last executing test programs: 59.42207447s ago: executing program 2 (id=122): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 59.280085744s ago: executing program 2 (id=125): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x17, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 59.137563727s ago: executing program 2 (id=128): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000001980)={[{@fat=@umask={'umask', 0x3d, 0x7}}, {@fat=@usefree}, {@dots}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@dots}, {@fat=@check_strict}, {@fat=@nfs}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@debug}, {@fat=@debug}, {@nodots}, {@nodots}, {@dots}, {@dots}, {@dots}, {@dots}, {@dots}, {@fat=@showexec}, {@fat=@debug}, {@nodots}, {}]}, 0x1, 0x1f5, &(0x7f0000000600)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) 58.800466096s ago: executing program 2 (id=131): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f00000000c0)='sysfs\x00', 0x989, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) 58.597154351s ago: executing program 2 (id=135): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x400, 0x0, 0x3c9}, 0x0, 0x0, 0x0) 58.172135551s ago: executing program 2 (id=137): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a5108000200104013"], 0x44}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 57.719898012s ago: executing program 32 (id=137): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a5108000200104013"], 0x44}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 13.275765746s ago: executing program 4 (id=138): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1}]}, 0x10) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) 11.004164151s ago: executing program 0 (id=340): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x20) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000600)=0x180004) write$binfmt_elf32(r0, 0x0, 0x4cd) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)=0xffffffff) write$dsp(r0, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa) 10.747318248s ago: executing program 4 (id=138): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1}]}, 0x10) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) 8.420674214s ago: executing program 4 (id=138): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1}]}, 0x10) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) 6.381958534s ago: executing program 0 (id=346): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x10000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) ppoll(&(0x7f0000000000)=[{r0, 0x104}], 0x1, 0x0, 0x0, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)={0x15, 0x65, 0xffff, 0xe, 0x8, '9P2000.u'}, 0x15) 5.901881486s ago: executing program 1 (id=352): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x3c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000680)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r1, 0x301}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x101}], 0x1, 0x302, 0x0) 5.828022748s ago: executing program 3 (id=353): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x4) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="002145000b2c000b0000400600000a0000010a0000020050005019a8d90b4cee099f601003e80000000201010101", 0x2e}], 0x1, 0x0, 0x0) 5.827743917s ago: executing program 4 (id=138): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1}]}, 0x10) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) 3.633064591s ago: executing program 0 (id=354): bpf$MAP_CREATE(0x0, 0x0, 0x50) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) utimensat(0xffffffffffffff9c, &(0x7f0000002240)='.\x00', 0x0, 0x0) 3.632736701s ago: executing program 1 (id=355): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0x1, 0x7ff, 0x4b, 0x8009}, 'syz0\x00', 0x8}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000140), 0xfffffffffffffffe, 0x2) dup3(r1, r0, 0x80000) ppoll(&(0x7f0000000000)=[{r1, 0x20}], 0x1, &(0x7f0000000180), 0x0, 0x0) 3.632571291s ago: executing program 3 (id=356): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 3.327430339s ago: executing program 1 (id=357): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./bus\x00', 0x800000, &(0x7f0000005e00)=ANY=[@ANYRES16=0x0], 0x1, 0x5516, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x2fffe) sendfile(r1, r0, 0x0, 0x7ffff000) 2.956021018s ago: executing program 3 (id=358): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000072"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2.947656338s ago: executing program 4 (id=138): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1}]}, 0x10) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) 598.401035ms ago: executing program 0 (id=359): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r2}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) unshare(0x20400) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r1, &(0x7f00000000c0), 0x0}, 0x20) 587.816275ms ago: executing program 1 (id=360): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b80)=@filter={'filter\x00', 0xe, 0x4, 0x438, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x368, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) mkdirat(0xffffffffffffff9c, &(0x7f0000001040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001080)='./proc\x00', &(0x7f00000010c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./proc/net/xt_recent/syz0\x00', 0x2, 0x3) write$P9_RREADDIR(r1, &(0x7f0000001140)={0x2d, 0x29, 0x1, {0xd43}}, 0xb) 540.022306ms ago: executing program 3 (id=361): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xfffffffc}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 480.780308ms ago: executing program 0 (id=362): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r1, r2, 0x25, 0x4, @void}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000000c0)={r3, r4, 0x4, r1}, 0x10) 406.73599ms ago: executing program 1 (id=363): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000340)={{@host}, @host, 0x0, 0x6, 0x244c, 0xffffffffffffffff, 0x101, 0x0, 0xfffffffc}) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000000)={{@host}, 0x401ffffffffffd, 0x0, 0x0, 0x2}) 311.927022ms ago: executing program 3 (id=364): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000085000000a000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f809ffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000600)={r3, r1, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0}}, 0x30) syz_emit_ethernet(0x66, &(0x7f0000000680)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x64, 0x0, 0x6, 0x2f, 0x0, @private=0xa010101, @broadcast}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x1}, {0x8, 0x88be, 0x0, {{0x3, 0x1, 0x4, 0x1, 0x0, 0x0, 0x7, 0x2}, 0x1, {0x5}}}, {0x8, 0x22eb, 0x2, {{0x6, 0x2, 0xcb, 0x1, 0x0, 0x1, 0x1, 0xa}, 0x2, {0x0, 0x7ff, 0x0, 0x4, 0x1, 0x1, 0x3}}}, {0x8, 0x6558, 0x4}}}}}}, 0x0) 275.861593ms ago: executing program 0 (id=365): r0 = getpid() r1 = io_uring_setup(0x1555, &(0x7f0000000240)={0x0, 0x6522, 0x2, 0x1, 0x19e}) mmap$IORING_OFF_CQ_RING(0x0, 0x1000, 0x1000000, 0x4052, r1, 0x8000000) r2 = syz_pidfd_open(r0, 0x0) setns(r2, 0x24020000) syz_clone3(&(0x7f00000000c0)={0xb53c2080, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) 255.915093ms ago: executing program 1 (id=366): socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00007fd000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) 154.215496ms ago: executing program 3 (id=367): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000080)='X', 0x1, 0x804, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) recvmmsg(r0, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/8, 0x8}, 0x1}], 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x1, 0x0, 0x4, 0x0, 0x0, 0x7}, 0xe) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x4b, &(0x7f0000000040)=0x1, 0x4) shutdown(r0, 0x1) 0s ago: executing program 4 (id=138): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1}]}, 0x10) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.78' (ED25519) to the list of known hosts. [ 82.315928][ T5765] cgroup: Unknown subsys name 'net' [ 82.455602][ T5765] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.270018][ T5765] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.075760][ T5790] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.084898][ T5790] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.093658][ T5790] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.101791][ T5790] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.109715][ T5790] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.117326][ T5792] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.126476][ T5790] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.137074][ T5794] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.159103][ T5790] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.166913][ T5794] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.187331][ T5794] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.203192][ T5792] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.210634][ T5794] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.210640][ T5790] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.221030][ T5792] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.229157][ T5793] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.233164][ T5794] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.248438][ T5794] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.264926][ T5089] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.272744][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.282258][ T5089] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.292993][ T5089] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.300568][ T5089] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.308263][ T5089] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.398933][ T5778] (null): rxe_set_mtu: Set mtu to 1024 [ 86.405746][ T5778] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.408914][ T5780] (null): rxe_set_mtu: Set mtu to 1024 [ 86.419808][ T5778] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.429179][ T5777] (null): rxe_set_mtu: Set mtu to 1024 [ 86.430129][ T5779] (null): rxe_set_mtu: Set mtu to 1024 [ 86.436381][ T5777] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 86.440984][ T5780] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 86.454052][ T5778] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.461229][ T5779] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 86.803145][ T5778] infiniband rxe0: set active [ 86.835344][ T5778] infiniband rxe0: added rxe_eth0 [ 86.847768][ T175] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.916464][ T5778] RDS/IB: rxe0: added [ 86.921381][ T5778] smc: adding ib device rxe0 with port count 1 [ 86.928180][ T5778] smc: ib device rxe0 port 1 has pnetid [ 86.970675][ T5784] rxe_eth0 speed is unknown, defaulting to 1000 [ 87.013293][ T5778] rxe_eth0 speed is unknown, defaulting to 1000 [ 87.102972][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 87.214255][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 87.335867][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 87.616961][ T5778] rxe_eth0 speed is unknown, defaulting to 1000 [ 87.665083][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.687856][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.695375][ T5777] bridge_slave_0: entered allmulticast mode [ 87.728476][ T5777] bridge_slave_0: entered promiscuous mode [ 87.748227][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.755389][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.786884][ T5777] bridge_slave_1: entered allmulticast mode [ 87.797103][ T5777] bridge_slave_1: entered promiscuous mode [ 87.897106][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.904400][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.914461][ T5780] bridge_slave_0: entered allmulticast mode [ 87.921713][ T5780] bridge_slave_0: entered promiscuous mode [ 87.931486][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.938957][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.946317][ T5780] bridge_slave_1: entered allmulticast mode [ 87.953488][ T5780] bridge_slave_1: entered promiscuous mode [ 87.975220][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.984408][ T5778] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.021811][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.029135][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.040587][ T5779] bridge_slave_0: entered allmulticast mode [ 88.048411][ T5779] bridge_slave_0: entered promiscuous mode [ 88.093804][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.122692][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.130303][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.138033][ T5779] bridge_slave_1: entered allmulticast mode [ 88.145866][ T5779] bridge_slave_1: entered promiscuous mode [ 88.155914][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.219634][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.233231][ T5777] team0: Port device team_slave_0 added [ 88.243151][ T5777] team0: Port device team_slave_1 added [ 88.252363][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.284582][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.316084][ T5778] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.328323][ T5089] Bluetooth: hci3: command tx timeout [ 88.328343][ T5787] Bluetooth: hci2: command tx timeout [ 88.328818][ T51] Bluetooth: hci1: command tx timeout [ 88.384971][ T5780] team0: Port device team_slave_0 added [ 88.416084][ T51] Bluetooth: hci0: command tx timeout [ 88.424921][ T5779] team0: Port device team_slave_0 added [ 88.432816][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.441472][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.468103][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.482610][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.500504][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.530411][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.544626][ T5780] team0: Port device team_slave_1 added [ 88.569507][ T5779] team0: Port device team_slave_1 added [ 88.662541][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.670961][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.697496][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.710954][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.718886][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.745341][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.809847][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.818289][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.844550][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.881473][ T5777] hsr_slave_0: entered promiscuous mode [ 88.888935][ T5777] hsr_slave_1: entered promiscuous mode [ 88.897758][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.904782][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.941045][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.074294][ T5780] hsr_slave_0: entered promiscuous mode [ 89.088103][ T5780] hsr_slave_1: entered promiscuous mode [ 89.094898][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.108204][ T5780] Cannot create hsr debugfs directory [ 89.209791][ T5779] hsr_slave_0: entered promiscuous mode [ 89.221400][ T5779] hsr_slave_1: entered promiscuous mode [ 89.228263][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.235891][ T5779] Cannot create hsr debugfs directory [ 89.545341][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 89.685409][ T5438] infiniband rxe0: set active [ 89.735543][ T5784] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.757395][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.764693][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.772151][ T5778] bridge_slave_0: entered allmulticast mode [ 89.781349][ T5778] bridge_slave_0: entered promiscuous mode [ 89.827422][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.834660][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.847250][ T5778] bridge_slave_1: entered allmulticast mode [ 89.854883][ T5778] bridge_slave_1: entered promiscuous mode [ 89.909232][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.955310][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.977141][ T5777] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.993308][ T5777] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.004289][ T5777] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.042050][ T5778] team0: Port device team_slave_0 added [ 90.051426][ T5778] team0: Port device team_slave_1 added [ 90.060731][ T5777] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.102397][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.109586][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.136297][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.178466][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.185693][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.212539][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.294005][ T5778] hsr_slave_0: entered promiscuous mode [ 90.301523][ T5778] hsr_slave_1: entered promiscuous mode [ 90.308513][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.316127][ T5778] Cannot create hsr debugfs directory [ 90.323130][ T5780] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.334468][ T5780] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.364850][ T5780] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.393724][ T5780] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.406688][ T51] Bluetooth: hci3: command tx timeout [ 90.419572][ T51] Bluetooth: hci1: command tx timeout [ 90.419586][ T5089] Bluetooth: hci2: command tx timeout [ 90.495939][ T51] Bluetooth: hci0: command tx timeout [ 90.561469][ T5779] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.571531][ T5779] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.611315][ T5779] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.623404][ T5779] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.732420][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.838266][ T5778] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.849281][ T5778] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.868540][ T5778] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.879871][ T5778] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.897755][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.975165][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.982646][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.003610][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.039206][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.046389][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.079568][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.120419][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.127740][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.145542][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.184750][ T3005] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.192008][ T3005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.220970][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.261005][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.268323][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.304484][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.311712][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.468855][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.567894][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.594565][ T2946] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.601844][ T2946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.665763][ T2946] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.673020][ T2946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.793673][ T5778] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 91.833153][ T5778] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.982694][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.994409][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.071682][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.169388][ T5777] veth0_vlan: entered promiscuous mode [ 92.212267][ T5780] veth0_vlan: entered promiscuous mode [ 92.227576][ T5777] veth1_vlan: entered promiscuous mode [ 92.244847][ T5779] veth0_vlan: entered promiscuous mode [ 92.281488][ T5780] veth1_vlan: entered promiscuous mode [ 92.309158][ T5779] veth1_vlan: entered promiscuous mode [ 92.328924][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.380945][ T5780] veth0_macvtap: entered promiscuous mode [ 92.395527][ T5777] veth0_macvtap: entered promiscuous mode [ 92.415111][ T5780] veth1_macvtap: entered promiscuous mode [ 92.423740][ T5777] veth1_macvtap: entered promiscuous mode [ 92.462195][ T5779] veth0_macvtap: entered promiscuous mode [ 92.485968][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.496735][ T51] Bluetooth: hci2: command tx timeout [ 92.500279][ T5089] Bluetooth: hci1: command tx timeout [ 92.503142][ T5787] Bluetooth: hci3: command tx timeout [ 92.522580][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.533314][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.545367][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.553672][ T5779] veth1_macvtap: entered promiscuous mode [ 92.567487][ T5787] Bluetooth: hci0: command tx timeout [ 92.585245][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.598631][ T5777] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.608459][ T5777] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.617867][ T5777] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.626801][ T5777] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.656027][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.667560][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.678911][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.717053][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.729530][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.740595][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.751900][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.763753][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.774268][ T5780] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.783670][ T5780] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.793243][ T5780] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.803712][ T5780] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.831945][ T5778] veth0_vlan: entered promiscuous mode [ 92.845277][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.858113][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.868212][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.878942][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.890873][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.944308][ T5779] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.956336][ T5779] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.971319][ T5779] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.980218][ T5779] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.993012][ T5778] veth1_vlan: entered promiscuous mode [ 93.093004][ T3005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.105126][ T3005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.153904][ T5778] veth0_macvtap: entered promiscuous mode [ 93.177677][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.185617][ T5778] veth1_macvtap: entered promiscuous mode [ 93.194219][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.245561][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.266684][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.293093][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.304168][ T2946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.313039][ T2946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.320861][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.331022][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.341805][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.351931][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.362670][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.375850][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.419812][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.441513][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.452262][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.463659][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.475331][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.488176][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.501223][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.548426][ T5778] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.557793][ T5778] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.567972][ T5778] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.579130][ T5778] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.629367][ T2946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.637972][ T2946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.751107][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.767882][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.856512][ T5880] netlink: 'syz.2.3': attribute type 10 has an invalid length. [ 93.859307][ T5883] syz.3.4[5883]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 93.887689][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.895757][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.929685][ T5880] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.937085][ T5880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.945458][ T5880] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.952817][ T5880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.977350][ T5880] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 94.000889][ T2946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.033493][ T2946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.140849][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.176161][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.567309][ T5787] Bluetooth: hci3: command tx timeout [ 94.572816][ T5787] Bluetooth: hci1: command tx timeout [ 94.579090][ T51] Bluetooth: hci2: command tx timeout [ 94.648007][ T5787] Bluetooth: hci0: command tx timeout [ 94.823530][ T5883] loop3: detected capacity change from 0 to 32768 [ 94.878228][ T5883] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.4 (5883) [ 94.975001][ T5883] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 94.987276][ T5883] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 94.996528][ T5903] loop2: detected capacity change from 0 to 64 [ 95.054364][ T5883] BTRFS info (device loop3): setting nodatasum [ 95.063655][ T5883] BTRFS info (device loop3): force zlib compression, level 3 [ 95.083338][ T5883] BTRFS info (device loop3): turning on flush-on-commit [ 95.101839][ T5883] BTRFS info (device loop3): max_inline at 4096 [ 95.118804][ T5883] BTRFS