last executing test programs: 11.229212313s ago: executing program 1 (id=735): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000072000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f0000000000)="9b352e98d1dc0621a18bc4c5a6c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f00000001c0)=0x7f, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 10.137607561s ago: executing program 1 (id=738): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setresuid(0x0, 0xee00, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x0, 0x4, 0x9ee, 0x7ac, 0x6, 0x8, 0x100, 0xfffffffffffffffd, 0x100fff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x800000, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x7) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') 10.130506601s ago: executing program 2 (id=739): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'team_slave_0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x410cd}, 0x400c084) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000400", @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32], 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 9.253309182s ago: executing program 2 (id=741): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, 0x0, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a94000000060a0b0400000000000000000200000068000480540001800a0001006d617463680000004400028008000240000000002c000300ebae551382395afa4d23edfcbe6d55b57cb15e63c15946395916e2b388abc3d6ce2316334e8278ad0a0001006c696d6974000000100001800b00010064796e73657400000900010073797a30000000000900020073797a32"], 0xbc}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 9.214352903s ago: executing program 1 (id=742): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_usb_connect(0x2, 0x239, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_int(r3, &(0x7f0000000540), 0xfffffdd8) 7.798504792s ago: executing program 2 (id=745): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0xee4, 0x30, 0xb, 0x0, 0x0, {}, [{0xed0, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe84, 0x2, 0x0, 0x0, {{0xa}, {0xe58, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x80, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x80003}, {0x3, 0x3, 0x80, 0x0, 0xacc4, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x7, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x3, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff419, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0xf, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6b0, 0x2, 0x100, 0x4, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0xe9, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x9}, {0x7f, 0x4, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0x7, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0xc, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0x1aca}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d4, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92c4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8b, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x34, 0x5, 0x0, 0x1, [{0x4}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xee4}}, 0x0) 6.334923112s ago: executing program 2 (id=750): syz_emit_ethernet(0x36, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f00"], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xf) r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0xcc, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x5e}, @void, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x4}, @NL80211_ATTR_VENDOR_DATA={0xa9, 0xc5, "a40818f8049f9d817425ca6b90d0e9667ac79daa91b50ec1ae5596485281859dae6cca5277775f6a769eba52ae0515b5e7d738c519b33ba478db52af8a8b494714e95e75d7f5b63a2d9d74c638452fca5512335aecbd8a1116f3a90edfc5c99fdc64319fd76315c48e377c20e998d2bede40ec9b67da86dc41feca0c1dbc6f10250e7b26718d05bc4c8214e232e0c942478765e576fb8f0aa4a162ec7de0d635270dd8dc6d"}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x20040010) mount$tmpfs(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000080), 0x140010, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e751d"], 0x24) clock_getres(0x3, 0x0) 5.857882838s ago: executing program 3 (id=752): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setresuid(0x0, 0xee00, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x0, 0x4, 0x9ee, 0x7ac, 0x6, 0x8, 0x100, 0xfffffffffffffffd, 0x100fff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x800000, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x7) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') 5.856713398s ago: executing program 0 (id=753): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) sendmmsg(r0, &(0x7f0000020800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4c840) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2c2e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x70, 0x1, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0xff7f, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x1, 0x2}}}}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000004c40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=[@rights={{0x14, 0x1, 0x1, [r4]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x30, 0x40800}}], 0x2, 0x44000) ioctl$EVIOCSKEYCODE_V2(r3, 0x80104592, 0x0) 5.850100759s ago: executing program 1 (id=754): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x450, &(0x7f0000001080)=ANY=[@ANYBLOB="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", @ANYRES64], 0x2, 0x5582, &(0x7f0000004700)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x40060) wait4(r0, 0x0, 0x2, 0x0) ptrace$cont(0x9, r0, 0xba, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) 5.745970002s ago: executing program 3 (id=755): socket(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) userfaultfd(0x80001) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 5.628360076s ago: executing program 3 (id=756): syz_open_dev$vim2m(0x0, 0x8, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$sndpcmc(0x0, 0xb, 0x6a980) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000000)=0x5) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000000)=""/149, &(0x7f00000000c0)=0x210) 5.016770497s ago: executing program 0 (id=757): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = getpid() sendmsg$key(0xffffffffffffffff, 0x0, 0x80) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r4, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x0, 0x1, 0xc1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20044090}, 0x0) 4.95701519s ago: executing program 1 (id=758): r0 = socket$inet(0xa, 0x801, 0x84) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0xfffffffd) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0xfffffffd) listen(r0, 0x8) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x1) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 4.496882175s ago: executing program 3 (id=759): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @dev={0xac, 