last executing test programs: 2m11.022361671s ago: executing program 0 (id=346): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x17, &(0x7f0000000880)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x19}}, {{0x6, 0x0, 0x2, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llu, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m10.700621229s ago: executing program 0 (id=350): lseek(0xffffffffffffffff, 0x4, 0x0) 2m10.487195994s ago: executing program 0 (id=353): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000010000000400000008"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m10.309612509s ago: executing program 2 (id=355): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@deltaction={0x238, 0x31, 0x4, 0x70bd27, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfb}}, {0x14, 0x4f, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x101, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x84, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xff}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x4f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @TCA_ACT_TAB={0x54, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe4}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 2m10.309277249s ago: executing program 0 (id=357): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mountinfo\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000040)={0xa0000008}) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 2m10.145782003s ago: executing program 0 (id=359): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000000)={[0x38, 0x1002, 0x3fffc, 0x183, 0x2, 0x0, 0xf6, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0xef73, 0x0, 0x45, 0x2, 0xbdb], 0x200000, 0xc6217}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000200)={0x10, 0x2d, 0x1, 0x70bd2d, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x20004880}, 0xc000) ioctl$KVM_RUN(r1, 0xae80, 0x0) 2m10.130090083s ago: executing program 2 (id=360): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0x10, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2m9.906888688s ago: executing program 2 (id=363): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x7, 0x2, [0x1, 0x7]}, 0xc) 2m9.754051482s ago: executing program 2 (id=367): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mountinfo\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000040)={0xa0000008}) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 2m9.498900698s ago: executing program 2 (id=369): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@deltaction={0x238, 0x31, 0x4, 0x70bd27, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfb}}, {0x14, 0x4f, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x101, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x84, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xff}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x4f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @TCA_ACT_TAB={0x54, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe4}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 2m9.105209448s ago: executing program 2 (id=371): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0x10, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2m8.712285098s ago: executing program 32 (id=371): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0x10, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2m8.498608693s ago: executing program 0 (id=377): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0xa0000008}) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 2m7.76359212s ago: executing program 33 (id=377): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0xa0000008}) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 4.999415258s ago: executing program 3 (id=952): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.877031411s ago: executing program 3 (id=953): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 4.699675245s ago: executing program 3 (id=954): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006a0000012dbd7000fbdbdf250000040000000000080001040300"], 0x20}}, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x13) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x402c5828, 0x0) sendmsg$kcm(r1, 0x0, 0x40020) syz_usb_connect$uac1(0x6, 0x71, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x9, 0x9936c5154318bee0, 0x8}}]}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 3.973593073s ago: executing program 3 (id=956): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5001}, 0x20000000) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x20}) memfd_create(&(0x7f00000000c0)=',\xea\xc9t\x8b\xb7\x04\x1d^s^\t5\xa1i\x01\x00\xd4\xd7\x02\x8dmbs\x0f3\x92\'\x94N\b\xe0m\xa4\x01\x00\xe5\x00\x00\x00\x00\x00-\xb3\x8d\xa1v\xe5\x8a0\x05\x00\xa4\xed\x94 \x15Y\x1f\xccY\xff\xb4\xa2\xa62:\xfa\xf9\xb7\x05q\xa4d\xda0y\xd3\xd6\x98\x9f\x11\n\xf44Q\xff\xff)\xb3|\x04\x00\x00\x80FD\xb8\xc2\x8a\x99Y\xf6:\xfeT\xa1', 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.793220807s ago: executing program 3 (id=957): syz_emit_ethernet(0x36, &(0x7f0000000280)={@random="a24858ca13d1", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x1, 0x7, 0x28, 0x68, 0x0, 0xc, 0x21, 0x0, @rand_addr=0x64010100, @local, {[@ra={0x94, 0x4}]}}, {{0x4e21, 0x4e21, 0x4, 0x1, 0xb, 0x0, 0x0, 0x0, 0x2, "740e23", 0xd, '1\x00'}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 3.415306846s ago: executing program 3 (id=963): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000016c0)=[{&(0x7f0000000580)="8251ec0d54ac45d20a0ecee45f1e0b34494c29a2bfc9bd9cae4332a1c21d063b5126b73de10cf4e8e4b2a8e71d13189e3eba9941783a2b559c480c4e7056518be30034fbfa6014aa0f5a313f8adeb77c983146bd5c0a71ae6c21a3966261f4514d6a7cad409eddead2afbd0bb31ce5172ce9cc1627ea4e6163804d5f52e3f679b4a489408fe120116db8045a128ea72378db416e3b1afaa3a2c6d8898c5bb94a2773f32787ecd5fda9278b720e3fe554c4e58440630a13443f0281764a921b350faaec10c9812aa0568f0e2ef66e9325914010d13340cb960e1f2d8065ff437388bd64a196dea4b7e0f95c4834b4dac9316d9738b4c347b0f72a10356c893ebb860ee6a39adb679d61f01ab10de87552b6fbb05021275cd031b997ef0577e7e2b0bec8d0fd13a3e9fbaba8e0de22df727f1771c5661e061e567e16b365db89f9175873a86471794e0794c4611974cb98da96357cb6936fa8ad0693b91c0fe84136d7741b27f1ed48071c558ef2c71a31d6d6f3895d192f48f542c0261578fb23ec741f738390e75561c9d10a9f0d4a586d4ce5ee57356daacf8a128633d092d4e195eb7041bd12b449082279b8f4999bd6d6bb68e8c10b05d408125e26fb5ceed0d0b898b29317557dba66a40fb174cfe1c62a59f60f4201dabafa7aafeac23d826bad7fea621c172da1b3f59e7dda73a6fe898d5a7b5ca3cc1c390fb975df85b1c47b99d581f4b84d4e0fb13d3fa0f3893347e651ff4d8b5b50c11deee233cc9a8f9f633d094a36a045b01eab570de4c753ba33f1cdd16ed015c226ab2ff990de4b0b689bf8e4faa107e663a7fbef52de4b5c27c586189fdbb20c8115e7044ee9c6a48929fc6579b67beaf3d72743328d607a33e5e58d9b8b39be18acf8036b588d13d495510214fa9e29de392e163ade86b598aeaee5839d6d184260f0982e58a148df4f6ce07d0501c99d65ea4d2a062853487bb26b7fd5ed9e85daad45e6065383fb06c5acdeb49213c57b0b1288d79ce6df8200f47bd5cb1ab888052b29746b06ba3a1721b0b9df140c09570d3a19c4d9e89ae405bede062a3f5058c701e799251179307905ca588f474f9fcaa46a3505dfa3e8c634bbcec459435874b09e764311687ba0a31b6a7fb78c8207c40daa61d2a4089f5956cdc5161eeeca95a22bf451129684b2682c5ef6da86f82bfe7584bf2be2a9dc25b23c52ece6b67561c5eef7022d247990f563196a8a3abb4a9a17c6b085cc96334e6bf06abe0af4f05630774788cf8947331a9d3a8c6b8283c9537af39c6f589211518fb9c2272d92512e1a0927fdec1861cf31b72c8972c48e1efe72be158e8499bae6ac4d2c83027a447a3968fa", 0x3c7}], 0x1) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 2.789884132s ago: executing program 1 (id=968): syz_usb_ep_read(0xffffffffffffffff, 0x2, 0x28, &(0x7f0000000100)=""/8) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) 2.630067306s ago: executing program 4 (id=969): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000004000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 2.568803237s ago: executing program 5 (id=970): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 2.477714609s ago: executing program 4 (id=971): syz_emit_ethernet(0x36, &(0x7f0000000280)={@random="a24858ca13d1", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x1, 0x7, 0x28, 0x68, 0x0, 0xc, 0x21, 0x0, @rand_addr=0x64010100, @local, {[@ra={0x94, 0x4}]}}, {{0x4e21, 0x4e21, 0x4, 0x1, 0xb, 0x0, 0x0, 0x0, 0x2, "740e23", 0xd, '1\x00'}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 2.400841031s ago: executing program 5 (id=972): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.238794005s ago: executing program 1 (id=973): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}}, 0x20}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) 2.185533177s ago: executing program 4 (id=974): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYRESOCT=r3, @ANYRES32=r1, @ANYRES32=r0, @ANYRES8=r1], 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x4008065) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.093926079s ago: executing program 5 (id=975): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5001}, 0x20000000) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x20}) memfd_create(&(0x7f00000000c0)=',\xea\xc9t\x8b\xb7\x04\x1d^s^\t5\xa1i\x01\x00\xd4\xd7\x02\x8dmbs\x0f3\x92\'\x94N\b\xe0m\xa4\x01\x00\xe5\x00\x00\x00\x00\x00-\xb3\x8d\xa1v\xe5\x8a0\x05\x00\xa4\xed\x94 \x15Y\x1f\xccY\xff\xb4\xa2\xa62:\xfa\xf9\xb7\x05q\xa4d\xda0y\xd3\xd6\x98\x9f\x11\n\xf44Q\xff\xff)\xb3|\x04\x00\x00\x80FD\xb8\xc2\x8a\x99Y\xf6:\xfeT\xa1', 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.041549511s ago: executing program 1 (id=976): syz_emit_ethernet(0x46, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa08000209"], 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x20, 0x2c, 0x0, @remote, @local, {[@routing={0x89, 0x0, 0x2, 0x1}, @dstopts={0x0, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0xc}}]}]}}}}}, 0x0) 1.989835621s ago: executing program 4 (id=977): r0 = socket$kcm(0x2, 0x1, 0x84) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 1.845443935s ago: executing program 1 (id=978): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x14, 0x4}) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000100)={0x2, 0x1, 0x3, 0x2, 0x4}) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0xc2002, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000005580)=[{}, {0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, &(0x7f0000000480)=[@assoc={0x18, 0x117, 0x4, 0x5}, @assoc={0x18, 0x117, 0x4, 0x9}, @iv={0x60, 0x117, 0x2, 0x4b, "058cca7958c22ef7aa5291cda082b6d0f826d27f8a687c0f0f27799c9b27041e6787412c25a498b146d73bb28aa16456560ee3b8f64cf6040badcb46c468945c4c6844cca2f93c59c08118"}], 0x90, 0x40091}, {0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000540)="8b8fc746936da743279727199b250891ba1c397939ff58f00ff3d06b9a053d54fe9d8050303f48348eff3bc2dd26cb93051576d1576a23a1918cc82ba08f9be941d503b0abc93d2f5fe4c66ff96bd74bdaca03cf8a5417aa21dc665669fc5a7c647bbcab5d9129b552c8f4855704273fc954ce6ae4", 0x75}, {&(0x7f00000009c0)="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", 0x1000}, {&(0x7f00000019c0)="19e7668b3f2828c593fbfb0820cf7cbd4abec079523e45810a7fd37965dc12c397bcec429af6d17704bd85e3f2536421396575c3c701cc810b0df387a4792ee5333c7f61281bfb77a1a8c00eb2b7c1a2969b531c9242c91db1c4d91e34505a65f8a1a02cae8f7abeab4cbf8e8a9a6fd60213ba55dc9041db04468db4648b4eff7e70cd6e2eadc29074ce7d58d097a4e729d8c4bea56a94e7a7406d84ae26ca978a06e9e4fc765d62b62217a23270803c8e7a20b2aa147e0076bad7199242298a052ad4a1fd83c9d07f4fd6a6d1ece61b1cd7be7d7316b45c732872b2c2d3339aa13666", 0xe3}, {&(0x7f0000001ac0)="6e5aa1db985af65ef3929d76582806b97a9ed8971b8f09318850f6090855dff274", 0x21}], 0x4, &(0x7f00000005c0)=[@iv={0xc8, 0x117, 0x2, 0xaf, "6ce1915b5af56bc4d659d9ac3b48e56ec5cb24194c29ea1a972013cf2ab9f512f8bdb5943f4e4d57a781a799b7d7a77055eb96eaa29561ceaccc59b03377e860cd2ca4b44a5a3284efbf58a44dc0af660dcccca59ce45183e6dcec9b86ef48c60722b15c65e822a36476eef73250319b4b36d6a0f5fc8ac5a7cf151bfb5073830d9615458da22960d923f9442f5f2af59711d66e6b1bb10b9133fcbeb5bf45c4f4c8b24ab93db56039cca9798bd610"}], 0xc8, 0x8011}, {0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000001b80)="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", 0xfd}, {&(0x7f0000001c80)="d59286f2e1579944cc200ac19fcbaaab60392c3da7c4741c4d63804617da9917d10732b2df3a332bf58ccb42bf51b1e49539d1d387b813f9911030a576b94d1f2e11e2ea52579ba5bf15af51ca62c7f4a390110cc40ca63eb6de685e0e4fe47df0671123b7e344145af58abf1e61823870c4fea2128184bf5a7660655aa3f780a44f69936aa985573902d571ed57303090e4877a3b0eb6749b61af360b26ddc01e0808bcb80d303b96f5e28e12f8773dd7fe017788344483c1126f121e58dfbe0972f7aaf0404a1eb546faab7eb19b534e", 0xd1}, {&(0x7f0000001d80)="35a28c60db1105e3ed9e823fff259b6df89b2935f6582060587445109c3e876c09c61fabd31884db39aeaca191663e826875aa9909ddfcb3bc650a5444ec46e3660ac94c06a054a462d6318a5bf715825e161e16f8e6be76a50a6d378e2a30386c59d90cc3111bd47348a2a7ee9e8eb1c6fbd3c9489090db428ea00cdb4a5bf540e59b60ff7b440caec46071526bb02297a54042e63c50c600956613977409ed858c9a9d17eb155b59c417c628513f1610f1985f8119d2324def93e03ac90fc6340748cc8acd82797869a982fd1b9e15", 