last executing test programs: 1m21.529061324s ago: executing program 4 (id=97): unshare(0x22020600) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r0 = syz_io_uring_setup(0xf51, &(0x7f0000000580)={0x0, 0xbbda, 0x13500}, &(0x7f0000000240), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x21, &(0x7f0000000440), 0x1) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000c02600"], 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-sse2\x00'}, 0x58) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f00000022c0), 0x0, &(0x7f0000000280)=ANY=[@ANYRES64=r1, @ANYBLOB="2c6772ba6d705fe9643d5eef3353f79dbb39df286506369b195489b78fec604f2fcbcb26c053c22daf93ce4be6f9faabfb32e0dcb5eaac8267a125bc62fcbd05b16ad4d8a49a30f95764270f02a8ee4a1e56d10d3b3218a6dbf853b506f014d414a6", @ANYBLOB]) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$inet_icmp(0x2, 0x2, 0x1) fcntl$lock(r1, 0x24, 0x0) mprotect(&(0x7f00000d9000/0x2000)=nil, 0x2000, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) socket$tipc(0x1e, 0x5, 0x0) 1m19.386353286s ago: executing program 4 (id=99): openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x80, &(0x7f0000000140), 0x1, 0x4dd, &(0x7f0000000240)="$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") setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000000, &(0x7f0000000180)=ANY=[], 0x1, 0x6ca, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2a17000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004d00), 0x3fffffffffffe8f, 0x4000f50) r3 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r3, &(0x7f0000002780)={0x2020}, 0x5ecfb203) r4 = shmget$private(0x0, 0xa000, 0x80, &(0x7f000063c000/0xa000)=nil) shmat(r4, &(0x7f0000ffc000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x288040, 0x120) fcntl$setlease(r5, 0x400, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'macvlan0\x00'}) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) 1m16.634962847s ago: executing program 4 (id=104): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000080)=@attr_pmu_init) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRESHEX], 0x3, 0x249, &(0x7f0000000900)="$eJzs2r9rZFUUB/Dzkqwbs2Qn4i92QbxooTaPTWqLDbILYkDRHWEtZN+aFx3ynAl5QyAWJtXa+idYi6WdIFvapPEvsLCRNCm3EJ9kZjSJxCxpZkL4fJocOPlyz+NeLreY/be//XJ9rc7Xin5MZVlM3Y7deJLFQkzFP3bjrTfu//LKR/c/eW95ZeXOhyndXb63uJRSuv7qz9Pxw2uP+9c+/vH6T1djb+HT/YOl3/de2rux/9e9Lzp16tSp2+unIj3s9frFw6pMq516PU/pg6os6jJ1unW5eaK/VvU2NrZT0V2dn9vYLOs6Fd3ttF5up34v9bOZVHxedLopz/M0Pxec5Zmn9NvfP2maOGiuPIimaZ79Lq49jvnfohXZcyl7/nb24oPs5d3sxkHTtMY0MeN1xv4v2//L79ilPhtRfbPV3moP/w77y2vRiSrKuBWt+DMOj8nIsL777sqdW2lgIR5VO6P8zlZ7+mR+MVqxcHp+cZhP8aj6Y3Rj7Wy1r8ZcxJWIUX4pWvHC6fmlo/xg/enB+rPx5uvH1s+jFb9+Fr2oYjUOs0f5rxdTeuf9lXRy/puD/wMAuGzy9K9T3295/n/9Yf4c78P/vK9m4ubMZL+diHr7q/WiqspNRVVuzl6MMS5DEZENDlg2OmjHWof3wgWYUHFmMdFriTE52vRJTwIAAAAAAAAAAMB5jOPnhJP+RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4GL7OwAA//9TB8zx") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000640)='\xbb\xbb\xbb\xbb\xbb\xbb', 0x0, r2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r4, 0x2007ffc) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb0c0045000028000000008002907800000000e00003000d0090780040000f000000030000d7df000000bd"], 0x0) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000040)=0x8, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24008000) 1m12.904217725s ago: executing program 4 (id=109): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f00000003c0)=ANY=[], 0x22, 0x1517, &(0x7f0000002780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0), 0x0, 0x9000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) ftruncate(r1, 0x100) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@can_newroute={0x1c, 0x18, 0x2, 0x70bd27, 0x25dfdbfe, {0x1d, 0x1, 0x4}, [@CGW_LIM_HOPS={0x5, 0xd, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x50) listen(0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r6, r6, 0x0, 0xf106) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xe, 0x0, 0x9, 0x6, 0xf, 0xc, 0x400, 0xc0000000, 0x3, 0x32, 0x3, 0x7, 0x7ff, 0x6, 0x5, 0xfffffffc, 0x0, 0x2, 0x80000000, 0x5, 0x1ff, 0x4, 0xa}}) msgrcv(0x0, 0x0, 0x0, 0x2, 0x3800) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) 1m11.327364698s ago: executing program 4 (id=114): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f00000013c0)={{0x40, 0x5}, {0x40, 0x7}, 0x6, 0x1, 0xb}) kexec_load(0x0, 0x0, 0x0, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r4, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x4e27, @multicast1}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}, {0x2, 0x4e20, @broadcast}, 0x361, 0x0, 0x0, 0x0, 0x6, 0x0, 0x5, 0x3ff, 0x3ff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', 0x0, 0x2, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f00000000c0)=@other={'lock', ' ', 'none'}, 0xa) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 1m7.821181327s ago: executing program 4 (id=121): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff02000000000000009d0000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1e00010800074000000001180006"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0xc0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1000001}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}]}]}, 0xc0}}, 0x0) 1m7.57851477s ago: executing program 32 (id=121): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff02000000000000009d0000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1e00010800074000000001180006"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0xc0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1000001}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}]}]}, 0xc0}}, 0x0) 4.205528078s ago: executing program 0 (id=339): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@noauto_da_alloc}, {@jqfmt_vfsold}, {@noquota}, {@norecovery}, {}]}, 0x1, 0x4be, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat(r1, &(0x7f00000000c0)='.\x00', 0x515401, 0x408) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') 4.108823553s ago: executing program 2 (id=340): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@RTM_NEWMDB={0x38, 0x54, 0x401, 0x0, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x1, 0x0, 0x1, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 4.04340285s ago: executing program 0 (id=342): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000022c0)='/sys/kernel/fscaps', 0x0, 0x124) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000080), 0x0, 0xfffffffffffffd61, 0x1) 3.976684778s ago: executing program 3 (id=343): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x2, 0xa}]}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x30}}, 0x0) 3.54576638s ago: executing program 2 (id=355): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0xd, 0x10, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3f}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$getflags(r1, 0x401) 3.543954151s ago: executing program 3 (id=346): r0 = socket$inet_sctp(0x2, 0x1, 0x84) close(0x3) mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc2c45512, 0x0) prctl$PR_MCE_KILL(0x42, 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x1, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r2, &(0x7f0000007700), 0x318, 0xfc0, 0x0) mount$9p_virtio(0x0, 0x0, &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB]) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) r3 = socket(0x2, 0x80805, 0x0) shutdown(0xffffffffffffffff, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000080)=0xe, 0x4) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f00000005c0)={r4, @in={{0x2, 0x4e21, @rand_addr=0x64010102}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x180}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000240)={r4, 0x8000, 0x1, "96"}, 0x9) 2.514069951s ago: executing program 5 (id=349): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x7, 0x0, 0x0, @remote}, 0x10) setns(0xc9, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/llc/core\x00') preadv(r1, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/141, 0x8d}], 0x1, 0x7f, 0x8) 2.509355312s ago: executing program 3 (id=350): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) 2.411216058s ago: executing program 1 (id=351): prctl$PR_SET_SECUREBITS(0x1c, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mincore(&(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000f40)=""/4096) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0xd81, &(0x7f0000001400)=ANY=[], 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071103600000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x1004000, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, 0x0, 0x0) syz_emit_ethernet(0x3e, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='sit0\x00', 0x10) 1.936209632s ago: executing program 0 (id=352): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x4a) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000680)=""/64, 0x34}], 0x1, 0x6, 0x805) readv(r0, &(0x7f0000001840)=[{&(0x7f0000000380)=""/163, 0xa3}, {&(0x7f0000000440)=""/174, 0xae}, {&(0x7f0000000500)=""/64, 0x40}, {&(0x7f0000000540)=""/75, 0x4b}, {&(0x7f00000005c0)=""/168, 0xa8}, {&(0x7f00000006c0)=""/115, 0x73}], 0x6) 1.931282703s ago: executing program 3 (id=353): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000140)={0x401, 0x7, 0x2, 0x6, 0x9, "0ed72a5a1ea288766f5324bdba00", 0x7, 0x10}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x40, 0x40, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000b80)={r0, &(0x7f00000005c0), &(0x7f0000000b40)=""/31}, 0x20) 1.727671117s ago: executing program 0 (id=354): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="2e9b5b00ace03dd65193dfb6c561963d86dd6067060000000600000000", 0x1d}, {&(0x7f00000002c0)="a1d6750e000000000000000000000400006cf0d7ac0bdd8dccb9e1ee89b1f54be7474aba5e55d84a2bd25965b2a09692d8", 0x31}], 0x2) 1.688419667s ago: executing program 1 (id=356): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfd}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000180)={0x55, 0x204, 0x9, 0x6, r1}, 0x10) 1.542399456s ago: executing program 5 (id=357): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pnp/devices/00:00/driver\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000180)='unbind\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='00:00\x00', 0x6) 1.467125845s ago: executing program 1 (id=358): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0), 0x10) sendto$l2tp(r0, &(0x7f0000000440)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000040)=0xfffffffd, 0x4) recvmsg(r0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x22) 1.319137254s ago: executing program 2 (id=359): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x10, 0x1, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}, 0x0) 1.284271333s ago: executing program 1 (id=360): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000300), 0xff6a, 0x220473c0, 0x0, 0x0) 1.227001688s ago: executing program 5 (id=361): r0 = socket$inet_sctp(0x2, 0x1, 0x84) close(0x3) mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc2c45512, 0x0) prctl$PR_MCE_KILL(0x42, 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x1, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r2, &(0x7f0000007700), 0x318, 0xfc0, 0x0) mount$9p_virtio(0x0, 0x0, &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB]) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000080)=0xe, 0x4) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f00000005c0)={r4, @in={{0x2, 0x4e21, @rand_addr=0x64010102}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x180}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000240)={r4, 0x8000, 0x1, "96"}, 0x9) 1.169714833s ago: executing program 2 (id=362): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\twrm'], 0xa) 1.140207281s ago: executing program 0 (id=363): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) fgetxattr(r0, 0x0, 0x0, 0x0) 1.003023507s ago: executing program 1 (id=364): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000080)=r0, 0x12) 329.808123ms ago: executing program 2 (id=365): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003580)=""/35, 0x23}, 0xd9}], 0x1, 0x10022, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0x9, 0x4) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c89000c2c0120010000000000000000000000000001fe8000000000000000000000000000aaff"], 0x0) 264.06934ms ago: executing program 5 (id=366): r0 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000040)={0x2, 0x234, @local}, 0x10) r1 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r1, &(0x7f0000000040)={0x2, 0x1234, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x48, 0x1, 0x0, @rand_addr=0x64010102, @local}, @echo_reply={0x0, 0x0, 0x0, 0x1234, 0x1}}}}}, 0x0) 238.540707ms ago: executing program 0 (id=367): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0xa, 0xbf7ffffb) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="666a6c74657200000000000000000000000000000000000000000000000000000200"], 0x48) 192.999119ms ago: executing program 3 (id=368): r0 = timerfd_create(0x0, 0x0) clock_settime(0x0, &(0x7f0000000000)={0x6553f100, 0x3b023380}) timerfd_settime(r0, 0x1, &(0x7f0000000300)={{}, {0x6553f100, 0x3b9a06b0}}, 0x0) read(r0, &(0x7f0000000400)=""/8, 0x8) clock_adjtime(0x0, &(0x7f0000000100)={0xe, 0x0, 0x3ffffe, 0x2, 0xffffffffe, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff7ffffffffffbff, 0x20d, 0x0, 0x3}) 106.029152ms ago: executing program 1 (id=369): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0xd, 0x10, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3f}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$getflags(r1, 0x401) 105.728002ms ago: executing program 5 (id=370): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)={0x2c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x4}]}, 0x2c}}, 0x0) 103.304883ms ago: executing program 5 (id=371): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)={0x38, r1, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x200048d0}, 0x40000) 56.565475ms ago: executing program 3 (id=372): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0xc8601, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f00000000c0)={"e50d1af80100007ea25edd00ff000000080000f6907ff16b7e00", r1, 0xffffffffffffffff}) ppoll(&(0x7f0000000100)=[{r2}, {r1, 0x900}], 0x2, 0x0, 0x0, 0x0) dup3(r2, r0, 0x0) 0s ago: executing program 2 (id=373): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000018c0)={0x4c, r1, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x5}, @NL80211_ATTR_PMKID={0x14, 0x55, "c5db6d8b6ec822ff46f876846f30481c"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4f}, @NL80211_ATTR_MAC={0xa, 0x6, @random="970732f94021"}]}, 0x4c}}, 0x20008010) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 42.725930][ T3850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.735366][ T3850] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.36' (ED25519) to the list of known hosts. syzkaller login: [ 59.758771][ T4171] cgroup: Unknown subsys name 'net' [ 59.898829][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 61.376190][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 62.863183][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 62.897630][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 62.947916][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 62.989863][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 63.000092][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 63.081973][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.090141][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.098385][ T4196] device bridge_slave_0 entered promiscuous mode [ 63.137652][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.145061][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.153477][ T4196] device bridge_slave_1 entered promiscuous mode [ 63.164954][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.172055][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.180501][ T4185] device bridge_slave_0 entered promiscuous mode [ 63.208444][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.215896][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.224181][ T4185] device bridge_slave_1 entered promiscuous mode [ 63.231361][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.238618][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.246827][ T4191] device bridge_slave_0 entered promiscuous mode [ 63.260879][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.268112][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.276258][ T4191] device bridge_slave_1 entered promiscuous mode [ 63.317457][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.329211][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.357628][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.364947][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.373414][ T4184] device bridge_slave_0 entered promiscuous mode [ 63.383013][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.399736][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.417606][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.426913][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.434294][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.442503][ T4184] device bridge_slave_1 entered promiscuous mode [ 63.465410][ T4196] team0: Port device team_slave_0 added [ 63.471466][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.478790][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.487364][ T4193] device bridge_slave_0 entered promiscuous mode [ 63.496513][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.525614][ T4196] team0: Port device team_slave_1 added [ 63.534349][ T4185] team0: Port device team_slave_0 added [ 63.546954][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.554280][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.562889][ T4193] device bridge_slave_1 entered promiscuous mode [ 63.581552][ T4185] team0: Port device team_slave_1 added [ 63.589522][ T4191] team0: Port device team_slave_0 added [ 63.604435][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.628126][ T4191] team0: Port device team_slave_1 added [ 63.648857][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.658903][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.666044][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.692112][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.711668][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.734396][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.741388][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.767407][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.779411][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.786684][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.812706][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.825801][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.842092][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.849436][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.875500][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.892514][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.899513][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.925901][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.946839][ T4184] team0: Port device team_slave_0 added [ 63.953550][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.960525][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.986882][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.022644][ T4184] team0: Port device team_slave_1 added [ 64.031986][ T4193] team0: Port device team_slave_0 added [ 64.041653][ T4193] team0: Port device team_slave_1 added [ 64.085896][ T4191] device hsr_slave_0 entered promiscuous mode [ 64.093131][ T4191] device hsr_slave_1 entered promiscuous mode [ 64.135552][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.142725][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.169040][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.181212][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.188424][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.214514][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.229759][ T4185] device hsr_slave_0 entered promiscuous mode [ 64.237110][ T4185] device hsr_slave_1 entered promiscuous mode [ 64.244490][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.252907][ T4185] Cannot create hsr debugfs directory [ 64.261274][ T4196] device hsr_slave_0 entered promiscuous mode [ 64.268467][ T4196] device hsr_slave_1 entered promiscuous mode [ 64.275558][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.283415][ T4196] Cannot create hsr debugfs directory [ 64.296323][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.303409][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.329554][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.341369][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.348446][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.374738][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.453989][ T4193] device hsr_slave_0 entered promiscuous mode [ 64.460975][ T4193] device hsr_slave_1 entered promiscuous mode [ 64.468185][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.475949][ T4193] Cannot create hsr debugfs directory [ 64.499683][ T4184] device hsr_slave_0 entered promiscuous mode [ 64.506606][ T4184] device hsr_slave_1 entered promiscuous mode [ 64.513334][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.520924][ T4184] Cannot create hsr debugfs directory [ 64.583338][ T4186] Bluetooth: hci3: command 0x0409 tx timeout [ 64.602449][ T4186] Bluetooth: hci0: command 0x0409 tx timeout [ 64.608625][ T4186] Bluetooth: hci1: command 0x0409 tx timeout [ 64.615164][ T4186] Bluetooth: hci4: command 0x0409 tx timeout [ 64.621260][ T4186] Bluetooth: hci2: command 0x0409 tx timeout [ 64.853576][ T4191] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.868435][ T4191] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.881195][ T4191] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.897234][ T4191] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.926056][ T4196] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.943559][ T4196] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.958672][ T4196] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.979408][ T4196] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.028198][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.049765][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.059913][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.099332][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.176128][ T4193] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.190098][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.207516][ T4184] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.217831][ T4184] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.228186][ T4193] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.241351][ T4193] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.255321][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.263741][ T4184] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.273729][ T4184] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.287724][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.297404][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.306958][ T4193] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.324363][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.333666][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.345415][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.369530][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.379321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.389596][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.396984][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.407034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.416975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.425678][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.432820][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.442486][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.457083][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.480081][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.489464][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.501500][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.508675][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.517191][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.528365][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.550647][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.560179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.571105][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.578239][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.586935][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.597110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.611705][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.621970][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.655695][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.664143][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.673797][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.684539][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.695410][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.728589][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.737823][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.747235][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.756165][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.765280][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.774097][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.788949][ T4196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.800524][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.816087][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.834680][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.843928][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.853211][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.862790][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.874701][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.886493][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.910467][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.920062][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.942099][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.960475][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.979607][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.995512][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.009380][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.041034][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.058563][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.075343][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.084954][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.092048][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.100208][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.117438][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.126955][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.134095][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.142554][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.151550][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.159896][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.168588][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.186602][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.200380][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.210210][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.224888][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.237660][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.248734][ T1277] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.255891][ T1277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.290409][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.311576][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.319822][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.335883][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.349939][ T1277] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.357098][ T1277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.366543][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.376536][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.385659][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.395930][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.405141][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.414223][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.423974][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.441728][ T4185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.453130][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.473781][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.483682][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.493116][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.501817][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.512103][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.519241][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.527710][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.537448][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.546015][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.555362][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.564012][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.571111][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.579003][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.589641][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.634521][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.647682][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.657295][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.665573][ T4232] Bluetooth: hci2: command 0x041b tx timeout [ 66.672995][ T4232] Bluetooth: hci4: command 0x041b tx timeout [ 66.679653][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.687375][ T4232] Bluetooth: hci1: command 0x041b tx timeout [ 66.693698][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.701198][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.708950][ T4232] Bluetooth: hci0: command 0x041b tx timeout [ 66.715160][ T4232] Bluetooth: hci3: command 0x041b tx timeout [ 66.721461][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.732009][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.741199][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.750915][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.760582][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.770261][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.779223][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.788234][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.800539][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.811145][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.830398][ T4193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.843509][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.857153][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.869308][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.880593][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.892838][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.902127][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.918086][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.928009][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.941553][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.950510][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.959412][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.974246][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.002773][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.014959][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.027860][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.084530][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.092061][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.113190][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.125305][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.152610][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.160881][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.187944][ T4191] device veth0_vlan entered promiscuous mode [ 67.205602][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.220145][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.237232][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.250944][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.260043][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.269892][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.279040][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.307956][ T4191] device veth1_vlan entered promiscuous mode [ 67.335219][ T4196] device veth0_vlan entered promiscuous mode [ 67.368655][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.378275][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.392019][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.401607][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.429471][ T4196] device veth1_vlan entered promiscuous mode [ 67.445193][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.454408][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.461913][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.476244][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.487481][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.500174][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.511315][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.527022][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.536715][ T4185] device veth0_vlan entered promiscuous mode [ 67.566829][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.575819][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.589702][ T4191] device veth0_macvtap entered promiscuous mode [ 67.615152][ T4185] device veth1_vlan entered promiscuous mode [ 67.636820][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.652077][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.661708][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.676700][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.691148][ T4191] device veth1_macvtap entered promiscuous mode [ 67.700727][ T4196] device veth0_macvtap entered promiscuous mode [ 67.714421][ T4196] device veth1_macvtap entered promiscuous mode [ 67.749491][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.765826][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.775661][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.785159][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.793497][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.801614][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.811115][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.821151][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.830651][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.850654][ T4185] device veth0_macvtap entered promiscuous mode [ 67.865035][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.876623][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.888901][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.903906][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.918109][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.927696][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.937157][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.947058][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.956583][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.967883][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.977107][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.985657][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.996446][ T4193] device veth0_vlan entered promiscuous mode [ 68.010441][ T4185] device veth1_macvtap entered promiscuous mode [ 68.019436][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.033038][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.045200][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.057127][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.070447][ T4196] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.081054][ T4196] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.091826][ T4196] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.100868][ T4196] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.123130][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.131666][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.142116][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.151097][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.162891][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.173080][ T4193] device veth1_vlan entered promiscuous mode [ 68.193496][ T4191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.203820][ T4191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.213026][ T4191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.222769][ T4191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.273178][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.281332][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.290617][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.300356][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.324023][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.338528][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.349295][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.360439][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.374157][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.408606][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.428830][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.437904][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.446631][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.462678][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.470542][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.484848][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.496030][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.506756][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.518114][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.529896][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.541355][ T4184] device veth0_vlan entered promiscuous mode [ 68.550387][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.559569][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.568893][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.577944][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.598806][ T4184] device veth1_vlan entered promiscuous mode [ 68.616548][ T4193] device veth0_macvtap entered promiscuous mode [ 68.625383][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.635094][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.645496][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.654493][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.692163][ T4193] device veth1_macvtap entered promiscuous mode [ 68.744156][ T4229] Bluetooth: hci3: command 0x040f tx timeout [ 68.753651][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.761644][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.762754][ T4229] Bluetooth: hci0: command 0x040f tx timeout [ 68.780828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.788897][ T4229] Bluetooth: hci1: command 0x040f tx timeout [ 68.795354][ T4229] Bluetooth: hci4: command 0x040f tx timeout [ 68.801438][ T4229] Bluetooth: hci2: command 0x040f tx timeout [ 68.804566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.816621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.825981][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.836565][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.869994][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.878692][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.899072][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.920433][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.928924][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.939833][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.940738][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.957240][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.967970][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.979150][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.991644][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.003460][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.017578][ T4184] device veth0_macvtap entered promiscuous mode [ 69.032749][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.043455][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.051390][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.066826][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.070593][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.086423][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.095659][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.104600][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.114583][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.126170][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.136381][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.148017][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.158130][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.168732][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.181978][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.193464][ T4193] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.202324][ T4193] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.211036][ T4193] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.220055][ T4193] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.244138][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.259279][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.268390][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.286931][ T4184] device veth1_macvtap entered promiscuous mode [ 69.342862][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.350741][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.408373][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.430354][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.441151][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.451381][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.462429][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.473656][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.484729][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.495271][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.505804][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.518713][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.537482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.546514][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.556777][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.563708][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.584891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.643441][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.666830][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.677723][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.689612][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.699807][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.711083][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.721955][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.733537][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.746117][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.754279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.769531][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.785914][ T4268] loop2: detected capacity change from 0 to 4096 [ 69.795427][ T4267] IPv6: Can't replace route, no match found [ 69.803951][ T4268] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 69.831593][ T4184] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.867167][ T4184] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.880388][ T4268] ntfs: volume version 3.1. [ 69.901094][ T4184] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.917357][ T4184] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.972024][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.987662][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.007793][ T4271] loop1: detected capacity change from 0 to 2048 [ 70.045466][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.144141][ T4279] loop0: detected capacity change from 0 to 64 [ 70.158143][ T4271] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 70.188358][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.201702][ T4237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.214432][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.232738][ T4237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.240380][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.309449][ T4279] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 70.377530][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.420509][ T4237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.433338][ T4237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.474250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.498641][ T4282] loop2: detected capacity change from 0 to 4096 [ 70.539687][ T4287] loop3: detected capacity change from 0 to 24 [ 70.557815][ T4288] loop1: detected capacity change from 0 to 164 [ 70.623289][ T4287] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 70.625685][ T4292] loop4: detected capacity change from 0 to 8 [ 70.683367][ T4288] Unable to read rock-ridge attributes [ 70.713597][ T4287] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 70.738770][ T4288] Unable to read rock-ridge attributes [ 70.752570][ T4292] SQUASHFS error: zlib decompression failed, data probably corrupt [ 70.761523][ T4288] iso9660: Corrupted directory entry in block 1 of inode 1792 [ 70.798198][ T4292] SQUASHFS error: Failed to read block 0x9b: -5 [ 70.827588][ T4186] Bluetooth: hci2: command 0x0419 tx timeout [ 70.836844][ T4292] SQUASHFS error: Unable to read metadata cache entry [99] [ 70.854760][ T4186] Bluetooth: hci4: command 0x0419 tx timeout [ 70.881703][ T4186] Bluetooth: hci1: command 0x0419 tx timeout [ 70.895885][ T4292] SQUASHFS error: Unable to read inode 0x127 [ 70.915129][ T4186] Bluetooth: hci0: command 0x0419 tx timeout [ 70.924189][ T4186] Bluetooth: hci3: command 0x0419 tx timeout [ 71.714236][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.721204][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.074366][ T4308] loop3: detected capacity change from 0 to 4096 [ 72.149007][ T4310] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17'. [ 72.230238][ T4308] ======================================================= [ 72.230238][ T4308] WARNING: The mand mount option has been deprecated and [ 72.230238][ T4308] and is ignored by