0x14, 0x14, 0xf}}]}}]}, 0x3c}}, 0x2) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f0000000640)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r6, 0x40}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)='\'', 0x1}], 0x1}, 0x4041) 4.036351771s ago: executing program 2 (id=760): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f0000000180)={[{@errors_continue}, {@jqfmt_vfsv0}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@max_batch_time={'max_batch_time', 0x3d, 0x9}}]}, 0x2, 0x574, &(0x7f0000000600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8a141, 0x91) r1 = syz_open_dev$sndctrl(&(0x7f0000001000), 0x0, 0x8000) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000000)={{0x8, 0x2, 0x0, 0x43, '\x00', 0x1ed}, 0x0, [0x8, 0x0, 0x8, 0x7fffffffffffffff, 0x6, 0x8000000000000000, 0x0, 0x10001, 0xf, 0x8, 0x2a, 0x8, 0x6, 0x8, 0x9, 0x0, 0x1, 0xfffffffffffffff8, 0x7ad, 0x6, 0xf9bb, 0x9ae, 0x7, 0xcb9, 0xfffffffffffffffa, 0x4, 0xc, 0x9, 0x2, 0x2, 0x5, 0xfffffffffffffffb, 0x1, 0x3ff, 0x8, 0x1, 0x0, 0xbff2, 0x7f75, 0x1, 0x7, 0x6, 0x0, 0x1, 0x310, 0x8, 0x9, 0x100000001, 0x40, 0xb20, 0x6, 0xfff, 0x8, 0x4, 0xa0b2, 0x1, 0xfffffffffffffffb, 0x800, 0xfffffffffffff000, 0xffffffffffffff07, 0xe3, 0x5, 0x7fff, 0xffffffffffffff81, 0x5, 0x4, 0x9, 0x2, 0x7, 0x7, 0x6, 0x9, 0x4, 0x0, 0x100, 0xffffffffffffa435, 0x3, 0x48000000000000, 0xb4c, 0x3, 0x7168, 0x1, 0x3, 0x3, 0x4, 0xffffffffffffff80, 0x614a, 0xffffffffffffffac, 0x2, 0x6, 0x2, 0x4, 0x7, 0x10000, 0x5, 0x0, 0xe, 0x7fffffff, 0x1ff, 0x9, 0xfffffffffffffffb, 0xcb, 0x4, 0x0, 0x2, 0x9, 0x8, 0xe, 0x401, 0x70, 0x401, 0x4abbbae1, 0x2, 0x8000000000000001, 0x3c7, 0x4, 0x100, 0x14, 0x6, 0x7, 0x200, 0xe, 0x6, 0x6, 0x0, 0x0, 0x3, 0x375]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0xc0105500, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) pwrite64(r0, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) 3.973499723s ago: executing program 0 (id=761): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, 0x0, 0xb) splice(r4, 0x0, r2, 0x0, 0x1000, 0x0) splice(r1, 0x0, r5, 0x0, 0x80, 0x0) 3.089921164s ago: executing program 3 (id=762): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001340)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x8004, {0x0, 0x0, 0x0, r9, {}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x24040812) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) 2.402486337s ago: executing program 0 (id=763): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008"], 0x50) 2.400806757s ago: executing program 1 (id=764): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x101, 0x2, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0xfffffffffffffffe, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000280)={{0x1, 0x5000, 0xc, 0x9, 0x4, 0xa, 0x3, 0xa, 0x0, 0x1, 0xc, 0x3}, {0x2, 0x80a0000, 0xe, 0x13, 0x1, 0x8, 0x3, 0x7, 0x0, 0x46, 0x2}, {0x54000, 0xb000, 0x4, 0xb, 0x5, 0x3, 0xc3, 0x6, 0x3, 0x6, 0x5}, {0xeeef0000, 0x0, 0x1a, 0x1, 0x7f, 0x6, 0x8, 0x7f, 0x9, 0x2, 0x1, 0x6}, {0x1, 0x3000, 0x0, 0xd, 0x59, 0x29, 0x5, 0xc, 0xfc, 0x0, 0xf8, 0xe5}, {0x3000, 0x8092000, 0x8, 0xbd, 0x6, 0x10, 0x10, 0x1, 0xbf, 0x18, 0x2, 0x4}, {0x8000000, 0x800f000, 0xc, 0x9, 0x6, 0xf, 0x10, 0x3, 0x8, 0x0, 0x2, 0x8}, {0xdddd0000, 0xffff, 0x10, 0x4, 0xb8, 0x3, 0x0, 0xf9, 0x1, 0x8, 0x0, 0xfe}, {0x1, 0xedd8}, {0xffff1000, 0x17}, 0x40019, 0x0, 0x2, 0x0, 0x100000000, 0x100, 0x58000, [0x5, 0x4, 0x4, 0x7]}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000440)={[0x60000000007, 0x1000000000, 0x2, 0x401, 0x2000001, 0x0, 0x2004cb, 0x9ffffffffffffffc, 0xffff, 0x60f, 0x599, 0x3, 0x7fffffffffffffff, 0xfffffffffffffffe, 0x0, 0xfffffffffffffefc], 0x1, 0x21044}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.115803831s ago: executing program 32 (id=764): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x101, 0x2, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0xfffffffffffffffe, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000280)={{0x1, 0x5000, 0xc, 0x9, 0x4, 0xa, 0x3, 0xa, 0x0, 0x1, 0xc, 0x3}, {0x2, 0x80a0000, 0xe, 0x13, 0x1, 0x8, 0x3, 0x7, 0x0, 0x46, 0x2}, {0x54000, 0xb000, 0x4, 0xb, 0x5, 0x3, 0xc3, 0x6, 0x3, 0x6, 0x5}, {0xeeef0000, 0x0, 0x1a, 0x1, 0x7f, 0x6, 0x8, 0x7f, 0x9, 0x2, 0x1, 0x6}, {0x1, 0x3000, 0x0, 0xd, 0x59, 0x29, 0x5, 0xc, 0xfc, 0x0, 0xf8, 0xe5}, {0x3000, 0x8092000, 0x8, 0xbd, 0x6, 0x10, 0x10, 0x1, 0xbf, 0x18, 0x2, 0x4}, {0x8000000, 0x800f000, 0xc, 0x9, 0x6, 0xf, 0x10, 0x3, 0x8, 0x0, 0x2, 0x8}, {0xdddd0000, 0xffff, 0x10, 0x4, 0xb8, 0x3, 0x0, 0xf9, 0x1, 0x8, 0x0, 0xfe}, {0x1, 0xedd8}, {0xffff1000, 0x17}, 0x40019, 0x0, 0x2, 0x0, 0x100000000, 0x100, 0x58000, [0x5, 0x4, 0x4, 0x7]}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000440)={[0x60000000007, 0x1000000000, 0x2, 0x401, 0x2000001, 0x0, 0x2004cb, 0x9ffffffffffffffc, 0xffff, 0x60f, 0x599, 0x3, 0x7fffffffffffffff, 0xfffffffffffffffe, 0x0, 0xfffffffffffffefc], 0x1, 0x21044}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.111135552s ago: executing program 0 (id=766): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20008054, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={0x0}, 0x1, 0x0, 0x0, 0x8001}, 0xc804) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000001140)=[@in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e21, @multicast1}]}, &(0x7f0000000180)=0x10) 1.106270412s ago: executing program 2 (id=767): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x20000000) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102392, 0x18ff8) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000000)={'hsr0\x00'}) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/rcu_expedited', 0x169282, 0x0) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) 1.097859252s ago: executing program 3 (id=768): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x3d, &(0x7f0000000580)={&(0x7f0000000380)={0x1c, r8, 0xd, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x48040) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38010000", @ANYRES16=r2, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r1, @ANYBLOB="dc007d80d5000100dcf5f731b912404e4b55c30d39eef23d90c56e4a81cc7c633776cdc31925cc1d34d83f71148fdf88af149820717a2b46a70a035c9509af079e7ef2df6411628f9e94db485324c496a622515e16c406c3a1ff11dbaefa947a395568655369fc04da325d309db994ee8843c8ecb6dff5dac7fc0c01546db9cc970e8a05e2231504ce25181d3923dd4dce261f692e051d6d80843581fccc33f356a082cb6a0764f96cfb63c553a5f0ce9fb73f1c2964161d155b9c60a51cb30855273cfab1e5f9c2ebe0a1b51581f0c0a2"], 0x138}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 0s ago: executing program 0 (id=769): socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000900)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000540)={0x0, 0x3}, 0x0, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x4aa, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.99' (ED25519) to the list of known hosts. [ 63.843931][ T5752] cgroup: Unknown subsys name 'net' [ 63.979758][ T5752] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.308265][ T5752] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.675179][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.688450][ T5768] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.697872][ T5768] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.707616][ T5768] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.715742][ T5768] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.723159][ T5768] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.731829][ T5765] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.740448][ T5765] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.752266][ T5085] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.762081][ T5085] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.771603][ T5765] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 66.778042][ T5085] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.786995][ T5085] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.793487][ T5765] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.801945][ T5765] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.811439][ T5085] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.830879][ T5085] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.839797][ T5085] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.884385][ T5768] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.896291][ T5768] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.903901][ T5768] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.914697][ T5768] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.922552][ T5768] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 66.930955][ T5768] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.086699][ T5763] chnl_net:caif_netlink_parms(): no params data found [ 67.253526][ T5763] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.260659][ T5763] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.268470][ T5763] bridge_slave_0: entered allmulticast mode [ 67.275432][ T5763] bridge_slave_0: entered promiscuous mode [ 67.283109][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 67.305193][ T5763] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.312321][ T5763] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.319773][ T5763] bridge_slave_1: entered allmulticast mode [ 67.327277][ T5763] bridge_slave_1: entered promiscuous mode [ 67.389023][ T5763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.400804][ T5763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.476593][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 67.499096][ T5763] team0: Port device team_slave_0 added [ 67.511617][ T5763] team0: Port device team_slave_1 added [ 67.551437][ T5766] chnl_net:caif_netlink_parms(): no params data found [ 67.571211][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.578978][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.586576][ T5767] bridge_slave_0: entered allmulticast mode [ 67.593458][ T5767] bridge_slave_0: entered promiscuous mode [ 67.609256][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.616665][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.624194][ T5767] bridge_slave_1: entered allmulticast mode [ 67.630805][ T5767] bridge_slave_1: entered promiscuous mode [ 67.651557][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.658625][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.684659][ T5763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.701620][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.708647][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.734580][ T5763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.793307][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.805273][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.828407][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.835641][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.842719][ T5772] bridge_slave_0: entered allmulticast mode [ 67.849611][ T5772] bridge_slave_0: entered promiscuous mode [ 67.876167][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.885484][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.892698][ T5772] bridge_slave_1: entered allmulticast mode [ 67.899397][ T5772] bridge_slave_1: entered promiscuous mode [ 67.928272][ T5767] team0: Port device team_slave_0 added [ 67.964720][ T5767] team0: Port device team_slave_1 added [ 67.989989][ T5763] hsr_slave_0: entered promiscuous mode [ 67.997082][ T5763] hsr_slave_1: entered promiscuous mode [ 68.006171][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.025067][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.032274][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.039756][ T5766] bridge_slave_0: entered allmulticast mode [ 68.046541][ T5766] bridge_slave_0: entered promiscuous mode [ 68.054831][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.061927][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.069591][ T5766] bridge_slave_1: entered allmulticast mode [ 68.076342][ T5766] bridge_slave_1: entered promiscuous mode [ 68.093386][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.112158][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.119234][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.145487][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.157657][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.165125][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.191089][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.231630][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.268531][ T5772] team0: Port device team_slave_0 added [ 68.281863][ T5772] team0: Port device team_slave_1 added [ 68.296742][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.316817][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.323979][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.350234][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.388846][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.398063][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.425471][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.439913][ T5767] hsr_slave_0: entered promiscuous mode [ 68.446831][ T5767] hsr_slave_1: entered promiscuous mode [ 68.452862][ T5767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.460968][ T5767] Cannot create hsr debugfs directory [ 68.494748][ T5766] team0: Port device team_slave_0 added [ 68.514340][ T5766] team0: Port device team_slave_1 added [ 68.595829][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.602795][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.631415][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.668239][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.675267][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.701742][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.731778][ T5772] hsr_slave_0: entered promiscuous mode [ 68.738571][ T5772] hsr_slave_1: entered promiscuous mode [ 68.752531][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.760297][ T5772] Cannot create hsr debugfs directory [ 68.807652][ T5768] Bluetooth: hci0: command tx timeout [ 68.867453][ T5766] hsr_slave_0: entered promiscuous mode [ 68.874283][ T5766] hsr_slave_1: entered promiscuous mode [ 68.880279][ T5766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.888441][ T5085] Bluetooth: hci1: command tx timeout [ 68.894558][ T5768] Bluetooth: hci2: command tx timeout [ 68.900160][ T5766] Cannot create hsr debugfs directory [ 68.963372][ T5085] Bluetooth: hci3: command tx timeout [ 69.053693][ T5763] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.072935][ T5763] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.084154][ T5763] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.099624][ T5763] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.193322][ T5772] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.216976][ T5772] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.226375][ T5772] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.237526][ T5772] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.301821][ T5767] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.331635][ T5767] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.360167][ T5767] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.392494][ T5767] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.414348][ T5766] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.425707][ T5766] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.456629][ T5766] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.470034][ T5766] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.561766][ T5763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.590719][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.632267][ T5763] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.649669][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.665884][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.675736][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.683040][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.694401][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.701499][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.727911][ T4511] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.735026][ T4511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.754080][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.761221][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.791660][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.835459][ T3540] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.842554][ T3540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.866369][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.887426][ T4511] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.894585][ T4511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.954851][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.986547][ T3540] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.993749][ T3540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.022702][ T3540] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.029922][ T3540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.108372][ T5766] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.295214][ T5763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.407815][ T5763] veth0_vlan: entered promiscuous mode [ 70.427278][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.462057][ T5763] veth1_vlan: entered promiscuous mode [ 70.556680][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.586311][ T5772] veth0_vlan: entered promiscuous mode [ 70.600527][ T5772] veth1_vlan: entered promiscuous mode [ 70.611011][ T5763] veth0_macvtap: entered promiscuous mode [ 70.632261][ T5763] veth1_macvtap: entered promiscuous mode [ 70.664234][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.697085][ T5772] veth0_macvtap: entered promiscuous mode [ 70.725911][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.738423][ T5766] veth0_vlan: entered promiscuous mode [ 70.749683][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.765123][ T5772] veth1_macvtap: entered promiscuous mode [ 70.779433][ T5763] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.790021][ T5763] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.800277][ T5763] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.809829][ T5763] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.834091][ T5766] veth1_vlan: entered promiscuous mode [ 70.871132][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.888160][ T5085] Bluetooth: hci0: command tx timeout [ 70.894303][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.906382][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.928095][ T5767] veth0_vlan: entered promiscuous mode [ 70.934845][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.945990][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.958382][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.966291][ T5085] Bluetooth: hci1: command tx timeout [ 70.975166][ T5085] Bluetooth: hci2: command tx timeout [ 71.005704][ T5772] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.021344][ T5772] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.031420][ T5772] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.040440][ T5772] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.049554][ T5085] Bluetooth: hci3: command tx timeout [ 71.061402][ T5766] veth0_macvtap: entered promiscuous mode [ 71.070597][ T5766] veth1_macvtap: entered promiscuous mode [ 71.101234][ T5767] veth1_vlan: entered promiscuous mode [ 71.150196][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.161309][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.171523][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.183738][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.195099][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.207761][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.218934][ T3440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.223978][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.228872][ T3440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.241444][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.255996][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.267214][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.299123][ T5766] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.308058][ T5766] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.317414][ T5766] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.326307][ T5766] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.389538][ T5767] veth0_macvtap: entered promiscuous mode [ 