0xd0}, {&(0x7f0000001e80)="467c4e00cbbb2e7be975d26134dade9c88a1396ff8057508bfe941b64239d78b3dd4122b253cf86f39c79532849e", 0x2e}, {&(0x7f0000001ec0)="ae3d11abdf6bb28b089db5ac238921810efbcdfe315cdda5a784a9ae68051d4070b2d039c17423d823a6cce6b86bed888a71d6abe2b14f2e5a58efcd33d489510ef4e0337aa8024236b4875303ec3dbddae0c966398e94f2da07b61cb1b99b02fc963ffabd3b80fd9ab0661445a0ad74dc851da086b585b833c5dee02f1e271860769e623c3c4dda2a68810a3ce4d7586fc1ab", 0x93}, {&(0x7f0000001f80)="e60bc28ea6668267a09aac381bc927e828b9b89029e22ed5ad0ba8ad00fa25c6cf23ea2970b2be48ec9a0ec1f21cb4621ed0ad08e23a1f4ddc3f5e4d120e286321f33f15953295e79112c4", 0x4b}, {&(0x7f0000002000)="12fe6e9b17f78d7e43b817a8947a83bd786295b9a6a2f591019807f68c0fb7c43e2299261a7968ffa3fe64e32eafff412d04d5bbea690de03e7a8b3d7bfe947e48b1d2b04aa8685ce4b83cf9d6c3cc4694e4ce55d3f29a4d109fea78b28525a45d4a010ab04a8ea212c58c37f18ac0fcd90565d3322abd28d060d77c0a2de11299d4c667c6019fa86ec8ebf07e4f59166deb5b22ee2a2f523da3da93eb84316ca562e545a34616263108d6af9eba08e3cbb8c001066e0522ba7564dd28720dd2", 0xc0}, {&(0x7f00000020c0)="02934202c57ba145b7a21d4fb3974c8eacebc2a3ed33b9008e00d78ca7ea0c4d12f447b931ad832646cd113cb0b0b8c331bf0962362551e6f8", 0x39}, {&(0x7f0000002140)="633d84ab098fed005c8a4af5830d63f842725cedaeebc21cce1b816ef5b839c15ac0ae731bd920c9dad7a611752c4d42f8c00336d3dedf4172546ad903a0cdee41b648b90991a91227f113841398df72ba20c7c50cb92f7f943da100463462b6092a6cbc3b532c58bfe816587299bcc9d836c1b0d7d242d17ec9dd994b9e93e3d2963a8b9f244575558056de07d9cbed19cd0d711d8588410bd6af1d3d93264dd8dc8e47e57dcbad840cc2ec5c94e8ac32f24e95f9490cd9d6261d792a6fa4123520868391ddb32c90e6e66416f9d4d037d24331a4f568cb14e91fb6193702464c49895fce7221b2b7", 0xe9}], 0x9, &(0x7f0000002300)=[@assoc={0x18, 0x117, 0x4, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x5}], 0x60, 0x80}, {0x0, 0x0, &(0x7f0000005500)=[{&(0x7f0000002380)="f6d47abd5cf3a456ee685dad53054cd08224d067", 0x14}, {&(0x7f00000023c0)="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", 0xc00}, {&(0x7f00000033c0)="903c1aef8f4c07747e766a75c5b983cbe2c80dce582ed9153c305b8b0f8208499b4d4faeb20ee9dd7d441d813def3366c980771a6382272916e45808c4c591ebe5b4d9ff9275db8b729c4dffa274c85a2b77eca198645f4d8a1d4330f05858a06fbfff45daafcac7346298d5be2f724df0795949222201ffcc0cbe66cc6d9e76fb9f909e330f368765816f7a3b0524a85123ecbc8d7d10880212cc26c6bc7453f855d2ef8bdfcad508c40cf71778a0cbad410941ecd7556bbf66533720bd33886b81834c7297beea93b172aa429db85374531a644c9bfb39efedaa1d344e8c9a1cc570", 0xe3}, {&(0x7f00000034c0)="2a3344c71b05c64363135014024b4bf3c35e9d6f2bd7a4aa886ffc8458844986daa1c7122a82f71255b45188761eb41ceaacafa69d33c727", 0x38}, {0x0}], 0x5, 0x0, 0x0, 0x840}], 0x5, 0x40800) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000140)={'wlan1\x00', @random="0100eb00"}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getsockname(0xffffffffffffffff, 0x0, 0x0) write$dsp(r2, &(0x7f0000000040)='F', 0x1) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="0213f803030000002cbd7000fddbdf250100", @ANYRES64=r3], 0x18}}, 0x2080) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1a0000000500000002000000060000000c600000", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00093d64e373a08ba4000000000f001500"/28], 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)=ANY=[], 0x5c}}, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000200), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/seq/timer\x00', 0x0, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000000208", @ANYRES64=0x0, @ANYRES64=0x0], 0x80}}, 0x800) close(0x3) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000040)=0x10004) 1.834979585s ago: executing program 4 (id=979): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000600)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 1.789833976s ago: executing program 5 (id=980): timer_create(0x3, 0x0, &(0x7f0000002300)=0x0) timer_settime(r0, 0x1, &(0x7f0000002340)={{0x0, 0x989680}, {0x77359400}}, 0x0) timer_create(0x3, 0x0, &(0x7f0000002400)=0x0) timer_settime(r1, 0x1, 0x0, 0x0) timer_settime(r1, 0x1, &(0x7f0000000000), 0x0) 1.632612001s ago: executing program 4 (id=981): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xd3283d036ae269b3, 0x8031, 0xffffffffffffffff, 0x99cf0000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x406, r2) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x8001) recvfrom$inet_nvme(r3, &(0x7f0000000240)=""/35, 0x23, 0x20, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x20008040) 1.557792352s ago: executing program 5 (id=982): syz_usb_ep_read(0xffffffffffffffff, 0x2, 0x28, &(0x7f0000000100)=""/8) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) 1.067123254s ago: executing program 1 (id=983): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) socket$igmp6(0xa, 0x3, 0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r4) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) utimes(&(0x7f0000000f80)='./file0\x00', 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = open(&(0x7f0000000000)='./file0\x00', 0x143142, 0x80) sendfile(r5, r5, 0x0, 0x1000000201005) 968.572426ms ago: executing program 5 (id=984): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}}, 0x20}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) 0s ago: executing program 1 (id=985): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYRESOCT=r3, @ANYRES32=r1, @ANYRES32=r0, @ANYRES8=r1], 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x4008065) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) ioctl$KVM_RUN(r4, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.134' (ED25519) to the list of known hosts. [ 83.040893][ T5767] cgroup: Unknown subsys name 'net' [ 83.183776][ T5767] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.877642][ T5767] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.101978][ T5794] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.114392][ T5789] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.125933][ T5794] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.143614][ T5790] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.151308][ T5794] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.159051][ T5794] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.168563][ T5794] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.176910][ T5794] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.178008][ T5792] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.186519][ T5794] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.195692][ T5792] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.200446][ T5794] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.207645][ T5792] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.213073][ T5794] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.222068][ T5792] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.226738][ T5794] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.235886][ T5792] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.245088][ T5794] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.248002][ T5792] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.260692][ T5794] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.264299][ T5794] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.276171][ T5794] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.286592][ T5794] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.294139][ T5090] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.886534][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 88.001269][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 88.104529][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 88.123119][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 88.225084][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.233179][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.240941][ T5779] bridge_slave_0: entered allmulticast mode [ 88.248869][ T5779] bridge_slave_0: entered promiscuous mode [ 88.290804][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.298363][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.305746][ T5779] bridge_slave_1: entered allmulticast mode [ 88.313079][ T5779] bridge_slave_1: entered promiscuous mode [ 88.340672][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.350100][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.358184][ T5780] bridge_slave_0: entered allmulticast mode [ 88.367544][ T5780] bridge_slave_0: entered promiscuous mode [ 88.419953][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.430053][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.437346][ T5780] bridge_slave_1: entered allmulticast mode [ 88.444396][ T5780] bridge_slave_1: entered promiscuous mode [ 88.492457][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.499748][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.507484][ T5778] bridge_slave_0: entered allmulticast mode [ 88.514998][ T5778] bridge_slave_0: entered promiscuous mode [ 88.523106][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.530525][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.537824][ T5778] bridge_slave_1: entered allmulticast mode [ 88.545077][ T5778] bridge_slave_1: entered promiscuous mode [ 88.554330][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.569885][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.580092][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.587357][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.594639][ T5781] bridge_slave_0: entered allmulticast mode [ 88.601662][ T5781] bridge_slave_0: entered promiscuous mode [ 88.621024][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.628388][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.635930][ T5781] bridge_slave_1: entered allmulticast mode [ 88.642980][ T5781] bridge_slave_1: entered promiscuous mode [ 88.652467][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.663843][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.729361][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.753908][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.768312][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.791154][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.807375][ T5779] team0: Port device team_slave_0 added [ 88.826490][ T5780] team0: Port device team_slave_0 added [ 88.843911][ T5779] team0: Port device team_slave_1 added [ 88.883793][ T5780] team0: Port device team_slave_1 added [ 88.904273][ T5781] team0: Port device team_slave_0 added [ 88.911656][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.918944][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.945740][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.973360][ T5778] team0: Port device team_slave_0 added [ 88.983048][ T5778] team0: Port device team_slave_1 added [ 88.991352][ T5781] team0: Port device team_slave_1 added [ 89.008108][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.015448][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.042312][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.105846][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.112873][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.140637][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.164352][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.171514][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.200797][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.223873][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.231115][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.260650][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.273041][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.280774][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.307304][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.319757][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.327133][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.353205][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.358138][ T5792] Bluetooth: hci3: command tx timeout [ 89.363991][ T51] Bluetooth: hci1: command tx timeout [ 89.370463][ T5788] Bluetooth: hci2: command tx timeout [ 89.392530][ T5779] hsr_slave_0: entered promiscuous mode [ 89.399684][ T5779] hsr_slave_1: entered promiscuous mode [ 89.415341][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.422348][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.435148][ T5792] Bluetooth: hci0: command tx timeout [ 89.448758][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.514981][ T5780] hsr_slave_0: entered promiscuous mode [ 89.521489][ T5780] hsr_slave_1: entered promiscuous mode [ 89.528071][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.536049][ T5780] Cannot create hsr debugfs directory [ 89.623777][ T5778] hsr_slave_0: entered promiscuous mode [ 89.632895][ T5778] hsr_slave_1: entered promiscuous mode [ 