this kernel. Remove the mand [ 72.230238][ T4308] option from the mount to silence this warning. [ 72.230238][ T4308] ======================================================= [ 72.480902][ T4317] loop1: detected capacity change from 0 to 164 [ 72.671024][ T4319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18'. [ 73.162527][ T4322] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17'. [ 73.241774][ T4325] process 'syz.1.19' launched './file1' with NULL argv: empty string added [ 73.283322][ T4327] netlink: 'syz.0.20': attribute type 2 has an invalid length. [ 73.305625][ T4308] NILFS (loop3): The specified checkpoint is not a snapshot (checkpoint number=1) [ 73.315693][ T4327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20'. [ 73.541049][ T4336] loop2: detected capacity change from 0 to 164 [ 74.697524][ T4344] rock: directory entry would overflow storage [ 74.704782][ T4344] rock: sig=0x4f50, size=4, remaining=3 [ 74.711203][ T4344] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 74.942205][ C0] sched: RT throttling activated [ 75.852539][ T4301] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 76.493065][ T4301] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 76.501208][ T4301] usb 3-1: can't read configurations, error -61 [ 77.132221][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 77.157678][ T4362] Zero length message leads to an empty skb [ 77.162266][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 77.172291][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 77.542253][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #19a!!! [ 77.552232][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #19a!!! [ 77.562231][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #19a!!! [ 77.572241][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #19a!!! [ 77.582229][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #19a!!! [ 77.592226][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #19a!!! [ 77.602230][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #19a!!! [ 78.196903][ T4365] netlink: 256 bytes leftover after parsing attributes in process `syz.3.25'. [ 78.206489][ T4365] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 78.606761][ T26] audit: type=1400 audit(1790768373.791:2): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=4354 comm="syz.3.25" [ 78.909283][ T26] audit: type=1400 audit(1790768373.791:3): apparmor="STATUS" operation="profile_load" info="not policy admin" error=-13 profile="unconfined" pid=4354 comm="syz.3.25" [ 79.294435][ T4373] netlink: 20 bytes leftover after parsing attributes in process `syz.3.28'. [ 79.995452][ T4370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.27'. [ 80.014517][ T4370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.27'. [ 80.025504][ T4370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.27'. [ 80.036207][ T4370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.27'. [ 80.046421][ T4370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.27'. [ 80.384329][ T4377] loop3: detected capacity change from 0 to 256 [ 80.420817][ T4377] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 81.665303][ T4388] sctp: [Deprecated]: syz.2.32 (pid 4388) Use of struct sctp_assoc_value in delayed_ack socket option. [ 81.665303][ T4388] Use struct sctp_sack_info instead [ 82.572941][ T4398] bridge0: port 3(syz_tun) entered blocking state [ 82.579819][ T4398] bridge0: port 3(syz_tun) entered disabled state [ 82.595780][ T4398] device syz_tun entered promiscuous mode [ 82.604272][ T4398] bridge0: port 3(syz_tun) entered blocking state [ 82.610957][ T4398] bridge0: port 3(syz_tun) entered forwarding state [ 82.627477][ T4398] bridge0: port 4(ip6gretap0) entered blocking state [ 82.634507][ T4398] bridge0: port 4(ip6gretap0) entered disabled state [ 82.646505][ T4398] device ip6gretap0 entered promiscuous mode [ 82.655705][ T4398] bridge0: port 4(ip6gretap0) entered blocking state [ 82.662485][ T4398] bridge0: port 4(ip6gretap0) entered forwarding state [ 83.478400][ T4402] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.547790][ T4234] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 84.577952][ T4413] capability: warning: `syz.4.39' uses deprecated v2 capabilities in a way that may be insecure [ 84.689342][ T4199] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:200' [ 84.699456][ T4199] CPU: 0 PID: 4199 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 84.707041][ T4199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 84.717133][ T4199] Workqueue: hci0 hci_rx_work [ 84.721874][ T4199] Call Trace: [ 84.725175][ T4199] [ 84.728139][ T4199] dump_stack_lvl+0x188/0x250 [ 84.732851][ T4199] ? show_regs_print_info+0x20/0x20 [ 84.738080][ T4199] ? load_image+0x410/0x410 [ 84.742633][ T4199] sysfs_create_dir_ns+0x26a/0x290 [ 84.747775][ T4199] ? sysfs_warn_dup+0xa0/0xa0 [ 84.752562][ T4199] ? ret_from_fork+0x1f/0x30 [ 84.757194][ T4199] ? do_raw_spin_unlock+0x11d/0x230 [ 84.762430][ T4199] kobject_add_internal+0x5ba/0xcd0 [ 84.767662][ T4199] kobject_add+0x160/0x230 [ 84.772125][ T4199] ? kobject_init+0x1c0/0x1c0 [ 84.776837][ T4199] ? __raw_spin_lock_init+0x41/0x100 [ 84.782155][ T4199] ? get_device_parent+0x121/0x3e0 [ 84.787312][ T4199] device_add+0x470/0x1050 [ 84.791757][ T4199] hci_conn_add_sysfs+0xd1/0x1e0 [ 84.796740][ T4199] hci_sync_conn_complete_evt+0x647/0x9d0 [ 84.802493][ T4199] ? __rwlock_init+0x140/0x140 [ 84.807288][ T4199] hci_event_packet+0x8cf/0x1310 [ 84.812262][ T4199] ? _raw_spin_unlock+0x40/0x40 [ 84.817142][ T4199] ? rcu_lock_release+0x20/0x20 [ 84.822037][ T4199] ? hci_send_to_monitor+0x9c/0x4a0 [ 84.827274][ T4199] hci_rx_work+0x255/0xa10 [ 84.831736][ T4199] process_one_work+0x867/0xff0 [ 84.836646][ T4199] ? worker_detach_from_pool+0x240/0x240 [ 84.842302][ T4199] ? lockdep_hardirqs_off+0x70/0x100 [ 84.847625][ T4199] ? _raw_spin_lock_irq+0xb7/0xf0 [ 84.852685][ T4199] ? _raw_spin_lock_irqsave+0x100/0x100 [ 84.858255][ T4199] ? wq_worker_running+0x97/0x170 [ 84.863308][ T4199] worker_thread+0xad7/0x12a0 [ 84.868057][ T4199] kthread+0x42e/0x520 [ 84.872151][ T4199] ? rcu_lock_release+0x20/0x20 [ 84.877030][ T4199] ? kthread_blkcg+0xd0/0xd0 [ 84.881652][ T4199] ret_from_fork+0x1f/0x30 [ 84.886120][ T4199] [ 84.891526][ T4199] kobject_add_internal failed for hci0:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 84.943949][ T4199] Bluetooth: hci0: failed to register connection device [ 87.640403][ T4186] Bluetooth: hci0: command 0x0409 tx timeout [ 87.649749][ T7] cfg80211: failed to load regulatory.db [ 87.782491][ T4234] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 87.791751][ T4234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.069587][ T4431] batman_adv: batadv0: Adding interface: macvtap1 [ 88.299343][ T4431] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.522399][ T4301] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 89.792348][ T4301] usb 5-1: Using ep0 maxpacket: 32 [ 89.873381][ T4431] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 89.932506][ T4301] usb 5-1: config 0 has no interfaces? [ 89.938370][ T4301] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 89.984535][ T4450] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 90.064209][ T4301] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.388520][ T4301] usb 5-1: config 0 descriptor?? [ 90.767428][ T4234] usb 4-1: config 0 descriptor?? [ 90.776184][ T4186] Bluetooth: hci0: command 0x0406 tx timeout [ 90.967487][ T4186] usb 5-1: USB disconnect, device number 2 [ 91.777713][ T4457] loop4: detected capacity change from 0 to 16 [ 93.284121][ T4437] batman_adv: batadv0: Removing interface: macvtap1 [ 93.313160][ T4457] erofs: (device loop4): mounted with root inode @ nid 36. [ 94.681050][ T4234] usb 4-1: can't set config #0, error -71 [ 94.759753][ T4234] usb 4-1: USB disconnect, device number 2 [ 95.726271][ T4486] futex_wake_op: syz.2.54 tries to shift op by 144; fix this program [ 95.847876][ T4486] futex_wake_op: syz.2.54 tries to shift op by 144; fix this program [ 95.886273][ T4488] loop3: detected capacity change from 0 to 4096 [ 95.893739][ T4491] comedi comedi2: pcl724: I/O port conflict (0x2,4) [ 95.907968][ T4186] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 95.932740][ T4494] loop1: detected capacity change from 0 to 256 [ 95.984130][ T4496] loop4: detected capacity change from 0 to 512 [ 96.026991][ T4494] FAT-fs (loop1): Directory bread(block 1285) failed [ 96.034658][ T4494] FAT-fs (loop1): Directory bread(block 1286) failed [ 96.041934][ T4494] FAT-fs (loop1): Directory bread(block 1287) failed [ 96.050774][ T4499] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 96.070369][ T4494] FAT-fs (loop1): Directory bread(block 1288) failed [ 96.097173][ T4496] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 96.108965][ T4488] NILFS (loop3): cannot delete checkpoints: invalid range [21, 3) [ 96.117316][ T4488] NILFS (loop3): error -22 preparing GC: cannot delete checkpoints [ 96.138464][ T4496] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 96.167354][ T4494] FAT-fs (loop1): Directory bread(block 1285) failed [ 96.174512][ T4494] FAT-fs (loop1): Directory bread(block 1286) failed [ 96.181317][ T4494] FAT-fs (loop1): Directory bread(block 1287) failed [ 96.191428][ T4494] FAT-fs (loop1): Directory bread(block 1288) failed [ 96.204684][ T4494] FAT-fs (loop1): Directory bread(block 1285) failed [ 96.212332][ T4494] FAT-fs (loop1): Directory bread(block 1286) failed [ 96.758152][ T4502] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 96.819645][ T4496] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 96.862378][ T4186] usb 1-1: Using ep0 maxpacket: 32 [ 96.912018][ T4496] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 96.964516][ T4496] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 97.001256][ T4496] EXT4-fs (loop4): orphan cleanup on readonly fs [ 97.095596][ T4496] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.59: bg 0: block 34: padding at end of block bitmap is not set [ 97.194322][ T4496] Quota error (device loop4): write_blk: dquota write failed [ 97.210154][ T4496] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 97.234848][ T4186] usb 1-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 97.262265][ T4186] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.284402][ T4496] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.59: Failed to acquire dquot type 1 [ 97.295862][ T4186] usb 1-1: Product: syz [ 97.301047][ T4186] usb 1-1: Manufacturer: syz [ 97.318987][ T4186] usb 1-1: SerialNumber: syz [ 97.378310][ T4496] EXT4-fs (loop4): 1 truncate cleaned up [ 97.385990][ T4496] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,bsddf,nodiscard,acl,max_dir_size_kb=0x0000000000000001,noblock_validity,usrjquota=,jqfmt=vfsv0,inode_readahead_blks=0x0000000000001000,errors=continue,nouid32,nodiscard,abort,usrjquota=,lazytime,,errors=continue. Quota mode: writeback. [ 97.486233][ T4521] loop3: detected capacity change from 0 to 512 [ 97.590696][ T4521] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 97.604139][ T4186] usb 1-1: palm_os_4_probe - error -71 getting connection info [ 97.615340][ T4186] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 97.640657][ T4521] EXT4-fs error (device loop3): ext4_fill_super:4872: inode #2: comm syz.3.65: inode has both inline data and extents flags [ 97.801338][ T4521] EXT4-fs (loop3): Remounting filesystem read-only [ 97.826988][ T4521] EXT4-fs (loop3): get root inode failed [ 97.932341][ T4521] EXT4-fs (loop3): mount failed [ 98.464709][ T4527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.66'. [ 98.525804][ T4186] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 98.538011][ T4186] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 98.549735][ T4186] usb 1-1: USB disconnect, device number 2 [ 98.586277][ T4186] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 98.618461][ T4186] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 98.939495][ T4541] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 99.010977][ T4542] ip_tables: iptables: counters copy to user failed while replacing table [ 99.021548][ T4186] visor 1-1:1.0: device disconnected [ 99.828434][ T4563] loop2: detected capacity change from 0 to 1024 [ 100.618686][ T4556] sctp: failed to load transform for md5: -2 [ 100.692592][ T4577] loop1: detected capacity change from 0 to 512 [ 100.981332][ T4577] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 101.005193][ T4583] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 101.029074][ T4577] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.072385][ T4186] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 102.598754][ T4595] ip_tables: iptables: counters copy to user failed while replacing table [ 102.652307][ T4186] usb 5-1: Using ep0 maxpacket: 32 [ 102.774072][ T4186] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.827299][ T4186] usb 5-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 102.848077][ T4186] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.859298][ T4601] FS-Cache: Duplicate cookie detected [ 102.865438][ T4601] FS-Cache: O-cookie c=00000007 [p=00000002 fl=222 nc=0 na=1] [ 102.873413][ T4601] FS-Cache: O-cookie d=ffffffff8a416220{NFS.server} n=ffff888147bef000 [ 102.881705][ T4601] FS-Cache: O-key=[16] '0400000000000000020008017f000001' [ 102.886180][ T4186] usb 5-1: config 0 descriptor?? [ 102.889340][ T4601] FS-Cache: N-cookie c=00000008 [p=00000002 fl=2 nc=0 na=1] [ 102.901541][ T4601] FS-Cache: N-cookie d=ffffffff8a416220{NFS.server} n=ffff88807ee7e000 [ 102.909878][ T4601] FS-Cache: N-key=[16] '0400000000000000020008017f000001' [ 104.445670][ T4616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.89'. [ 105.248882][ T4186] input: HID 5543:0042 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:5543:0042.0001/input/input7 [ 105.516922][ T4631] loop3: detected capacity change from 0 to 512 [ 105.683080][ T4631] EXT4-fs (loop3): Ignoring removed oldalloc option [ 105.737427][ T4631] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 105.750650][ T4631] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 105.803764][ T4186] input: HID 5543:0042 Mouse as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:5543:0042.0001/input/input8 [ 105.832038][ T4631] EXT4-fs (loop3): 1 truncate cleaned up [ 105.892083][ T4186] uclogic 0003:5543:0042.0001: input,hidraw0: USB HID v7f.fd Mouse [HID 5543:0042] on usb-dummy_hcd.4-1/input0 [ 105.908709][ T4186] usb 5-1: USB disconnect, device number 3 [ 105.918759][ T4631] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 106.010700][ T4646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.97'. [ 106.141724][ T4645] fido_id[4645]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 108.644942][ T4656] loop4: detected capacity change from 0 to 512 [ 108.800804][ T4656] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.99: couldn't read orphan inode 26 (err -116) [ 108.832454][ T4656] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 108.892455][ T4656] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.118566][ T26] audit: type=1326 audit(1790768404.681:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4663 comm="syz.0.100" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f334d168159 code=0x0 [ 109.412829][ T4667] EXT4-fs error (device loop4): ext4_lookup:1860: inode #15: comm syz.4.99: iget: bad i_size value: 360287970189639690 [ 109.760330][ T4670] --map-set only usable from mangle table [ 110.556522][ T4666] misc userio: Invalid payload size [ 110.563466][ T4660] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 64: padding at end of block bitmap is not set [ 113.470391][ T4684] loop4: detected capacity change from 0 to 128 [ 113.640063][ T26] audit: type=1800 audit(1790768409.201:5): pid=4686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.107" name="c_srate" dev="configfs" ino=34158 res=0 errno=0 [ 114.840066][ T4696] loop4: detected capacity change from 0 to 256 [ 115.799135][ T4703] loop3: detected capacity change from 0 to 1024 [ 116.936554][ C1] net_ratelimit: 50 callbacks suppressed [ 116.999846][ T4184] bridge0: port 3(syz_tun) entered disabled state [ 118.388313][ T4184] device syz_tun left promiscuous mode [ 118.436830][ T4184] bridge0: port 3(syz_tun) entered disabled state [ 118.457020][ T4722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.116'. [ 118.473816][ T4722] serial 00:03: in use; can't configure [ 119.523384][ T4441] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.671228][ T4441] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.801513][ T4441] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.927634][ T4441] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.245525][ T4741] loop3: detected capacity change from 0 to 4096 [ 120.396491][ T4741] ntfs: volume version 3.1. [ 120.690624][ T4441] bridge0: port 4(ip6gretap0) entered disabled state [ 120.778329][ T4750] Failed to get privilege flags for destination (handle=0x2:0x0) [ 121.655591][ T4441] device ip6gretap0 left promiscuous mode [ 121.661714][ T4441] bridge0: port 4(ip6gretap0) entered disabled state [ 122.512326][ T4374] Bluetooth: hci0: command 0x0409 tx timeout [ 122.672249][ C1] net_ratelimit: 58 callbacks suppressed [ 125.735015][ T4776] loop3: detected capacity change from 0 to 4096 [ 125.793455][ T4776] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 125.914439][ T4776] ntfs: volume version 3.1. [ 126.402304][ T4374] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 126.744311][ T4231] Bluetooth: hci0: command 0x041b tx timeout [ 126.795251][ T4744] chnl_net:caif_netlink_parms(): no params data found [ 126.852485][ T4374] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 126.860923][ T4374] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 126.919509][ T4809] Failed to get privilege flags for destination (handle=0x2:0x0) [ 127.770608][ T4374] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 127.780971][ T4374] usb 1-1: config 220 has no interface number 2 [ 127.787445][ T4374] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 127.800651][ T4374] usb 1-1: config 220 interface 0 has no altsetting 0 [ 127.807484][ T4374] usb 1-1: config 220 interface 76 has no altsetting 0 [ 127.817944][ T4374] usb 1-1: config 220 interface 1 has no altsetting 0 [ 127.826554][ C1] net_ratelimit: 30 callbacks suppressed [ 128.142514][ T21] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 128.186965][ T4374] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 129.328008][ T4374] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.388521][ T4374] usb 1-1: Product: syz [ 129.445739][ T4374] usb 1-1: Manufacturer: syz [ 129.474629][ T4374] usb 1-1: SerialNumber: syz [ 129.485858][ T4462] Bluetooth: hci0: command 0x040f tx timeout [ 129.504545][ T4374] usb 1-1: can't set config #220, error -71 [ 129.516868][ T4374] usb 1-1: USB disconnect, device number 3 [ 129.659649][ T21] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.911729][ T21] usb 3-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 130.946815][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.767678][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.774159][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.154270][ C0] net_ratelimit: 34 callbacks suppressed [ 133.179102][ T4462] Bluetooth: hci0: command 0x0419 tx timeout [ 133.205718][ T21] usb 3-1: can't set config #1, error -71 [ 133.244554][ T21] usb 3-1: USB disconnect, device number 4 [ 133.641389][ T4744] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.255806][ T4744] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.283615][ T4864] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input9 [ 134.549523][ T4744] device bridge_slave_0 entered promiscuous mode [ 134.570365][ T4744] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.600359][ T4744] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.628783][ T4744] device bridge_slave_1 entered promiscuous mode [ 135.012052][ T4870] loop2: detected capacity change from 0 to 4096 [ 135.124305][ T4870] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 135.397259][ T4744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.437813][ T4870] ntfs: volume version 3.1. [ 135.468319][ T4744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.705992][ T4441] device hsr_slave_0 left promiscuous mode [ 135.750319][ T4441] device hsr_slave_1 left promiscuous mode [ 135.798755][ T4441] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.850852][ T4441] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.887046][ T4441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.914875][ T4441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.952388][ T4231] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 135.966734][ T4441] device bridge_slave_1 left promiscuous mode [ 135.981833][ T4863] loop1: detected capacity change from 0 to 32768 [ 135.995227][ T4441] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.078756][ T4863] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.149 (4863) [ 136.099240][ T4441] device bridge_slave_0 left promiscuous mode [ 136.110257][ T4441] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.180559][ T4863] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 136.210501][ T4863] BTRFS info (device loop1): using free space tree [ 136.229185][ T4863] BTRFS info (device loop1): has skinny extents [ 136.239667][ T4441] device veth1_macvtap left promiscuous mode [ 136.249923][ T4441] device veth0_macvtap left promiscuous mode [ 136.274338][ T4441] device veth1_vlan left promiscuous mode [ 136.287143][ T4441] device veth0_vlan left promiscuous mode [ 136.383508][ T4231] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.476083][ T4863] BTRFS info (device loop1): enabling ssd optimizations [ 136.582867][ T4231] usb 1-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 136.612198][ T4231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.671191][ T4231] usb 1-1: Product: syz [ 136.686918][ T4231] usb 1-1: Manufacturer: syz [ 136.717709][ T4231] usb 1-1: SerialNumber: syz [ 137.042670][ T4231] dvbdev: DVB: registering new adapter (DEC3000-s) [ 137.161865][ T4231] usb 1-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC3000-s Frontend)... [ 137.242750][ T4231] ttusb_dec_send_command: command bulk message failed: error -71 [ 137.297358][ T4231] usb 1-1: USB disconnect, device number 4 [ 137.360427][ T4946] loop1: detected capacity change from 0 to 1024 [ 137.549929][ T4374] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 137.746546][ T4441] team0 (unregistering): Port device team_slave_1 removed [ 137.804669][ T4441] team0 (unregistering): Port device team_slave_0 removed [ 137.916414][ T4441] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.982506][ T4374] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.997674][ T4441] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.006916][ T4374] usb 3-1: config 0 has no interfaces? [ 138.182512][ T4374] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 138.191973][ T4374] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.201207][ T4374] usb 3-1: Product: syz [ 138.205770][ T4374] usb 3-1: Manufacturer: syz [ 138.210495][ T4374] usb 3-1: SerialNumber: syz [ 138.230499][ T4374] usb 3-1: config 0 descriptor?? [ 138.387025][ T4441] bond0 (unregistering): Released all slaves [ 138.422397][ C1] net_ratelimit: 51 callbacks suppressed [ 138.479090][ T4744] team0: Port device team_slave_0 added [ 138.498122][ T4374] usb 3-1: USB disconnect, device number 5 [ 138.554535][ T4744] team0: Port device team_slave_1 added [ 138.775561][ T4744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.806321][ T4744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.021669][ T4744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.078745][ T4744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.092357][ T4744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.398556][ T4744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.779398][ T4942] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 139.799202][ T4744] device hsr_slave_0 entered promiscuous mode [ 139.945118][ T4744] device hsr_slave_1 entered promiscuous mode [ 139.964790][ T4744] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 140.007505][ T4744] Cannot create hsr debugfs directory [ 140.152685][ T4942] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.209694][ T4944] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 140.332680][ T4942] usb 2-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 140.332710][ T4942] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.387710][ T4942] usb 2-1: Product: syz [ 140.387735][ T4942] usb 2-1: Manufacturer: syz [ 140.434460][ T4942] usb 2-1: SerialNumber: syz [ 140.752421][ T4942] dvbdev: DVB: registering new adapter (DEC3000-s) [ 140.793238][ T4942] usb 2-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC3000-s Frontend)... [ 140.813351][ T4944] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 140.990364][ T4944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.993615][ T5018] loop3: detected capacity change from 0 to 256 [ 141.007376][ T4944] usb 3-1: Product: syz [ 141.011607][ T4944] usb 3-1: Manufacturer: syz [ 141.017228][ T4944] usb 3-1: SerialNumber: syz [ 141.024878][ T4944] usb 3-1: config 0 descriptor?? [ 141.032525][ T4942] ttusb_dec_send_command: command bulk message failed: error -71 [ 141.047036][ T4942] usb 2-1: USB disconnect, device number 2 [ 141.064963][ T4944] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 141.101543][ T4944] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 141.144302][ T4944] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 141.156914][ T5018] FAT-fs (loop3): Directory bread(block 64) failed [ 141.168406][ T5018] FAT-fs (loop3): Directory bread(block 65) failed [ 141.176231][ T4944] usb 3-1: media controller created [ 141.187684][ T5018] FAT-fs (loop3): Directory bread(block 66) failed [ 141.214125][ T5018] FAT-fs (loop3): Directory bread(block 67) failed [ 141.231438][ T5018] FAT-fs (loop3): Directory bread(block 68) failed [ 141.272843][ T5018] FAT-fs (loop3): Directory bread(block 69) failed [ 141.286561][ T4995] dvb-usb: bulk message failed: -22 (7/0) [ 141.309374][ T5018] FAT-fs (loop3): Directory bread(block 70) failed [ 141.337727][ T4944] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 141.346453][ T5018] FAT-fs (loop3): Directory bread(block 71) failed [ 141.362116][ T4744] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 141.363985][ T5018] FAT-fs (loop3): Directory bread(block 72) failed [ 141.433630][ T4744] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 141.472320][ T5018] FAT-fs (loop3): Directory bread(block 73) failed [ 141.533254][ T4744] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 141.629361][ T4744] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 141.764571][ T4944] DVB: Unable to find symbol mt352_attach() [ 142.004861][ T4944] DVB: Unable to find symbol nxt6000_attach() [ 142.011024][ T4944] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 142.105055][ T4944] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input10 [ 142.142298][ T4944] dvb-usb: schedule remote query interval to 1000 msecs. [ 142.164581][ T4944] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 142.197879][ T4944] dvb-usb: bulk message failed: -22 (7/0) [ 142.216939][ T4944] dvb-usb: bulk message failed: -22 (7/0) [ 142.278353][ T4944] usb 3-1: USB disconnect, device number 6 [ 142.334034][ T5040] netlink: 56 bytes leftover after parsing attributes in process `syz.0.189'. [ 142.354134][ T5040] netlink: 56 bytes leftover after parsing attributes in process `syz.0.189'. [ 142.404866][ T5040] netlink: 56 bytes leftover after parsing attributes in process `syz.0.189'. [ 142.497777][ T4744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.574727][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 142.593232][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 142.646965][ T4744] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.836351][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 142.849196][ T4944] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 142.865810][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 142.933568][ T4320] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.940716][ T4320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.969193][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 143.018115][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 143.034428][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 143.064115][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.071287][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.129504][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 143.164830][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 143.201532][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 143.224835][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 143.232561][ T4944] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 143.247167][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 143.270484][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 143.303219][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 143.328839][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 143.359465][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 143.387315][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 143.415184][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 143.438677][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 143.542228][ C1] net_ratelimit: 56 callbacks suppressed [ 143.558209][ T5048] loop3: detected capacity change from 0 to 32768 [ 143.609645][ T5048] XFS: attr2 mount option is deprecated. [ 143.663168][ T4944] usb 3-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 143.735567][ T5048] XFS (loop3): Mounting V5 Filesystem [ 143.852663][ T4944] usb 3-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 143.872101][ T4944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.882287][ T4944] usb 3-1: Product: syz [ 143.886501][ T4944] usb 3-1: Manufacturer: syz [ 143.891121][ T4944] usb 3-1: SerialNumber: syz [ 143.925589][ T5048] XFS (loop3): Ending clean mount [ 143.956776][ T4944] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 143.972263][ T4944] dvb-usb: bulk message failed: -22 (3/0) [ 144.019889][ T4944] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 144.025542][ T5048] XFS (loop3): EXPERIMENTAL online scrub feature in use. Use at your own risk! [ 144.072758][ T4944] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 144.093606][ T4944] usb 3-1: media controller created [ 144.146626][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 144.174076][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 144.237877][ T4744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.294924][ T4944] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 144.428645][ T5084] loop1: detected capacity change from 0 to 512 [ 144.483788][ T4193] XFS (loop3): Unmounting Filesystem [ 144.594781][ T5084] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 144.701686][ T5084] EXT4-fs (loop1): 1 truncate cleaned up [ 144.735992][ T4944] DVB: Unable to find symbol mt352_attach() [ 144.741946][ T4944] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 144.765349][ T5084] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,grpid,. Quota mode: none. [ 144.782440][ T4944] dvb-usb: bulk