71.401475][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.412102][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.417402][ T1134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.441735][ T1134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.451254][ T5767] veth1_macvtap: entered promiscuous mode [ 71.530964][ T3540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.532545][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.541617][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.546036][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.564697][ T3540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.575972][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.586712][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.597982][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.608549][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.619227][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.633848][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.676085][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.697767][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.709723][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.727467][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.740020][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.752924][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.770380][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.801109][ T5767] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.801193][ T5827] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 71.835043][ T5767] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.873291][ T5767] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.882040][ T5767] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.901772][ T3540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.912897][ T3540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.171318][ T4511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.180629][ T4511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.807788][ T3440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.847548][ T3440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.983362][ T5085] Bluetooth: hci0: command tx timeout [ 73.005733][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.044023][ T5085] Bluetooth: hci2: command tx timeout [ 73.044851][ T5768] Bluetooth: hci1: command tx timeout [ 73.056638][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.158299][ T5768] Bluetooth: hci3: command tx timeout [ 73.367291][ T5840] syz.3.6[5840]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 73.877385][ T5840] loop3: detected capacity change from 0 to 256 [ 73.982808][ T5840] ======================================================= [ 73.982808][ T5840] WARNING: The mand mount option has been deprecated and [ 73.982808][ T5840] and is ignored by this kernel. Remove the mand [ 73.982808][ T5840] option from the mount to silence this warning. [ 73.982808][ T5840] ======================================================= [ 74.027243][ T5840] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 74.040291][ T5840] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 74.055239][ T5840] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 74.610633][ T5859] netlink: 'syz.3.11': attribute type 1 has an invalid length. [ 74.663941][ T5859] bridge0: port 3(ip6gretap1) entered blocking state [ 74.672878][ T5859] bridge0: port 3(ip6gretap1) entered disabled state [ 74.684608][ T5859] ip6gretap1: entered allmulticast mode [ 74.691647][ T5859] ip6gretap1: entered promiscuous mode [ 75.053537][ T5768] Bluetooth: hci0: command tx timeout [ 75.236241][ T5085] Bluetooth: hci1: command tx timeout [ 75.241710][ T5085] Bluetooth: hci3: command tx timeout [ 75.247311][ T5768] Bluetooth: hci2: command tx timeout [ 76.535598][ T5883] binder_alloc: 5882: binder_alloc_buf, no vma [ 76.663413][ T5887] loop3: detected capacity change from 0 to 764 [ 76.747577][ T5758] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 76.773543][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 76.863557][ T5891] netlink: 44 bytes leftover after parsing attributes in process `syz.1.24'. [ 76.882638][ T5891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24'. [ 76.894195][ T5891] netlink: 16 bytes leftover after parsing attributes in process `syz.1.24'. [ 76.969502][ T23] usb 3-1: config 1 interface 0 has no altsetting 0 [ 76.993847][ T28] audit: type=1804 audit(1774716794.030:2): pid=5896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.25" name="file0" dev="ramfs" ino=8242 res=1 errno=0 [ 77.053750][ T23] usb 3-1: string descriptor 0 read error: -22 [ 77.062108][ T23] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.40 [ 77.085882][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.118969][ T5898] netlink: 24 bytes leftover after parsing attributes in process `syz.1.26'. [ 77.863801][ T23] usbhid 3-1:1.0: can't add hid device: -71 [ 77.883413][ T23] usbhid: probe of 3-1:1.0 failed with error -71 [ 77.973470][ T23] usb 3-1: USB disconnect, device number 2 [ 80.598305][ T5945] netlink: 'syz.0.40': attribute type 1 has an invalid length. [ 81.187596][ T5949] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 81.397137][ T28] audit: type=1326 audit(1774716798.440:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5956 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5f2b9c819 code=0x7ffc0000 [ 83.068570][ T5958] loop0: detected capacity change from 0 to 256 [ 83.074719][ T9] cfg80211: failed to load regulatory.db [ 83.117136][ T28] audit: type=1326 audit(1774716798.470:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5956 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5f2b9c819 code=0x7ffc0000 [ 83.212516][ T28] audit: type=1326 audit(1774716798.470:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5956 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5f2b9c819 code=0x7ffc0000 [ 83.263417][ T28] audit: type=1326 audit(1774716798.470:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5956 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff5f2b9c819 code=0x7ffc0000 [ 83.347600][ T28] audit: type=1326 audit(1774716798.470:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5956 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff5f2b9c582 code=0x7ffc0000 [ 83.407218][ T28] audit: type=1326 audit(1774716798.470:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5956 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff5f2b5d04e code=0x7ffc0000 [ 83.430257][ T28] audit: type=1326 audit(1774716798.470:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5956 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff5f2b9c647 code=0x7ffc0000 [ 83.454018][ T28] audit: type=1326 audit(1774716798.470:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5956 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff5f2b5d04e