89.640161][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.648163][ T5778] Cannot create hsr debugfs directory [ 89.659273][ T5781] hsr_slave_0: entered promiscuous mode [ 89.666114][ T5781] hsr_slave_1: entered promiscuous mode [ 89.672333][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.680488][ T5781] Cannot create hsr debugfs directory [ 90.119025][ T5779] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.141168][ T5779] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.152824][ T5779] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.177145][ T5779] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.223265][ T5780] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.241103][ T5780] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.267601][ T5780] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.280389][ T5780] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.393230][ T5781] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.432949][ T5781] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.443113][ T5781] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.454113][ T5781] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.531635][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.548544][ T5778] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.562696][ T5778] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.578929][ T5778] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.589605][ T5778] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.652601][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.680384][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.701005][ T1079] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.708448][ T1079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.750590][ T2956] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.757821][ T2956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.778716][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.840481][ T2956] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.847655][ T2956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.858654][ T2956] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.865835][ T2956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.040149][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.103262][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.130294][ T2952] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.137518][ T2952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.158529][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.191629][ T2952] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.198859][ T2952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.257641][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.309961][ T2952] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.317178][ T2952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.370498][ T3472] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.377758][ T3472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.437729][ T5792] Bluetooth: hci3: command tx timeout [ 91.443226][ T5792] Bluetooth: hci2: command tx timeout [ 91.451008][ T5788] Bluetooth: hci1: command tx timeout [ 91.513022][ T5778] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.524053][ T5792] Bluetooth: hci0: command tx timeout [ 91.556182][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.629615][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.728460][ T5779] veth0_vlan: entered promiscuous mode [ 91.771972][ T5779] veth1_vlan: entered promiscuous mode [ 91.832916][ T5780] veth0_vlan: entered promiscuous mode [ 91.868223][ T5779] veth0_macvtap: entered promiscuous mode [ 91.887466][ T5780] veth1_vlan: entered promiscuous mode [ 91.910863][ T5779] veth1_macvtap: entered promiscuous mode [ 91.971402][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.008679][ T5780] veth0_macvtap: entered promiscuous mode [ 92.024225][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.048827][ T5780] veth1_macvtap: entered promiscuous mode [ 92.106969][ T5779] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.117040][ T5779] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.127941][ T5779] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.137168][ T5779] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.159273][ T9] cfg80211: failed to load regulatory.db [ 92.173976][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.185600][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.198394][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.212963][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.251801][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.264993][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.282267][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.293308][ T5780] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.302699][ T5780] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.312042][ T5780] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.330699][ T5780] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.353150][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.496781][ T2952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.515867][ T2952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.566549][ T5781] veth0_vlan: entered promiscuous mode [ 92.591314][ T5778] veth0_vlan: entered promiscuous mode [ 92.626165][ T2956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.626891][ T1079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.634023][ T2956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.656095][ T1079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.674321][ T5778] veth1_vlan: entered promiscuous mode [ 92.743545][ T5781] veth1_vlan: entered promiscuous mode [ 92.775833][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.789831][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.845774][ T5778] veth0_macvtap: entered promiscuous mode [ 92.867247][ T5781] veth0_macvtap: entered promiscuous mode [ 92.890959][ T5778] veth1_macvtap: entered promiscuous mode [ 92.922711][ T5781] veth1_macvtap: entered promiscuous mode [ 92.997251][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.020382][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.039979][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.052235][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.066320][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.082293][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.099930][ T5848] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.106185][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.135980][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.146771][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.157110][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.172020][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.193082][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.226183][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.265595][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.280495][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.297938][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.312328][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.323097][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.342752][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.353434][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.372851][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.383554][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.394439][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.411633][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.439457][ T5778] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.458092][ T5778] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.467647][ T5778] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.476675][ T5778] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.515305][ T5792] Bluetooth: hci1: command tx timeout [ 93.526064][ T5792] Bluetooth: hci2: command tx timeout [ 93.531534][ T5792] Bluetooth: hci3: command tx timeout [ 93.543399][ T5781] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.554926][ T5781] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.564134][ T5781] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.573619][ T5781] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.598578][ T5788] Bluetooth: hci0: command tx timeout [ 93.692116][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.711992][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.179266][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.188220][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.714343][ T5859] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.765355][ T5859] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.226770][ T5859] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.237504][ T5859] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.246460][ T5859] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.255516][ T5859] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.412201][ T3006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.441451][ T3006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.469142][ T5859] syz.1.6 (5859) used greatest stack depth: 20040 bytes left [ 95.556453][ T5872] syz.1.8[5872]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 95.593215][ T5872] loop1: detected capacity change from 0 to 2048 [ 95.604644][ T5788] Bluetooth: hci3: command tx timeout [ 95.607547][ T5792] Bluetooth: hci2: command tx timeout [ 95.610097][ T5788] Bluetooth: hci1: command tx timeout [ 95.673419][ T5872] loop1: p1 < > p3 p4 < > [ 95.675616][ T5788] Bluetooth: hci0: command tx timeout [ 95.695561][ T5872] loop1: p3 size 861184 extends beyond EOD, truncated [ 95.731837][ T5872] ======================================================= [ 95.731837][ T5872] WARNING: The mand mount option has been deprecated and [ 95.731837][ T5872] and is ignored by this kernel. Remove the mand [ 95.731837][ T5872] option from the mount to silence this warning. [ 95.731837][ T5872] ======================================================= [ 96.009799][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.018302][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.572623][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.601857][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.999597][ T5863] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.010804][ T5863] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.021874][ T5863] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.030982][ T5863] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.283020][ T3472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.336674][ T3472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.410574][ T3006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.426335][ T3006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.980031][ T5910] syzkaller0: entered promiscuous mode [ 97.990052][ T5910] syzkaller0: entered allmulticast mode [ 98.099853][ T5913] loop3: detected capacity change from 0 to 2048 [ 98.138894][ T5913] loop3: p1 < > p4 [ 98.165083][ T5913] loop3: p4 size 8388608 extends beyond EOD, truncated [ 98.390301][ T5919] udevd[5919]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 98.998981][ T5944] "syz.1.27" (5944) uses obsolete ecb(arc4) skcipher [ 99.075826][ T5946] loop1: detected capacity change from 0 to 512 [ 99.086112][ T5946] FAT-fs (loop1): Unrecognized mount option "000000000000000000000000x0000000000000000" or missing value [ 99.610853][ T5958] overlayfs: failed to get inode (-116) [ 99.625437][ T5958] overlayfs: failed to get inode (-116) [ 99.694492][ T5960] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.252240][ T5979] syzkaller0: entered promiscuous mode [ 100.263569][ T5979] syzkaller0: entered allmulticast mode [ 100.658272][ T5992] loop2: detected capacity change from 0 to 8192 [ 100.784797][ T28] audit: type=1800 audit(1785274080.749:2): pid=5992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.46" name="file1" dev="loop2" ino=1048592 res=0 errno=0 [ 101.803898][ T6027] ªªªªªª: renamed from vlan0 (while UP) [ 101.934092][ T6030] tipc: Can't bind to reserved service type 2 [ 102.084122][ T6033] 9pnet: p9_errstr2errno: server reported unknown error [ 102.397919][ T6045] syzkaller0: entered promiscuous mode [ 102.407037][ T6045] syzkaller0: entered allmulticast mode [ 102.620901][ T6054] loop3: detected capacity change from 0 to 2048 [ 102.726338][ T6054] loop3: p1 < > p4 [ 102.737286][ T6054] loop3: p4 size 8388608 extends beyond EOD, truncated [ 102.997420][ T5791] udevd[5791]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 103.006297][ T5793] udevd[5793]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 103.125680][ T6065] loop3: detected