message failed: -22 (3/0) [ 144.817716][ T4944] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 144.883350][ T4944] usb 3-1: USB disconnect, device number 7 [ 145.240008][ T4944] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 145.292907][ T5102] EXT4-fs error (device loop1): ext4_generic_delete_entry:2731: inode #2: block 13: comm syz.1.195: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 145.316698][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 145.321223][ T5102] EXT4-fs (loop1): Remounting filesystem read-only [ 145.331471][ T5102] EXT4-fs error (device loop1) in ext4_delete_entry:2802: Corrupt filesystem [ 145.340784][ T5102] EXT4-fs (loop1): Remounting filesystem read-only [ 145.347416][ T5102] EXT4-fs warning (device loop1): ext4_rename_delete:3794: inode #2: comm syz.1.195: Deleting old file: nlink 4, error=-117 [ 145.383554][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 145.493475][ T4744] device veth0_vlan entered promiscuous mode [ 145.577709][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 145.596082][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 145.627956][ T5105] loop2: detected capacity change from 0 to 1024 [ 145.636217][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 145.677184][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 145.706319][ T4744] device veth1_vlan entered promiscuous mode [ 145.719206][ T5105] EXT4-fs (loop2): Ignoring removed bh option [ 145.783715][ T5105] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 145.883431][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 145.897690][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 145.949241][ T5105] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,dioread_lock,dioread_nolock,resgid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,lazytime,journal_ioprio=0x0000000000000005,stripe=0x0000000000000011,bh,init_itable,,errors=continue. Quota mode: none. [ 145.985670][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 146.089892][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 146.166618][ T4744] device veth0_macvtap entered promiscuous mode [ 146.223799][ T4744] device veth1_macvtap entered promiscuous mode [ 146.270183][ T5105] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 146.371578][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 146.391602][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 146.428259][ T4744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.432640][ T4941] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 146.471897][ T4744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.511594][ T4744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.555435][ T4744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.606408][ T4744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.643566][ T4744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.680051][ T4744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.715238][ T4744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.753891][ T4744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.795174][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 146.813107][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 146.842564][ T4941] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.893588][ T4744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.912944][ T4744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.953850][ T4744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.982671][ T4744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.000534][ T4744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.022676][ T4941] usb 4-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 147.031787][ T4941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.039999][ T4744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.059327][ T4744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.072256][ T4941] usb 4-1: Product: syz [ 147.076505][ T4941] usb 4-1: Manufacturer: syz [ 147.091389][ T4941] usb 4-1: SerialNumber: syz [ 147.096190][ T4744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.143924][ T4744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.172084][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 147.203445][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 147.212816][ T5132] loop2: detected capacity change from 0 to 1024 [ 147.227251][ T4744] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.256105][ T4744] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.297216][ T5132] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 147.319644][ T4744] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.343141][ T4744] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.357711][ T5132] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 147.392537][ T4941] dvbdev: DVB: registering new adapter (DEC3000-s) [ 147.422831][ T4941] usb 4-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC3000-s Frontend)... [ 147.448394][ T5132] EXT4-fs error (device loop2): ext4_get_journal_inode:5187: inode #5: comm syz.2.201: unexpected bad inode w/o EXT4_IGET_BAD [ 147.487284][ T5132] EXT4-fs (loop2): no journal found [ 147.497430][ T5132] EXT4-fs (loop2): can't get journal size [ 147.520528][ T5132] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback. [ 147.586259][ T4941] ttusb_dec_send_command: command bulk message failed: error -71 [ 147.712883][ T4941] usb 4-1: USB disconnect, device number 3 [ 147.851364][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.866989][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.958261][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 147.981665][ T4237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.998683][ T4237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.028915][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 148.142255][ T4374] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 148.349043][ T5148] netlink: 56 bytes leftover after parsing attributes in process `syz.3.205'. [ 148.400125][ T5148] netlink: 56 bytes leftover after parsing attributes in process `syz.3.205'. [ 148.462981][ T5148] netlink: 56 bytes leftover after parsing attributes in process `syz.3.205'. [ 148.562436][ T4374] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.573075][ C1] net_ratelimit: 77 callbacks suppressed [ 148.589644][ T4374] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 148.634539][ T5160] loop1: detected capacity change from 0 to 64 [ 148.645976][ T4374] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 148.717117][ T4374] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 148.756906][ T5164] capability: warning: `syz.0.211' uses 32-bit capabilities (legacy support in use) [ 148.787502][ T4374] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 148.803492][ T5167] loop3: detected capacity change from 0 to 512 [ 148.828181][ T4374] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.887549][ T5164] program syz.0.211 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 148.903319][ T5167] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 148.983186][ T26] audit: type=1800 audit(1790768444.541:6): pid=5160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.210" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 149.022342][ T5167] EXT4-fs (loop3): 1 truncate cleaned up [ 149.048022][ T5177] program syz.0.215 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 149.082267][ T5167] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,grpid,. Quota mode: none. [ 149.642406][ T13] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 149.757452][ T5175] loop5: detected capacity change from 0 to 32768 [ 149.765105][ T4374] gud 3-1:1.0: Failed to get connectors (error=-71) [ 149.772282][ T4462] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 149.779929][ T4374] gud: probe of 3-1:1.0 failed with error -71 [ 149.820823][ T4374] usb 3-1: USB disconnect, device number 8 [ 149.941067][ T5175] JBD2: Ignoring recovery information on journal [ 150.022557][ T13] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.099450][ T5195] EXT4-fs error (device loop3): ext4_generic_delete_entry:2731: inode #2: block 13: comm syz.3.213: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 150.124292][ T5195] EXT4-fs (loop3): Remounting filesystem read-only [ 150.130928][ T5195] EXT4-fs error (device loop3) in ext4_delete_entry:2802: Corrupt filesystem [ 150.142845][ T5195] EXT4-fs (loop3): Remounting filesystem read-only [ 150.149579][ T5195] EXT4-fs warning (device loop3): ext4_rename_delete:3794: inode #2: comm syz.3.213: Deleting old file: nlink 4, error=-117 [ 150.308574][ T5175] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 150.426258][ T13] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 150.445856][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.489375][ T13] usb 1-1: Product: syz [ 150.512773][ T13] usb 1-1: Manufacturer: syz [ 150.517605][ T13] usb 1-1: SerialNumber: syz [ 150.695816][ T5203] binder: 5202:5203 ioctl 400c620e 200000000040 returned -22 [ 150.703953][ T4462] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 150.720713][ T4462] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.739835][ T4462] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 150.770575][ T4462] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.822105][ T5208] loop2: detected capacity change from 0 to 512 [ 151.020211][ T4462] hub 2-1:4.0: USB hub found [ 151.177570][ T4744] ocfs2: Unmounting device (7,5) on (node local) [ 151.232546][ T4462] hub 2-1:4.0: 2 ports detected [ 151.237588][ T4462] usb 2-1: selecting invalid altsetting 1 [ 151.257169][ T4462] hub 2-1:4.0: Using single TT (err -22) [ 151.312591][ T13] speedtch 1-1:1.0: usbatm_usb_probe: invalid endpoint 07! [ 151.525929][ T13] speedtch: probe of 1-1:1.0 failed with error -22 [ 151.540223][ T5216] loop5: detected capacity change from 0 to 4096 [ 151.545062][ T4941] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 151.582907][ T13] usbtest: probe of 1-1:1.1 failed with error -71 [ 151.612438][ T13] speedtch: probe of 1-1:1.1 failed with error -71 [ 151.642051][ T13] usb 1-1: USB disconnect, device number 5 [ 151.706404][ T4462] usb 2-1: USB disconnect, device number 3 [ 151.802303][ T4941] usb 3-1: Using ep0 maxpacket: 32 [ 151.922654][ T4941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.940745][ T4941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.953645][ T4941] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 151.962879][ T4941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.990768][ T4941] usb 3-1: config 0 descriptor?? [ 152.115338][ T5221] input: syz0 as /devices/virtual/input/input11 [ 152.377150][ T5229] loop1: detected capacity change from 0 to 512 [ 152.392454][ T4933] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 152.467029][ T4941] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 152.494573][ T4941] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 152.537946][ T4941] ft260 0003:0403:6030.0002: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 152.643863][ T4933] usb 1-1: Using ep0 maxpacket: 8 [ 152.683026][ T4941] ft260 0003:0403:6030.0002: chip code: 0000 0000 [ 152.690572][ T5236] loop1: detected capacity change from 0 to 512 [ 152.767408][ T5236] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 152.802937][ T4933] usb 1-1: unable to get BOS descriptor or descriptor too short [ 152.818626][ T5236] EXT4-fs (loop1): 1 truncate cleaned up [ 152.824800][ T5236] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,grpid,. Quota mode: none. [ 152.988569][ T4933] usb 1-1: config 140 has an invalid descriptor of length 0, skipping remainder of the config [ 152.999148][ T4941] ft260 0003:0403:6030.0002: failed to retrieve system status [ 153.148038][ T5248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.233'. [ 153.161882][ T5248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.233'. [ 153.172385][ T5248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.233'. [ 153.189971][ T5248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.233'. [ 153.199510][ T5248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.233'. [ 153.622195][ C1] net_ratelimit: 55 callbacks suppressed [ 153.737126][ T4933] usb 1-1: config 140 has 1 interface, different from the descriptor's value: 2 [ 153.747972][ T4941] ft260: probe of 0003:0403:6030.0002 failed with error -71 [ 153.777175][ T4941] usb 3-1: USB disconnect, device number 9 [ 153.844758][ T5251] fido_id[5251]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 153.932715][ T4933] usb 1-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 153.962506][ T4933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.992376][ T4933] usb 1-1: Product: syz [ 154.005652][ T4933] usb 1-1: Manufacturer: syz [ 154.030659][ T4933] usb 1-1: SerialNumber: syz [ 154.195682][ T4941] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 154.368008][ T5263] EXT4-fs error (device loop1): ext4_generic_delete_entry:2731: inode #2: block 13: comm syz.1.231: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 154.397364][ T5263] EXT4-fs (loop1): Remounting filesystem read-only [ 154.404027][ T5263] EXT4-fs error (device loop1) in ext4_delete_entry:2802: Corrupt filesystem [ 154.417159][ T5263] EXT4-fs (loop1): Remounting filesystem read-only [ 154.424135][ T5263] EXT4-fs warning (device loop1): ext4_rename_delete:3794: inode #2: comm syz.1.231: Deleting old file: nlink 4, error=-117 [ 154.844538][ T4933] usb 1-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 155.052621][ T4941] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 64 [ 155.073949][ T4941] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 64 [ 155.114298][ T4941] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 155.146417][ T4941] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 155.167198][ T5259] loop5: detected capacity change from 0 to 40427 [ 155.208680][ T5259] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 155.224756][ T4933] usb 1-1: reset high-speed USB device number 6 using dummy_hcd [ 155.227221][ T5259] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 155.292659][ T4941] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 155.298148][ T5259] F2FS-fs (loop5): invalid crc value [ 155.828473][ T5259] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 156.156401][ T4941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 156.213681][ T4941] usb 4-1: Product: syz [ 156.262856][ T4941] usb 4-1: Manufacturer: syz [ 156.435534][ T13] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 156.463450][ T4933] usb 1-1: device not accepting address 6, error -71 [ 156.526399][ T5259] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 156.547840][ T5259] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 156.563620][ T5253] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 156.587635][ T5253] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 156.675419][ T4941] dvb_ttusb_budget: ttusb_init_controller: error [ 156.722931][ T4941] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 156.799047][ T4744] attempt to access beyond end of device [ 156.799047][ T4744] loop5: rw=2049, want=45104, limit=40427 [ 156.832599][ T13] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.892986][ T5253] dvb_ttusb_budget: failed urb submission (0: err = -90)! [ 156.952327][ T4941] DVB: Unable to find symbol cx22700_attach() [ 156.982959][ T13] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 157.003591][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 157.011670][ T13] usb 2-1: Product: syz [ 157.070327][ T13] usb 2-1: Manufacturer: syz [ 157.113916][ T4941] DVB: Unable to find symbol tda10046_attach() [ 157.121177][ T4941] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 157.155571][ T13] usb 2-1: selecting invalid altsetting 1 [ 157.199718][ T13] dvb_ttusb_budget: ttusb_init_controller: error [ 157.207548][ T4941] usb 4-1: USB disconnect, device number 4 [ 157.231953][ T13] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 157.307490][ T4933] usb 1-1: [ueagle-atm] pre-firmware device, uploading firmware [ 157.354060][ T4933] usb 1-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 157.417735][ T4933] usb 1-1: USB disconnect, device number 6 [ 157.475741][ T13] DVB: Unable to find symbol cx22700_attach() [ 157.485049][ T4944] usb 1-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2 [ 157.533855][ T4944] usb 1-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw [ 157.600114][ T5313] loop3: detected capacity change from 0 to 128 [ 157.624347][ T13] DVB: Unable to find symbol tda10046_attach() [ 157.631344][ T13] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 157.665422][ T5313] VFS: Found a Xenix FS (block size = 1024) on device loop3 [ 157.819511][ T4193] sysv_free_block: flc_count > flc_size [ 157.832577][ T4193] sysv_free_block: flc_count > flc_size [ 157.838188][ T4193] sysv_free_block: flc_count > flc_size [ 157.852116][ T4193] sysv_free_block: flc_count > flc_size [ 157.870608][ T4193] sysv_free_block: flc_count > flc_size [ 157.888567][ T4193] sysv_free_block: flc_count > flc_size [ 157.906660][ T4193] sysv_free_block: flc_count > flc_size [ 157.920313][ T4193] sysv_free_block: flc_count > flc_size [ 157.933622][ T4193] sysv_free_block: flc_count > flc_size [ 157.946056][ T4193] sysv_free_block: flc_count > flc_size [ 157.966848][ T4193] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 158.139412][ T5322] loop3: detected capacity change from 0 to 4096 [ 158.199814][ T5322] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 158.259151][ T5322] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 158.313723][ T5322] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 158.397028][ T5322] ntfs: volume version 3.1. [ 158.670538][ T5322] ntfs: (device loop3): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 158.827981][ T4941] usb 2-1: USB disconnect, device number 4 [ 159.053967][ T4193] ntfs: (device loop3): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 159.100770][ C1] net_ratelimit: 68 callbacks suppressed [ 160.363782][ T5357] loop5: detected capacity change from 0 to 164 [ 160.438015][ T5362] loop1: detected capacity change from 0 to 512 [ 160.551079][ T5362] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 160.689986][ T5362] EXT4-fs (loop1): 1 truncate cleaned up [ 160.735858][ T5362] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,grpid,. Quota mode: none. [ 160.798256][ T5367] serial 00:04: in use; can't configure [ 162.581584][ T5357] R [ 162.585016][ T5357] RIP_ [ 162.595132][ T5357] 1 [ 162.595145][ T5357] 9 [ 163.406307][ T5375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.267'. [ 163.423950][ T5357] 91A [ 164.422477][ C0] net_ratelimit: 35 callbacks suppressed [ 164.742304][ T4462] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 164.835876][ T5398] loop3: detected capacity change from 0 to 512 [ 164.910528][ T5398] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 164.938728][ T5401] loop5: detected capacity change from 0 to 512 [ 165.039669][ T5398] EXT4-fs (loop3): 1 truncate cleaned up [ 165.045576][ T5398] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,grpid,. Quota mode: none. [ 165.079621][ T5394] loop1: detected capacity change from 0 to 8192 [ 165.223304][ T5401] EXT4-fs (loop5): orphan cleanup on readonly fs [ 165.302425][ T4462] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.312519][ T5401] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 165.335041][ T5394] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 165.372099][ T5401] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, [ 165.381277][ T5401] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 165.392760][ T5394] REISERFS (device loop1): using ordered data mode [ 165.399338][ T5394] reiserfs: using flush barriers [ 165.429338][ T5394] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 165.462493][ T4462] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 165.497866][ T4462] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 165.515165][ T5394] REISERFS (device loop1): checking transaction log (loop1) [ 165.529063][ T5401] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.275: attempt to clear invalid blocks 2 len 1 [ 165.540263][ T5409] EXT4-fs error (device loop3): ext4_generic_delete_entry:2731: inode #2: block 13: comm syz.3.274: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 165.563755][ T5409] EXT4-fs (loop3): Remounting filesystem read-only [ 165.570324][ T5409] EXT4-fs error (device loop3) in ext4_delete_entry:2802: Corrupt filesystem [ 165.579685][ T5409] EXT4-fs (loop3): Remounting filesystem read-only [ 165.586417][ T5409] EXT4-fs warning (device loop3): ext4_rename_delete:3794: inode #2: comm syz.3.274: Deleting old file: nlink 4, error=-117 [ 165.612809][ T4462] usb 3-1: Product: syz [ 165.632788][ T4462] usb 3-1: Manufacturer: syz [ 165.665973][ T5401] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.275: invalid indirect mapped block 1819239214 (level 0) [ 165.697599][ T4462] usb 3-1: selecting invalid altsetting 1 [ 165.729455][ T4462] dvb_ttusb_budget: ttusb_init_controller: error [ 165.749676][ T4462] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 165.762659][ T5401] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.275: invalid indirect mapped block 1819239214 (level 1) [ 165.810490][ T5401] EXT4-fs (loop5): 1 truncate cleaned up [ 165.842245][ T5401] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv0,abort,bsddf,noquota,usrjquota=..,errors=continue. Quota mode: writeback. [ 165.921534][ T5401] EXT4-fs error (device loop5): ext4_remount:6062: comm syz.5.275: Abort forced by user [ 165.943097][ T4462] DVB: Unable to find symbol cx22700_attach() [ 165.994450][ T5401] EXT4-fs (loop5): re-mounted. Opts: (null). Quota mode: writeback. [ 166.059986][ T5394] REISERFS (device loop1): Using r5 hash to sort names [ 166.079148][ T4462] DVB: Unable to find symbol tda10046_attach() [ 166.093096][ T4462] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 166.117973][ T5394] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 166.355748][ T5394] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3385, free_space(entry_count) 2 [ 166.427494][ T5394] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 166.465065][ T5394] REISERFS (device loop1): Remounting filesystem read-only [ 166.682326][ T5431] netlink: 8 bytes leftover after parsing attributes in process `syz.5.278'. [ 166.693950][ T5431] netlink: 8 bytes leftover after parsing attributes in process `syz.5.278'. [ 166.704206][ T5431] netlink: 8 bytes leftover after parsing attributes in process `syz.5.278'. [ 166.714459][ T5431] netlink: 8 bytes leftover after parsing attributes in process `syz.5.278'. [ 166.724410][ T5431] netlink: 8 bytes leftover after parsing attributes in process `syz.5.278'. [ 167.642413][ T4941] usb 3-1: USB disconnect, device number 10 [ 167.727237][ T5439] loop2: detected capacity change from 0 to 512 [ 167.798570][ T5439] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 167.867279][ T5439] EXT4-fs (loop2): 1 truncate cleaned up [ 167.895248][ T5439] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,grpid,. Quota mode: none. [ 168.770398][ T5460] pim6reg1: tun_chr_ioctl cmd 1074812118 [ 169.782206][ C0] net_ratelimit: 52 callbacks suppressed [ 174.310703][ T5512] device batadv_slave_1 entered promiscuous mode [ 174.327163][ T5513] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.303'. [ 174.363558][ T5511] device batadv_slave_1 left promiscuous mode [ 174.562244][ T13] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 174.591822][ T5525] loop5: detected capacity change from 0 to 1024 [ 174.685965][ T5527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.307'. [ 174.698050][ T5527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.307'. [ 174.708740][ T5527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.307'. [ 174.718837][ T5527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.307'. [ 174.735329][ T5527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.307'. [ 174.823416][ T13] usb 2-1: Using ep0 maxpacket: 16 [ 174.943544][ T13] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.026961][ T5525] hfsplus: invalid length 32517 has been corrected to 255 [ 175.101098][ T13] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 175.312258][ C1] net_ratelimit: 49 callbacks suppressed [ 175.373415][ T13] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 175.514790][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 175.563951][ T5525] hfsplus: invalid length 32517 has been corrected to 255 [ 175.583187][ T13] usb 2-1: SerialNumber: syz [ 175.679031][ T13] usb 2-1: 0:2 : does not exist [ 175.808825][ T4441] hfsplus: b-tree write err: -5, ino 2 [ 175.836996][ T4441] hfsplus: b-tree write err: -5, ino 20 [ 176.028693][ T5520] loop3: detected capacity change from 0 to 32768 [ 176.205201][ T5543] loop5: detected capacity change from 0 to 1024 [ 176.345370][ T5543] hfsplus: invalid length 1280 has been corrected to 255 [ 176.628589][ T13] usb 2-1: USB disconnect, device number 5 [ 176.647314][ T5548] loop5: detected capacity change from 0 to 22 [ 176.697503][ T5548] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 176.789053][ T5548] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 177.091476][ T5554] loop3: detected capacity change from 0 to 32768 [ 177.140225][ T4882] loop3: p1 < > p3 < p5 p6 > p4 [ 177.171491][ T5563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.317'. [ 177.183448][ T5563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.317'. [ 177.193745][ T5563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.317'. [ 177.205372][ T5563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.317'. [ 177.227950][ T4882] loop3: partition table partially beyond EOD, truncated [ 177.638182][ T4882] loop3: p4 start 4294967295 is beyond EOD, truncated [ 177.839942][ T4882] loop3: p6 start 2164271104 is beyond EOD, truncated [ 177.872237][ T13] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 178.007276][ T5554] loop3: p1 < > p3 < p5 p6 > p4 [ 178.012349][ T5554] loop3: partition table partially beyond EOD, truncated [ 178.022516][ T5554] loop3: p4 start 4294967295 is beyond EOD, truncated [ 178.032816][ T5554] loop3: p6 start 2164271104 is beyond EOD, truncated [ 178.192430][ T13] usb 2-1: Using ep0 maxpacket: 32 [ 179.083291][ T5581] loop2: detected capacity change from 0 to 131072 [ 179.086708][ T4866] udevd[4866]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 179.121882][ T4882] udevd[4882]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 179.143849][ T4850] udevd[4850]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 179.175425][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.210837][ T5581] F2FS-fs (loop2): Segment count (31) mismatch with total segments from devices (0) [ 179.220635][ T5581] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 179.231985][ T5581] F2FS-fs (loop2): invalid crc value [ 179.238975][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.262976][ T13] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 179.272083][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.309302][ T5581] F2FS-fs (loop2): Found nat_bits in checkpoint [ 179.371056][ T13] usb 2-1: config 0 descriptor?? [ 179.397654][ T4882] udevd[4882]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 179.408160][ T4850] udevd[4850]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 179.423845][ T4866] udevd[4866]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 179.440913][ T5581] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 179.448222][ T5581] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 179.580052][ T5597] FAULT_INJECTION: forcing a failure. [ 179.580052][ T5597] name fail_futex, interval 1, probability 0, space 0, times 1 [ 179.662451][ T5597] CPU: 0 PID: 5597 Comm: syz.5.323 Not tainted syzkaller #0 [ 179.669813][ T5597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 179.679913][ T5597] Call Trace: [ 179.683229][ T5597] [ 179.686181][ T5597] dump_stack_lvl+0x188/0x250 [ 179.690911][ T5597] ? show_regs_print_info+0x20/0x20 [ 179.696142][ T5597] ? load_image+0x410/0x410 [ 179.700690][ T5597] ? insert_page_into_pte_locked+0x470/0x470 [ 179.706715][ T5597] should_fail+0x383/0x4b0 [ 179.711184][ T5597] get_futex_key+0x1cf/0x12d0 [ 179.715898][ T5597] ? futex_wait_restart+0x250/0x250 [ 179.721155][ T5597] futex_wake+0x101/0x540 [ 179.725528][ T5597] ? __up_read+0x2b4/0x6b0 [ 179.729983][ T5597] ? futex_wait+0x680/0x680 [ 179.734514][ T5597] ? vmacache_find+0x238/0x590 [ 179.739318][ T5597] do_futex+0xd83/0x12b0 [ 179.743602][ T5597] ? lock_chain_count+0x20/0x20 [ 179.748495][ T5597] ? lockdep_hardirqs_on+0x94/0x140 [ 179.753726][ T5597] ? exc_page_fault+0x88/0x100 [ 179.758534][ T5597] ? futex_exit_release+0x1c0/0x1c0 [ 179.763812][ T5597] mm_release+0x278/0x3c0 [ 179.768200][ T5597] ? exit_mm_release+0x30/0x30 [ 179.772989][ T5597] ? lockdep_hardirqs_on+0x94/0x140 [ 179.778246][ T5597] exit_mm+0xaf/0x7b0 [ 179.782269][ T5597] ? perf_pmu_migrate_context+0xb70/0xb70 [ 179.788031][ T5597] ? do_exit+0x2110/0x2110 [ 179.792475][ T5597] ? rcu_is_watching+0x11/0xa0 [ 179.797264][ T5597] ? mm_trace_rss_stat+0x81/0x1c0 [ 179.802352][ T5597] ? sync_mm_rss+0x211/0x350 [ 179.806988][ T5597] do_exit+0x5b8/0x2110 [ 179.811181][ T5597] ? put_task_struct+0x80/0x80 [ 179.815976][ T5597] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 179.821998][ T5597] ? _raw_spin_lock_irq+0xb7/0xf0 [ 179.827054][ T5597] do_group_exit+0x12c/0x2f0 [ 179.831692][ T5597] ? lockdep_hardirqs_on+0x94/0x140 [ 179.836922][ T5597] get_signal+0x7eb/0x12e0 [ 179.841379][ T5597] arch_do_signal_or_restart+0xe6/0x12a0 [ 179.847054][ T5597] ? futex_exit_release+0x1c0/0x1c0 [ 179.852286][ T5597] ? get_sigframe_size+0x10/0x10 [ 179.857259][ T5597] ? __context_tracking_exit+0x4c/0x80 [ 179.862766][ T5597] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 179.868820][ T5597] ? exit_to_user_mode_loop+0x3b/0x130 [ 179.874322][ T5597] exit_to_user_mode_loop+0x9e/0x130 [ 179.879651][ T5597] exit_to_user_mode_prepare+0xee/0x180 [ 179.885242][ T5597] syscall_exit_to_user_mode+0x16/0x40 [ 179.890741][ T5597] do_syscall_64+0x58/0xa0 [ 179.895195][ T5597] ? clear_bhb_loop+0x30/0x80 [ 179.899942][ T5597] ? clear_bhb_loop+0x30/0x80 [ 179.904654][ T5597] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 179.910593][ T5597] RIP: 0033:0x7f6df6277159 [ 179.915042][ T5597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.934679][ T5597] RSP: 002b:00007f6df44ae0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 179.943129][ T5597] RAX: fffffffffffffe00 RBX: 00007f6df64ff098 RCX: 00007f6df6277159 [ 179.951176][ T5597] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6df64ff098 [ 179.959172][ T5597] RBP: 00007f6df64ff090 R08: 0000000000000000 R09: 0000000000000000 [ 179.967163][ T5597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.967179][ T5597] R13: 00007f6df64ff128 R14: 00007ffd15893a50 R15: 00007ffd15893b38 [ 179.967209][ T5597] [ 180.487860][ C0] net_ratelimit: 51 callbacks suppressed [ 180.520992][ T13] savu 0003:1E7D:2D5A.