code=0x7ffc0000 [ 83.520260][ T28] audit: type=1326 audit(1774716798.470:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5956 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff5f2b9c4ab code=0x7ffc0000 [ 83.552877][ T28] audit: type=1326 audit(1774716800.150:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5956 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff5f2b5d04e code=0x7ffc0000 [ 83.612964][ T28] audit: type=1326 audit(1774716800.150:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5956 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff5f2b5d04e code=0x7ffc0000 [ 84.780087][ T5974] loop3: detected capacity change from 0 to 8 [ 84.855408][ T5974] Bluetooth: MGMT ver 1.22 [ 84.865738][ T5974] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 85.918832][ T5981] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.927629][ T5981] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.118627][ T5990] process 'syz.1.55' launched '/dev/fd/5' with NULL argv: empty string added [ 86.653633][ T5981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.766870][ T5981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.069190][ T5981] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.090879][ T5981] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.100064][ T5981] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.109014][ T5981] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.343693][ T5993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.54'. [ 88.516920][ T6011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.59'. [ 91.113785][ T6037] loop2: detected capacity change from 0 to 512 [ 91.875685][ T6037] EXT4-fs (loop2): Test dummy encryption mode enabled [ 91.882503][ T6037] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 91.922996][ T6037] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 91.930607][ T6050] Zero length message leads to an empty skb [ 91.945449][ T6037] EXT4-fs (loop2): 1 truncate cleaned up [ 91.964316][ T6037] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.002208][ T6050] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaa [ 92.329267][ T6037] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 93.147054][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.093650][ T6110] loop2: detected capacity change from 0 to 764 [ 97.138389][ T6110] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 97.146273][ T6108] netlink: 'syz.1.86': attribute type 39 has an invalid length. [ 97.159710][ T6112] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.257242][ T6110] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 97.277911][ T6113] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 97.533756][ T6119] loop3: detected capacity change from 0 to 1024 [ 97.574711][ T6119] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.831642][ T6115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.89'. [ 100.310216][ T6130] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4059: comm syz.3.90: Allocating blocks 497-513 which overlap fs metadata [ 100.329554][ T6141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.95'. [ 100.391477][ T6130] EXT4-fs (loop3): pa ffff888079fa2740: logic 131104, phys. 177, len 21 [ 100.400362][ T6130] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5393: group 0, free 0, pa_free 1 [ 100.633151][ T6133] loop2: detected capacity change from 0 to 32768 [ 100.657781][ T6133] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.93 (6133) [ 100.756678][ T6133] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 100.792441][ T6133] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 100.819185][ T6133] BTRFS info (device loop2): setting nodatasum [ 100.838129][ T6133] BTRFS info (device loop2): using free space tree [ 100.945796][ T6133] BTRFS info (device loop2): enabling ssd optimizations [ 100.952893][ T6133] BTRFS info (device loop2): auto enabling async discard [ 101.559014][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.598814][ T6158] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 101.727563][ T6158] File: /13/file0/bus PID: 6158 Comm: syz.2.93 [ 103.074388][ T5767] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 103.323315][ T6191] netlink: 24 bytes leftover after parsing attributes in process `syz.1.104'. [ 103.699220][ T6196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.104'. [ 108.318435][ T6254] syz.1.119 uses obsolete (PF_INET,SOCK_PACKET) [ 109.237303][ T6278] bond1: entered allmulticast mode [ 109.274076][ T6278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.126'. [ 109.296074][ T6278] bridge1: entered allmulticast mode [ 109.301859][ T6278] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 109.339840][ T6278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.126'. [ 109.377057][ T6278] bridge2: entered allmulticast mode [ 109.386159][ T6278] bond1: (slave bridge2): Enslaving as an active interface with a down link [ 109.610821][ T6287] loop0: detected capacity change from 0 to 1024 [ 109.787497][ T6291] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 109.818523][ C0] Illegal XDP return value 16128 on prog (id 19) dev veth0, expect packet loss! [ 109.900167][ T6292] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 110.277461][ T6302] fuse: Bad value for 'fd' [ 113.553137][ T6338] syzkaller0: entered promiscuous mode [ 113.560243][ T6338] syzkaller0: entered allmulticast mode [ 113.899885][ T6349] bond1: entered promiscuous mode [ 113.950485][ T6357] loop0: detected capacity change from 0 to 16 [ 113.961036][ T6353] ip6gretap1: entered promiscuous mode [ 113.968330][ T6353] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 114.000912][ T6357] erofs: (device loop0): mounted with root inode @ nid 36. [ 114.090168][ T6361] bond_slave_1: entered promiscuous mode [ 114.109003][ T6361] bond_slave_1: left promiscuous mode [ 114.142288][ T6349] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 114.163687][ T6349] ip6gretap1: left promiscuous mode [ 114.182884][ T6349] bond1 (unregistering): Released all slaves [ 115.186989][ T6373] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 115.402548][ T5825] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 116.328336][ T5825] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 116.339748][ T5825] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.351924][ T5825] usb 3-1: config 0 descriptor?? [ 116.389041][ T5825] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 118.112987][ T5825] usb 3-1: USB disconnect, device number 3 [ 120.180076][ T6429] capability: warning: `syz.3.173' uses deprecated v2 capabilities in a way that may be insecure [ 121.300948][ T28] kauditd_printk_skb: 70 callbacks suppressed [ 121.300960][ T28] audit: type=1326 audit(1774716838.347:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6438 comm="syz.0.