, 0x4000000) 2.195533821s ago: executing program 3 (id=1958): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@rand_addr=0x64010101, @in6=@empty, 0x0, 0x56, 0x2, 0x0, 0x2}, {0x0, 0x5, 0x1, 0x5, 0xfffffffffffffff6, 0x1fffffc, 0xfffffffffffffffc, 0x8}, {0x4, 0x0, 0x4}, 0x4000006, 0x0, 0x1, 0x0, 0x2}, {{@in6=@empty, 0x4d2, 0x33}, 0xa, @in=@loopback, 0x3500, 0x4, 0x0, 0x0, 0xffffffff, 0x8, 0x1}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4000, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) 1.963798566s ago: executing program 1 (id=1959): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mprotect(&(0x7f0000248000/0x3000)=nil, 0x3000, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 1.881879088s ago: executing program 3 (id=1960): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000d40)=ANY=[@ANYRES8=r0, @ANYRESOCT=r0, @ANYRES64=r0, @ANYRESHEX=0x0, @ANYRES32=r0, @ANYRES16=r0, @ANYRES8=r0, @ANYBLOB="d0767617e7ed679060c4f14e8cc3674f9fb2a5cf9eacdb7eb9659a7e139d198fab71b2230662ea19431cee2dc42520d80f9af29e07f8496b8513ec46dd97cb55775b5b6ccae9ed4e7a9e6bf5dd4afdd9d1330e8b7c2782e19afce7491e0141e0a3815379cc4dac616a4995dc09e1e3d8f4f980c600b4b5c536dd8bea9bac9662b663d14a16875935aac77e", @ANYRES32=r0], 0x0, 0x56, 0xffffffffffffff09, 0x1}, 0x28) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x51) r1 = socket(0x2c, 0x3, 0x5) recvfrom(r1, 0x0, 0x0, 0x60, &(0x7f00000007c0)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) readv(r2, &(0x7f0000000680), 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r4) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000600fc000000080011000700000008000e00800000000800", @ANYRES64=r4], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80) 1.107295965s ago: executing program 1 (id=1961): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="3000000000000000840000"], 0x30, 0x180}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={r2, 0x8000}, 0x8) 873.719551ms ago: executing program 1 (id=1962): recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='iocharset', 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000002c0)={'#! ', '', [{0x20, '\xe0^@&&}\'\x00'}, {0x20, '\xe0^@&&}\'\x00'}, {0x20, '\xfe\xc4\x7fT\xc5#! \x80[\xc2\"\xba\xef\xf9\xb2\xbfAb\xf9\b\xbf\x1a\xbd\xd1F\xed\x8c\xf1\x88\x86 \xfc\x8f\x1aF\xfa\\q\x1ad\xdf\xfb\xf7\x00\x9a\xdb\xbc\xcb[!(\xf0\xb2\xcf\xd4\'t\fE\"\x91\x8a\b\xe1\xe6\x1b_n\xd5b-xs'}, {0x20, 'westwood'}]}, 0x6a) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) 813.360732ms ago: executing program 3 (id=1963): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) socket$alg(0x26, 0x5, 0x0) socket$inet(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x1}, {0x0, 0xffff}, {0xf, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x1b, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x1}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000881}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fbdbdf25fc0000000000000000000000000000000000000000000000000000000000000000000004000100000a006080", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000000000000040000000000000000000038dcf5e6311660990000000000000000"], 0xb8}}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000040)=ANY=[@ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x4040095}, 0x40010) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) 722.342514ms ago: executing program 6 (id=1964): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(r1) close(0x4) 0s ago: executing program 1 (id=1965): openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x1}, 0x50) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000f303010000000000000000000000000a14000000ea03010000000000000000000000000ac967951cf2da70e68e5cd57ab1e9003e38f8"], 0x28}}, 0x4008000) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000004280)=ANY=[@ANYBLOB="0500000001000000a003000002"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r2, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x0) kernel console output (not intermixed with test programs): _get_endpoints failed: -71 [ 193.869293][ T5811] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 193.931383][ T5811] usb 2-1: USB disconnect, device number 5 [ 194.076171][ T6871] fuse: Bad value for 'fd' [ 194.491518][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.508936][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.876355][ T6888] CacheFiles: No cache directory specified [ 196.141195][ T6896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.315'. [ 196.474295][ T6897] input: syz0 as /devices/virtual/input/input10 [ 196.969707][ T6903] loop5: detected capacity change from 0 to 7 [ 196.975298][ T6904] fuse: Bad value for 'fd' [ 196.982408][ T6901] loop1: detected capacity change from 0 to 512 [ 197.105356][ T6903] Dev loop5: unable to read RDB block 7 [ 197.121562][ T6903] loop5: unable to read partition table [ 197.129371][ T6903] loop5: partition table beyond EOD, truncated [ 197.149867][ T6903] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 197.936305][ T6908] loop5: detected capacity change from 7 to 0 [ 197.963105][ T6901] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.004140][ T6901] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.163897][ T6901] input: syz1 as /devices/virtual/input/input11 [ 198.310932][ T6927] CacheFiles: No cache directory specified [ 199.290520][ T6934] netlink: 28 bytes leftover after parsing attributes in process `syz.2.328'. [ 199.303335][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.303679][ T6934] netlink: 28 bytes leftover after parsing attributes in process `syz.2.328'. [ 199.566211][ T6934] dummy0: entered promiscuous mode [ 199.738726][ T6934] dummy0: left promiscuous mode [ 199.774758][ T6936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.329'. [ 199.797158][ T27] audit: type=1326 audit(1786134910.169:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6939 comm="syz.1.330" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448259e0d9 code=0x7ffc0000 [ 199.869124][ T27] audit: type=1326 audit(1786134910.169:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6939 comm="syz.1.330" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448259e0d9 code=0x7ffc0000 [ 199.894843][ T27] audit: type=1326 audit(1786134910.169:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6939 comm="syz.1.330" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f448259e0d9 code=0x7ffc0000 [ 199.983857][ T6943] fuse: Bad value for 'fd' [ 200.535057][ T27] audit: type=1326 audit(1786134910.169:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6939 comm="syz.1.330" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448259e0d9 code=0x7ffc0000 [ 200.832093][ T27] audit: type=1326 audit(1786134910.169:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6939 comm="syz.1.330" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f448259e0d9 code=0x7ffc0000 [ 200.902744][ T27] audit: type=1326 audit(1786134910.169:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6939 comm="syz.1.330" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448259e0d9 code=0x7ffc0000 [ 201.020709][ T27] audit: type=1326 audit(1786134910.169:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6939 comm="syz.1.330" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f448259e0d9 code=0x7ffc0000 [ 201.071478][ T6954] loop1: detected capacity change from 0 to 256 [ 201.083245][ T27] audit: type=1326 audit(1786134910.169:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6939 comm="syz.1.330" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448259e0d9 code=0x7ffc0000 [ 201.140662][ T6954] FAT-fs (loop1): Directory bread(block 1285) failed [ 201.149471][ T27] audit: type=1326 audit(1786134910.169:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6939 comm="syz.1.330" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448259e0d9 code=0x7ffc0000 [ 201.165048][ T6954] FAT-fs (loop1): Directory bread(block 1286) failed [ 201.202415][ T27] audit: type=1326 audit(1786134910.169:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6939 comm="syz.1.330" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f448259e0d9 code=0x7ffc0000 [ 201.262416][ T6954] FAT-fs (loop1): Directory bread(block 1287) failed [ 201.284423][ T6954] FAT-fs (loop1): Directory bread(block 1288) failed [ 201.324414][ T6954] FAT-fs (loop1): FAT read failed (blocknr 1281) [ 201.640529][ T6973] fuse: Bad value for 'fd' [ 201.765275][ T5783] Bluetooth: hci1: command 0x0406 tx timeout [ 201.771460][ T5782] Bluetooth: hci3: command 0x0406 tx timeout [ 201.780061][ T5784] Bluetooth: hci0: command 0x0406 tx timeout [ 201.786336][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 201.938110][ T6976] netlink: 28 bytes leftover after parsing attributes in process `syz.2.343'. [ 202.033506][ T6976] netlink: 28 bytes leftover after parsing attributes in process `syz.2.343'. [ 202.460176][ T6976] dummy0: entered promiscuous mode [ 202.547383][ T6976] dummy0: left promiscuous mode [ 203.527916][ T6992] CacheFiles: No cache directory specified [ 204.489193][ T7001] fuse: Bad value for 'fd' [ 204.562060][ T6994] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 204.570922][ T6994] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 205.326943][ T27] kauditd_printk_skb: 19 callbacks suppressed [ 205.326955][ T27] audit: type=1326 audit(1786134915.709:35): auid=4294967295 uid=255 gid=0 ses=4294967295 subj=unconfined pid=7003 comm="syz.0.352" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb4d7d9e0d9 code=0x0 [ 205.665461][ T7013] netlink: 28 bytes leftover after parsing attributes in process `syz.2.356'. [ 205.688424][ T7013] netlink: 28 bytes leftover after parsing attributes in process `syz.2.356'. [ 205.722264][ T7013] dummy0: entered promiscuous mode [ 205.744248][ T7013] dummy0: left promiscuous mode [ 206.581689][ T7026] syzkaller0: entered promiscuous mode [ 206.590614][ T7026] syzkaller0: entered allmulticast mode [ 206.702596][ T7033] CacheFiles: No cache directory specified [ 207.630136][ T7037] fuse: Bad value for 'fd' [ 207.931978][ T7044] loop3: detected capacity change from 0 to 256 [ 207.945186][ T5814] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 207.974912][ T7044] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 208.037050][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 208.070584][ T7044] FAT-fs (loop3): Filesystem has been set read-only [ 208.094749][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 208.105883][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 208.114717][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 208.127484][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 208.137962][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 208.146740][ T5814] usb 1-1: Using ep0 maxpacket: 8 [ 208.154589][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 208.165717][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 208.178131][ T5814] usb 1-1: unable to get BOS descriptor or descriptor too short [ 208.190297][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 208.200112][ T5814] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.215083][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 208.215775][ T5814] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 208.235248][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 208.244263][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 208.256433][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 208.267728][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 208.279371][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 208.290159][ T5814] usb 1-1: string descriptor 0 read error: -22 [ 208.300487][ T5814] usb 1-1: New USB device found, idVendor=1235, idProduct=8215, bcdDevice= 0.40 [ 208.312211][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 208.322447][ T5814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.332633][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 208.370014][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 208.403018][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 208.453719][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 208.491665][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 208.525084][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 208.549767][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 208.593133][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 208.614940][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 208.645305][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 208.665520][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 208.676261][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 208.696223][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 208.704802][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 208.736197][ T5814] usb 1-1: USB disconnect, device number 4 [ 208.761338][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 208.798866][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 208.810013][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 208.818930][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 208.829254][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 208.839342][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 208.848452][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 208.857507][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 208.866396][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 208.875183][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 208.887712][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 208.897620][ T7053] netlink: 28 bytes leftover after parsing attributes in process `syz.1.371'. [ 208.906757][ T7053] netlink: 28 bytes leftover after parsing attributes in process `syz.1.371'. [ 208.915732][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 208.933523][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 208.945282][ T7053] dummy0: entered promiscuous mode [ 208.950591][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 208.960653][ T7053] ifb1: entered promiscuous mode [ 208.967082][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 208.976201][ T7053] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.983846][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 209.003003][ T7053] Cannot create hsr debugfs directory [ 209.012963][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 209.026914][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 209.044947][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 209.055728][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 209.064873][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 209.085233][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 209.094153][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 209.123886][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 209.135099][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 209.143924][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 209.166791][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 209.183114][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 209.285247][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 209.304730][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 209.338291][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 209.382605][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 209.422650][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 209.442321][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 209.463374][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 209.625330][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 209.711674][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 209.891604][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 210.055553][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 210.106882][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 210.156346][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 210.165376][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 210.176344][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 210.185421][ T7044] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 210.194460][ T27] audit: type=1800 audit(1786134920.569:36): pid=7044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.368" name="file1" dev="loop3" ino=1048596 res=0 errno=0 [ 210.318011][ T7066] syzkaller0: entered promiscuous mode [ 210.323792][ T7066] syzkaller0: entered allmulticast mode [ 210.699027][ T7075] CacheFiles: No cache directory specified [ 212.897903][ T5814] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 213.127265][ T5814] usb 4-1: Using ep0 maxpacket: 32 [ 213.146704][ T5814] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 213.167183][ T5814] usb 4-1: config 0 has no interface number 0 [ 213.195200][ T5814] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 213.218479][ T5814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.235242][ T5814] usb 4-1: Product: syz [ 213.239661][ T5814] usb 4-1: Manufacturer: syz [ 213.244289][ T5814] usb 4-1: SerialNumber: syz [ 213.290599][ T5814] usb 4-1: config 0 descriptor?? [ 213.318802][ T5814] smsc95xx v2.0.0 [ 213.731129][ T5814] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 213.742586][ T5814] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 213.875505][ T5811] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 214.112302][ T7134] CacheFiles: No cache directory specified [ 214.125060][ T5811] usb 2-1: Using ep0 maxpacket: 16 [ 214.587387][ T5814] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 214.679140][ T5814] smsc95xx: probe of 4-1:0.67 failed with error -61 [ 214.837324][ T5811] usb 2-1: unable to get BOS descriptor or descriptor too short [ 214.846986][ T5811] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.857270][ T5811] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 214.876697][ T5811] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 214.895381][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.903529][ T5811] usb 2-1: Product: syz [ 214.907809][ T5811] usb 2-1: Manufacturer: syz [ 214.912440][ T5811] usb 2-1: SerialNumber: syz [ 214.973437][ T7140] netlink: 28 bytes leftover after parsing attributes in process `syz.0.388'. [ 214.986127][ T7140] netlink: 28 bytes leftover after parsing attributes in process `syz.0.388'. [ 215.381256][ T5811] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 215.397368][ T5811] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 215.454363][ T5811] usb 2-1: USB disconnect, device number 6 [ 215.547253][ T5932] udevd[5932]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 215.844844][ T175] usb 4-1: USB disconnect, device number 4 [ 216.238270][ T7178] netlink: 28 bytes leftover after parsing attributes in process `syz.1.400'. [ 216.248981][ T3464] Bluetooth: hci4: Frame reassembly failed (-84) [ 216.255489][ T3464] Bluetooth: hci4: Frame reassembly failed (-84) [ 216.262288][ T7178] netlink: 28 bytes leftover after parsing attributes in process `syz.1.400'. [ 217.082051][ T175] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 217.265040][ T175] usb 4-1: Using ep0 maxpacket: 32 [ 217.272118][ T175] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 217.280439][ T175] usb 4-1: config 0 has no interface number 0 [ 217.289848][ T175] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 217.301068][ T175] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.309492][ T175] usb 4-1: Product: syz [ 217.313685][ T175] usb 4-1: Manufacturer: syz [ 217.318380][ T175] usb 4-1: SerialNumber: syz [ 217.326865][ T175] usb 4-1: config 0 descriptor?? [ 217.341733][ T175] smsc95xx v2.0.0 [ 217.774262][ T175] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 217.790051][ T175] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 219.187231][ T5779] Bluetooth: hci4: command 0x1003 tx timeout [ 219.195347][ T5089] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 221.516848][ T7236] overlayfs: missing 'lowerdir' [ 221.613571][ T7237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.420'. [ 221.622861][ T7237] bridge_slave_1: left allmulticast mode [ 221.629697][ T7237] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.165141][ T175] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 222.179249][ T175] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 222.841418][ T7237] bridge_slave_0: left allmulticast mode [ 222.850711][ T7237] bridge_slave_0: left promiscuous mode [ 222.856603][ T7237] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.079787][ T7243] @0Ù: renamed from bond_slave_1 [ 223.156523][ T175] usb 4-1: USB disconnect, device number 5 [ 223.404848][ T7255] loop3: detected capacity change from 0 to 1024 [ 223.497112][ T7255] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 223.531260][ T7255] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 223.609006][ T7255] EXT4-fs (loop3): orphan cleanup on readonly fs [ 223.629790][ T7255] EXT4-fs error (device loop3): ext4_ext_check_inode:532: inode #3: comm syz.3.427: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 3(4), depth 0(0) [ 223.687050][ T7255] EXT4-fs error (device loop3): ext4_quota_enable:7147: comm syz.3.427: Bad quota inode: 3, type: 0 [ 223.725126][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 223.741806][ T7255] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 223.791118][ T7255] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 223.864077][ T7255] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 224.538652][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.186135][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 226.274216][ T9] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 226.286711][ T9] usb 1-1: config 0 has no interface number 0 [ 226.296972][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 226.313644][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.325593][ T9] usb 1-1: Product: syz [ 226.522172][ T9] usb 1-1: Manufacturer: syz [ 226.526880][ T9] usb 1-1: SerialNumber: syz [ 227.115939][ T7302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.439'. [ 228.160572][ T9] usb 1-1: config 0 descriptor?? [ 228.520915][ T9] usb 1-1: can't set config #0, error -71 [ 228.529350][ T9] usb 1-1: USB disconnect, device number 5 [ 228.633684][ T7310] syzkaller0: entered promiscuous mode [ 228.652842][ T7310] syzkaller0: entered allmulticast mode [ 230.072348][ T7367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.449'. [ 230.149598][ T7367] loop3: detected capacity change from 0 to 512 [ 230.306058][ T7367] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 230.317623][ T7367] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 230.890327][ T7377] loop3: detected capacity change from 0 to 256 [ 231.129045][ T7381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.450'. [ 232.325675][ T7293] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 232.525097][ T7293] usb 1-1: Using ep0 maxpacket: 32 [ 232.534638][ T7293] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 232.549378][ T7293] usb 1-1: config 0 has no interface number 0 [ 232.571865][ T7293] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 232.581615][ T7293] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.591726][ T7293] usb 1-1: Product: syz [ 232.611733][ T7293] usb 1-1: Manufacturer: syz [ 232.622759][ T7293] usb 1-1: SerialNumber: syz [ 232.647912][ T7293] usb 1-1: config 0 descriptor?? [ 232.666623][ T7293] smsc95xx v2.0.0 [ 233.130692][ T7293] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 233.238165][ T7293] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 233.649796][ T5838] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 234.004674][ T7414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.469'. [ 234.111371][ T5838] usb 4-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 234.174485][ T5838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.343568][ T5838] usb 4-1: config 0 descriptor?? [ 234.954300][ T5838] smartjoyplus 0003:0B43:0003.0004: ignoring exceeding usage max [ 235.058725][ T5838] smartjoyplus 0003:0B43:0003.0004: hidraw0: USB HID v0.81 Device [HID 0b43:0003] on usb-dummy_hcd.3-1/input0 [ 235.260997][ T5838] smartjoyplus 0003:0B43:0003.0004: no output reports found [ 235.493535][ T5838] usb 4-1: USB disconnect, device number 6 [ 235.518372][ T7293] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 235.529317][ T7293] smsc95xx: probe of 1-1:0.67 failed with error -32 [ 235.618483][ T7420] fido_id[7420]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 236.054784][ T7293] usb 1-1: USB disconnect, device number 6 [ 236.227829][ T7436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.475'. [ 236.298126][ T7436] loop3: detected capacity change from 0 to 512 [ 236.463746][ T7436] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 236.488029][ T7436] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 240.284225][ T7445] CacheFiles: No cache directory specified [ 241.285732][ T5813] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 241.495096][ T5813] usb 4-1: Using ep0 maxpacket: 32 [ 241.502674][ T5813] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 241.515064][ T5813] usb 4-1: config 0 has no interface number 0 [ 241.525903][ T5813] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 241.545039][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.564302][ T5813] usb 4-1: Product: syz [ 241.574350][ T5813] usb 4-1: Manufacturer: syz [ 241.594418][ T5813] usb 4-1: SerialNumber: syz [ 241.616951][ T5813] usb 4-1: config 0 descriptor?? [ 241.634415][ T5813] smsc95xx v2.0.0 [ 242.049498][ T5813] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 242.076842][ T5813] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 243.508775][ T5813] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 243.531434][ T5813] smsc95xx: probe of 4-1:0.67 failed with error -32 [ 244.560822][ T9] usb 4-1: USB disconnect, device number 7 [ 244.689622][ T7513] CacheFiles: No cache directory specified [ 246.608714][ T7540] loop3: detected capacity change from 0 to 256 [ 246.761165][ T7542] CacheFiles: No cache directory specified [ 247.695253][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 248.818683][ T7546] netlink: 'syz.2.514': attribute type 3 has an invalid length. [ 250.119858][ T7560] fuse: Bad value for 'fd' [ 250.138218][ T7560] cgroup: noprefix used incorrectly [ 250.665375][ T5838] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 251.001474][ T7577] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 251.089086][ T7576] CacheFiles: No cache directory specified [ 252.283538][ T5838] usb 4-1: Using ep0 maxpacket: 32 [ 252.726047][ T5838] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 252.764671][ T5838] usb 4-1: config 0 has no interface number 0 [ 252.775140][ T5838] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 252.784233][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.792367][ T5838] usb 4-1: Product: syz [ 252.796637][ T5838] usb 4-1: Manufacturer: syz [ 252.801347][ T5838] usb 4-1: SerialNumber: syz [ 252.808429][ T5838] usb 4-1: config 0 descriptor?? [ 252.826728][ T5838] smsc95xx v2.0.0 [ 253.242794][ T7590] mmap: syz.2.525 (7590): VmData 164380672 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 253.282340][ T5838] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 253.299103][ T5838] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 254.576773][ T5838] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 254.605344][ T5838] smsc95xx: probe of 4-1:0.67 failed with error -61 [ 254.983289][ T7613] CacheFiles: No cache directory specified [ 255.876403][ T5813] usb 4-1: USB disconnect, device number 8 [ 255.950229][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.956780][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.012640][ T7618] loop3: detected capacity change from 0 to 128 [ 256.614079][ T7637] CacheFiles: No cache directory specified [ 257.725130][ T7293] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 257.745046][ T5813] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 257.921771][ T7293] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 257.940042][ T7293] usb 2-1: config 0 has no interface number 0 [ 257.955336][ T5813] usb 1-1: Using ep0 maxpacket: 32 [ 257.955366][ T7293] usb 2-1: config 0 interface 41 has no altsetting 0 [ 257.962509][ T5813] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 257.977566][ T7293] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 257.985011][ T5813] usb 1-1: config 0 has no interface number 0 [ 257.996113][ T5813] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 258.015065][ T5813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.015091][ T7293] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.031165][ T5813] usb 1-1: Product: syz [ 258.031184][ T5813] usb 1-1: Manufacturer: syz [ 258.031199][ T5813] usb 1-1: SerialNumber: syz [ 258.042728][ T5813] usb 1-1: config 0 descriptor?? [ 258.067359][ T5813] smsc95xx v2.0.0 [ 258.073707][ T7293] usb 2-1: Product: syz [ 258.078730][ T7293] usb 2-1: Manufacturer: syz [ 258.086995][ T7293] usb 2-1: SerialNumber: syz [ 258.111599][ T7293] usb 2-1: config 0 descriptor?? [ 258.471384][ T5813] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 258.495383][ T5813] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 258.939592][ T7293] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 259.774411][ T5813] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 259.796143][ T7293] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 259.806945][ T7293] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 259.817067][ T7293] CoreChips: probe of 2-1:0.41 failed with error -71 [ 259.836817][ T7293] usb 2-1: USB disconnect, device number 7 [ 259.839707][ T5813] smsc95xx: probe of 1-1:0.67 failed with error -61 [ 260.233602][ T7668] CacheFiles: No cache directory specified [ 261.123312][ T9] usb 1-1: USB disconnect, device number 7 [ 261.250652][ T27] audit: type=1326 audit(1786134971.629:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.0.560" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4d7d9e0d9 code=0x7ffc0000 [ 261.305075][ T27] audit: type=1326 audit(1786134971.629:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.0.560" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4d7d9e0d9 code=0x7ffc0000 [ 261.366112][ T27] audit: type=1326 audit(1786134971.629:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.0.560" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4d7d9e0d9 code=0x7ffc0000 [ 261.420911][ T27] audit: type=1326 audit(1786134971.629:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.0.560" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4d7d9e0d9 code=0x7ffc0000 [ 261.479305][ T27] audit: type=1326 audit(1786134971.669:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.0.560" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7fb4d7d9e0d9 code=0x7ffc0000 [ 261.530900][ T27] audit: type=1326 audit(1786134971.669:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.0.560" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4d7d9e0d9 code=0x7ffc0000 [ 261.575161][ T27] audit: type=1326 audit(1786134971.669:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.0.560" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4d7d9e0d9 code=0x7ffc0000 [ 261.599377][ T7676] wireguard0: entered promiscuous mode [ 261.605148][ T27] audit: type=1326 audit(1786134971.679:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.0.560" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4d7d9e0d9 code=0x7ffc0000 [ 261.605189][ T27] audit: type=1326 audit(1786134971.679:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.0.560" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4d7d9e0d9 code=0x7ffc0000 [ 261.605225][ T27] audit: type=1326 audit(1786134971.679:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.0.560" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fb4d7d9e0d9 code=0x7ffc0000 [ 264.008668][ T7707] CacheFiles: No cache directory specified [ 265.544346][ T3558] Bluetooth: hci4: Frame reassembly failed (-84) [ 265.552578][ T7721] netlink: 28 bytes leftover after parsing attributes in process `syz.3.572'. [ 265.568325][ T7721] netlink: 28 bytes leftover after parsing attributes in process `syz.3.572'. [ 267.637105][ T5089] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 267.899542][ T7746] CacheFiles: No cache directory specified [ 269.347295][ T7765] syzkaller0: entered promiscuous mode [ 269.354084][ T7765] syzkaller0: entered allmulticast mode [ 269.374492][ T7765] tipc: Started in network mode [ 269.384069][ T7765] tipc: Node identity 0a8b770a9d8f, cluster identity 4711 [ 269.393540][ T7765] tipc: Enabled bearer , priority 0 [ 269.432369][ T7765] tipc: Resetting bearer [ 269.671983][ T7763] tipc: Resetting bearer [ 269.701392][ T7763] tipc: Disabling bearer [ 271.235682][ T7293] tipc: Node number set to 2533652234 [ 272.393062][ T7786] netlink: 28 bytes leftover after parsing attributes in process `syz.1.593'. [ 275.747845][ T7817] CacheFiles: No cache directory specified [ 277.067640][ T7829] binder: 7828:7829 unknown command 0 [ 277.073164][ T7829] binder: 7828:7829 ioctl c0306201 2000000005c0 returned -22 [ 277.228189][ T7835] loop3: detected capacity change from 0 to 128 [ 277.292358][ T7835] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 277.308653][ T7835] ext4 filesystem being mounted at /129/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 277.865245][ T5773] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 278.883585][ T7854] CacheFiles: No cache directory specified [ 279.789042][ T7864] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 279.864825][ T7866] syzkaller0: entered promiscuous mode [ 279.871464][ T7866] syzkaller0: entered allmulticast mode [ 279.883285][ T7866] tipc: Enabled bearer , priority 0 [ 279.899960][ T7866] tipc: Resetting bearer [ 279.921991][ T7865] tipc: Resetting bearer [ 279.966640][ T7865] tipc: Disabling bearer [ 281.691160][ T7887] CacheFiles: No cache directory specified [ 283.022488][ T7897] syz.1.632 (7897) used greatest stack depth: 17896 bytes left [ 284.916545][ T7912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.635'. [ 285.025296][ T5813] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 285.255128][ T5813] usb 1-1: Using ep0 maxpacket: 32 [ 285.324416][ T5813] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 285.657704][ T7920] CacheFiles: No cache directory specified [ 285.775145][ T7923] tipc: Failed to remove unknown binding: 66,0,0/2533652234:1375497436/1375497437 [ 285.874513][ T27] kauditd_printk_skb: 65 callbacks suppressed [ 285.874526][ T27] audit: type=1326 audit(1786134996.249:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7924 comm="syz.2.641" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa762d9e0d9 code=0x0 [ 286.359722][ T5813] usb 1-1: config 0 has no interface number 0 [ 286.437836][ T5813] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 286.447666][ T5813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.456322][ T5813] usb 1-1: Product: syz [ 286.460993][ T5813] usb 1-1: Manufacturer: syz [ 286.469873][ T5813] usb 1-1: SerialNumber: syz [ 286.481483][ T5813] usb 1-1: config 0 descriptor?? [ 286.506146][ T5813] smsc95xx v2.0.0 [ 286.540316][ T7934] loop3: detected capacity change from 0 to 256 [ 286.997777][ T7944] device-mapper: ioctl: populate_table: target parameters not NUL-terminated [ 287.112547][ T7946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.647'. [ 287.137283][ T5813] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 287.149869][ T5813] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 288.596044][ T5813] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 288.635202][ T5813] smsc95xx: probe of 1-1:0.67 failed with error -61 [ 288.794777][ T7960] CacheFiles: No cache directory specified [ 289.743193][ T7293] usb 1-1: USB disconnect, device number 8 [ 290.058205][ T7293] smpboot: CPU 1 is now offline [ 290.598838][ T7971] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.656'. [ 291.759929][ T7976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.658'. [ 293.945094][ T8002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.668'. [ 294.557294][ T8001] tipc: Trying to set illegal importance in message [ 297.108848][ T8030] loop3: detected capacity change from 0 to 128 [ 297.142389][ T8030] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 298.053607][ T8030] ext4 filesystem being mounted at /140/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 299.505059][ T8048] netlink: 12 bytes leftover after parsing attributes in process `syz.1.681'. [ 299.910787][ T8046] netlink: 9 bytes leftover after parsing attributes in process `syz.2.683'. [ 299.952040][ T8046] gretap0: entered promiscuous mode [ 300.045424][ T8046] netlink: 5 bytes leftover after parsing attributes in process `syz.2.683'. [ 300.054309][ T8046] 0ªî{X¹¦: renamed from gretap0 [ 300.176744][ T8046] 0ªî{X¹¦: left promiscuous mode [ 300.208287][ T8046] 0ªî{X¹¦: entered allmulticast mode [ 300.240127][ T8046] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 303.399813][ T8070] syzkaller0: entered promiscuous mode [ 303.428770][ T8070] syzkaller0: entered allmulticast mode [ 303.467470][ T8070] tipc: Enabled bearer , priority 0 [ 303.522933][ T8070] tipc: Resetting bearer [ 303.564592][ T8069] tipc: Resetting bearer [ 303.629769][ T8069] tipc: Disabling bearer [ 305.728806][ T8089] 9pnet: p9_errstr2errno: server reported unknown error [ 305.786470][ T5773] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 308.935226][ T8104] xt_l2tp: unknown flags: 17 [ 315.235177][ T7293] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 315.316429][ T5089] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 315.328426][ T5089] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 315.336447][ T5089] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 315.344056][ T5089] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 315.354742][ T5089] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 315.362088][ T5089] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 315.841944][ T8144] loop3: detected capacity change from 0 to 1024 [ 315.879046][ T8144] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 315.899056][ T8132] chnl_net:caif_netlink_parms(): no params data found [ 315.974314][ T8144] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.074292][ T27] audit: type=1800 audit(1786135026.449:113): pid=8144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.714" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 316.123171][ T8144] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.714: missing EA_INODE flag [ 316.176191][ T8132] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.196460][ T8144] EXT4-fs (loop3): Remounting filesystem read-only [ 316.208846][ T8132] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.238219][ T8132] bridge_slave_0: entered allmulticast mode [ 316.282254][ T8132] bridge_slave_0: entered promiscuous mode [ 316.301878][ T8132] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.339652][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.350124][ T8132] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.384392][ T8132] bridge_slave_1: entered allmulticast mode [ 316.449156][ T8132] bridge_slave_1: entered promiscuous mode [ 316.602753][ T8132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.780279][ T8132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.383809][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.390372][ T5089] Bluetooth: hci4: command tx timeout [ 318.397358][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.637749][ T8132] team0: Port device team_slave_0 added [ 319.672611][ T8132] team0: Port device team_slave_1 added [ 319.984517][ T8132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.024992][ T8132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.065008][ T5859] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 320.164614][ T8132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.241098][ T8132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.285035][ T5859] usb 4-1: Using ep0 maxpacket: 32 [ 320.300987][ T8132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.338010][ T5859] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 320.366896][ T5859] usb 4-1: config 0 has no interface number 0 [ 320.410542][ T5089] Bluetooth: hci4: command tx timeout [ 320.416705][ T5859] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 320.475155][ T5859] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.494094][ T8132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.525163][ T5859] usb 4-1: Product: syz [ 320.529619][ T5859] usb 4-1: Manufacturer: syz [ 320.534554][ T5859] usb 4-1: SerialNumber: syz [ 320.602164][ T5859] usb 4-1: config 0 descriptor?? [ 320.632666][ T5859] smsc95xx v2.0.0 [ 320.664345][ T8132] hsr_slave_0: entered promiscuous mode [ 320.695933][ T8132] hsr_slave_1: entered promiscuous mode [ 320.897561][ T8132] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 320.935158][ T8132] Cannot create hsr debugfs directory [ 321.052744][ T5859] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 321.084300][ T5859] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 322.030143][ T8132] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 322.130245][ T8132] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 322.171127][ T8132] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 322.193860][ T8132] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 322.488342][ T5089] Bluetooth: hci4: command tx timeout [ 322.521896][ T8132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.587797][ T8132] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.634365][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.641544][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.711223][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.718409][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.906200][ T5859] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -32 [ 322.968129][ T5859] smsc95xx: probe of 4-1:0.67 failed with error -32 [ 323.040368][ T5859] usb 4-1: USB disconnect, device number 9 [ 323.301475][ T8132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.425078][ T7293] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 324.782397][ T5089] Bluetooth: hci4: command tx timeout [ 324.813311][ T7293] usb 2-1: Using ep0 maxpacket: 16 [ 324.839589][ T7293] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 324.873892][ T7293] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.902942][ T7293] usb 2-1: Product: syz [ 324.924512][ T7293] usb 2-1: Manufacturer: syz [ 325.055294][ T7293] usb 2-1: SerialNumber: syz [ 325.304172][ T8132] veth0_vlan: entered promiscuous mode [ 330.334513][ T7293] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 330.350359][ T8132] veth1_vlan: entered promiscuous mode [ 330.390703][ T7293] usb 2-1: USB disconnect, device number 8 [ 330.491169][ T8132] veth0_macvtap: entered promiscuous mode [ 330.520510][ T8132] veth1_macvtap: entered promiscuous mode [ 330.550224][ T8132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.571929][ T8132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.604478][ T8132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.636876][ T8132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.676463][ T8132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.707638][ T8132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.718611][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 330.751120][ T8132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.779353][ T8132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.816983][ T8132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.849267][ T8132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.881644][ T8132] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.915282][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 330.923482][ T8132] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.947337][ T9] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.977253][ T8132] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.997862][ T9] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.010932][ T8132] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.038640][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 331.071908][ T9] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 331.144188][ T9] usb 4-1: Product: syz [ 331.187200][ T9] usb 4-1: Manufacturer: syz [ 331.225757][ T9] hub 4-1:4.0: USB hub found [ 331.290117][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.342882][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.427315][ T9] hub 4-1:4.0: config failed, hub has too many ports! (err -19) [ 331.480935][ T3464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.539035][ T3464] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.755776][ T9] usb 4-1: USB disconnect, device number 10 [ 331.873373][ T8238] loop4: detected capacity change from 0 to 128 [ 331.962433][ T8238] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 332.145073][ T8238] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 340.007620][ T8261] loop3: detected capacity change from 0 to 256 [ 340.046292][ T8261] exfat: Unknown parameter './file1' [ 340.218927][ T8261] loop3: detected capacity change from 0 to 4096 [ 340.257404][ T8261] EXT4-fs: inline encryption not supported [ 340.334777][ T8261] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 340.391667][ T8261] EXT4-fs (loop3): Test dummy encryption mode enabled [ 340.463668][ T8261] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=80ec0a8, mo2=0003] [ 340.535897][ T8261] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.847888][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.575341][ T8293] netlink: 28 bytes leftover after parsing attributes in process `syz.2.759'. [ 344.618788][ T8293] netlink: 28 bytes leftover after parsing attributes in process `syz.2.759'. [ 345.495054][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 345.665372][ T8322] capability: warning: `syz.3.770' uses 32-bit capabilities (legacy support in use) [ 345.704999][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 345.751099][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0120, bcdDevice= 0.40 [ 345.780937][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.845125][ T9] usb 2-1: Product: syz [ 345.849318][ T9] usb 2-1: Manufacturer: syz [ 345.903075][ T9] usb 2-1: SerialNumber: syz [ 347.522067][ T8332] loop3: detected capacity change from 0 to 512 [ 347.539184][ T8332] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 347.550913][ T8332] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 347.676412][ T8310] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 347.731232][ T9] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 347.801591][ T9] usb 2-1: USB disconnect, device number 9 [ 347.882364][ T8344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.778'. [ 347.901572][ T8269] udevd[8269]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 347.963286][ T8344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.778'. [ 348.188358][ T8349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.780'. [ 348.357978][ T8352] syzkaller0: entered promiscuous mode [ 348.384041][ T8352] syzkaller0: entered allmulticast mode [ 349.583298][ T8357] tipc: Enabled bearer , priority 0 [ 349.637670][ T8352] tipc: Resetting bearer [ 349.756605][ T8350] tipc: Resetting bearer [ 349.942945][ T8350] tipc: Disabling bearer [ 349.953073][ T8249] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 351.045908][ T5779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 351.066506][ T5779] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 351.076972][ T5779] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 351.100037][ T8364] loop3: detected capacity change from 0 to 512 [ 351.118670][ T5779] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 351.126888][ T5779] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 351.136001][ T5779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 351.161299][ T8364] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 351.173122][ T8364] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 354.085369][ T5779] Bluetooth: hci3: command tx timeout [ 355.792064][ T8366] chnl_net:caif_netlink_parms(): no params data found [ 357.035546][ T5779] Bluetooth: hci3: command tx timeout [ 357.089747][ T8402] loop3: detected capacity change from 0 to 512 [ 357.097307][ T8402] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 357.107464][ T8402] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 357.392376][ T8366] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.441285][ T8366] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.460929][ T8366] bridge_slave_0: entered allmulticast mode [ 357.481259][ T8415] loop3: detected capacity change from 0 to 512 [ 357.491223][ T8366] bridge_slave_0: entered promiscuous mode [ 357.525365][ T8366] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.556809][ T8415] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.799: iget: bad i_size value: 38620345925642 [ 357.575193][ T8366] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.592873][ T8366] bridge_slave_1: entered allmulticast mode [ 357.607496][ T8415] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.799: couldn't read orphan inode 15 (err -117) [ 357.631600][ T8366] bridge_slave_1: entered promiscuous mode [ 357.692377][ T8415] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.739490][ T8366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.807196][ T8366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.858933][ T8414] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm syz.3.799: bg 0: block 5: invalid block bitmap [ 357.932963][ T8415] EXT4-fs (loop3): shut down requested (0) [ 357.965181][ T3487] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.125816][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.183212][ T3487] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.330506][ T8366] team0: Port device team_slave_0 added [ 358.345047][ T8423] loop3: detected capacity change from 0 to 256 [ 358.372882][ T8423] exfat: Bad value for 'fmask' [ 358.586668][ T3487] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.448497][ T8425] loop3: detected capacity change from 0 to 512 [ 360.083759][ T5779] Bluetooth: hci3: command tx timeout [ 362.286833][ T5779] Bluetooth: hci3: command tx timeout [ 362.294173][ T8425] EXT4-fs warning (device loop3): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop3. [ 362.425863][ T8366] team0: Port device team_slave_1 added [ 365.117010][ T3487] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.508978][ T8366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.668192][ T8366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.974992][ T8366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.086635][ T8444] loop3: detected capacity change from 0 to 512 [ 369.100552][ T8444] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 369.117622][ T8444] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 369.157875][ T8366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.169501][ T8430] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 369.202169][ T8366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.300701][ T8366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.621507][ T8366] hsr_slave_0: entered promiscuous mode [ 369.640235][ T8366] hsr_slave_1: entered promiscuous mode [ 369.671834][ T8366] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 369.697225][ T8366] Cannot create hsr debugfs directory [ 371.561747][ T8475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.810'. [ 371.621381][ T8475] netlink: 24 bytes leftover after parsing attributes in process `syz.2.810'. [ 373.111412][ T8366] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 373.184847][ T8498] loop3: detected capacity change from 0 to 256 [ 373.230025][ T8498] exfat: Deprecated parameter 'namecase' [ 373.279933][ T8366] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 373.340720][ T8498] exfat: Deprecated parameter 'namecase' [ 373.354782][ T8366] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 373.414034][ T8498] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 373.673635][ T8366] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 373.970376][ T3487] hsr_slave_0: left promiscuous mode [ 373.992674][ T3487] hsr_slave_1: left promiscuous mode [ 374.010382][ T3487] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 374.032226][ T3487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 374.053345][ T3487] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.076224][ T3487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 374.094507][ T3487] bridge_slave_1: left allmulticast mode [ 374.112856][ T3487] bridge_slave_1: left promiscuous mode [ 374.130025][ T3487] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.159898][ T3487] bridge_slave_0: left allmulticast mode [ 374.172126][ T3487] bridge_slave_0: left promiscuous mode [ 374.188954][ T3487] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.292742][ T3487] veth1_macvtap: left promiscuous mode [ 374.316771][ T3487] veth0_macvtap: left promiscuous mode [ 374.336228][ T3487] veth1_vlan: left promiscuous mode [ 374.348314][ T3487] veth0_vlan: left promiscuous mode [ 376.008763][ T9] page_pool_release_retry() stalled pool shutdown 1 inflight 121 sec [ 377.313784][ T8548] usb usb8: usbfs: process 8548 (syz.1.823) did not claim interface 0 before use [ 380.267748][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.274043][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.749350][ T3487] team0 (unregistering): Port device team_slave_1 removed [ 382.404782][ T3487] team0 (unregistering): Port device team_slave_0 removed [ 382.569538][ T3487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.786723][ T3487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.491772][ T3487] bond0 (unregistering): Released all slaves [ 383.590105][ T8542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.821'. [ 383.601884][ T8542] netlink: 24 bytes leftover after parsing attributes in process `syz.3.821'. [ 383.883896][ T8366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.011879][ T8366] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.096778][ T3464] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.104001][ T3464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.201767][ T3464] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.209764][ T3464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.420753][ T8366] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 384.960456][ T8615] kvm_intel: VMCS ffff888078905000, last attempted VM-entry on CPU 0 [ 385.014820][ T8615] kvm_intel: *** Guest State *** [ 385.048478][ T8615] kvm_intel: CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffefff7 [ 385.118243][ T8366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.126380][ T8615] kvm_intel: CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=fffffffffffef871 [ 385.177929][ T8615] kvm_intel: CR3 = 0x0000000000000000 [ 385.318594][ T8615] kvm_intel: PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 385.362664][ T8615] kvm_intel: PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 385.419133][ T8615] kvm_intel: RSP = 0x0000000000000003 RIP = 0x0000000000001000 [ 385.485962][ T8615] kvm_intel: RFLAGS=0x0004fb42 DR7 = 0x0000000000000400 [ 385.550218][ T8630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.842'. [ 385.559674][ T8615] kvm_intel: Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 385.616198][ T8615] kvm_intel: CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 385.630794][ T8630] netlink: 24 bytes leftover after parsing attributes in process `syz.3.842'. [ 385.705654][ T8615] kvm_intel: DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 385.801992][ T8615] kvm_intel: SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 385.902492][ T8615] kvm_intel: ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 385.976707][ T8615] kvm_intel: FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 386.078345][ T8615] kvm_intel: GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 386.136535][ T8615] kvm_intel: GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 386.316703][ T8615] kvm_intel: LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 387.835091][ T8615] kvm_intel: IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 387.887138][ T8615] kvm_intel: TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 387.923752][ T8615] kvm_intel: EFER= 0x0000000000000000 [ 387.960463][ T8615] kvm_intel: PAT = 0x0007040600070406 [ 388.001300][ T8615] kvm_intel: DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 388.015158][ T8366] veth0_vlan: entered promiscuous mode [ 388.075490][ T8615] kvm_intel: Interruptibility = 00000000 ActivityState = 00000000 [ 388.093904][ T8366] veth1_vlan: entered promiscuous mode [ 388.124746][ T8615] kvm_intel: *** Host State *** [ 388.152033][ T8615] kvm_intel: RIP = 0xffffffff8a8ca520 RSP = 0xffffc900038d72d0 [ 388.199522][ T8366] veth0_macvtap: entered promiscuous mode [ 388.207687][ T8615] kvm_intel: CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 388.258668][ T8615] kvm_intel: FSBase=00007f448338a6c0 GSBase=ffff8880b8e00000 TRBase=fffffe0000003000 [ 388.275569][ T8366] veth1_macvtap: entered promiscuous mode [ 388.316524][ T8615] kvm_intel: GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 388.340623][ T8366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.370008][ T8615] kvm_intel: CR0=0000000080050033 CR3=000000005d18c000 CR4=00000000003526f0 [ 388.424656][ T8366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.437627][ T8615] kvm_intel: Sysenter RSP=fffffe0000003000 CS:RIP=0010:ffffffff8aa01b30 [ 388.472444][ T8615] kvm_intel: EFER= 0x0000000000000d01 [ 388.478242][ T8366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.514578][ T8615] kvm_intel: PAT = 0x0407050600070106 [ 388.531649][ T8366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.541969][ T8615] kvm_intel: *** Control State *** [ 388.572380][ T8615] kvm_intel: CPUBased=0xb5a06dfa SecondaryExec=0x000000e3 TertiaryExec=0x0000000000000000 [ 388.610869][ T8366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.643359][ T8615] kvm_intel: PinBased=0x0000007f EntryControls=0000d1ff ExitControls=002befff [ 388.662347][ T8366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.700021][ T8615] kvm_intel: ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 388.726393][ T8366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.761889][ T8615] kvm_intel: VMEntry: intr_info=80000202 errcode=00000000 ilen=00000000 [ 388.813585][ T8366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.824287][ T8615] kvm_intel: VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 388.845465][ T8615] kvm_intel: reason=80000021 qualification=0000000000000000 [ 388.853550][ T8615] kvm_intel: IDTVectoring: info=00000000 errcode=00000000 [ 388.875072][ T8366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.943404][ T8366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.966180][ T8615] kvm_intel: TSC Offset = 0xffffff3609ae5a2e [ 389.029138][ T8366] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.037994][ T8615] TPR Threshold = 0x00 [ 389.042054][ T8615] kvm_intel: APIC-access addr = 0x00000000bff63000 virt-APIC addr = 0x0000000030d3b000 [ 389.078059][ T8366] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.095006][ T8615] kvm_intel: EPT pointer = 0x000000007f37505e [ 389.129632][ T8366] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.148716][ T8615] kvm_intel: Virtual processor ID = 0x0001 [ 389.213182][ T8366] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.352344][ T8680] xt_hashlimit: size too large, truncated to 1048576 [ 389.544265][ T3558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.622837][ T3558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.754328][ T3487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.823427][ T3487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.906816][ T8692] netlink: 12 bytes leftover after parsing attributes in process `syz.2.857'. [ 391.896548][ T8718] netlink: 8 bytes leftover after parsing attributes in process `syz.5.859'. [ 391.958688][ T8718] netlink: 24 bytes leftover after parsing attributes in process `syz.5.859'. [ 396.076887][ T8753] overlayfs: failed to resolve './cgroup': -2 [ 396.106702][ T8752] tipc: Trying to set illegal importance in message [ 398.538107][ T8783] netlink: 8 bytes leftover after parsing attributes in process `syz.5.876'. [ 398.603439][ T8783] netlink: 24 bytes leftover after parsing attributes in process `syz.5.876'. [ 399.327824][ T8796] overlayfs: failed to resolve './file0': -2 [ 403.673131][ T8864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.897'. [ 403.725842][ T8864] netlink: 24 bytes leftover after parsing attributes in process `syz.1.897'. [ 404.365061][ T175] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 405.764221][ T175] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 405.920080][ T175] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 407.048237][ T175] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 407.223595][ T175] usb 6-1: string descriptor 0 read error: -71 [ 407.255777][ T27] audit: type=1326 audit(1786135373.691:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8894 comm="syz.3.905" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd643b9e0d9 code=0x7ffc0000 [ 407.307164][ T175] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 407.362714][ T175] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.435982][ T175] usb 6-1: can't set config #1, error -71 [ 407.443471][ T27] audit: type=1326 audit(1786135373.691:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8894 comm="syz.3.905" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd643b9e0d9 code=0x7ffc0000 [ 407.524648][ T175] usb 6-1: USB disconnect, device number 2 [ 407.667435][ T27] audit: type=1326 audit(1786135373.741:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8894 comm="syz.3.905" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd643b5e90e code=0x7ffc0000 [ 407.827569][ T27] audit: type=1326 audit(1786135373.741:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8894 comm="syz.3.905" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd643b5e90e code=0x7ffc0000 [ 407.982678][ T27] audit: type=1326 audit(1786135373.741:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8894 comm="syz.3.905" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd643b9e0d9 code=0x7ffc0000 [ 408.162172][ T27] audit: type=1326 audit(1786135373.741:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8894 comm="syz.3.905" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd643b9e0d9 code=0x7ffc0000 [ 408.322123][ T27] audit: type=1326 audit(1786135373.761:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8894 comm="syz.3.905" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7fd643b9e0d9 code=0x7ffc0000 [ 408.507372][ T27] audit: type=1326 audit(1786135373.761:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8894 comm="syz.3.905" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd643b9e0d9 code=0x7ffc0000 [ 409.860424][ T27] audit: type=1326 audit(1786135373.761:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8894 comm="syz.3.905" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd643b9e0d9 code=0x7ffc0000 [ 417.229451][ T8987] loop5: detected capacity change from 0 to 256 [ 417.312772][ T8987] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 417.901844][ T8997] loop5: detected capacity change from 0 to 512 [ 419.781488][ T7293] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 419.998055][ T7293] usb 1-1: Dual-Role OTG device on HNP port [ 420.015195][ T7293] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.06 [ 420.043381][ T7293] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.104222][ T7293] gspca_main: spca501-2.14.0 probing 0000:0000 [ 420.139726][ T7293] gspca_spca501: reg write: error -32 [ 420.158623][ T7293] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 420.174759][ T7293] spca501: probe of 1-1:1.0 failed with error -22 [ 420.193515][ T7293] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 420.215114][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 420.425072][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 420.450409][ T9] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 420.482599][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.520731][ T9] usb 2-1: Product: syz [ 420.532935][ T9] usb 2-1: Manufacturer: syz [ 420.539216][ T9] usb 2-1: SerialNumber: syz [ 424.122254][ T9] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 424.225019][ T9] usb 2-1: MIDIStreaming interface descriptor not found [ 424.295287][ T9] usb 2-1: USB disconnect, device number 10 [ 424.395874][ T9014] udevd[9014]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 424.741690][ T9077] xt_hashlimit: max too large, truncated to 1048576 [ 426.916623][ T9094] netlink: 'syz.3.959': attribute type 16 has an invalid length. [ 426.924389][ T9094] netlink: 'syz.3.959': attribute type 17 has an invalid length. [ 426.950716][ T9094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.958329][ T9094] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.091933][ T9094] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 427.355048][ T7293] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 427.570378][ T7293] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 427.607884][ T7293] usb 6-1: config 0 has no interface number 0 [ 427.639603][ T7293] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.693224][ T7293] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.741798][ T7293] usb 6-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 427.807827][ T7293] usb 6-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 427.859952][ T7293] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.917833][ T7293] usb 6-1: config 0 descriptor?? [ 428.302540][ T9133] binder: 9132:9133 ioctl c0306201 200000000080 returned -14 [ 428.398729][ T9133] binder: 9132:9133 ioctl c0306201 2000000003c0 returned -14 [ 429.807760][ T9143] overlayfs: failed to clone lowerpath [ 429.852629][ T9143] overlayfs: missing 'lowerdir' [ 429.912141][ T7293] input: HID 28bd:0042 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:28BD:0042.0005/input/input12 [ 430.123107][ T7293] input: HID 28bd:0042 Pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:28BD:0042.0005/input/input13 [ 430.243566][ T7293] uclogic 0003:28BD:0042.0005: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.5-1/input1 [ 430.356678][ T7293] usb 6-1: USB disconnect, device number 3 [ 430.517457][ T9157] fido_id[9157]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 430.627274][ T27] audit: type=1804 audit(1786135397.051:123): pid=9163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.976" name="bus" dev="ramfs" ino=19911 res=1 errno=0 [ 430.785395][ T27] audit: type=1804 audit(1786135397.101:124): pid=9163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.976" name="bus" dev="ramfs" ino=19911 res=1 errno=0 [ 432.035574][ T9178] overlayfs: workdir and upperdir must be separate subtrees [ 433.650196][ T9189] xt_connbytes: Forcing CT accounting to be enabled [ 433.659055][ T9189] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 433.954650][ T9197] loop5: detected capacity change from 0 to 128 [ 434.168480][ T9197] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 437.328247][ T175] page_pool_release_retry() stalled pool shutdown 1 inflight 182 sec [ 437.675342][ T9197] ext4 filesystem being mounted at /22/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 437.852876][ T27] audit: type=1326 audit(1786135404.271:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9209 comm="syz.1.988" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448259e0d9 code=0x7ffc0000 [ 437.991999][ T8366] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 438.061675][ T27] audit: type=1326 audit(1786135404.271:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9209 comm="syz.1.988" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448259e0d9 code=0x7ffc0000 [ 438.280481][ T27] audit: type=1326 audit(1786135404.271:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9209 comm="syz.1.988" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f448259e0d9 code=0x7ffc0000 [ 438.481024][ T27] audit: type=1326 audit(1786135404.271:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9209 comm="syz.1.988" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448259e0d9 code=0x7ffc0000 [ 438.688674][ T27] audit: type=1326 audit(1786135404.271:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9209 comm="syz.1.988" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448259e0d9 code=0x7ffc0000 [ 439.966749][ T27] audit: type=1326 audit(1786135404.271:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9209 comm="syz.1.988" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f448259e0d9 code=0x7ffc0000 [ 440.197127][ T27] audit: type=1326 audit(1786135404.271:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9209 comm="syz.1.988" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448259e0d9 code=0x7ffc0000 [ 440.257793][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.271340][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.425107][ T27] audit: type=1326 audit(1786135404.271:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9209 comm="syz.1.988" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448259e0d9 code=0x7ffc0000 [ 440.602713][ T9248] Bluetooth: ISO socket layer initialized [ 440.639686][ T27] audit: type=1326 audit(1786135404.271:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9209 comm="syz.1.988" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f448259e0d9 code=0x7ffc0000 [ 440.716281][ T9248] netlink: 4 bytes leftover after parsing attributes in process `syz.3.997'. [ 440.793971][ T9248] netlink: 5 