capacity change from 0 to 128 [ 103.610867][ T6077] syzkaller0: entered promiscuous mode [ 103.618904][ T6077] syzkaller0: entered allmulticast mode [ 104.072330][ T6088] overlayfs: failed to get inode (-116) [ 104.080036][ T6088] overlayfs: failed to get inode (-116) [ 104.086696][ T6088] overlayfs: failed to get inode (-116) [ 104.094964][ T6088] overlayfs: failed to get inode (-116) [ 104.420233][ T6100] syzkaller0: entered promiscuous mode [ 104.433813][ T6100] syzkaller0: entered allmulticast mode [ 104.591255][ T6105] syzkaller0: entered promiscuous mode [ 104.598509][ T6105] syzkaller0: entered allmulticast mode [ 105.198971][ T6123] mmap: syz.1.98 (6123) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 105.546076][ T6130] syzkaller0: entered promiscuous mode [ 105.572035][ T6130] syzkaller0: entered allmulticast mode [ 106.385503][ T5786] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 106.589319][ T5786] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 106.600893][ T5786] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 106.616246][ T5786] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 106.630826][ T5786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.650185][ T6147] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 106.672689][ T5786] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 107.006451][ T23] IPVS: starting estimator thread 0... [ 107.013154][ T6172] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 107.114153][ T23] usb 2-1: USB disconnect, device number 2 [ 107.126736][ T6175] ip6gre1: entered promiscuous mode [ 107.134908][ T6173] IPVS: using max 20 ests per chain, 48000 per kthread [ 107.142845][ T6175] ip6gre1: entered allmulticast mode [ 108.314566][ C0] sched: RT throttling activated [ 108.781750][ T6202] loop2: detected capacity change from 0 to 512 [ 109.146427][ T6205] overlayfs: failed to get inode (-116) [ 109.152499][ T6205] overlayfs: failed to get inode (-116) [ 109.162597][ T6205] overlayfs: failed to get inode (-116) [ 109.171037][ T6205] overlayfs: failed to get inode (-116) [ 109.819978][ T6229] 9pnet_fd: Insufficient options for proto=fd [ 110.485920][ T6235] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.494394][ T6235] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.615119][ T6276] xt_hashlimit: size too large, truncated to 1048576 [ 111.735554][ T6235] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.858300][ T6235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.677644][ T6235] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.689837][ T6235] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.700163][ T6235] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.709672][ T6235] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.760872][ T6308] loop1: detected capacity change from 0 to 2048 [ 113.827085][ T6308] loop1: p1 < > p4 [ 113.840332][ T6308] loop1: p4 size 8388608 extends beyond EOD, truncated [ 114.121907][ T6316] Zero length message leads to an empty skb [ 114.169486][ T6169] udevd[6169]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 114.219423][ T5791] udevd[5791]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 116.380402][ T6393] kvm: pic: non byte write [ 117.096702][ T6419] loop3: detected capacity change from 0 to 128 [ 117.208963][ T6419] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 117.244845][ T6419] FAT-fs (loop3): Filesystem has been set read-only [ 117.254699][ T6419] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 117.272374][ T6419] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 117.283096][ T6419] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 117.293004][ T6419] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 117.312205][ T6419] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 117.321540][ T6419] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 117.334672][ T6419] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 117.349281][ T6419] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 117.402785][ T6419] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 117.444716][ T6419] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 117.453282][ T6419] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 117.507997][ T6419] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 117.526695][ T6430] loop1: detected capacity change from 0 to 128 [ 117.539202][ T6419] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 117.584795][ T6419] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 117.604820][ T6419] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 117.654164][ T6419] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 117.695118][ T6419] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 117.703852][ T6419] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 117.774981][ T6419] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 117.784289][ T6419] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 117.798910][ T6419] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 117.809495][ T6419] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 117.821927][ T6419] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 117.833391][ T6419] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 117.853809][ T6419] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 117.872947][ T6419] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 117.889288][ T6419] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 117.918496][ T6419] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 117.934682][ T6419] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 117.943224][ T6419] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 117.990506][ T6419] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 118.000040][ T6419] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 118.024732][ T6419] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 118.037886][ T6419] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 118.057711][ T6419] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 118.084948][ T6419] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 118.093782][ T6419] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 118.124682][ T6419] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 118.145490][ T6419] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 118.159723][ T6419] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 118.173172][ T6419] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 118.190517][ T28] audit: type=1800 audit(1785274098.159:3): pid=6419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.201" name="file1" dev="loop3" ino=1048593 res=0 errno=0 [ 118.261179][ T6419] syz.3.201 (6419) used greatest stack depth: 19824 bytes left [ 120.473248][ T6517] 9pnet_fd: Insufficient options for proto=fd [ 121.062899][ T6536] loop2: detected capacity change from 0 to 128 [ 122.943877][ T6539] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.951756][ T6539] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.849585][ T6583] overlayfs: failed to get inode (-116) [ 123.864970][ T6583] overlayfs: failed to get inode (-116) [ 123.873843][ T6583] overlayfs: failed to get inode (-116) [ 123.895302][ T6583] overlayfs: failed to get inode (-116) [ 124.132229][ T6539] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.212237][ T6539] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.904211][ T6606] kvm: pic: non byte write [ 125.044422][ T6539] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.053700][ T6539] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.064345][ T6539] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.073717][ T6539] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.235488][ T6614] loop1: detected capacity change from 0 to 128 [ 125.269826][ T6612] overlayfs: failed to get inode (-116) [ 125.291502][ T6612] overlayfs: failed to get inode (-116) [ 125.309832][ T6612] overlayfs: failed to get inode (-116) [ 125.316455][ T6614] syz.1.269: attempt to access beyond end of device [ 125.316455][ T6614] loop1: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 125.336317][ T6612] overlayfs: failed to get inode (-116) [ 125.397853][ T6614] syz.1.269: attempt to access beyond end of device [ 125.397853][ T6614] loop1: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 125.427133][ T6614] Buffer I/O error on dev loop1, logical block 71, lost async page write [ 126.655453][ T6644] overlayfs: failed to get inode (-116) [ 126.688124][ T6644] overlayfs: failed to get inode (-116) [ 129.555752][ T6693] overlayfs: failed to resolve './file0': -2 [ 131.478754][ T6727] overlayfs: failed to resolve './file0': -2 [ 133.121829][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.129420][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.889158][ T6775] fuse: Bad value for 'fd' [ 133.895899][ T6775] fuse: Bad value for 'fd' [ 135.015208][ T6805] kvm: pic: non byte write [ 136.786088][ T6861] loop1: detected capacity change from 0 to 2048 [ 136.847593][ T6861] loop1: p1 < > p4 [ 136.889495][ T6861] loop1: p4 size 8388608 extends beyond EOD, truncated [ 136.940593][ T5145] loop1: p1 < > p4 [ 136.957335][ T5145] loop1: p4 size 8388608 extends beyond EOD, truncated [ 137.320442][ T6169] udevd[6169]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 137.339338][ T5791] udevd[5791]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 137.429564][ T6169] udevd[6169]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 137.443363][ T5791] udevd[5791]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 137.954911][ T6875] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 137.961022][ T6875] syzkaller1: linktype set to 778 [ 138.267330][ T6880] loop3: detected capacity change from 0 to 2048 [ 138.323969][ T6880] loop3: p1 < > p4 [ 138.341617][ T6880] loop3: p4 size 8388608 extends beyond EOD, truncated [ 138.560503][ T5791] udevd[5791]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 138.572814][ T6169] udevd[6169]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 138.911963][ T5792] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 138.922876][ T5792] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 138.931280][ T5792] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 138.940677][ T5792] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 138.951734][ T5792] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 138.963062][ T5792] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 139.239489][ T6898] kvm: pic: non byte write [ 139.838057][ T6920] process 'syz.3.384' launched './file0' with NULL argv: empty string added [ 139.882011][ T6888] chnl_net:caif_netlink_parms(): no params data found [ 140.033136][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 140.044395][ T5788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 140.053007][ T5788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 140.061591][ T5788] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 140.069859][ T5788] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 140.088119][ T5788] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 140.396450][ T6934] overlayfs: failed to resolve './file0': -2 [ 140.561355][ T6888] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.574699][ T6888] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.585033][ T6888] bridge_slave_0: entered allmulticast mode [ 140.592641][ T6888] bridge_slave_0: entered promiscuous mode [ 140.619808][ T6888] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.649794][ T6888] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.671702][ T6888] bridge_slave_1: entered allmulticast mode [ 140.688575][ T6888] bridge_slave_1: entered promiscuous mode [ 140.846832][ T6948] kvm: pic: non byte write [ 141.034711][ T5788] Bluetooth: hci1: command tx timeout [ 141.220409][ T6888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.241224][ T6888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.546004][ T6888] team0: Port device team_slave_0 added [ 141.578509][ T6888] team0: Port device team_slave_1 added [ 141.745799][ T6969] overlayfs: failed to resolve './file0': -2 [ 142.097988][ T6888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.121853][ T6888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.167140][ T6888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.167163][ T5788] Bluetooth: hci3: command tx timeout [ 142.422800][ T6888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.444740][ T6888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.491401][ T6888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.606492][ T6986] overlayfs: failed to resolve './file0': -2 [ 142.646762][ T6984] Illegal XDP return value 636633129 on prog (id 7) dev N/A, expect packet loss! [ 142.862505][ T6888] hsr_slave_0: entered promiscuous mode [ 142.882174][ T6888] hsr_slave_1: entered promiscuous mode [ 