info (device loop3): using free space tree [ 95.168595][ T28] audit: type=1800 audit(1792081228.459:2): pid=5903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.11" name="file1" dev="loop2" ino=21 res=0 errno=0 [ 95.288383][ T5883] BTRFS info (device loop3): enabling ssd optimizations [ 95.699808][ T5923] loop2: detected capacity change from 0 to 2048 [ 95.838553][ T5923] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.940343][ T5780] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 95.957066][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 96.095429][ T5923] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 96.139315][ T5923] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 96.187328][ T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 96.202818][ T5923] EXT4-fs (loop2): This should not happen!! Data will be lost [ 96.202818][ T5923] [ 96.212717][ T23] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 96.243630][ T5923] EXT4-fs (loop2): Total free blocks count 0 [ 96.250305][ T23] usb 1-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 96.259867][ T5923] EXT4-fs (loop2): Free/Dirty block details [ 96.265943][ T5923] EXT4-fs (loop2): free_blocks=4096 [ 96.292212][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.301541][ T5923] EXT4-fs (loop2): dirty_blocks=64 [ 96.323948][ T5923] EXT4-fs (loop2): Block reservation details [ 96.367640][ T5923] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 96.428662][ T5922] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 96.777443][ T23] usb 1-1: USB disconnect, device number 2 [ 96.961768][ T5940] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18'. [ 97.223300][ T1207] cfg80211: failed to load regulatory.db [ 98.095497][ T5952] syz.2.23 uses obsolete (PF_INET,SOCK_PACKET) [ 98.221204][ T5965] netlink: 31 bytes leftover after parsing attributes in process `syz.1.28'. [ 98.268753][ T5965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.28'. [ 98.364597][ T974] libceph: connect (1)[c::]:6789 error -101 [ 98.388156][ T974] libceph: mon0 (1)[c::]:6789 connect error [ 98.399578][ T1207] libceph: connect (1)[c::]:6789 error -101 [ 98.405701][ T1207] libceph: mon0 (1)[c::]:6789 connect error [ 98.668035][ T9] libceph: connect (1)[c::]:6789 error -101 [ 98.684548][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 98.707383][ T27] libceph: connect (1)[c::]:6789 error -101 [ 98.720665][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 98.823550][ T5963] loop0: detected capacity change from 0 to 32768 [ 98.836446][ T5963] ======================================================= [ 98.836446][ T5963] WARNING: The mand mount option has been deprecated and [ 98.836446][ T5963] and is ignored by this kernel. Remove the mand [ 98.836446][ T5963] option from the mount to silence this warning. [ 98.836446][ T5963] ======================================================= [ 99.008714][ T5963] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 99.042444][ T5980] loop2: detected capacity change from 0 to 8192 [ 99.092804][ T5980] loop2: p1 p2 p3 p4 [ 99.103795][ T5980] loop2: partition table partially beyond EOD, truncated [ 99.164630][ T5980] loop2: p3 start 117772289 is beyond EOD, truncated [ 99.186722][ T5967] ceph: No mds server is up or the cluster is laggy [ 99.187999][ T5970] ceph: No mds server is up or the cluster is laggy [ 99.198115][ T974] libceph: connect (1)[c::]:6789 error -101 [ 99.216891][ T5980] loop2: p4 size 720896 extends beyond EOD, truncated [ 99.248410][ T1207] libceph: connect (1)[c::]:6789 error -101 [ 99.252202][ T974] libceph: mon0 (1)[c::]:6789 connect error [ 99.264801][ T1207] libceph: mon0 (1)[c::]:6789 connect error [ 99.271881][ T5984] device-mapper: ioctl: device name cannot contain '/' [ 99.303367][ T5984] device-mapper: ioctl: Invalid ioctl structure: name >ª W•tÉ¥ìÿŸ¿%Uó./dev, dev 178f517437743bef [ 99.490528][ T5779] ocfs2: Unmounting device (7,0) on (node local) [ 99.832814][ T5781] udevd[5781]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 99.859550][ T5791] udevd[5791]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 99.875010][ T5796] udevd[5796]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 100.938743][ T6031] ALSA: seq fatal error: cannot create timer (-16) [ 100.997059][ T6040] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 101.115975][ T6044] Zero length message leads to an empty skb [ 101.262922][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 102.542670][ T6102] loop2: detected capacity change from 0 to 512 [ 103.340718][ T6122] process 'syz.2.76' launched './file0' with NULL argv: empty string added [ 103.463098][ T6124] loop5: detected capacity change from 0 to 7 [ 103.489503][ T6124] Dev loop5: unable to read RDB block 7 [ 103.498810][ T6124] loop5: unable to read partition table [ 103.504849][ T6124] loop5: partition table beyond EOD, truncated [ 103.530499][ T6124] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 103.890922][ T6135] input: syz0 as /devices/virtual/input/input5 [ 103.950572][ T6138] loop3: detected capacity change from 0 to 256 [ 103.997709][ T5791] udevd[5791]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 104.042969][ T6138] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 104.226785][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 104.254072][ T6147] netlink: 16 bytes leftover after parsing attributes in process `syz.3.87'. [ 104.441597][ T23] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 104.460301][ T6155] device-mapper: table: 248:0: thin: Invalid argument count (-EINVAL) [ 104.466915][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.470870][ T6155] device-mapper: ioctl: error adding target to table [ 104.493350][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.525051][ T23] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 104.563435][ T23] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 104.590684][ T23] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 104.618160][ T23] usb 2-1: Manufacturer: syz [ 104.636757][ T974] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 104.649917][ T23] usb 2-1: config 0 descriptor?? [ 104.772037][ T6166] tls_set_device_offload_rx: netdev not found [ 104.842198][ T974] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 104.864381][ T974] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 104.874929][ T974] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 104.899793][ T974] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 104.918321][ T974] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.951668][ T6150] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 104.963848][ T6150] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 104.982959][ T974] pl2303 1-1:1.0: pl2303 converter detected [ 105.005121][ T974] usb 1-1: pl2303 converter now attached to ttyUSB0 [ 105.127506][ T23] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 105.159509][ T23] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 105.199540][ T23] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 105.397112][ T6150] pl2303 1-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 105.418130][ T6150] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 105.435757][ T6150] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 105.457608][ T6150] pl2303 1-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 105.482292][ T6150] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 105.592046][ T6186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.104'. [ 105.799722][ T6150] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 105.813348][ T6150] pl2303 ttyUSB0: error sending break = -32 [ 105.897033][ T974] usb 1-1: USB disconnect, device number 3 [ 105.934049][ T974] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 105.943462][ T974] pl2303 1-1:1.0: device disconnected [ 106.571424][ T28] audit: type=1326 audit(1792081239.859:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6199 comm="syz.2.110" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fcdbab982d7 code=0x0 [ 106.941599][ T6204] syzkaller1: entered promiscuous mode [ 106.947331][ T6204] syzkaller1: entered allmulticast mode [ 107.335276][ T9] usb 2-1: USB disconnect, device number 2 [ 107.426490][ T974] IPVS: starting estimator thread 0... [ 107.578283][ T6215] IPVS: using max 17 ests per chain, 40800 per kthread [ 107.672416][ T6224] netlink: 'syz.3.119': attribute type 11 has an invalid length. [ 107.912588][ T6236] loop1: detected capacity change from 0 to 256 [ 107.992145][ T6239] loop2: detected capacity change from 0 to 256 [ 108.486840][ T1207] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 108.716229][ T1207] usb 4-1: config index 0 descriptor too short (expected 47, got 46) [ 108.725950][ T1207] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.756933][ T1207] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 108.776692][ T1207] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 108.796331][ T1207] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.924163][ T48] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.102819][ T48] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.233784][ T48] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.266527][ T6248] loop0: detected capacity change from 0 to 40427 [ 109.348796][ T6248] F2FS-fs (loop0): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 109.377554][ T6248] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 109.397100][ T6253] loop1: detected capacity change from 0 to 32768 [ 109.404075][ T6248] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7 [ 109.426806][ T6248] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 109.455815][ T48] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.495690][ T6253] JBD2: Ignoring recovery information on journal [ 109.506715][ T6248] F2FS-fs (loop0): Image doesn't support compression [ 109.586096][ T6248] F2FS-fs (loop0): invalid crc value [ 109.678434][ T6248] F2FS-fs (loop0): Found nat_bits in checkpoint [ 109.760252][ T6253] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 109.825625][ T1207] cxacru 4-1:1.0: send of cm 0x90 failed (-71) [ 109.866559][ T1207] cxacru 4-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 109.874565][ T1207] cxacru: probe of 4-1:1.0 failed with error -22 [ 109.962361][ T6248] F2FS-fs (loop0): Start checkpoint disabled! [ 110.018265][ T1207] usb 4-1: USB disconnect, device number 2 [ 110.085236][ T6248] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 110.094263][ T6248] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 110.187484][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 110.198109][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 110.206362][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 110.223001][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 110.233642][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 110.243442][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 110.321558][ T6264] rxe_eth0 speed is unknown, defaulting to 1000 [ 110.376987][ T6248] F2FS-fs (loop0): inject slab alloc in f2fs_alloc_inode of new_inode_pseudo+0x63/0x1d0 [ 110.654563][ T5778] ocfs2: Unmounting device (7,1) on (node local) [ 110.685563][ T6270] Bluetooth: MGMT ver 1.22 [ 110.770783][ T79] kworker/u4:5: attempt to access beyond end of device [ 110.770783][ T79] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 110.857461][ T79] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 110.864583][ T79] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 111.588489][ T6288] loop1: detected capacity change from 0 to 1024 [ 111.598744][ T6288] EXT4-fs: Ignoring removed bh option [ 111.671193][ T6288] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 111.753959][ T6288] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.004852][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 112.111807][ T6297] kvm: apic: phys broadcast and lowest prio [ 112.270368][ T6264] chnl_net:caif_netlink_parms(): no params data found [ 112.281529][ T28] audit: type=1326 audit(1792081245.569:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.3.146" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29fc39e559 code=0x7ffc0000 [ 112.326923][ T5787] Bluetooth: hci3: command tx timeout [ 112.330650][ T28] audit: type=1326 audit(1792081245.599:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.3.146" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29fc39e559 code=0x7ffc0000 [ 112.357127][ T28] audit: type=1326 audit(1792081245.599:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.3.146" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29fc39e559 code=0x7ffc0000 [ 112.381115][ T28] audit: type=1326 audit(1792081245.599:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.3.146" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f29fc39e559 code=0x7ffc0000 [ 112.451620][ T28] audit: type=1326 audit(1792081245.599:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.3.146" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29fc39e559 code=0x7ffc0000 [ 112.502881][ T28] audit: type=1326 audit(1792081245.649:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.3.146" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29fc39e559 code=0x7ffc0000 [ 112.551227][ T28] audit: type=1326 audit(1792081245.649:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.3.146" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f29fc39e2c2 code=0x7ffc0000 [ 112.612889][ T28] audit: type=1326 audit(1792081245.649:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.3.146" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f29fc39e357 code=0x7ffc0000 [ 112.672195][ T28] audit: type=1326 audit(1792081245.649:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.3.146" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f29fc35b251 code=0x7ffc0000 [ 112.690741][ T6312] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 112.715329][ T28] audit: type=1326 audit(1792081245.649:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.3.146" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f29fc39f349 code=0x7ffc0000 [ 113.146438][ T6264] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.178714][ T6264] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.186061][ T6264] bridge_slave_0: entered allmulticast mode [ 113.229641][ T6264] bridge_slave_0: entered promiscuous mode [ 113.331550][ T48] hsr_slave_0: left promiscuous mode [ 113.351960][ T48] hsr_slave_1: left promiscuous mode [ 113.375570][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.387989][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.427567][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.445325][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.488685][ T48] bridge_slave_1: left allmulticast mode [ 113.504870][ T48] bridge_slave_1: left promiscuous mode [ 113.514308][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.565425][ T48] bridge_slave_0: left allmulticast mode [ 113.579192][ T48] bridge_slave_0: left promiscuous mode [ 113.599151][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.723899][ T48] veth1_macvtap: left promiscuous mode [ 113.740941][ T48] veth0_macvtap: left promiscuous mode [ 113.758676][ T48] veth1_vlan: left promiscuous mode [ 113.764373][ T48] veth0_vlan: left promiscuous mode [ 114.407027][ T5787] Bluetooth: hci3: command tx timeout [ 115.304507][ T48] team0 (unregistering): Port device team_slave_1 removed [ 115.388309][ T48] team0 (unregistering): Port device team_slave_0 removed [ 115.475973][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.599178][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.945537][ T48] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 115.955533][ T48] bond0 (unregistering): Released all slaves [ 116.017911][ T6264] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.026390][ T6264] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.036401][ T6264] bridge_slave_1: entered allmulticast mode [ 116.046879][ T6264] bridge_slave_1: entered promiscuous mode [ 116.125264][ T6396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.141758][ T6396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.151839][ T6396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.162652][ T6396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.179430][ T6396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.215311][ T6396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.237675][ T6396] batadv_slave_0: entered promiscuous mode [ 116.250907][ T6396] batadv_slave_0: left promiscuous mode [ 116.303206][ T6264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.347206][ T6264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.456656][ T6264] team0: Port device team_slave_0 added [ 116.468219][ T6264] team0: Port device team_slave_1 added [ 116.486933][ T5787] Bluetooth: hci3: command tx timeout [ 116.548621][ T6264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.559617][ T6264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.630382][ T6264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.657850][ T6264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.665171][ T6264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.716781][ T6264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.868532][ T6264] hsr_slave_0: entered promiscuous mode [ 116.880823][ T6264] hsr_slave_1: entered promiscuous mode [ 116.976104][ T6415] loop1: detected capacity change from 0 to 1024 [ 117.020500][ T6415] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 117.139832][ T6415] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.214757][ T6415] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 117.409492][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.481882][ T6264] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 117.566707][ T6264] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 117.595118][ T6264] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 117.660635][ T6264] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 