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5f2b9c819 code=0x7ffc0000 [ 121.404330][ T28] audit: type=1326 audit(1774716838.367:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6438 comm="syz.0.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5f2b9c819 code=0x7ffc0000 [ 121.788496][ T28] audit: type=1326 audit(1774716838.367:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6438 comm="syz.0.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5f2b9c819 code=0x7ffc0000 [ 122.017984][ T28] audit: type=1326 audit(1774716838.367:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6438 comm="syz.0.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5f2b9c819 code=0x7ffc0000 [ 122.042453][ T28] audit: type=1326 audit(1774716838.367:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6438 comm="syz.0.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff5f2b5d04e code=0x7ffc0000 [ 122.066695][ T28] audit: type=1326 audit(1774716838.367:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6438 comm="syz.0.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5f2b9c819 code=0x7ffc0000 [ 122.095273][ T28] audit: type=1326 audit(1774716838.367:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6438 comm="syz.0.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5f2b9c819 code=0x7ffc0000 [ 122.142300][ T28] audit: type=1326 audit(1774716838.367:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6438 comm="syz.0.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5f2b9c819 code=0x7ffc0000 [ 122.165007][ T28] audit: type=1326 audit(1774716838.377:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6438 comm="syz.0.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7ff5f2b9c819 code=0x7ffc0000 [ 122.187206][ T28] audit: type=1326 audit(1774716838.377:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6438 comm="syz.0.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5f2b9c819 code=0x7ffc0000 [ 123.044265][ T6460] xt_socket: unknown flags 0x50 [ 123.230279][ T6464] netlink: 'syz.0.183': attribute type 1 has an invalid length. [ 123.286809][ T6464] bond2: (slave gretap1): making interface the new active one [ 123.411272][ T6464] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 123.536842][ T6464] vlan2: entered allmulticast mode [ 123.542048][ T6464] bond2: entered allmulticast mode [ 123.547653][ T6464] gretap1: entered allmulticast mode [ 123.556623][ T6464] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 129.696261][ T6543] loop2: detected capacity change from 0 to 128 [ 129.747746][ T6543] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 129.766506][ T6543] ext4 filesystem being mounted at /37/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 130.742612][ T5767] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.854844][ T6587] loop1: detected capacity change from 0 to 1024 [ 132.862166][ T6587] EXT4-fs: Ignoring removed bh option [ 132.867658][ T6587] EXT4-fs: Ignoring removed oldalloc option [ 132.873629][ T6587] EXT4-fs: Ignoring removed nomblk_io_submit option [ 132.950277][ T6587] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 134.719607][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.737065][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.870290][ T6587] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 134.878971][ T6587] System zones: 0-1, 3-36 [ 134.932173][ T6587] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.633194][ C1] sched: RT throttling activated [ 136.799451][ T5763] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.904728][ T6611] UBIFS error (pid: 6611): cannot open "ubifs", error -22 [ 137.400459][ T6616] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 138.019543][ T28] kauditd_printk_skb: 53 callbacks suppressed [ 138.019557][ T28] audit: type=1804 audit(1774716855.067:147): pid=6614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.228" name="/newroot/60/file0" dev="fuse" ino=1 res=1 errno=0 [ 139.717774][ T6649] tipc: Started in network mode [ 139.722992][ T6649] tipc: Node identity b6a5a4e00792, cluster identity 4711 [ 139.732017][ T6649] tipc: Enabled bearer , priority 0 [ 140.403121][ T6649] syzkaller0: entered promiscuous mode [ 140.436634][ T6649] syzkaller0: entered allmulticast mode [ 140.447270][ T6649] tipc: Resetting bearer [ 140.665713][ T6654] loop1: detected capacity change from 0 to 2048 [ 140.693713][ T6648] tipc: Resetting bearer [ 140.752683][ T6655] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 141.882833][ T6665] netlink: 'syz.0.243': attribute type 11 has an invalid length. [ 145.394631][ T6648] tipc: Disabling bearer [ 145.405723][ T6658] debugfs: Directory 'netdev:nicvf0' with parent 'phy3' already present! [ 145.420377][ T9] tipc: Node number set to 2973213920 [ 145.512841][ T6678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.246'. [ 145.596596][ T6678] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.137915][ T6700] netlink: 'syz.0.253': attribute type 11 has an invalid length. [ 148.823613][ T6695] Cannot find add_set index 0 as target [ 149.110037][ T6721] netlink: 'syz.3.260': attribute type 1 has an invalid length. [ 149.247556][ T6721] 8021q: adding VLAN 0 to HW filter on device bond1 [ 149.259038][ T6728] vlan2: entered allmulticast mode [ 149.312287][ T6728] veth0_to_bond: entered allmulticast mode [ 149.347518][ T6728] bond1: (slave vlan2): Opening slave failed [ 149.424745][ T6725] bond1: (slave veth3): Enslaving as an active interface with a down link [ 149.457937][ T6732] netlink: 20 bytes leftover after parsing attributes in process `syz.0.262'. [ 149.587051][ T6738] netlink: zone id is out of range [ 149.634005][ T6738] netlink: zone id is out of range [ 149.644612][ T6738] netlink: zone id is out of range [ 149.656147][ T6738] netlink: zone id is out of range [ 149.667702][ T6738] netlink: zone id is out of range [ 149.679005][ T6738] netlink: zone id is out of range [ 149.690605][ T6738] netlink: zone id is out of range [ 149.698107][ T6738] netlink: zone id is out of range [ 149.703399][ T6738] netlink: zone id is out of range [ 149.708622][ T6738] netlink: zone id is out of range [ 150.006581][ T5768] Bluetooth: Wrong link type (-57) [ 151.734451][ T6771] netlink: 'syz.1.275': attribute type 4 has an invalid length. [ 151.744326][ T6771] netlink: 152 bytes leftover after parsing attributes in process `syz.1.275'. [ 151.792888][ T6771] .`: renamed from bond0 (while UP) [ 152.136401][ T6774] loop1: detected capacity change from 0 to 128 [ 152.185959][ T6774] FAT-fs (loop1): bogus number of FAT sectors [ 152.233820][ T6774] FAT-fs (loop1): Can't find a valid FAT filesystem [ 152.314506][ T6774] netlink: 20 bytes leftover after parsing attributes in process `syz.1.276'. [ 152.385114][ T6774] netlink: 16 bytes leftover after parsing attributes in process `syz.1.276'. [ 152.729325][ T6781] sd 0:0:1:0: PR command failed: 1026 [ 152.742214][ T6781] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 152.776752][ T6781] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 153.267569][ T28] audit: type=1326 audit(1774716870.317:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6794 comm="syz.2.