bytes leftover after parsing attributes in process `syz.3.997'. [ 440.848641][ T27] audit: type=1326 audit(1786135404.271:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9209 comm="syz.1.988" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448259e0d9 code=0x7ffc0000 [ 442.282133][ T9264] 9pnet_fd: p9_fd_create_tcp (9264): problem binding to privport [ 447.299594][ T9307] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1016'. [ 453.668316][ T9445] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1040'. [ 453.905391][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 454.170125][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.353862][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.660105][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 457.800694][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 457.902065][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.157944][ T9] usb 4-1: config 0 descriptor?? [ 459.203471][ T9] usb 4-1: can't set config #0, error -71 [ 459.296114][ T9478] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1050'. [ 459.313528][ T9] usb 4-1: USB disconnect, device number 11 [ 463.393970][ T9510] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1057'. [ 463.474675][ T9510] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1057'. [ 464.904378][ T9557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1069'. [ 464.968599][ T9557] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1069'. [ 465.583282][ T9579] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1082'. [ 467.716812][ T9591] CacheFiles: No cache directory specified [ 471.776379][ T9648] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1107'. [ 473.762972][ T9669] bridge1: entered promiscuous mode [ 473.802289][ T9669] bridge1: entered allmulticast mode [ 473.843997][ T9669] team0: Port device bridge1 added [ 473.916164][ T9672] bridge0: port 3(team0) entered blocking state [ 473.953372][ T9672] bridge0: port 3(team0) entered disabled state [ 473.991318][ T9672] team0: entered allmulticast mode [ 474.018744][ T9672] team_slave_0: entered allmulticast mode [ 474.052267][ T9672] team_slave_1: entered allmulticast mode [ 474.102177][ T9672] team0: entered promiscuous mode [ 474.127913][ T9672] team_slave_0: entered promiscuous mode [ 474.161624][ T9672] team_slave_1: entered promiscuous mode [ 474.212676][ T9681] tipc: Failed to remove unknown binding: 66,0,0/2533652234:1406943254/1406943255 [ 474.271434][ T9681] tipc: Failed to remove unknown binding: 66,0,0/2533652234:1406943254/1406943255 [ 474.297543][ T9683] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1114'. [ 474.843331][ T9697] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 474.899994][ T9702] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1122'. [ 475.102853][ T9711] IPv6: Can't replace route, no match found [ 475.145905][ T9711] IPv6: Can't replace route, no match found [ 476.988237][ T9741] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1137'. [ 477.929112][ T9777] Cannot find set identified by id 0 to match [ 478.220461][ T9785] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 478.279554][ T9785] xt_SECMARK: invalid mode: 9 [ 478.647450][ T5089] Bluetooth: hci3: command 0x0406 tx timeout [ 478.819041][ T9805] warning: `syz.1.1162' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 478.991339][ T9801] ip6gre1: entered promiscuous mode [ 479.020228][ T9808] syz.1.1163 uses obsolete (PF_INET,SOCK_PACKET) [ 479.030231][ T9801] ip6gre1: entered allmulticast mode [ 481.799780][ T3464] wlan1: Trigger new scan to find an IBSS to join [ 483.029575][ T9833] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1169'. [ 484.496162][ T9846] loop5: detected capacity change from 0 to 512 [ 484.550649][ T9846] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 484.561227][ T9846] EXT4-fs (loop5): can't mount with data_err=abort, fs mounted w/o journal [ 484.850722][ T9856] loop5: detected capacity change from 0 to 256 [ 484.882906][ T9856] exfat: Bad value for 'fmask' [ 486.832650][ T9372] wlan1: Creating new IBSS network, BSSID 2e:fc:5a:7b:29:13 [ 488.692455][ T9882] Cannot find del_set index 0 as target [ 489.842949][ T9883] loop5: detected capacity change from 0 to 512 [ 489.850799][ T9883] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 489.861068][ T9883] EXT4-fs (loop5): can't mount with data_err=abort, fs mounted w/o journal [ 489.917754][ T9852] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 490.983683][ T9904] tipc: Failed to remove unknown binding: 66,0,0/0:4139354958/4139354960 [ 491.046273][ T9904] tipc: Failed to remove unknown binding: 66,0,0/0:4139354958/4139354959 [ 491.072932][ T9904] tipc: Failed to remove unknown binding: 66,0,0/0:4139354958/4139354960 [ 491.131764][ T9904] tipc: Failed to remove unknown binding: 66,0,0/0:4139354958/4139354959 [ 492.475282][ T9919] loop5: detected capacity change from 0 to 512 [ 492.498883][ T9919] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 492.526655][ T9919] EXT4-fs (loop5): can't mount with data_err=abort, fs mounted w/o journal [ 495.217139][ T9945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1209'. [ 497.646774][ T175] IPVS: starting estimator thread 0... [ 497.845773][ T175] page_pool_release_retry() stalled pool shutdown 1 inflight 243 sec [ 497.859278][ T9989] IPVS: using max 35 ests per chain, 84000 per kthread [ 502.628746][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.635455][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.972086][T10048] syzkaller0: entered promiscuous mode [ 503.044040][T10048] syzkaller0: entered allmulticast mode [ 507.773635][T10078] CacheFiles: No cache directory specified [ 507.949847][T10086] netlink: 'syz.2.1258': attribute type 1 has an invalid length. [ 507.986265][T10086] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1258'. [ 510.239903][T10076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1255'. [ 514.962080][T10111] CacheFiles: No cache directory specified [ 517.430572][ T3464] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 520.595229][ C0] hrtimer: interrupt took 260754 ns [ 527.512029][T10203] netlink: 'syz.5.1299': attribute type 1 has an invalid length. [ 527.576122][T10204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1300'. [ 534.021947][T10229] ip6gre1: entered promiscuous mode [ 534.075671][T10231] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 534.143982][T10229] ip6gre1: entered allmulticast mode [ 534.415832][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 534.505418][ T59] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 534.581638][ T59] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 537.041306][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 537.179981][ T175] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 537.585084][T10259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1318'. [ 538.015144][T10269] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1322'. [ 538.325003][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 541.285835][T10293] netlink: 'syz.3.1331': attribute type 1 has an invalid length. [ 541.658466][T10303] capability: warning: `syz.5.1334' uses deprecated v2 capabilities in a way that may be insecure [ 541.675017][T10296] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 541.816512][T10299] veth3: entered promiscuous mode [ 544.250582][T10299] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 544.358626][T10301] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1331'. [ 544.412197][ T9385] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 544.437987][T10301] 8021q: adding VLAN 0 to HW filter on device bond1 [ 544.500812][T10313] netlink: 'syz.5.1337': attribute type 3 has an invalid length. [ 544.596966][ T9387] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 545.231292][T10327] (null): rxe_set_mtu: Set mtu to 1024 [ 545.845022][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 547.877576][T10327] syz2: rxe_query_port: returned err = -19 [ 547.955370][T10327] infiniband syz2: Couldn't register device with driver model [ 548.011274][T10327] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 548.049332][T10340] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1349'. [ 548.340609][ T175] IPVS: starting estimator thread 0... [ 548.485477][T10348] IPVS: using max 35 ests per chain, 84000 per kthread [ 551.071179][ T142] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 552.033453][T10372] ip_tables: iptables: counters copy to user failed while replacing table [ 552.294324][T10371] IPVS: persistence engine module ip_vs_pe_ not found [ 552.723192][T10381] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1364'. [ 554.904177][T10422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1383'. [ 556.145137][T10448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1395'. [ 557.225062][T10476] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1408'. [ 557.667774][T10484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1412'. [ 557.977903][T10495] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 558.333881][T10504] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1420'. [ 559.310217][T10519] xt_CT: No such helper "netbios-ns" [ 559.395223][ T175] page_pool_release_retry() stalled pool shutdown 1 inflight 304 sec [ 559.597637][T10531] xt_hashlimit: size too large, truncated to 1048576 [ 559.735500][T10533] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1434'. [ 560.565076][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 561.295510][T10565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1447'. [ 562.454992][ T175] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 562.674968][ T175] usb 4-1: Using ep0 maxpacket: 8 [ 562.703872][ T175] usb 4-1: config 0 has no interfaces? [ 562.724139][ T175] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 562.760211][ T175] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 562.790026][ T175] usb 4-1: Product: syz [ 562.810878][ T175] usb 4-1: Manufacturer: syz [ 562.830636][ T175] usb 4-1: SerialNumber: syz [ 562.864318][ T175] usb 4-1: config 0 descriptor?? [ 563.130771][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.138670][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.165339][ T175] usb 4-1: USB disconnect, device number 12 [ 569.122012][T10667] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1487'. [ 571.927660][T10699] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1499'. [ 576.531281][T10737] netlink: 'syz.2.1511': attribute type 12 has an invalid length. [ 578.857488][T10760] netlink: 'syz.1.1520': attribute type 12 has an invalid length. [ 579.645188][T10773] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1524'. [ 580.625439][T10791] netlink: 'syz.2.1533': attribute type 12 has an invalid length. [ 581.393367][T10798] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1536'. [ 582.069621][T10810] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1541'. [ 582.134372][T10812] netlink: 'syz.2.1542': attribute type 12 has an invalid length. [ 582.647304][ T142] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 582.774747][T10826] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1548'. [ 583.726130][T10841] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1554'. [ 584.085600][T10845] netlink: 'syz.1.1555': attribute type 12 has an invalid length. [ 584.144663][ T27] kauditd_printk_skb: 16 callbacks suppressed [ 584.144715][ T27] audit: type=1326 audit(1786135550.571:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10817 comm="syz.5.1546" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b87b9e0d9 code=0x7ffc0000 [ 584.412311][T10848] 8021q: adding VLAN 0 to HW filter on device bond1 [ 584.452552][ T27] audit: type=1326 audit(1786135550.571:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10817 comm="syz.5.1546" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b87b9e0d9 code=0x7ffc0000 [ 584.531848][T10851] netlink: 'syz.2.1556': attribute type 4 has an invalid length. [ 584.585078][T10851] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1556'. [ 584.646577][ T27] audit: type=1326 audit(1786135550.631:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10817 comm="syz.5.1546" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4b87b9e0d9 code=0x7ffc0000 [ 584.699608][T10851] .