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 180.544620][ T13] usb 2-1: USB disconnect, device number 6 [ 180.857469][ T5615] fido_id[5615]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 181.102984][ T5628] __nla_validate_parse: 1 callbacks suppressed [ 181.103041][ T5628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.330'. [ 181.122805][ T5628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.330'. [ 181.134595][ T5628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.330'. [ 181.143739][ T5628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.330'. [ 181.152842][ T5628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.330'. [ 182.089327][ T5635] FAULT_INJECTION: forcing a failure. [ 182.089327][ T5635] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 182.142968][ T5642] netlink: 8 bytes leftover after parsing attributes in process `syz.5.334'. [ 182.159196][ T5635] CPU: 1 PID: 5635 Comm: syz.1.333 Not tainted syzkaller #0 [ 182.166701][ T5635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 182.176798][ T5635] Call Trace: [ 182.180116][ T5635] [ 182.183074][ T5635] dump_stack_lvl+0x188/0x250 [ 182.187789][ T5635] ? show_regs_print_info+0x20/0x20 [ 182.193020][ T5635] ? load_image+0x410/0x410 [ 182.197564][ T5635] ? __lock_acquire+0x7b50/0x7b50 [ 182.202651][ T5635] should_fail+0x383/0x4b0 [ 182.207113][ T5635] strncpy_from_user+0x32/0x350 [ 182.212017][ T5635] __se_sys_add_key+0xd8/0x410 [ 182.216823][ T5635] ? __x64_sys_add_key+0xc0/0xc0 [ 182.221809][ T5635] ? lockdep_hardirqs_on+0x94/0x140 [ 182.227041][ T5635] ? __x64_sys_add_key+0x1c/0xc0 [ 182.232038][ T5635] do_syscall_64+0x4c/0xa0 [ 182.236487][ T5635] ? clear_bhb_loop+0x30/0x80 [ 182.241205][ T5635] ? clear_bhb_loop+0x30/0x80 [ 182.246027][ T5635] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 182.251955][ T5635] RIP: 0033:0x7f6f80ef2159 [ 182.256417][ T5635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.276050][ T5635] RSP: 002b:00007f6f7f14a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 182.284525][ T5635] RAX: ffffffffffffffda RBX: 00007f6f81179fa0 RCX: 00007f6f80ef2159 [ 182.292541][ T5635] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 182.300550][ T5635] RBP: 00007f6f80f8906b R08: ffffffffffffffff R09: 0000000000000000 [ 182.308554][ T5635] R10: 00000000000004a9 R11: 0000000000000246 R12: 0000000000000000 [ 182.316585][ T5635] R13: 00007f6f8117a038 R14: 00007f6f81179fa0 R15: 00007ffeeab111f8 [ 182.324607][ T5635] [ 182.337472][ T5639] syz.3.335 uses obsolete (PF_INET,SOCK_PACKET) [ 182.354755][ T5644] FAULT_INJECTION: forcing a failure. [ 182.354755][ T5644] name failslab, interval 1, probability 0, space 0, times 1 [ 182.430364][ T5644] CPU: 0 PID: 5644 Comm: syz.0.336 Not tainted syzkaller #0 [ 182.437725][ T5644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 182.447806][ T5644] Call Trace: [ 182.451102][ T5644] [ 182.454049][ T5644] dump_stack_lvl+0x188/0x250 [ 182.458757][ T5644] ? show_regs_print_info+0x20/0x20 [ 182.463985][ T5644] ? load_image+0x410/0x410 [ 182.468526][ T5644] ? __might_sleep+0xf0/0xf0 [ 182.473143][ T5644] ? __lock_acquire+0x7b50/0x7b50 [ 182.478205][ T5644] should_fail+0x383/0x4b0 [ 182.482672][ T5644] should_failslab+0x5/0x20 [ 182.487198][ T5644] slab_pre_alloc_hook+0x51/0xc0 [ 182.492155][ T5644] kmem_cache_alloc_trace+0x47/0x290 [ 182.497460][ T5644] ? __se_sys_fsopen+0x19c/0x320 [ 182.502420][ T5644] __se_sys_fsopen+0x19c/0x320 [ 182.507207][ T5644] do_syscall_64+0x4c/0xa0 [ 182.511643][ T5644] ? clear_bhb_loop+0x30/0x80 [ 182.516336][ T5644] ? clear_bhb_loop+0x30/0x80 [ 182.521029][ T5644] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 182.526940][ T5644] RIP: 0033:0x7f334d168159 [ 182.531389][ T5644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.551026][ T5644] RSP: 002b:00007f334b3c0028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 182.559483][ T5644] RAX: ffffffffffffffda RBX: 00007f334d3effa0 RCX: 00007f334d168159 [ 182.567488][ T5644] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000040 [ 182.575476][ T5644] RBP: 00007f334d1ff06b R08: 0000000000000000 R09: 0000000000000000 [ 182.583458][ T5644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.591463][ T5644] R13: 00007f334d3f0038 R14: 00007f334d3effa0 R15: 00007fff4b12cbc8 [ 182.599462][ T5644] [ 183.908761][ T5697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.346'. [ 183.920934][ T5697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.346'. [ 183.931556][ T5697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.346'. [ 183.941732][ T5697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.346'. [ 184.886860][ T5711] FAULT_INJECTION: forcing a failure. [ 184.886860][ T5711] name failslab, interval 1, probability 0, space 0, times 0 [ 184.946620][ T5711] CPU: 0 PID: 5711 Comm: syz.3.350 Not tainted syzkaller #0 [ 184.953977][ T5711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 184.964062][ T5711] Call Trace: [ 184.967378][ T5711] [ 184.970335][ T5711] dump_stack_lvl+0x188/0x250 [ 184.975060][ T5711] ? show_regs_print_info+0x20/0x20 [ 184.980291][ T5711] ? load_image+0x410/0x410 [ 184.984834][ T5711] ? __might_sleep+0xf0/0xf0 [ 184.989471][ T5711] ? __lock_acquire+0x7b50/0x7b50 [ 184.994537][ T5711] should_fail+0x383/0x4b0 [ 184.999002][ T5711] should_failslab+0x5/0x20 [ 185.003541][ T5711] slab_pre_alloc_hook+0x51/0xc0 [ 185.008521][ T5711] ? __d_alloc+0x27/0x6d0 [ 185.012887][ T5711] kmem_cache_alloc+0x3d/0x280 [ 185.017706][ T5711] __d_alloc+0x27/0x6d0 [ 185.021901][ T5711] ? d_alloc_pseudo+0xe/0x70 [ 185.026542][ T5711] d_alloc_pseudo+0x19/0x70 [ 185.031081][ T5711] alloc_file_pseudo+0xe0/0x200 [ 185.036008][ T5711] ? alloc_empty_file_noaccount+0x80/0x80 [ 185.041770][ T5711] ? _raw_spin_unlock+0x24/0x40 [ 185.046658][ T5711] ? alloc_fd+0x59e/0x650 [ 185.051066][ T5711] __anon_inode_getfd+0x26b/0x3d0 [ 185.056143][ T5711] ? anon_inode_getfd+0x40/0x40 [ 185.061039][ T5711] __se_sys_fsopen+0x294/0x320 [ 185.065840][ T5711] do_syscall_64+0x4c/0xa0 [ 185.070292][ T5711] ? clear_bhb_loop+0x30/0x80 [ 185.075013][ T5711] ? clear_bhb_loop+0x30/0x80 [ 185.079730][ T5711] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 185.085670][ T5711] RIP: 0033:0x7fd166f5b159 [ 185.090124][ T5711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.109766][ T5711] RSP: 002b:00007fd1651b3028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 185.118243][ T5711] RAX: ffffffffffffffda RBX: 00007fd1671e2fa0 RCX: 00007fd166f5b159 [ 185.126256][ T5711] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 185.126274][ T5711] RBP: 00007fd166ff206b R08: 0000000000000000 R09: 0000000000000000 [ 185.126288][ T5711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.126302][ T5711] R13: 00007fd1671e3038 R14: 00007fd1671e2fa0 R15: 00007fff00242578 [ 185.126332][ T5711] [ 185.597041][ C0] net_ratelimit: 52 callbacks suppressed [ 185.942436][ T4462] Bluetooth: hci1: command 0x0406 tx timeout [ 185.957077][ T4462] Bluetooth: hci3: command 0x0406 tx timeout [ 186.012266][ T4936] Bluetooth: hci2: command 0x0406 tx timeout [ 186.305841][ T5748] __nla_validate_parse: 1 callbacks suppressed [ 186.305897][ T5748] netlink: 8 bytes leftover after parsing attributes in process `syz.5.361'. [ 186.325041][ T5748] netlink: 8 bytes leftover after parsing attributes in process `syz.5.361'. [ 186.337344][ T5748] netlink: 8 bytes leftover after parsing attributes in process `syz.5.361'. [ 186.348262][ T5748] netlink: 8 bytes leftover after parsing attributes in process `syz.5.361'. [ 186.357389][ T5748] netlink: 8 bytes leftover after parsing attributes in process `syz.5.361'. [ 187.364730][ T4441] ------------[ cut here ]------------ [ 187.370680][ T4441] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 187.381376][ T4441] WARNING: CPU: 0 PID: 4441 at net/mac80211/rate.c:376 __rate_control_send_low+0x62c/0x880 [ 187.391466][ T4441] Modules linked in: [ 187.395433][ T4441] CPU: 0 PID: 4441 Comm: kworker/u4:14 Not tainted syzkaller #0 [ 187.403130][ T4441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 187.413257][ T4441] Workqueue: phy0 ieee80211_scan_work [ 187.418672][ T4441] RIP: 0010:__rate_control_send_low+0x62c/0x880 [ 187.424989][ T4441] Code: 42 0f b6 04 28 84 c0 0f 85 ea 01 00 00 48 8b 04 24 8b 08 48 c7 c7 c0 a5 39 8b 4c 89 f6 44 8b 44 24 14 45 89 f9 e8 74 fd 69 00 <0f> 0b e9 74 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 0a fa ff [ 187.444667][ T4441] RSP: 0018:ffffc900030ef508 EFLAGS: 00010246 [ 187.450875][ T4441] [ 187.450886][ T4441] RAX: 2b02fc958c4b0500 RBX: 000000000000000c RCX: ffff888020d35940 [ 187.461297][ T4441] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 187.469349][ T4441] RBP: 0000000000000084 R08: ffffc900030ef027 R09: 1ffff9200061de04 [ 187.477374][ T4441] R10: dffffc0000000000 R11: fffff5200061de05 R12: ffff888061584b68 [ 187.485400][ T4441] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 187.493519][ T4441] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 187.502684][ T4441] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 187.509301][ T4441] CR2: 00007f3a906dd6c8 CR3: 000000002ad89000 CR4: 00000000003506f0 [ 187.517356][ T4441] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 187.525402][ T4441] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 187.533452][ T4441] Call Trace: [ 187.536763][ T4441] [ 187.539735][ T4441] rate_control_send_low+0x194/0x790 [ 187.545104][ T4441] ? ieee80211_scan_work+0x41f/0x1aa0 [ 187.550532][ T4441] rate_control_get_rate+0x207/0x5c0 [ 187.555904][ T4441] ieee80211_tx_h_rate_ctrl+0xaeb/0x16e0 [ 187.561588][ T4441] ? ieee80211_tx_h_select_key+0x1710/0x1710 [ 187.567647][ T4441] ? ieee80211_queue_skb+0xbd/0x20e0 [ 187.573005][ T4441] invoke_tx_handlers_late+0xae/0x1720 [ 187.578507][ T4441] ? ieee80211_tx_h_select_key+0x11fb/0x1710 [ 187.584569][ T4441] ? invoke_tx_handlers_early+0xa26/0x1ca0 [ 187.590422][ T4441] ieee80211_tx+0x2d4/0x460 [ 187.595003][ T4441] ? ieee80211_skb_resize+0x610/0x610 [ 187.600429][ T4441] ? ieee80211_xmit+0x309/0x420 [ 187.605344][ T4441] __ieee80211_tx_skb_tid_band+0x165/0x200 [ 187.611194][ T4441] ieee80211_scan_state_send_probe+0x556/0x8e0 [ 187.617463][ T4441] ieee80211_scan_work+0x41f/0x1aa0 [ 187.622721][ T4441] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 187.628668][ T4441] ? _raw_spin_unlock_irq+0x1f/0x40 [ 187.633940][ T4441] process_one_work+0x867/0xff0 [ 187.638842][ T4441] ? worker_detach_from_pool+0x240/0x240 [ 187.644539][ T4441] ? lockdep_hardirqs_off+0x70/0x100 [ 187.649888][ T4441] ? _raw_spin_lock_irq+0xb7/0xf0 [ 187.654987][ T4441] ? _raw_spin_lock_irqsave+0x100/0x100 [ 187.660572][ T4441] ? wq_worker_running+0x97/0x170 [ 187.665662][ T4441] worker_thread+0xad7/0x12a0 [ 187.670387][ T4441] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 187.676349][ T4441] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 187.682331][ T4441] kthread+0x42e/0x520 [ 187.686439][ T4441] ? rcu_lock_release+0x20/0x20 [ 187.691316][ T4441] ? kthread_blkcg+0xd0/0xd0 [ 187.695976][ T4441] ret_from_fork+0x1f/0x30 [ 187.700448][ T4441] [ 187.703549][ T4441] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 187.710851][ T4441] CPU: 0 PID: 4441 Comm: kworker/u4:14 Not tainted syzkaller #0 [ 187.718506][ T4441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 187.728586][ T4441] Workqueue: phy0 ieee80211_scan_work [ 187.734008][ T4441] Call Trace: [ 187.737316][ T4441] [ 187.740360][ T4441] dump_stack_lvl+0x188/0x250 [ 187.745075][ T4441] ? show_regs_print_info+0x20/0x20 [ 187.750318][ T4441] ? load_image+0x410/0x410 [ 187.754861][ T4441] panic+0x2f8/0x850 [ 187.758794][ T4441] ? bpf_jit_dump+0xd0/0xd0 [ 187.763336][ T4441] ? ret_from_fork+0x1f/0x30 [ 187.767956][ T4441] ? __rate_control_send_low+0x62c/0x880 [ 187.773627][ T4441] __warn+0x248/0x2b0 [ 187.777644][ T4441] ? __rate_control_send_low+0x62c/0x880 [ 187.783313][ T4441] report_bug+0x1b9/0x2e0 [ 187.787695][ T4441] handle_bug+0x3a/0x70 [ 187.791880][ T4441] exc_invalid_op+0x16/0x40 [ 187.796439][ T4441] asm_exc_invalid_op+0x16/0x20 [ 187.801320][ T4441] RIP: 0010:__rate_control_send_low+0x62c/0x880 [ 187.807599][ T4441] Code: 42 0f b6 04 28 84 c0 0f 85 ea 01 00 00 48 8b 04 24 8b 08 48 c7 c7 c0 a5 39 8b 4c 89 f6 44 8b 44 24 14 45 89 f9 e8 74 fd 69 00 <0f> 0b e9 74 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 0a fa ff [ 187.827258][ T4441] RSP: 0018:ffffc900030ef508 EFLAGS: 00010246 [ 187.833361][ T4441] RAX: 2b02fc958c4b0500 RBX: 000000000000000c RCX: ffff888020d35940 [ 187.841394][ T4441] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 187.849419][ T4441] RBP: 0000000000000084 R08: ffffc900030ef027 R09: 1ffff9200061de04 [ 187.857178][ C1] virtqueue callback for ffff888147e96a00 (ffffffff85491a80) [ 187.857413][ T4441] R10: dffffc0000000000 R11: fffff5200061de05 R12: ffff888061584b68 [ 187.872776][ T4441] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 187.875102][ C1] nf_conntrack: normal packet for ffff888023a30480 [ 187.880788][ T4441] ? __rate_control_send_low+0x62c/0x880 [ 187.880832][ T4441] rate_control_send_low+0x194/0x790 [ 187.880855][ T4441] ? ieee80211_scan_work+0x41f/0x1aa0 [ 187.887710][ C1] tcp_in_window: START [ 187.893275][ T4441] rate_control_get_rate+0x207/0x5c0 [ 187.893315][ T4441] ieee80211_tx_h_rate_ctrl+0xaeb/0x16e0 [ 187.893358][ T4441] ? ieee80211_tx_h_select_key+0x1710/0x1710 [ 187.898779][ C1] tcp_in_window: [ 187.904169][ T4441] ? ieee80211_queue_skb+0xbd/0x20e0 [ 187.904201][ T4441] invoke_tx_handlers_late+0xae/0x1720 [ 187.908267][ C1] seq=1357106688 ack=3818386374+(0) sack=3818386374+(0) win=24559 end=1357106688 [ 187.913575][ T4441] ? ieee80211_tx_h_select_key+0x11fb/0x1710 [ 187.913610][ T4441] ? invoke_tx_handlers_early+0xa26/0x1ca0 [ 187.919256][ C1] tcp_in_window: sender end=1357106688 maxend=1359926528 maxwin=3143552 scale=7 receiver end=3818386374 maxend=3821529925 maxwin=2819840 scale=7 [ 187.925252][ T4441] ieee80211_tx+0x2d4/0x460 [ 187.928906][ C1] tcp_in_window: [ 187.934198][ T4441] ? ieee80211_skb_resize+0x610/0x610 [ 187.934287][ T4441] ? ieee80211_xmit+0x309/0x420 [ 187.939675][ C1] seq=1357106688 ack=3818386374+(0) sack=3818386374+(0) win=24559 end=1357106688 [ 187.948793][ T4441] __ieee80211_tx_skb_tid_band+0x165/0x200 [ 187.954849][ C1] tcp_in_window: sender end=1357106688 maxend=1359926528 maxwin=3143552 scale=7 receiver end=3818386374 maxend=3821529925 maxwin=2819840 scale=7 [ 187.960600][ T4441] ieee80211_scan_state_send_probe+0x556/0x8e0 [ 187.975335][ C1] tcp_in_window: I=1 II=1 III=1 IV=1 [ 187.979833][ T4441] ieee80211_scan_work+0x41f/0x1aa0 [ 187.983471][ C1] tcp_in_window: res=1 sender end=1357106688 maxend=1359926528 maxwin=3143552 receiver end=3818386374 maxend=3821529926 maxwin=2819840 [ 187.988789][ T4441] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 187.993728][ C1] tcp_conntracks: [ 188.002782][ T4441] ? _raw_spin_unlock_irq+0x1f/0x40 [ 188.002824][ T4441] process_one_work+0x867/0xff0 [ 188.008614][ C1] syn=0 ack=1 fin=0 rst=0 old=4 new=5 [ 188.023304][ T4441] ? worker_detach_from_pool+0x240/0x240 [ 188.029726][ C1] No more buffers in queue [ 188.034776][ T4441] ? lockdep_hardirqs_off+0x70/0x100 [ 188.034807][ T4441] ? _raw_spin_lock_irq+0xb7/0xf0 [ 188.034830][ T4441] ? _raw_spin_lock_irqsave+0x100/0x100 [ 188.034854][ T4441] ? wq_worker_running+0x97/0x170 [ 188.034876][ T4441] worker_thread+0xad7/0x12a0 [ 188.040343][ C1] eth0: xmit ffff88805e7ac500 42:01:0a:80:00:01 [ 188.054146][ T4441] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 188.054176][ T4441] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 188.060209][ C1] Added buffer head 1 to ffff888147e96b00 [ 188.060282][ C1] virtqueue callback for ffff888147e96b00 (ffffffff85491b70) [ 188.063932][ T4441] kthread+0x42e/0x520 [ 188.073991][ T4441] ? rcu_lock_release+0x20/0x20 [ 188.074016][ T4441] ? kthread_blkcg+0xd0/0xd0 [ 188.080289][ C1] Sent skb ffff88805e7ac500 [ 188.085028][ T4441] ret_from_fork+0x1f/0x30 [ 188.085108][ T4441] [ 188.089506][ C1] No more buffers in queue [ 188.095000][ T4441] Kernel Offset: disabled [ 188.180429][ T4441] Rebooting in 86400 seconds..