142.914841][ T6888] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 142.938361][ T6888] Cannot create hsr debugfs directory [ 142.944219][ T6921] chnl_net:caif_netlink_parms(): no params data found [ 143.125042][ T5788] Bluetooth: hci1: command tx timeout [ 143.659850][ T6921] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.691619][ T6921] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.704814][ T6921] bridge_slave_0: entered allmulticast mode [ 143.726467][ T6921] bridge_slave_0: entered promiscuous mode [ 143.753968][ T6921] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.766061][ T6921] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.785627][ T6921] bridge_slave_1: entered allmulticast mode [ 143.797751][ T6921] bridge_slave_1: entered promiscuous mode [ 143.841479][ T12] hsr_slave_0: left promiscuous mode [ 143.851487][ T12] hsr_slave_1: left promiscuous mode [ 143.892317][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.901885][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.932353][ T12] bridge_slave_1: left allmulticast mode [ 143.938330][ T12] bridge_slave_1: left promiscuous mode [ 143.951584][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.978424][ T12] bridge_slave_0: left allmulticast mode [ 143.994917][ T12] bridge_slave_0: left promiscuous mode [ 144.000759][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.042999][ T12] hsr_slave_0: left promiscuous mode [ 144.063126][ T12] hsr_slave_1: left promiscuous mode [ 144.090186][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.114372][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.133456][ T12] bridge_slave_1: left allmulticast mode [ 144.149051][ T12] bridge_slave_1: left promiscuous mode [ 144.168495][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.199034][ T12] bridge_slave_0: left allmulticast mode [ 144.210514][ T12] bridge_slave_0: left promiscuous mode [ 144.222409][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.234804][ T5788] Bluetooth: hci3: command tx timeout [ 145.210631][ T5788] Bluetooth: hci1: command tx timeout [ 145.686153][ T12] team0 (unregistering): Port device team_slave_1 removed [ 145.759761][ T12] team0 (unregistering): Port device team_slave_0 removed [ 145.811151][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.867108][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.318215][ T5788] Bluetooth: hci3: command tx timeout [ 146.428951][ T12] bond0 (unregistering): Released all slaves [ 147.086248][ T7050] overlayfs: failed to resolve './file0': -2 [ 147.318268][ T5788] Bluetooth: hci1: command tx timeout [ 147.480747][ T12] team0 (unregistering): Port device team_slave_1 removed [ 147.618862][ T12] team0 (unregistering): Port device team_slave_0 removed [ 147.776166][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.891421][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.397711][ T5788] Bluetooth: hci3: command tx timeout [ 148.451979][ T12] bond0 (unregistering): Released all slaves [ 148.768423][ T6921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.812001][ T6921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.987930][ T6921] team0: Port device team_slave_0 added [ 149.036037][ T6921] team0: Port device team_slave_1 added [ 149.151355][ T6921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.170928][ T6921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.240086][ T6921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.315849][ T6921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.334757][ T6921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.415675][ T6921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.593983][ T6921] hsr_slave_0: entered promiscuous mode [ 149.653499][ T6921] hsr_slave_1: entered promiscuous mode [ 149.660391][ T6921] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 149.684831][ T6921] Cannot create hsr debugfs directory [ 149.813861][ T6888] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 149.931304][ T7069] fuse: Bad value for 'fd' [ 150.034650][ T6888] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 150.088494][ T6888] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 150.125921][ T6888] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 150.703389][ T6921] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 150.718610][ T6921] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 150.799851][ T6921] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 150.823906][ T6921] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 150.902017][ T6888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.010012][ T6888] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.050771][ T3006] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.058008][ T3006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.217802][ T3006] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.225081][ T3006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.472132][ T6888] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 151.604016][ T6921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.666679][ T6921] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.702119][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.710099][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.773437][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.780815][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.271519][ T6888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.594009][ T6921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.336754][ T6888] veth0_vlan: entered promiscuous mode [ 153.388737][ T6888] veth1_vlan: entered promiscuous mode [ 153.491630][ T6888] veth0_macvtap: entered promiscuous mode [ 153.533972][ T6888] veth1_macvtap: entered promiscuous mode [ 153.629014][ T6888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.679746][ T6888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.747071][ T6888] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.805608][ T6888] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.814402][ T6888] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.844808][ T6888] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.870196][ T6921] veth0_vlan: entered promiscuous mode [ 153.956447][ T6921] veth1_vlan: entered promiscuous mode [ 154.027126][ T7170] overlayfs: failed to resolve './file0': -2 [ 154.311754][ T6921] veth0_macvtap: entered promiscuous mode [ 154.352665][ T6921] veth1_macvtap: entered promiscuous mode [ 154.369935][ T2956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.406689][ T2956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.454486][ T6921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.496313][ T6921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.512803][ T6921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.549837][ T6921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.566637][ T6921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.579345][ T6921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.616540][ T6921] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.649116][ T6921] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.671865][ T6921] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.692609][ T6921] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.720199][ T1079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.734727][ T1079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.060995][ T3472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.092959][ T3472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.181655][ T3006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.203505][ T3006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.765082][ T7293] netlink: 24 bytes leftover after parsing attributes in process `syz.4.473'. [ 161.802902][ T7293] netlink: 24 bytes leftover after parsing attributes in process `syz.4.473'. [ 161.823556][ T7296] overlayfs: missing 'lowerdir' [ 161.832853][ T7293] netlink: 48 bytes leftover after parsing attributes in process `syz.4.473'. [ 161.892991][ T7293] netlink: 4 bytes leftover after parsing attributes in process `syz.4.473'. [ 161.920802][ T7293] netlink: 24 bytes leftover after parsing attributes in process `syz.4.473'. [ 162.583201][ T7317] kvm: pic: non byte write [ 162.926137][ T7325] overlayfs: missing 'lowerdir' [ 163.001357][ T7328] fuse: Bad value for 'fd' [ 163.262572][ T7335] loop4: detected capacity change from 0 to 1024 [ 163.281804][ T7337] loop3: detected capacity change from 0 to 512 [ 163.407090][ T7335] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.461682][ T7335] EXT4-fs error (device loop4): ext4_lookup:1858: comm syz.4.487: inode #12: comm syz.4.487: iget: illegal inode # [ 163.535212][ T7335] EXT4-fs (loop4): Remounting filesystem read-only [ 163.562999][ T7337] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.577056][ T7337] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.712387][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.938812][ T6888] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.379429][ T7372] loop5: detected capacity change from 0 to 256 [ 164.857196][ T7379] overlayfs: missing 'lowerdir' [ 165.659651][ T7400] kvm: pic: non byte write [ 165.850466][ T7412] loop5: detected capacity change from 0 to 128 [ 165.938145][ T7412] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 166.312133][ T7421] loop4: detected capacity change from 0 to 128 [ 166.346423][ T7423] overlayfs: missing 'lowerdir' [ 166.370986][ T7421] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 166.401141][ T7421] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.731389][ T7432] netlink: 440 bytes leftover after parsing attributes in process `syz.5.510'. [ 166.770055][ T7432] netlink: 12 bytes leftover after parsing attributes in process `syz.5.510'. [ 166.798187][ T7432] netlink: 8 bytes leftover after parsing attributes in process `syz.5.510'. [ 167.206261][ T6888] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 167.283791][ T7446] loop3: detected capacity change from 0 to 512 [ 167.531283][ T7446] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.728086][ T28] audit: type=1804 audit(1785274147.689:4): pid=7446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.513" name="/newroot/114/file0/file1" dev="loop3" ino=15 res=1 errno=0 [ 167.965124][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.272255][ T7537] loop1: detected capacity change from 0 to 256 [ 171.317189][ T7537] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 171.388134][ T7537] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 171.439396][ T7537] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 171.469058][ T7537] UDF-fs: Scanning with blocksize 512 failed [ 171.527794][ T7537] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 171.552308][ T7537] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 173.829161][ T7570] loop3: detected capacity change from 0 to 512 [ 173.872936][ T7570] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 173.921695][ T7570] EXT4-fs warning (device loop3): dx_probe:869: inode #2: comm syz.3.555: Unimplemented hash flags: 0x0001 [ 174.014653][ T7570] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.555: Corrupt directory, running e2fsck is recommended [ 174.081187][ T7570] EXT4-fs warning (device loop3): dx_probe:869: inode #2: comm syz.3.555: Unimplemented hash flags: 0x0001 [ 174.128081][ T7570] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.555: Corrupt directory, running e2fsck is recommended [ 174.189498][ T7570] EXT4-fs warning (device loop3): dx_probe:869: inode #2: comm syz.3.555: Unimplemented hash flags: 0x0001 [ 174.240624][ T7570] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.555: Corrupt directory, running e2fsck is recommended [ 174.283551][ T7570] EXT4-fs warning (device loop3): dx_probe:869: inode #2: comm syz.3.555: Unimplemented hash flags: 0x0001 [ 174.302822][ T7570] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.555: Corrupt directory, running e2fsck is recommended [ 174.323186][ T7570] EXT4-fs warning (device loop3): dx_probe:869: inode #2: comm syz.3.555: Unimplemented hash flags: 0x0001 [ 174.358991][ T7570] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.555: Corrupt directory, running e2fsck is recommended [ 174.390698][ T7589] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 3: comm syz.3.555: path /116/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 174.666486][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.416896][ T7619] futex_wake_op: syz.5.568 tries to shift op by 144; fix this program [ 177.328448][ T7657] loop3: detected capacity change from 0 to 512 [ 177.341754][ T7657] EXT4-fs: Ignoring removed oldalloc option [ 177.380869][ T7657] EXT4-fs (loop3): Test dummy encryption mode enabled [ 177.398362][ T7661] overlayfs: missing 'lowerdir' [ 177.432933][ T7657] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.660987][ T7645] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.669655][ T7645] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.447766][ T7645] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.546306][ T7645] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.168518][ T7645] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.179239][ T7645] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.192322][ T7645] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.202158][ T7645] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.497791][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.731228][ T7696] overlayfs: missing 'lowerdir' [ 181.117022][ T7705] loop3: detected capacity change from 0 to 512 [ 181.422930][ T7705] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.436996][ T7705] ext4 filesystem being mounted at /127/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.117578][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.197445][ T7720] syz.1.596 (7720) used greatest stack depth: 16792 bytes left [ 184.645084][ T7740] ovl_get_inode: 2 callbacks suppressed [ 184.645104][ T7740] overlayfs: failed to get inode (-116) [ 184.708388][ T7740] overlayfs: failed to get inode (-116) [ 184.744849][ T7740] overlayfs: failed to get inode (-116) [ 184.759375][ T7740] overlayfs: failed to get inode (-116) [ 186.311111][ T7791] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 186.371871][ T7791] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 187.770282][ T7799] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.778135][ T7799] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.637885][ T7799] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.656949][ T7799] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.736735][ T7827] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 188.746310][ T7827] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 189.570400][ T7839] fuse: Unknown parameter 'group_i00000000000000000000' [ 189.631602][ T7799] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.640732][ T7799] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.654849][ T7799] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.664054][ T7799] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.275348][ T7860] Config c/1 of g1 needs at least one function. [ 191.282934][ T7860] udc dummy_udc.0: failed to start g1: -22 [ 191.288956][ T7860] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 191.311364][ T7860] UDC core: g1: couldn't find an available UDC or it's busy [ 191.736071][ T7858] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 192.070099][ T7858] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 192.700114][ T7874] netlink: 404 bytes leftover after parsing attributes in process `syz.5.638'. [ 192.711131][ T7874] netlink: 32 bytes leftover after parsing attributes in process `syz.5.638'. [ 193.962467][ T7884] fuse: Unknown parameter 'group_i00000000000000000000' [ 194.186231][ T7898] loop4: detected capacity change from 0 to 128 [ 194.223096][ T7898] UDF-fs: bad mount option "18446744073709551615ÿ" or missing value [ 194.581972][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.590245][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.260441][ T7908] overlayfs: missing 'lowerdir' [ 195.544182][ T7914] syzkaller1: entered promiscuous mode [ 195.554941][ T5886] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 195.566536][ T7914] syzkaller1: entered allmulticast mode [ 195.777239][ T5886] usb 4-1: Using ep0 maxpacket: 8 [ 195.811017][ T5886] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 195.846410][ T5886] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 195.887143][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.927532][ T5886] usb 4-1: Product: syz [ 195.946002][ T5886] usb 4-1: Manufacturer: syz [ 195.966708][ T5886] usb 4-1: SerialNumber: syz [ 195.988725][ T5886] usb 4-1: config 0 descriptor?? [ 196.019317][ T5886] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 196.414550][ T7935] fuse: Unknown parameter 'group_i00000000000000000000' [ 197.744943][ T5886] gspca_zc3xx: reg_w_i err -71 [ 198.405240][ T5886] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 198.435206][ T5886] gspca_zc3xx: probe of 4-1:0.0 failed with error -71 [ 198.472040][ T5886] usb 4-1: USB disconnect, device number 2 [ 198.559146][ T7966] overlayfs: missing 'lowerdir' [ 198.706351][ T7969] syz.3.661 uses obsolete (PF_INET,SOCK_PACKET) [ 199.179600][ T7983] syzkaller0: entered promiscuous mode [ 199.199179][ T7983] syzkaller0: entered allmulticast mode [ 199.676191][ T8004] overlayfs: missing 'lowerdir' [ 200.538312][ T8045] fuse: Unknown parameter 'group_i00000000000000000000' [ 200.826814][ T8055] netlink: 12 bytes leftover after parsing attributes in process `syz.3.687'. [ 200.863882][ T8056] overlayfs: missing 'workdir' [ 200.940061][ T8055] 8021q: adding VLAN 0 to HW filter on device bond1 [ 201.028102][ T8060] vxcan3: entered promiscuous mode [ 201.429314][ T8081] fuse: Unknown parameter 'group_i00000000000000000000' [ 201.530928][ T8085] loop1: detected capacity change from 0 to 128 [ 201.561089][ T8085] UDF-fs: bad mount option "18446744073709551615ÿ" or missing value [ 201.668678][ T5791] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 201.818518][ T8090] overlayfs: missing 'workdir' [ 202.955119][ T5788] Bluetooth: hci3: command tx timeout [ 203.143088][ T8128] fuse: Unknown parameter 'group_i00000000000000000000' [ 203.567275][ T8138] overlayfs: missing 'workdir' [ 203.644706][ T5888] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 203.856918][ T5888] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.874729][ T5888] usb 4-1: config 0 interface 0 has no altsetting 0 [ 203.890970][ T5888] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 203.922448][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.932249][ T5888] usb 4-1: Product: syz [ 203.940850][ T5888] usb 4-1: Manufacturer: syz [ 203.946039][ T5888] usb 4-1: SerialNumber: syz [ 203.957353][ T5888] usb 4-1: config 0 descriptor?? [ 203.981602][ T5888] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 204.015188][ T5888] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 204.071854][ T5888] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 204.092150][ T5888] usb 4-1: media controller created [ 204.156002][ T5888] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 204.319174][ T5888] DVB: Unable to find symbol tda10046_attach() [ 204.335493][ T5888] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 204.354437][ T5888] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 204.431268][ T8156] fuse: Unknown parameter 'group_id00000000000000000000' [ 205.488053][ T5888] dvb_usb_m920x: probe of 4-1:0.0 failed with error -71 [ 205.558583][ T5888] usb 4-1: USB disconnect, device number 3 [ 205.621823][ T8189] fuse: Unknown parameter 'group_id00000000000000000000' [ 206.545445][ T8212] fuse: Bad value for 'fd' [ 206.574731][ T5866] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 206.806821][ T5866] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 206.837204][ T5866] usb 2-1: config 0 interface 0 has no altsetting 0 [ 206.949202][ T5866] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 207.055300][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 207.077492][ T8225] fuse: Unknown parameter 'group_id00000000000000000000' [ 207.100210][ T5866] usb 2-1: Product: syz [ 207.107083][ T5866] usb 2-1: Manufacturer: syz [ 207.117154][ T5866] usb 2-1: SerialNumber: syz [ 207.137066][ T5866] usb 2-1: config 0 descriptor?? [ 207.168002][ T5866] usb 2-1: selecting invalid altsetting 0 [ 207.512279][ T8231] overlayfs: missing 'lowerdir' [ 208.581295][ T5866] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 209.089020][ T5866] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.174898][ T5866] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 209.270188][ T8264] fuse: Bad value for 'fd' [ 209.275428][ T5866] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 209.300914][ T5866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.344907][ T5866] usb 6-1: Product: syz [ 209.349166][ T5866] usb 6-1: Manufacturer: syz [ 209.353893][ T5866] usb 6-1: SerialNumber: syz [ 209.481311][ T5866] cdc_mbim 6-1:1.0: skipping garbage [ 209.735327][ T8251] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 209.877216][ T8272] fuse: Bad value for 'user_id' [ 209.985681][ T5886] usb 2-1: USB disconnect, device number 3 [ 210.515838][ T8251] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 210.525292][ T5866] cdc_mbim 6-1:1.0: setting tx_max = 16384 [ 210.580865][ T5866] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 210.640084][ T5866] wwan wwan0: port wwan0mbim0 attached [ 210.774368][ T5866] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, 92:ef:28:d8:92:6e [ 211.880583][ T8308] fuse: Bad value for 'fd' [ 211.948977][ T5866] usb 6-1: USB disconnect, device number 2 [ 211.966711][ T5866] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 211.994782][ T5794] Bluetooth: hci2: command 0x0406 tx timeout [ 212.000968][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 212.381712][ T5866] wwan wwan0: port wwan0mbim0 disconnected [ 212.685089][ T8322] fuse: Bad value for 'user_id' [ 213.844630][ T5866] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 214.045915][ T5866] usb 2-1: Using ep0 maxpacket: 8 [ 214.076710][ T5866] usb 2-1: unable to get BOS descriptor or descriptor too short [ 214.086489][ T5866] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 214.122722][ T5866] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 2015, setting to 1024 [ 214.176318][ T5866] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice= 0.40 [ 214.200294][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.224857][ T5866] usb 2-1: Product: syz [ 214.229121][ T5866] usb 2-1: Manufacturer: syz [ 214.233760][ T5866] usb 2-1: SerialNumber: syz [ 214.576679][ T5866] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 214.645750][ T5866] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 214.983733][ T8352] netlink: 4 bytes leftover after parsing attributes in process `syz.5.764'. [ 215.718877][ T5866] usb 2-1: USB disconnect, device number 4 [ 215.971133][ T5791] udevd[5791]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 216.007909][ T5795] udevd[5795]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 216.037854][ T5793] udevd[5793]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 216.112395][ T5919] udevd[5919]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 216.226989][ T8373] fuse: Bad value for 'user_id' [ 216.474899][ T5874] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 216.731898][ T5874] usb 5-1: unable to get BOS descriptor or descriptor too short [ 216.754762][ T5874] usb 5-1: not running at top speed; connect to a high speed hub [ 216.810353][ T5874] usb 5-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40 [ 216.825038][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.863654][ T5874] usb 5-1: Product: syz [ 216.873875][ T5874] usb 5-1: Manufacturer: syz [ 216.894307][ T5874] usb 5-1: SerialNumber: syz [ 219.173834][ T5874] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 219.208936][ T5874] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 219.217341][ T5874] usb 5-1: can't set first interface for hiFace device. [ 219.224378][ T5874] snd-usb-hiface: probe of 5-1:1.0 failed with error -5 [ 219.237218][ T5874] usb 5-1: can't set first interface for hiFace device. [ 219.244247][ T5874] snd-usb-hiface: probe of 5-1:1.1 failed with error -5 [ 219.305185][ T5874] usb 5-1: can't set first interface for hiFace device. [ 219.312228][ T5874] snd-usb-hiface: probe of 5-1:1.2 failed with error -5 [ 219.360039][ T5874] usb 5-1: USB disconnect, device number 2 [ 219.491825][ T5791] udevd[5791]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 219.894178][ T8426] fuse: Bad value for 'fd' [ 219.964954][ T5874] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 220.246488][ T5874] usb 5-1: unable to get BOS descriptor or descriptor too short [ 220.265529][ T5874] usb 5-1: not running at top speed; connect to a high speed hub [ 220.299045][ T5874] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.329820][ T5874] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 220.378746][ T5874] usb 5-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 220.396117][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.424653][ T5874] usb 5-1: Product: syz [ 220.433071][ T5874] usb 5-1: Manufacturer: syz [ 220.446997][ T5874] usb 5-1: SerialNumber: syz [ 220.793611][ T8451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.840711][ T8451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.359887][ T8423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.778'. [ 221.369515][ T8423] netlink: 40 bytes leftover after parsing attributes in process `syz.4.778'. [ 221.533928][ T8423] netlink: 68 bytes leftover after parsing attributes in process `syz.4.778'. [ 221.744651][ T5866] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 221.934098][ T5874] usb 5-1: 3:0: failed to get current value for ch 0 (-71) [ 221.948851][ T5866] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 221.967077][ T5874] usb 5-1: 3:0: cannot get min/max values for control 2 (id 3) [ 221.985133][ T5866] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 221.997016][ T5874] usb 5-1: 3:0: cannot get min/max values for control 3 (id 3) [ 222.004764][ T5866] usb 6-1: config 0 interface 0 has no altsetting 0 [ 222.016962][ T5874] usb 5-1: 3:0: cannot get min/max values for control 4 (id 3) [ 222.024926][ T5866] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 222.034048][ T5866] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 222.043050][ T5874] usb 5-1: 3:0: cannot get min/max values for control 5 (id 3) [ 222.054821][ T5874] usb 5-1: 3:0: failed to get current value for ch 0 (-71) [ 222.093000][ T5866] usb 6-1: Product: syz [ 222.104600][ T5874] usb 5-1: 3:0: cannot get min/max values for control 8 (id 3) [ 222.124908][ T5866] usb 6-1: Manufacturer: syz [ 222.129596][ T5866] usb 6-1: SerialNumber: syz [ 222.165727][ T5866] usb 6-1: config 0 descriptor?? [ 222.173244][ T5874] usb 5-1: 3:0: cannot get min/max values for control 3 (id 3) [ 222.198274][ T5874] usb 5-1: 3:0: cannot get min/max values for control 5 (id 3) [ 222.209327][ T5866] usb 6-1: selecting invalid altsetting 0 [ 222.228465][ T5874] usb 5-1: USB disconnect, device number 3 [ 222.708894][ T8466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.785201][ T8466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.862788][ T5888] usb 6-1: USB disconnect, device number 3 [ 223.263854][ T8479] fuse: Bad value for 'fd' [ 226.805196][ T8517] fuse: Bad value for 'fd' [ 227.661766][ T8541] warning: `syz.1.802' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 227.686314][ T5874] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 228.657737][ T5874] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 228.674679][ T5874] usb 4-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 228.704793][ T5874] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 228.713890][ T5874] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x31, skipping [ 228.746481][ T5874] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 228.755927][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 228.763985][ T5874] usb 4-1: Product: syz [ 228.768627][ T5874] usb 4-1: Manufacturer: syz [ 228.783376][ T5874] cdc_wdm 4-1:1.0: skipping garbage [ 228.789255][ T5874] cdc_wdm 4-1:1.0: skipping garbage [ 228.794944][ T5874] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 229.645987][ T8571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.745575][ T8571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.921834][ T8582] fuse: Unknown parameter 'use00000000000000000000' [ 231.305111][ T5866] usb 4-1: USB disconnect, device number 4 [ 232.139786][ T8623] fuse: Unknown parameter 'use00000000000000000000' [ 234.424027][ T8663] fuse: Unknown parameter 'user_i00000000000000000000' [ 235.295866][ T789] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 235.644554][ T789] usb 4-1: Using ep0 maxpacket: 16 [ 235.808912][ T789] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 235.881735][ T789] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 235.940393][ T789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.953413][ T8689] fuse: Invalid rootmode [ 235.983547][ T789] usb 4-1: Product: syz [ 235.994058][ T789] usb 4-1: Manufacturer: syz [ 236.024034][ T789] usb 4-1: SerialNumber: syz [ 236.059983][ T789] usb 4-1: config 0 descriptor?? [ 237.978057][ T789] usb 4-1: USB disconnect, device number 5 [ 238.010079][ T8734] fuse: Invalid rootmode [ 238.823325][ T8766] fuse: Invalid rootmode [ 239.316498][ T789] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 239.719148][ T789] usb 5-1: Using ep0 maxpacket: 8 [ 239.793703][ T789] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 239.831441][ T789] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 239.872042][ T789] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 239.887480][ T789] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.895908][ T789] usb 5-1: Product: syz [ 239.908063][ T789] usb 5-1: Manufacturer: syz [ 239.912755][ T789] usb 5-1: SerialNumber: syz [ 239.945321][ T789] usb 5-1: config 0 descriptor?? [ 239.955440][ T8769] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 239.982958][ T789] powermate: probe of 5-1:0.0 failed with error -22 [ 240.164932][ T5874] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 240.364750][ T5874] usb 4-1: Using ep0 maxpacket: 16 [ 240.384644][ T5874] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 240.398531][ T8786] syzkaller0: entered promiscuous mode [ 240.414607][ T8786] syzkaller0: entered allmulticast mode [ 240.421668][ T5874] usb 4-1: config 0 has no interface number 0 [ 240.431794][ T5874] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 240.463194][ T5874] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 240.486195][ T5874] usb 4-1: config 0 interface 41 has no altsetting 0 [ 240.512931][ T5874] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 240.539228][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.558249][ T5874] usb 4-1: Product: syz [ 240.562506][ T5874] usb 4-1: Manufacturer: syz [ 240.584657][ T5874] usb 4-1: SerialNumber: syz [ 240.592156][ T5874] usb 4-1: config 0 descriptor?? [ 240.614353][ T8778] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 240.634848][ T8778] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 240.881153][ T8778] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 240.908970][ T8778] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 241.885882][ T789] usb 5-1: USB disconnect, device number 4 [ 242.484655][ T789] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 242.591055][ T8809] fuse: Bad value for 'rootmode' [ 242.680289][ T789] usb 5-1: unable to get BOS descriptor or descriptor too short [ 242.712437][ T789] usb 5-1: not running at top speed; connect to a high speed hub [ 242.740778][ T789] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.756204][ T789] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 242.773785][ T789] usb 5-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 242.788483][ T789] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.799183][ T789] usb 5-1: Product: syz [ 242.807298][ T789] usb 5-1: Manufacturer: syz [ 242.817108][ T789] usb 5-1: SerialNumber: syz [ 243.708101][ T8821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.773538][ T8821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.924099][ T8825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.862'. [ 243.934380][ T8825] netlink: 40 bytes leftover after parsing attributes in process `syz.4.862'. [ 243.951421][ T8825] netlink: 68 bytes leftover after parsing attributes in process `syz.4.862'. [ 244.618861][ T5874] sr9700 4-1:0.41 eth9: register 'sr9700' at usb-dummy_hcd.3-1, CoreChip SR9700 USB Ethernet, d6:a1:d6:33:33:a0 [ 244.645157][ T5874] usb 4-1: USB disconnect, device number 6 [ 244.664072][ T5874] sr9700 4-1:0.41 eth9: unregister 'sr9700' usb-dummy_hcd.3-1, CoreChip SR9700 USB Ethernet [ 244.803990][ T789] usb 5-1: 3:0: failed to get current value for ch 0 (-71) [ 244.823629][ T789] usb 5-1: 3:0: cannot get min/max values for control 2 (id 3) [ 244.833690][ T789] usb 5-1: 3:0: cannot get min/max values for control 3 (id 3) [ 244.843086][ T789] usb 5-1: 3:0: cannot get min/max values for control 4 (id 3) [ 244.877259][ T789] usb 5-1: 3:0: cannot get min/max values for control 5 (id 3) [ 244.904856][ T789] usb 5-1: 3:0: failed to get current value for ch 0 (-71) [ 244.986965][ T789] usb 5-1: 3:0: cannot get min/max values for control 8 (id 3) [ 245.026365][ T789] usb 5-1: 3:0: cannot get min/max values for control 3 (id 3) [ 245.051580][ T789] usb 5-1: 3:0: cannot get min/max values for control 5 (id 3) [ 245.077686][ T789] usb 5-1: USB disconnect, device number 5 [ 245.133899][ T5791] udevd[5791]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 245.352951][ T8835] netlink: 4 bytes leftover after parsing attributes in process `syz.5.870'. [ 245.705686][ T8859] fuse: Bad value for 'rootmode' [ 245.903741][ T8863] loop5: detected capacity change from 0 to 128 [ 245.926368][ T8863] UDF-fs: bad mount option "18446744073709551615ÿ" or missing value [ 246.364911][ T789] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 246.605951][ T789] usb 4-1: Using ep0 maxpacket: 32 [ 246.686858][ T789] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 246.777865][ T789] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 246.830913][ T789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.865709][ T789] usb 4-1: config 0 descriptor?? [ 247.388398][ T789] hid-picolcd 0003:04D8:C002.0001: unknown main item tag 0x7 [ 247.407942][ T789] hid-picolcd 0003:04D8:C002.0001: unknown main item tag 0x4 [ 247.508762][ T789] hid-picolcd 0003:04D8:C002.0001: No report with id 0x11 found [ 247.642944][ T8866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.652460][ T8866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.915832][ T8900] fuse: Bad value for 'rootmode' [ 248.286814][ T8909] fuse: Unknown parameter '0x0000000000000003' [ 248.342799][ T5874] usb 4-1: USB disconnect, device number 7 [ 248.345206][ T789] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 248.575862][ T789] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 248.589199][ T789] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 248.601626][ T789] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 80, setting to 64 [ 248.616186][ T789] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 248.625827][ T789] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.633957][ T789] usb 5-1: Product: syz [ 248.638434][ T789] usb 5-1: Manufacturer: syz [ 248.643837][ T789] usb 5-1: SerialNumber: syz [ 248.658044][ T789] cdc_ncm 5-1:1.0: skipping garbage [ 248.883121][ T8905] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 248.905140][ T8905] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 249.167318][ T8925] binder: 8924:8925 ioctl c0306201 200000000240 returned -11 [ 249.444792][ T5874] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 249.536079][ T8932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.895'. [ 249.547777][ T8905] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 249.560283][ T8905] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 249.646175][ T5874] usb 6-1: Using ep0 maxpacket: 32 [ 249.663603][ T5874] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 249.675203][ T5874] usb 6-1: config 0 has no interface number 0 [ 249.681641][ T5874] usb 6-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 249.693985][ T5874] usb 6-1: config 0 interface 89 has no altsetting 0 [ 249.704412][ T5874] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 249.715001][ T5874] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.723193][ T5874] usb 6-1: Product: syz [ 249.728007][ T5874] usb 6-1: Manufacturer: syz [ 249.732663][ T5874] usb 6-1: SerialNumber: syz [ 249.757528][ T5874] usb 6-1: config 0 descriptor?? [ 249.767988][ T5874] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 249.783581][ T5874] em28xx 6-1:0.89: Video interface 89 found: [ 249.785455][ T789] cdc_ncm 5-1:1.0: bind() failure [ 249.830203][ T789] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 249.854923][ T789] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 249.874660][ T789] usbtest: probe of 5-1:1.1 failed with error -71 [ 249.889872][ T789] usb 5-1: USB disconnect, device number 6 [ 250.390072][ T5874] em28xx 6-1:0.89: unknown em28xx chip ID (0) [ 251.431586][ T5874] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 251.445694][ T5874] em28xx 6-1:0.89: board has no eeprom [ 251.531125][ T8971] fuse: Unknown parameter '0x0000000000000003' [ 251.537781][ T5874] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67) [ 251.562401][ T5874] em28xx 6-1:0.89: analog set to bulk mode. [ 251.570881][ T6283] em28xx 6-1:0.89: Registering V4L2 extension [ 251.614851][ T5874] usb 6-1: USB disconnect, device number 4 [ 251.642817][ T5874] em28xx 6-1:0.89: Disconnecting em28xx [ 251.771990][ T6283] em28xx 6-1:0.89: Config register raw data: 0xffffffed [ 251.784069][ T6283] em28xx 6-1:0.89: AC97 chip type couldn't be determined [ 251.812036][ T6283] em28xx 6-1:0.89: No AC97 audio processor [ 251.865542][ T6283] usb 6-1: Decoder not found [ 251.880927][ T6283] em28xx 6-1:0.89: failed to create media graph [ 251.909313][ T6283] em28xx 6-1:0.89: V4L2 device video103 deregistered [ 251.933169][ T6283] em28xx 6-1:0.89: Registering snapshot button... [ 251.952477][ T6283] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input5 [ 251.981064][ T6283] em28xx 6-1:0.89: Remote control support is not available for this card. [ 252.002789][ T5874] em28xx 6-1:0.89: Closing input extension [ 252.022859][ T5874] em28xx 6-1:0.89: Deregistering snapshot button [ 252.172382][ T5874] em28xx 6-1:0.89: Freeing device [ 253.477983][ T8981] futex_wake_op: syz.3.910 tries to shift op by 32; fix this program [ 253.756369][ T5888] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 253.805360][ T9001] netlink: 4 bytes leftover after parsing attributes in process `syz.4.921'. [ 253.927329][ T9008] netlink: 40 bytes leftover after parsing attributes in process `syz.5.923'. [ 253.965425][ T5888] usb 4-1: no configurations [ 253.970117][ T5888] usb 4-1: can't read configurations, error -22 [ 254.147648][ T5888] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 254.365703][ T5888] usb 4-1: no configurations [ 254.370429][ T5888] usb 4-1: can't read configurations, error -22 [ 254.378568][ T5888] usb usb4-port1: attempt power cycle [ 254.930387][ T5888] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 255.414649][ T5866] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 255.448668][ T5888] usb 4-1: device descriptor read/8, error -71 [ 255.596685][ T9035] syzkaller0: entered promiscuous mode [ 255.602263][ T9035] syzkaller0: entered allmulticast mode [ 255.684305][ T5866] usb 5-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 255.701443][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.717922][ T5866] usb 5-1: Product: syz [ 255.726868][ T5866] usb 5-1: Manufacturer: syz [ 255.737262][ T5866] usb 5-1: SerialNumber: syz [ 255.764033][ T5866] ums-karma 5-1:1.0: USB Mass Storage device detected [ 255.807719][ T5866] ums-karma 5-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 255.807719][ T5866] Please send a copy of this message to and [ 256.007921][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.014417][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.266221][ T5866] ums-karma: probe of 5-1:1.0 failed with error -5 [ 256.287207][ T5866] usb 5-1: USB disconnect, device number 7 [ 256.311980][ T8378] udevd[8378]: setting mode of /dev/bus/usb/005/007 to 020664 failed: No such file or directory [ 256.335350][ T8378] udevd[8378]: setting owner of /dev/bus/usb/005/007 to uid=0, gid=0 failed: No such file or directory [ 256.526186][ T6283] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 256.729181][ T6283] usb 2-1: Using ep0 maxpacket: 16 [ 256.737356][ T6283] usb 2-1: config 0 has no interfaces? [ 256.773342][ T6283] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 256.791605][ T6283] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.834685][ T6283] usb 2-1: Product: syz [ 256.842526][ T6283] usb 2-1: Manufacturer: syz [ 256.849396][ T6283] usb 2-1: SerialNumber: syz [ 256.863087][ T6283] usb 2-1: config 0 descriptor?? [ 257.096834][ T9054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.934'. [ 259.601883][ T5888] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 259.618295][ T5888] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 259.785318][ T5866] usb 2-1: USB disconnect, device number 5 [ 260.275514][ T28] audit: type=1326 audit(1785274240.239:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9078 comm="syz.4.943" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb57419de99 code=0x0 [ 260.384662][ T5888] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 260.584632][ T5888] usb 6-1: Using ep0 maxpacket: 16 [ 260.602094][ T5888] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 260.629250][ T5888] usb 6-1: config 0 has no interface number 0 [ 260.651990][ T5888] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 260.682061][ T5888] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 260.714654][ T789] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 260.723683][ T5888] usb 6-1: config 0 interface 41 has no altsetting 0 [ 260.759933][ T5888] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 260.778733][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.804251][ T5888] usb 6-1: Product: syz [ 260.818326][ T5888] usb 6-1: Manufacturer: syz [ 260.823171][ T5888] usb 6-1: SerialNumber: syz [ 260.836732][ T5888] usb 6-1: config 0 descriptor?? [ 260.843721][ T9087] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 260.865263][ T9087] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 260.935677][ T789] usb 5-1: no configurations [ 260.940524][ T789] usb 5-1: can't read configurations, error -22 [ 261.085125][ T9087] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 261.098532][ T9087] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 261.108491][ T789] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 261.315738][ T789] usb 5-1: no configurations [ 261.320789][ T789] usb 5-1: can't read configurations, error -22 [ 261.329847][ T789] usb usb5-port1: attempt power cycle [ 261.536160][ T5888] sr9700 6-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 261.571523][ T5888] usb 6-1: USB disconnect, device number 5 [ 261.675634][ T6283] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 261.694712][ T9110] syzkaller0: entered promiscuous mode [ 261.700466][ T9110] syzkaller0: entered allmulticast mode [ 261.711527][ T9110] tipc: Started in network mode [ 261.717305][ T9110] tipc: Node identity 0ee9928dd17b, cluster identity 4711 [ 261.729070][ T9110] tipc: Enabled bearer , priority 0 [ 261.737910][ T9109] tipc: Resetting bearer [ 261.770229][ T9109] tipc: Disabling bearer [ 261.794765][ T789] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 261.834683][ T789] usb 5-1: no configurations [ 261.839938][ T789] usb 5-1: can't read configurations, error -22 [ 261.869206][ T6283] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.890267][ T6283] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 261.909984][ T6283] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 261.922860][ T6283] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 261.939037][ T6283] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 261.948828][ T6283] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 261.958684][ T6283] usb 2-1: Product: syz [ 261.963453][ T6283] usb 2-1: Manufacturer: syz [ 261.981373][ T5794] Bluetooth: hci2: adv larger than maximum supported [ 261.981462][ T5794] Bluetooth: hci2: Malformed LE Event: 0x0d [ 262.005427][ T789] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 262.046692][ T789] usb 5-1: no configurations [ 262.051387][ T789] usb 5-1: can't read configurations, error -22 [ 262.058553][ T789] usb usb5-port1: unable to enumerate USB device [ 262.212239][ T6283] speedtch 2-1:1.0: speedtch_bind: data interface not found! [ 262.229548][ T6283] speedtch 2-1:1.0: usbatm_usb_probe: bind failed: -19! [ 262.284797][ T6283] usb 2-1: USB disconnect, device number 6 [ 263.155237][ T9133] binder_alloc: 9132: binder_alloc_buf, no vma [ 263.204731][ T5794] Bluetooth: hci1: command 0x0406 tx timeout [ 263.210948][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 263.576069][ T789] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 263.776660][ T789] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.798464][ T789] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 263.808029][ T789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.820541][ T789] usb 4-1: config 0 descriptor?? [ 264.046075][ T789] usbhid 4-1:0.0: can't add hid device: -71 [ 264.064985][ T789] usbhid: probe of 4-1:0.0 failed with error -71 [ 264.090405][ T9152] tipc: Enabling of bearer rejected, failed to enable media [ 264.104875][ T789] usb 4-1: USB disconnect, device number 12 [ 264.233272][ T9156] syzkaller0: entered promiscuous mode [ 264.239190][ T9156] syzkaller0: entered allmulticast mode [ 264.250474][ T9156] tipc: Started in network mode [ 264.255582][ T9156] tipc: Node identity fe613a630326, cluster identity 4711 [ 264.263484][ T9156] tipc: Enabled bearer , priority 0 [ 264.280676][ T9155] tipc: Resetting bearer [ 264.380499][ T9155] tipc: Disabling bearer [ 264.664924][ T789] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 264.841573][ T9173] binder_alloc: 9171: binder_alloc_buf, no vma [ 264.886637][ T789] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.905174][ T789] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 264.936918][ T789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.976476][ T789] usb 4-1: config 0 descriptor?? [ 266.240264][ T789] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 266.528939][ T789] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input6 [ 266.596843][ C1] ================================================================================ [ 266.607066][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31 [ 266.617714][ C1] index 21287 is out of range for type 'const int[34]' [ 266.625781][ C1] CPU: 1 PID: 22 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 266.633145][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 266.643276][ C1] Call Trace: [ 266.646620][ C1] [ 266.649609][ C1] dump_stack_lvl+0x18c/0x250 [ 266.654386][ C1] ? show_regs_print_info+0x20/0x20 [ 266.659711][ C1] ? load_image+0x420/0x420 [ 266.664336][ C1] ubsan_epilogue+0xa/0x30 [ 266.668866][ C1] __ubsan_handle_out_of_bounds+0xe3/0xf0 [ 266.674784][ C1] aiptek_irq+0x1eb8/0x2920 [ 266.679414][ C1] ? kcov_remote_start+0x8a/0x7e0 [ 266.684764][ C1] ? usb_anchor_suspend_wakeups+0x36/0x40 [ 266.690551][ C1] __usb_hcd_giveback_urb+0x35d/0x520 [ 266.695987][ C1] dummy_timer+0xa40/0x3420 [ 266.700586][ C1] ? dummy_free_streams+0x520/0x520 [ 266.705947][ C1] ? dummy_free_streams+0x520/0x520 [ 266.711184][ C1] __hrtimer_run_queues+0x525/0xc10 [ 266.716430][ C1] ? hrtimer_interrupt+0x980/0x980 [ 266.721601][ C1] ? read_tsc+0x9/0x20 [ 266.725752][ C1] hrtimer_run_softirq+0x177/0x290 [ 266.731051][ C1] handle_softirqs+0x27d/0x820 [ 266.735960][ C1] ? run_ksoftirqd+0xa8/0x100 [ 266.740770][ C1] ? do_softirq+0x1a0/0x1a0 [ 266.745594][ C1] run_ksoftirqd+0xa8/0x100 [ 266.750168][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 266.755538][ C1] ? takeover_tasklets+0x770/0x770 [ 266.760715][ C1] ? takeover_tasklets+0x770/0x770 [ 266.765905][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 266.771246][ C1] smpboot_thread_fn+0x651/0x9f0 [ 266.776420][ C1] ? smpboot_thread_fn+0x4d/0x9f0 [ 266.781486][ C1] kthread+0x2fa/0x390 [ 266.785593][ C1] ? smpboot_unregister_percpu_thread+0x2a0/0x2a0 [ 266.792493][ C1] ? kthread_blkcg+0xd0/0xd0 [ 266.797120][ C1] ret_from_fork+0x48/0x80 [ 266.801575][ C1] ? kthread_blkcg+0xd0/0xd0 [ 266.806983][ C1] ret_from_fork_asm+0x11/0x20 [ 266.811797][ C1] [ 266.814853][ C1] ================================================================================ [ 266.824352][ C1] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 266.832379][ C1] CPU: 1 PID: 22 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 266.839792][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 266.850430][ C1] Call Trace: [ 266.853849][ C1] [ 266.856815][ C1] dump_stack_lvl+0x18c/0x250 [ 266.861544][ C1] ? show_regs_print_info+0x20/0x20 [ 266.866857][ C1] ? load_image+0x420/0x420 [ 266.871457][ C1] panic+0x2ca/0x720 [ 266.875883][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 266.880527][ C1] check_panic_on_warn+0x84/0xa0 [ 266.885510][ C1] __ubsan_handle_out_of_bounds+0xe3/0xf0 [ 266.891268][ C1] aiptek_irq+0x1eb8/0x2920 [ 266.896184][ C1] ? kcov_remote_start+0x8a/0x7e0 [ 266.902208][ C1] ? usb_anchor_suspend_wakeups+0x36/0x40 [ 266.909476][ C1] __usb_hcd_giveback_urb+0x35d/0x520 [ 266.915112][ C1] dummy_timer+0xa40/0x3420 [ 266.920068][ C1] ? dummy_free_streams+0x520/0x520 [ 266.925666][ C1] ? dummy_free_streams+0x520/0x520 [ 266.932353][ C1] __hrtimer_run_queues+0x525/0xc10 [ 266.938673][ C1] ? hrtimer_interrupt+0x980/0x980 [ 266.944305][ C1] ? read_tsc+0x9/0x20 [ 266.948522][ C1] hrtimer_run_softirq+0x177/0x290 [ 266.953895][ C1] handle_softirqs+0x27d/0x820 [ 266.958711][ C1] ? run_ksoftirqd+0xa8/0x100 [ 266.963454][ C1] ? do_softirq+0x1a0/0x1a0 [ 266.968002][ C1] run_ksoftirqd+0xa8/0x100 [ 266.972545][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 266.977777][ C1] ? takeover_tasklets+0x770/0x770 [ 266.982930][ C1] ? takeover_tasklets+0x770/0x770 [ 266.988074][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 266.993308][ C1] smpboot_thread_fn+0x651/0x9f0 [ 266.998366][ C1] ? smpboot_thread_fn+0x4d/0x9f0 [ 267.003424][ C1] kthread+0x2fa/0x390 [ 267.007531][ C1] ? smpboot_unregister_percpu_thread+0x2a0/0x2a0 [ 267.013983][ C1] ? kthread_blkcg+0xd0/0xd0 [ 267.018642][ C1] ret_from_fork+0x48/0x80 [ 267.023112][ C1] ? kthread_blkcg+0xd0/0xd0 [ 267.028361][ C1] ret_from_fork_asm+0x11/0x20 [ 267.033185][ C1] [ 267.036384][ C1] Kernel Offset: disabled [ 267.040723][ C1] Rebooting in 86400 seconds..