`: renamed from bond0 [ 584.964372][ T27] audit: type=1326 audit(1786135550.631:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10817 comm="syz.5.1546" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b87b9e0d9 code=0x7ffc0000 [ 585.003786][T10859] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1558'. [ 585.277576][ T27] audit: type=1326 audit(1786135550.631:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10817 comm="syz.5.1546" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b87b9e0d9 code=0x7ffc0000 [ 585.635058][ T27] audit: type=1326 audit(1786135550.641:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10817 comm="syz.5.1546" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f4b87b9e0d9 code=0x7ffc0000 [ 585.903074][ T27] audit: type=1326 audit(1786135550.661:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10817 comm="syz.5.1546" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b87b9e0d9 code=0x7ffc0000 [ 586.147833][ T27] audit: type=1326 audit(1786135550.661:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10817 comm="syz.5.1546" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b87b9e0d9 code=0x7ffc0000 [ 586.449730][ T27] audit: type=1326 audit(1786135550.661:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10817 comm="syz.5.1546" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4b87b9e0d9 code=0x7ffc0000 [ 586.637822][T10874] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1564'. [ 586.680085][ T27] audit: type=1326 audit(1786135550.661:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10817 comm="syz.5.1546" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b87b9e0d9 code=0x7ffc0000 [ 588.217482][T10895] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1569'. [ 590.009824][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 591.030664][T10890] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1568'. [ 591.074678][T10890] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1568'. [ 591.750925][T10910] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1574'. [ 591.856927][T10912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1575'. [ 591.958984][T10912] bond0: option resend_igmp: invalid value (63544) [ 592.039909][T10912] bond0: option resend_igmp: allowed values 0 - 255 [ 592.193678][T10919] netlink: 'syz.1.1578': attribute type 12 has an invalid length. [ 592.562287][T10925] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1581'. [ 592.662916][T10923] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1580'. [ 592.706437][T10923] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1580'. [ 594.039087][T10935] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1585'. [ 594.565186][ T5779] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 597.892497][T10950] netlink: 'syz.2.1589': attribute type 12 has an invalid length. [ 599.678474][T10962] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1594'. [ 603.060161][T10946] Set syz1 is full, maxelem 65536 reached [ 603.111870][T10945] syz_tun: entered allmulticast mode [ 603.446366][T10972] netlink: 'syz.1.1598': attribute type 12 has an invalid length. [ 603.734942][ T175] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 603.959110][ T175] usb 6-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice= 0.00 [ 604.026255][ T175] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.082643][T10987] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1603'. [ 604.159585][ T175] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 604.764669][T10994] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1606'. [ 605.475532][T11011] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1612'. [ 605.497682][ T2323] usb 6-1: Direct firmware load for v4l-pvrusb2-24xxx-01.fw failed with error -2 [ 605.579171][ T2323] usb 6-1: Falling back to sysfs fallback for: v4l-pvrusb2-24xxx-01.fw [ 606.512083][T11039] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1622'. [ 607.242270][ T175] usb 6-1: USB disconnect, device number 4 [ 607.509888][T11060] program syz.5.1630 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 616.687279][T11068] overlayfs: missing 'lowerdir' [ 616.829493][ T9361] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 619.850375][ T5859] page_pool_release_retry() stalled pool shutdown 1 inflight 365 sec [ 621.637225][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 621.637258][ T27] audit: type=1326 audit(1786135588.071:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11135 comm="syz.5.1659" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b87b9e0d9 code=0x7ffc0000 [ 621.805758][ T27] audit: type=1326 audit(1786135588.101:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11135 comm="syz.5.1659" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f4b87b9e0d9 code=0x7ffc0000 [ 621.872961][T11136] IPVS: Scheduler module ip_vs_ not found [ 621.981827][ T27] audit: type=1326 audit(1786135588.101:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11135 comm="syz.5.1659" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b87b9e0d9 code=0x7ffc0000 [ 622.160912][ T27] audit: type=1326 audit(1786135588.101:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11135 comm="syz.5.1659" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b87b9e0d9 code=0x7ffc0000 [ 622.312629][ T27] audit: type=1326 audit(1786135588.121:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11135 comm="syz.5.1659" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4b87b9e0d9 code=0x7ffc0000 [ 622.452161][ T27] audit: type=1326 audit(1786135588.331:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11135 comm="syz.5.1659" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b87b9e0d9 code=0x7ffc0000 [ 622.531685][ T27] audit: type=1326 audit(1786135588.331:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11135 comm="syz.5.1659" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b87b9e0d9 code=0x7ffc0000 [ 624.585606][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.592991][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.059183][T11125] 8021q: adding VLAN 0 to HW filter on device .` [ 627.093712][T11125] 8021q: adding VLAN 0 to HW filter on device team0 [ 627.138807][T11125] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 627.163218][T11163] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1667'. [ 627.226793][T11165] tipc: Enabled bearer , priority 10 [ 628.169516][T11186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1677'. [ 628.215341][T11188] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1679'. [ 628.235133][T11189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1680'. [ 637.440883][T11192] overlayfs: missing 'lowerdir' [ 647.526745][T11221] overlayfs: missing 'lowerdir' [ 648.288664][ T9361] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 655.284995][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 658.356901][T11244] overlayfs: missing 'lowerdir' [ 659.156571][ T5779] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 659.169120][ T5779] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 659.184063][ T5779] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 659.195237][ T5779] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 659.212072][ T5779] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 659.220656][ T5779] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 660.144490][T11276] syz_tun: entered promiscuous mode [ 660.203530][T11276] syz_tun: left promiscuous mode [ 660.393756][T11284] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 660.411882][T11279] netlink: 'syz.1.1709': attribute type 1 has an invalid length. [ 660.618645][T11281] bond1: (slave gretap1): making interface the new active one [ 660.752574][T11281] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 660.843540][T11257] chnl_net:caif_netlink_parms(): no params data found [ 661.469694][ T5779] Bluetooth: hci4: command tx timeout [ 661.702646][T11257] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.751241][T11257] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.821238][T11257] bridge_slave_0: entered allmulticast mode [ 661.892051][T11257] bridge_slave_0: entered promiscuous mode [ 661.954143][T11306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1717'. [ 662.008079][T11257] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.108122][T11257] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.175145][T11257] bridge_slave_1: entered allmulticast mode [ 662.258899][T11257] bridge_slave_1: entered promiscuous mode [ 662.339247][T11312] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 662.465540][T11257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 662.580623][T11257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 662.876036][T11257] team0: Port device team_slave_0 added [ 662.962547][T11257] team0: Port device team_slave_1 added [ 663.124695][T11257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 663.204904][T11257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 663.529877][ T5779] Bluetooth: hci4: command tx timeout [ 663.572843][T11257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 663.781378][T11257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 663.866906][T11257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 664.025518][T11334] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 664.080369][T11257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 664.537725][T11257] hsr_slave_0: entered promiscuous mode [ 664.580324][T11257] hsr_slave_1: entered promiscuous mode [ 664.609061][T11257] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 664.663453][T11257] Cannot create hsr debugfs directory [ 665.621891][ T5779] Bluetooth: hci4: command tx timeout [ 666.588802][T11257] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 666.693991][T11257] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 666.821627][T11257] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 666.905710][T11257] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 667.477403][T11257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 667.576977][T11257] 8021q: adding VLAN 0 to HW filter on device team0 [ 667.662593][ T9385] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.671022][ T9385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 667.696813][ T5779] Bluetooth: hci4: command tx timeout [ 667.768769][ T9385] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.777174][ T9385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 668.916634][T11257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 670.662188][ T2323] pvrusb2: request_firmware fatal error with code=-110 [ 670.728918][T11257] veth0_vlan: entered promiscuous mode [ 670.759041][ T2323] pvrusb2: Failure uploading firmware1 [ 670.817899][ T2323] pvrusb2: Device initialization was not successful. [ 670.861435][T11257] veth1_vlan: entered promiscuous mode [ 670.899978][ T2323] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 671.002348][ T2323] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 671.104667][T11257] veth0_macvtap: entered promiscuous mode [ 671.120416][ T175] pvrusb2: Device being rendered inoperable [ 671.222172][T11257] veth1_macvtap: entered promiscuous mode [ 671.443156][T11257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 671.547830][T11257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.622771][T11257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 671.694626][T11257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.767145][T11257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 671.838293][T11257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.932002][T11257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 672.035494][T11257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.121812][T11257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.199962][T11257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.266585][T11257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.377596][T11257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.491019][T11257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.548092][T11432] IPVS: sed: FWM 3 0x00000003 - no destination available [ 672.575077][ T175] IPVS: starting estimator thread 0... [ 672.596883][T11257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 672.737174][T11434] IPVS: using max 35 ests per chain, 84000 per kthread [ 672.769742][T11257] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.845111][T11257] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.927859][T11257] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.985103][T11257] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.071879][T11437] netlink: 'syz.1.1762': attribute type 1 has an invalid length. [ 673.683156][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.759993][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.978724][ T9372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.990136][T11444] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1764'. [ 674.058425][ T9372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.369689][T11448] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 677.384250][T11502] netlink: 'syz.3.1770': attribute type 1 has an invalid length. [ 677.429726][T11503] overlayfs: missing 'lowerdir' [ 677.704176][T11504] bond2: (slave gretap1): making interface the new active one [ 677.842688][T11504] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 677.932371][T11506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1766'. [ 678.350086][T11514] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1772'. [ 679.078000][T11519] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 679.193286][T11522] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1775'. [ 679.325148][T11522] netlink: 'syz.6.1775': attribute type 2 has an invalid length. [ 680.645481][ T5814] page_pool_release_retry() stalled pool shutdown 1 inflight 426 sec [ 680.826073][T11538] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1781'. [ 681.566582][T11544] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 685.165768][ T27] audit: type=1326 audit(1786135651.601:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11564 comm="syz.2.1793" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa762d9e0d9 code=0x7ffc0000 [ 685.364663][ T27] audit: type=1326 audit(1786135651.601:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11564 comm="syz.2.1793" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa762d9e0d9 code=0x7ffc0000 [ 685.622866][ T27] audit: type=1326 audit(1786135651.651:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11564 comm="syz.2.1793" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fa762d9e0d9 code=0x7ffc0000 [ 685.861507][ T27] audit: type=1326 audit(1786135651.651:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11564 comm="syz.2.1793" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa762d9e0d9 code=0x7ffc0000 [ 686.010704][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.042626][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.172561][ T27] audit: type=1326 audit(1786135651.671:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11564 comm="syz.2.1793" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa762d9e0d9 code=0x7ffc0000 [ 686.377459][ T27] audit: type=1326 audit(1786135651.671:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11564 comm="syz.2.1793" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa762d9e0d9 code=0x7ffc0000 [ 686.646073][ T27] audit: type=1326 audit(1786135651.671:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11564 comm="syz.2.1793" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa762d9e0d9 code=0x7ffc0000 [ 686.856809][ T27] audit: type=1326 audit(1786135651.671:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11564 