117.983834][ T6264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.037510][ T6446] Bluetooth: ISO socket layer initialized [ 118.047307][ T6264] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.094126][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.101371][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.179556][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.186868][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.570173][ T5787] Bluetooth: hci3: command tx timeout [ 118.964189][ T6264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.849607][ T6264] veth0_vlan: entered promiscuous mode [ 119.937500][ T6264] veth1_vlan: entered promiscuous mode [ 120.040189][ T6264] veth0_macvtap: entered promiscuous mode [ 120.065652][ T6264] veth1_macvtap: entered promiscuous mode [ 120.109876][ T6264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.129590][ T6264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.142907][ T6264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.156381][ T6264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.171385][ T6264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.189320][ T6264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.208015][ T6264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.225674][ T6264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.238810][ T6264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.252813][ T6264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.268207][ T6264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.278919][ T6264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.303923][ T6264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.328223][ T6264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.361489][ T6264] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.382748][ T6264] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.402663][ T6264] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.413638][ T6264] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.121800][ T6531] Driver unsupported XDP return value 0 on prog (id 26) dev N/A, expect packet loss! [ 121.486708][ T1207] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 121.687556][ T1207] usb 4-1: Using ep0 maxpacket: 32 [ 122.089059][ T6555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.122276][ T6555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.243998][ T1207] usb 4-1: unable to get BOS descriptor or descriptor too short [ 122.269439][ T1207] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 122.278872][ T6562] loop1: detected capacity change from 0 to 512 [ 122.287928][ T1207] usb 4-1: can't read configurations, error -71 [ 122.302633][ T5791] udevd[5791]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 122.320453][ T6562] EXT4-fs: Ignoring removed nobh option [ 122.340324][ T6562] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 122.374252][ T6562] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 122.418853][ T6562] EXT4-fs (loop1): 1 truncate cleaned up [ 122.428183][ T6562] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.547902][ T6562] syz.1.214 (pid 6562) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 122.701955][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.768892][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.788167][ T5791] udevd[5791]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 122.829645][ T5791] udevd[5791]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 123.368577][ T23] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 123.585712][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.613946][ T23] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 123.627346][ T6599] netlink: 'syz.0.222': attribute type 3 has an invalid length. [ 123.656200][ T23] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.676709][ T23] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 123.736660][ T23] usb 2-1: config 0 interface 0 has no altsetting 0 [ 123.743448][ T23] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 123.772555][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.803500][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.830334][ T23] usb 2-1: config 0 descriptor?? [ 123.916270][ T6602] netlink: 36 bytes leftover after parsing attributes in process `syz.0.223'. [ 124.066847][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.281256][ T23] lenovo 0003:17EF:6047.0002: unknown main item tag 0x0 [ 124.311517][ T23] lenovo 0003:17EF:6047.0002: unknown main item tag 0x0 [ 124.320430][ T23] lenovo 0003:17EF:6047.0002: unbalanced collection at end of report description [ 124.330882][ T23] lenovo 0003:17EF:6047.0002: hid_parse failed [ 124.339246][ T23] lenovo: probe of 0003:17EF:6047.0002 failed with error -22 [ 124.530952][ T23] usb 2-1: USB disconnect, device number 3 [ 125.741274][ T11] hsr_slave_0: left promiscuous mode [ 125.790941][ T11] hsr_slave_1: left promiscuous mode [ 125.812055][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.826307][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.850222][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.876695][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.908009][ T11] bridge_slave_1: left allmulticast mode [ 125.913740][ T11] bridge_slave_1: left promiscuous mode [ 125.956542][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.984557][ T11] bridge_slave_0: left allmulticast mode [ 125.996876][ T11] bridge_slave_0: left promiscuous mode [ 126.003958][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.140831][ T11] veth1_macvtap: left promiscuous mode [ 126.157109][ T11] veth0_macvtap: left promiscuous mode [ 126.162906][ T11] veth1_vlan: left promiscuous mode [ 126.177584][ T11] veth0_vlan: left promiscuous mode [ 127.027644][ T11] team0 (unregistering): Port device team_slave_1 removed [ 127.090299][ T11] team0 (unregistering): Port device team_slave_0 removed [ 127.132209][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.240691][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.391653][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d22ec00: rx timeout, send abort [ 127.402721][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805d22ec00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 127.813294][ T11] bond0 (unregistering): Released all slaves [ 127.959765][ T6652] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 128.687204][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d22e800: rx timeout, send abort [ 128.704441][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805d22e800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 128.745528][ T6687] loop1: detected capacity change from 0 to 128 [ 128.762906][ T6689] loop3: detected capacity change from 0 to 256 [ 128.795269][ T6261] udevd[6261]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 128.810745][ T5791] udevd[5791]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 128.833777][ T6689] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 128.875756][ T5791] udevd[5791]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 128.994100][ T5791] udevd[5791]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 129.010443][ T6261] udevd[6261]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 129.039423][ T5791] udevd[5791]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 129.074362][ T6261] udevd[6261]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 130.249206][ T6702] loop0: detected capacity change from 0 to 40427 [ 130.269925][ T5791] udevd[5791]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 130.285811][ T6702] F2FS-fs (loop0): Fix alignment : done, start(4096) end(16896) block(12288) [ 130.295940][ T6702] F2FS-fs (loop0): invalid crc value [ 130.305497][ T6702] F2FS-fs (loop0): invalid crc value [ 130.311700][ T6702] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 130.389750][ T5791] udevd[5791]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 130.442903][ T5791] udevd[5791]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 131.006984][ T6736] ip_tables: iptables: counters copy to user failed while replacing table [ 131.476738][ T6758] raw_sendmsg: syz.1.254 forgot to set AF_INET. Fix it! [ 133.055145][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.063358][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.950290][ T6801] loop1: detected capacity change from 0 to 40427 [ 133.995564][ T5791] udevd[5791]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 133.996911][ T6801] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 134.031433][ T6801] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 134.057924][ T6801] F2FS-fs (loop1): invalid crc value [ 134.075019][ T6801] F2FS-fs (loop1): Found nat_bits in checkpoint [ 134.169732][ T6801] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 134.180381][ T6801] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 134.272764][ T6801] syz.1.261: attempt to access beyond end of device [ 134.272764][ T6801] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 134.312120][ T6801] syz.1.261: attempt to access beyond end of device [ 134.312120][ T6801] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 134.334846][ T6801] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 134.607175][ T5791] udevd[5791]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 134.631021][ T5791] udevd[5791]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 134.992778][ T6856] xt_TPROXY: Can be used only with -p tcp or -p udp [ 135.729195][ T28] kauditd_printk_skb: 113 callbacks suppressed [ 135.729212][ T28] audit: type=1326 audit(1792081269.019:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6870 comm="syz.0.272" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff77299e559 code=0x0 [ 137.089208][ T6892] loop0: detected capacity change from 0 to 256 [ 137.151330][ T5791] udevd[5791]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 137.195350][ T6895] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 137.204335][ T6895] syzkaller1: Refused to change device type [ 137.243102][ T6892] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x196362d4, utbl_chksum : 0xe619d30d) [ 137.442092][ T28] audit: type=1800 audit(1792081270.729:128): pid=6892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.274" name="file1" dev="loop0" ino=1048645 res=0 errno=0 [ 137.495793][ T6901] 9pnet: p9_errstr2errno: server reported unknown error n$Ž[ [ 137.495793][ T6901] Q&|xù [ 137.573915][ T6892] syz.0.274: attempt to access beyond end of device [ 137.573915][ T6892] loop0: rw=0, sector=184, nr_sectors = 4101 limit=256 [ 137.671183][ T6903] loop1: detected capacity change from 0 to 2048 [ 137.716880][ T5791] udevd[5791]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 137.788679][ T6903] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 137.965593][ T5791] udevd[5791]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 138.011546][ T5791] udevd[5791]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 138.027357][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 138.073495][ T5791] udevd[5791]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 138.109482][ T5791] udevd[5791]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 138.233423][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.255477][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 138.270709][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 138.284046][ T9] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 138.293347][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.737177][ T9] cxacru 4-1:1.0: send of cm 0x91 failed (-71) [ 138.743448][ T9] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 138.762441][ T9] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 138.778008][ T9] cxacru: probe of 4-1:1.0 failed with error -71 [ 138.796040][ T9] usb 4-1: USB disconnect, device number 5 [ 139.676153][ T6925] loop1: detected capacity change from 0 to 164 [ 139.701230][ T5791] udevd[5791]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 139.785585][ T5791] udevd[5791]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 139.815007][ T5791] udevd[5791]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 140.386731][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 140.588852][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 140.608890][ T9] usb 4-1: string descriptor 0 read error: -22 [ 140.615227][ T9] usb 4-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.40 [ 140.626322][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.082548][ T9] belkin 0003:050D:3201.0003: unknown main item tag 0x1 [ 141.095375][ T9] belkin 0003:050D:3201.0003: report_id 34933 is invalid [ 141.102672][ T9] belkin 0003:050D:3201.0003: item 0 2 1 8 parsing failed [ 141.110726][ T9] belkin 0003:050D:3201.0003: parse failed [ 141.116979][ T9] belkin: probe of 0003:050D:3201.0003 failed with error -22 [ 141.297390][ T9] usb 4-1: USB disconnect, device number 6 [ 141.806293][ T6979] loop1: detected capacity change from 0 to 512 [ 141.835929][ T5791] udevd[5791]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 141.922763][ T6986] "syz.0.294" (6986) uses obsolete ecb(arc4) skcipher [ 141.936426][ T6979] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.990247][ T6979] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.272030][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.367147][ T5791] udevd[5791]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 142.388213][ T7001] loop0: detected capacity change from 0 to 256 [ 142.424728][ T5791] udevd[5791]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 142.435923][ T6261] udevd[6261]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 142.444760][ T7001] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 142.496730][ T7001] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 142.916695][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 143.432122][ T7005] syz.1.298 (7005): drop_caches: 2 [ 143.630536][ T7001] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 143.719682][ T7001] exFAT-fs (loop0): failed to load alloc-bitmap [ 143.741298][ T7001] exFAT-fs (loop0): failed to recognize exfat type [ 144.048847][ T5791] udevd[5791]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 144.093657][ T5791] udevd[5791]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 144.376032][ T7012] loop1: detected capacity change from 0 to 32768 [ 144.392464][ T5791] udevd[5791]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 144.420781][ T7012] JBD2: Ignoring recovery information on journal [ 144.460684][ T7012] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 144.694284][ T5778] ocfs2: Unmounting device (7,1) on (node local) [ 144.731042][ T5791] udevd[5791]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 144.763333][ T5791] udevd[5791]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 145.308827][ T7037] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 145.556955][ T9] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 145.751702][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 145.770746][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 145.797566][ T9] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 145.820681][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 145.832598][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.843252][ T9] usb 1-1: Product: syz [ 145.850355][ T9] usb 1-1: Manufacturer: syz [ 145.855236][ T9] usb 1-1: SerialNumber: syz [ 146.089316][ T9] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 146.284927][ T9] usb 1-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 146.293772][ T9] usb 1-1: found format II with max.bitrate = 4, frame size=7372 [ 146.696346][ T9] usb 1-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 146.709870][ T9] usb 1-1: found format II with max.bitrate = 4, frame size=7372 [ 146.911110][ T9] usb 1-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 146.973017][ T9] usb 1-1: USB disconnect, device number 4 [ 147.060384][ T5791] udevd[5791]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 147.451270][ T7088] netlink: 'syz.3.311': attribute type 1 has an invalid length. [ 147.969910][ T7100] loop3: detected capacity change from 0 to 2048 [ 148.017225][ T5791] udevd[5791]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 148.030774][ T6261] udevd[6261]: inotify_add_watch(7, /dev/loop8, 10) failed: Not a directory [ 148.079467][ T7100] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 148.086407][ T5791] udevd[5791]: inotify_add_watch(7, /dev/loop8, 10) failed: Not a directory [ 148.254579][ T5791] udevd[5791]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 148.290166][ T5791] udevd[5791]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 150.320568][ T7183] FAULT_INJECTION: forcing a failure. [ 150.320568][ T7183] name failslab, interval 1, probability 0, space 0, times 1 [ 150.337838][ T7183] CPU: 0 PID: 7183 Comm: syz.0.320 Not tainted syzkaller #0 [ 150.345219][ T7183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 150.355690][ T7183] Call Trace: [ 150.359026][ T7183] [ 150.362004][ T7183] dump_stack_lvl+0x18c/0x250 [ 150.366757][ T7183] ? show_regs_print_info+0x20/0x20 [ 150.372007][ T7183] ? load_image+0x420/0x420 [ 150.376560][ T7183] ? __might_sleep+0xe0/0xe0 [ 150.381201][ T7183] ? __lock_acquire+0x7eb0/0x7eb0 [ 150.386266][ T7183] should_fail_ex+0x394/0x4c0 [ 150.390993][ T7183] ? __sigqueue_alloc+0x32/0x520 [ 150.395969][ T7183] should_failslab+0x9/0x20 [ 150.400519][ T7183] slab_pre_alloc_hook+0x59/0x300 [ 150.405579][ T7183] ? __sigqueue_alloc+0x32/0x520 [ 150.410550][ T7183] kmem_cache_alloc+0x5a/0x2c0 [ 150.415356][ T7183] ? __sigqueue_alloc+0x40c/0x520 [ 150.420415][ T7183] ? __sigqueue_alloc+0x32/0x520 [ 150.425386][ T7183] __sigqueue_alloc+0x40c/0x520 [ 150.430335][ T7183] do_timer_create+0x1be/0x1300 [ 150.435248][ T7183] ? __might_fault+0xaa/0x120 [ 150.439985][ T7183] ? __lock_acquire+0x7eb0/0x7eb0 [ 150.445062][ T7183] ? __ia32_sys_clock_nanosleep_time32+0xb0/0xb0 [ 150.451434][ T7183] ? __might_fault+0xaa/0x120 [ 150.456153][ T7183] ? __might_fault+0xc6/0x120 [ 150.460867][ T7183] ? __might_fault+0xaa/0x120 [ 150.465586][ T7183] __x64_sys_timer_create+0x16a/0x1c0 [ 150.471021][ T7183] ? posix_timer_event+0x100/0x100 [ 150.476193][ T7183] ? lockdep_hardirqs_on+0x98/0x150 [ 150.481445][ T7183] do_syscall_64+0x55/0xb0 [ 150.485911][ T7183] ? clear_bhb_loop+0x40/0x90 [ 150.490624][ T7183] ? clear_bhb_loop+0x40/0x90 [ 150.495356][ T7183] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 150.501399][ T7183] RIP: 0033:0x7ff77299e559 [ 150.505857][ T7183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.525502][ T7183] RSP: 002b:00007ff7738db028 EFLAGS: 00000246 ORIG_RAX: 00000000000000de [ 150.533966][ T7183] RAX: ffffffffffffffda RBX: 00007ff772c25fa0 RCX: 00007ff77299e559 [ 150.542008][ T7183] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000000 [ 150.550114][ T7183] RBP: 00007ff772a358b0 R08: 0000000000000000 R09: 0000000000000000 [ 150.558132][ T7183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.566154][ T7183] R13: 00007ff772c26038 R14: 00007ff772c25fa0 R15: 00007fff819251c8 [ 150.574176][ T7183] [ 151.629222][ T7180] loop1: detected capacity change from 0 to 40427 [ 151.656177][ T7212] udevd[7212]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 151.678340][ T7180] F2FS-fs (loop1): invalid crc value [ 151.693389][ T7180] F2FS-fs (loop1): Found nat_bits in checkpoint [ 151.788891][ T7180] F2FS-fs (loop1): Start checkpoint disabled! [ 151.809436][ T7180] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 152.025973][ T2946] kworker/u4:9: attempt to access beyond end of device [ 152.025973][ T2946] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 152.041466][ T2946] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 152.052060][ T2946] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 152.060488][ T2946] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 152.184225][ T7212] udevd[7212]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 152.232414][ T7212] udevd[7212]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 153.647694][ T28] audit: type=1326 audit(1792081286.939:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7269 comm="syz.1.334" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f42d279e559 code=0x0 [ 154.582720][ C1] vcan0: j1939_tp_rxtimer: 0xffff888026f71800: rx timeout, send abort [ 154.591296][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888026f71800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 161.310597][ T7336] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 163.531299][ T7341] bridge_slave_0: left allmulticast mode [ 163.546683][ T7341] bridge_slave_0: left promiscuous mode [ 163.552633][ T7341] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.565002][ T7343] input: syz0 as /devices/virtual/input/input6 [ 163.607277][ T7341] bridge_slave_1: left allmulticast mode [ 163.627310][ T7341] bridge_slave_1: left promiscuous mode [ 163.633287][ T7341] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.673826][ T7341] bond0: (slave bond_slave_0): Releasing backup interface [ 163.748013][ T7341] bond0: (slave bond_slave_1): Releasing backup interface [ 163.886853][ T7341] team0: Port device team_slave_0 removed [ 163.912506][ T7341] team0: Port device team_slave_1 removed [ 163.928129][ T7341] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.938061][ T7341] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.949117][ T7341] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.957167][ T7341] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.066739][ T7341] syz.3.356 (7341) used greatest stack depth: 20552 bytes left [ 164.568444][ T7348] loop1: detected capacity change from 0 to 40427 [ 164.580925][ T7344] udevd[7344]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 164.581583][ T7348] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 164.596463][ T7348] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 164.608830][ T7348] F2FS-fs (loop1): invalid crc value [ 164.620814][ T7348] F2FS-fs (loop1): Found nat_bits in checkpoint [ 164.663036][ T7348] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 164.670268][ T7348] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 164.709633][ T28] audit: type=1804 audit(1792081297.999:130): pid=7348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.357" name="/newroot/92/bus/bus" dev="loop1" ino=10 res=1 errno=0 [ 165.033958][ T5778] syz-executor: attempt to access beyond end of device [ 165.033958][ T5778] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 165.052162][ T5778] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 165.193109][ T7344] udevd[7344]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 165.213370][ T7344] udevd[7344]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 166.551367][ T7364] ip6_tables: ip6tables: counters copy to user failed while replacing table SYZFAIL: open(/dev/rfkill) failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=4 req=138 state=3 status=67 (errno 9: Bad file descriptor) [ 167.965206][ T79] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.163050][ T79] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.323941][ T79] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.474373][ T79] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.839205][ T79] hsr_slave_0: left promiscuous mode [ 169.845876][ T79] hsr_slave_1: left promiscuous mode [ 169.891413][ T79] veth1_macvtap: left promiscuous mode [ 169.899754][ T79] veth0_macvtap: left promiscuous mode [ 169.905366][ T79] veth1_vlan: left promiscuous mode [ 169.911954][ T79] veth0_vlan: left promiscuous mode [ 170.895774][ T79] bond0 (unregistering): Released all slaves [ 171.273233][ T79] IPVS: stop unused estimator thread 0... [ 171.455312][ T79] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.553872][ T79] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.639142][ T79] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.724221][ T79] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.957448][ T79] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.045338][ T79] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.093265][ T79] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.181798][ T79] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.289049][ T79] IPVS: stopping backup sync thread 7336 ... [ 174.093335][ T79] hsr_slave_0: left promiscuous mode [ 174.128688][ T79] hsr_slave_1: left promiscuous mode [ 174.134986][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.142950][ T79] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.154105][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.161924][ T79] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.173116][ T79] bridge_slave_1: left allmulticast mode [ 174.179152][ T79] bridge_slave_1: left promiscuous mode [ 174.184860][ T79] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.194504][ T79] bridge_slave_0: left allmulticast mode [ 174.200507][ T79] bridge_slave_0: left promiscuous mode [ 174.206309][ T79] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.221776][ T79] hsr_slave_0: left promiscuous mode [ 174.228517][ T79] hsr_slave_1: left promiscuous mode [ 174.235204][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.243543][ T79] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.253037][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.260658][ T79] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.268862][ T79] bridge_slave_1: left allmulticast mode [ 174.274573][ T79] bridge_slave_1: left promiscuous mode [ 174.280805][ T79] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.292778][ T79] bridge_slave_0: left allmulticast mode [ 174.300413][ T79] bridge_slave_0: left promiscuous mode [ 174.306156][ T79] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.348675][ T79] veth1_macvtap: left promiscuous mode [ 174.354243][ T79] veth0_macvtap: left promiscuous mode [ 174.360606][ T79] veth1_vlan: left promiscuous mode [ 174.366215][ T79] veth0_vlan: left promiscuous mode [ 174.373128][ T79] veth1_macvtap: left promiscuous mode [ 174.378785][ T79] veth0_macvtap: left promiscuous mode [ 174.384408][ T79] veth1_vlan: left promiscuous mode [ 174.390604][ T79] veth0_vlan: left promiscuous mode [ 175.065063][ T79] team0 (unregistering): Port device team_slave_1 removed [ 175.114018][ T79] team0 (unregistering): Port device team_slave_0 removed [ 175.164630][ T79] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.211098][ T79] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.531670][ T79] bond0 (unregistering): Released all slaves [ 176.027080][ T79] team0 (unregistering): Port device team_slave_1 removed [ 176.073497][ T79] team0 (unregistering): Port device team_slave_0 removed [ 176.120600][ T79] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.165638][ T79] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.476887][ T79] bond0 (unregistering): Released all slaves