comm="syz.2.1793" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa762d9f947 code=0x7ffc0000 [ 687.012486][ T27] audit: type=1326 audit(1786135651.671:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11564 comm="syz.2.1793" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fa762d5e90e code=0x7ffc0000 [ 687.156059][ T27] audit: type=1326 audit(1786135651.921:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11564 comm="syz.2.1793" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fa762d5e90e code=0x7ffc0000 [ 688.937709][ T9383] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 691.202173][T11586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1802'. [ 691.471303][ T5814] IPVS: starting estimator thread 0... [ 691.618410][T11590] IPVS: using max 35 ests per chain, 84000 per kthread [ 693.506056][T11617] overlayfs: missing 'lowerdir' [ 693.679044][ T5859] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 693.978389][ T5859] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 694.060746][ T5859] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.156331][ T5859] usb 7-1: config 0 descriptor?? [ 699.285522][ T5859] [drm] vendor descriptor length:92 data:00 00 00 00 00 00 00 00 00 00 00 [ 699.360724][ T5859] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 699.425342][ T5859] [drm:udl_init] *ERROR* Selecting channel failed [ 699.559539][ T5859] [drm] Initialized udl 0.0.1 20120220 for 7-1:0.0 on minor 2 [ 699.660854][ T5859] [drm] Initialized udl on minor 2 [ 699.719493][ T5859] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 699.846430][ T5859] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 699.868196][ T8] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 699.948633][ T8] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 700.272534][T11625] netlink: 'syz.2.1813': attribute type 12 has an invalid length. [ 702.701859][T11620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1805'. [ 702.745762][ T8] usb 7-1: USB disconnect, device number 2 [ 702.773711][T11627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1814'. [ 703.102290][ T5859] IPVS: starting estimator thread 0... [ 703.294933][T11637] IPVS: using max 35 ests per chain, 84000 per kthread [ 703.461369][T11642] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1818'. [ 704.146174][T11654] netlink: 'syz.1.1822': attribute type 12 has an invalid length. [ 704.706407][T11662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1825'. [ 707.701877][T11686] overlayfs: missing 'lowerdir' [ 708.211529][T11693] netlink: 'syz.2.1834': attribute type 12 has an invalid length. [ 716.004625][T11689] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1831'. [ 720.769653][ T9383] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 722.671337][T11782] overlayfs: missing 'lowerdir' [ 727.487260][T11776] tipc: Enabling of bearer rejected, failed to enable media [ 727.536282][T11782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1866'. [ 727.547589][T11782] team0: left allmulticast mode [ 727.553262][T11782] team_slave_0: left allmulticast mode [ 727.559881][T11782] team_slave_1: left allmulticast mode [ 727.566328][T11782] team0: left promiscuous mode [ 727.571943][T11782] team_slave_0: left promiscuous mode [ 727.578655][T11782] team_slave_1: left promiscuous mode [ 727.585258][T11782] bridge0: port 3(team0) entered disabled state [ 727.672222][T11782] bridge_slave_1: left allmulticast mode [ 727.680206][T11782] bridge_slave_1: left promiscuous mode [ 727.686947][T11782] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.778577][T11782] bridge_slave_0: left allmulticast mode [ 727.785424][T11782] bridge_slave_0: left promiscuous mode [ 727.792119][T11782] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.428957][T11823] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1877'. [ 738.901688][T11830] overlayfs: missing 'lowerdir' [ 740.972165][ T5859] page_pool_release_retry() stalled pool shutdown 1 inflight 486 sec [ 743.386160][T11845] netlink: 'syz.6.1883': attribute type 14 has an invalid length. [ 743.440090][T11845] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1883'. [ 743.492196][T11845] bond0: option xmit_hash_policy: invalid value (56) [ 743.738190][T11852] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1886'. [ 746.062793][T10926] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 746.079706][T10926] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 746.091044][T10926] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 746.102578][T10926] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 746.114346][T10926] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 746.125486][T10926] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 746.143363][T11880] netlink: 'syz.1.1895': attribute type 12 has an invalid length. [ 747.450452][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.460421][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.254117][ T5779] Bluetooth: hci5: command tx timeout [ 750.327043][ T5779] Bluetooth: hci5: command tx timeout [ 751.190376][T11889] netlink: 'syz.1.1898': attribute type 14 has an invalid length. [ 751.206670][T11889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1898'. [ 751.235342][T11889] bond0: option xmit_hash_policy: invalid value (56) [ 751.609957][T11895] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1901'. [ 751.838987][ T9383] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 752.406376][ T5779] Bluetooth: hci5: command tx timeout [ 752.767949][T11921] netlink: 'syz.1.1909': attribute type 14 has an invalid length. [ 752.809128][T11921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1909'. [ 752.850495][T11921] bond0: option xmit_hash_policy: invalid value (56) [ 754.485707][T10926] Bluetooth: hci5: command tx timeout [ 755.130098][ T5779] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 755.138438][T10926] Bluetooth: hci6: command 0x1003 tx timeout [ 756.902903][T11881] chnl_net:caif_netlink_parms(): no params data found [ 756.984176][T11928] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1912'. [ 757.334009][T11881] bridge0: port 1(bridge_slave_0) entered blocking state [ 757.353283][T11940] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1916'. [ 757.365218][T11881] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.383303][T11881] bridge_slave_0: entered allmulticast mode [ 757.402659][T11881] bridge_slave_0: entered promiscuous mode [ 757.526534][T11881] bridge0: port 2(bridge_slave_1) entered blocking state [ 757.626366][T11881] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.686022][T11881] bridge_slave_1: entered allmulticast mode [ 757.757124][T11881] bridge_slave_1: entered promiscuous mode [ 757.980678][T11881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 758.029954][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 758.029985][ T27] audit: type=1326 audit(1786135724.461:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11949 comm="syz.1.1920" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448259e0d9 code=0x7ffc0000 [ 758.096355][T11948] netlink: 'syz.3.1919': attribute type 14 has an invalid length. [ 758.125815][T11948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1919'. [ 758.168236][T11948] bond0: option xmit_hash_policy: invalid value (56) [ 758.245837][ T27] audit: type=1326 audit(1786135724.461:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11949 comm="syz.1.1920" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448259e0d9 code=0x7ffc0000 [ 758.302958][T11881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 758.505367][ T27] audit: type=1326 audit(1786135724.501:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11949 comm="syz.1.1920" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448259e0d9 code=0x7ffc0000 [ 758.638970][ T3558] Bluetooth: hci6: Frame reassembly failed (-84) [ 758.704243][ T27] audit: type=1326 audit(1786135724.501:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11949 comm="syz.1.1920" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448259e0d9 code=0x7ffc0000 [ 758.809965][ T27] audit: type=1326 audit(1786135724.511:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11949 comm="syz.1.1920" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f448259e0d9 code=0x7ffc0000 [ 758.933592][ T27] audit: type=1326 audit(1786135724.511:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11949 comm="syz.1.1920" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448259e0d9 code=0x7ffc0000 [ 759.059889][ T27] audit: type=1326 audit(1786135724.511:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11949 comm="syz.1.1920" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448259e0d9 code=0x7ffc0000 [ 759.188823][ T27] audit: type=1326 audit(1786135724.511:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11949 comm="syz.1.1920" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448259e0d9 code=0x7ffc0000 [ 759.384864][ T27] audit: type=1326 audit(1786135724.511:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11949 comm="syz.1.1920" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448259e0d9 code=0x7ffc0000 [ 759.521668][ T27] audit: type=1326 audit(1786135724.511:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11949 comm="syz.1.1920" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f448259e0d9 code=0x7ffc0000 [ 759.691251][T11881] team0: Port device team_slave_0 added [ 759.728480][T11881] team0: Port device team_slave_1 added [ 759.838122][T11881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 759.867411][T11881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 759.981670][T11881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 760.046290][T11881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 760.098823][T11881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 760.203895][T11881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 760.475480][T11881] hsr_slave_0: entered promiscuous mode [ 760.515846][T11881] hsr_slave_1: entered promiscuous mode [ 760.549527][T11881] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 760.598185][T11881] Cannot create hsr debugfs directory [ 760.726447][ T5089] Bluetooth: hci6: command 0x1003 tx timeout [ 760.744504][T10926] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 761.182986][T11975] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1929'. [ 761.919337][T11986] netlink: 'syz.1.1934': attribute type 14 has an invalid length. [ 761.975765][T11986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1934'. [ 762.043760][T11986] bond0: option xmit_hash_policy: invalid value (56) [ 762.469493][ T3558] Bluetooth: hci6: Frame reassembly failed (-84) [ 764.488706][T10926] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 766.861070][T11999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1939'. [ 766.924353][T12001] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 766.935668][T12001] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 766.946110][T12001] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 766.956449][T12001] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 767.157927][T12001] team0: Port device vxlan0 added [ 767.357840][T11881] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 767.478500][T11881] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 767.580570][T12014] netlink: 'syz.1.1943': attribute type 14 has an invalid length. [ 767.626688][T12014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1943'. [ 767.683497][T12014] bond0: option xmit_hash_policy: invalid value (56) [ 767.728586][T11881] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 767.818903][T11881] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 768.144590][T12028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1948'. [ 770.862856][T12042] netlink: 'syz.1.1952': attribute type 12 has an invalid length. [ 775.163552][T12046] netlink: 'syz.1.1954': attribute type 14 has an invalid length. [ 775.241535][T12046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1954'. [ 775.272561][T12046] bond0: option xmit_hash_policy: invalid value (56) [ 776.860778][T11881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 777.053362][T11881] 8021q: adding VLAN 0 to HW filter on device team0 [ 777.945212][T11188] unregister_netdevice: waiting for vcan0 to become free. Usage count = 2 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 782.763174][ T3558] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.771585][ T3558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 782.844894][T12082] netlink: 'syz.1.1965': attribute type 14 has an invalid length. [ 782.854098][T12082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1965'. [ 782.965773][T12082] bond0: option xmit_hash_policy: invalid value (56) [ 783.105598][ T9378] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 783.285920][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 783.870039][ T9387] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 784.436278][ T9387] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 784.626192][ T9387] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 784.777487][ T9387] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 785.365344][T10926] Bluetooth: hci4: command 0x0406 tx timeout [ 786.113563][ T9387] bond1: (slave ip6gretap1): Removing an active aggregator [ 786.142704][ T9387] bond1: (slave ip6gretap1): Releasing backup interface [ 786.181860][ T9387] bond1: (slave ip6gretap1): the permanent HWaddr of slave - 22:d0:71:1c:4b:31 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 787.026376][ T9387] bond2: (slave gretap1): Releasing active interface [ 787.615760][ T9387] hsr_slave_0: left promiscuous mode [ 787.644500][ T9387] hsr_slave_1: left promiscuous mode [ 787.668219][ T9387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 787.700869][ T9387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 787.886406][ T9387] team0 (unregistering): Port device vxlan0 removed [ 787.937617][ T9387] bond2 (unregistering): Released all slaves