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5799c819 code=0x7fc00000 [ 153.296612][ T28] audit: type=1326 audit(1774716870.337:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6794 comm="syz.2.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fca5799c819 code=0x7fc00000 [ 155.848654][ T28] audit: type=1800 audit(1774716872.417:150): pid=6836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.295" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 160.426860][ T5799] IPVS: starting estimator thread 0... [ 160.436615][ T6879] tipc: Failed to remove unknown binding: 66,0,0/0:1202749409/1202749411 [ 160.478200][ T6879] tipc: Failed to remove unknown binding: 66,0,0/0:1202749409/1202749410 [ 160.515016][ T6879] tipc: Failed to remove unknown binding: 66,0,0/0:1202749409/1202749411 [ 160.534035][ T6880] IPVS: using max 18 ests per chain, 43200 per kthread [ 160.544883][ T6879] tipc: Failed to remove unknown binding: 66,0,0/0:1202749409/1202749410 [ 162.100370][ T6903] xt_TPROXY: Can be used only with -p tcp or -p udp [ 165.941677][ T6931] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709 [ 166.100339][ T6940] netlink: 'syz.1.323': attribute type 9 has an invalid length. [ 166.276253][ T6944] netlink: 'syz.1.326': attribute type 1 has an invalid length. [ 166.328429][ T6944] bond0: entered promiscuous mode [ 166.335042][ T6944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.474694][ T6944] macvtap1: entered allmulticast mode [ 166.520004][ T6944] bond0: (slave bridge1): making interface the new active one [ 166.528842][ T6944] bridge1: entered promiscuous mode [ 167.794955][ T6944] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 168.088286][ T6957] loop2: detected capacity change from 0 to 40427 [ 168.141855][ T6957] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 168.149514][ T6957] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 168.183383][ T6957] F2FS-fs (loop2): Image doesn't support compression [ 168.190217][ T6957] F2FS-fs (loop2): Image doesn't support compression [ 168.197530][ T6957] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x216 [ 168.215890][ T6957] F2FS-fs (loop2): invalid crc value [ 168.552431][ T6957] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 168.559914][ T6957] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 169.535129][ T6968] fuse: Bad value for 'fd' [ 170.165800][ T6965] netlink: 132 bytes leftover after parsing attributes in process `syz.1.330'. [ 170.514549][ T6978] netlink: 12 bytes leftover after parsing attributes in process `syz.0.333'. [ 172.129733][ T7008] netlink: 'syz.3.343': attribute type 10 has an invalid length. [ 172.149221][ T7008] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 172.884539][ T5803] IPVS: starting estimator thread 0... [ 172.930143][ T7023] syzkaller0: entered promiscuous mode [ 172.936071][ T7023] syzkaller0: entered allmulticast mode [ 172.973593][ T7024] IPVS: using max 36 ests per chain, 86400 per kthread [ 175.328022][ T7048] syzkaller0: entered promiscuous mode [ 175.353466][ T7048] syzkaller0: entered allmulticast mode [ 175.557895][ T7055] syz_tun: entered allmulticast mode [ 175.607546][ T7053] syz_tun: left allmulticast mode [ 180.179781][ T7098] syz_tun: entered allmulticast mode [ 180.906526][ T7103] netlink: 'syz.0.370': attribute type 1 has an invalid length. [ 181.001646][ T7103] 8021q: adding VLAN 0 to HW filter on device bond3 [ 181.042146][ T7105] bond3: (slave veth0_to_bond): making interface the new active one [ 181.102138][ T7105] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 181.116340][ T7109] netlink: 24 bytes leftover after parsing attributes in process `syz.2.371'. [ 181.733756][ T5904] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 181.957745][ T5904] usb 3-1: unable to get BOS descriptor or descriptor too short [ 181.989452][ T5904] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 182.016744][ T5904] usb 3-1: can't read configurations, error -71 [ 182.208166][ T7136] netlink: 'syz.1.385': attribute type 1 has an invalid length. [ 182.271508][ T7136] 8021q: adding VLAN 0 to HW filter on device bond1 [ 182.306462][ T7140] bond1: (slave geneve2): making interface the new active one [ 182.327398][ T7140] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 182.383737][ T7140] syz.1.385 (7140) used greatest stack depth: 20072 bytes left [ 185.819501][ T7165] netlink: 'syz.0.386': attribute type 10 has an invalid length. [ 185.856261][ T7165] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 185.965724][ T7167] syzkaller0: entered promiscuous mode [ 185.971245][ T7167] syzkaller0: entered allmulticast mode [ 186.250879][ T7179] loop2: detected capacity change from 0 to 1024 [ 186.269338][ T7179] EXT4-fs: Ignoring removed bh option [ 186.293761][ T7179] EXT4-fs: Ignoring removed oldalloc option [ 186.303538][ T7179] EXT4-fs: Ignoring removed nobh option [ 186.327200][ T7179] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 186.399709][ T7179] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.049916][ T5803] IPVS: starting estimator thread 0... [ 187.173467][ T7199] IPVS: using max 21 ests per chain, 50400 per kthread [ 187.201109][ T7202] netlink: 24 bytes leftover after parsing attributes in process `syz.3.397'. [ 187.304190][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.973113][ T7209] syz_tun: entered allmulticast mode [ 189.472441][ T7235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.406'. [ 189.495120][ T7235] vlan2: entered promiscuous mode [ 189.500189][ T7235] .`: entered promiscuous mode [ 189.505193][ T7235] bond_slave_0: entered promiscuous mode [ 189.510972][ T7235] bond_slave_1: entered promiscuous mode [ 190.364235][ T5825] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 190.565454][ T5825] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.579539][ T5825] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 190.590328][ T5825] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 190.600026][ T5825] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 190.608325][ T5825] usb 3-1: SerialNumber: syz [ 190.710462][ T7257] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 190.873844][ T7242] loop2: detected capacity change from 0 to 1024 [ 190.920977][ T7242] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002] [ 190.942013][ T7242] System zones: 0-1, 3-36 [ 190.951385][ T7242] EXT4-fs error (device loop2): ext4_orphan_get:1424: comm syz.2.409: bad orphan inode 134217728 [ 190.989969][ T7242] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.109326][ T5825] usb 3-1: 0:2 : does not exist [ 191.262801][ T5825] usb 3-1: USB disconnect, device number 6 [ 191.438902][ T7231] Bluetooth: hci1: command 0x0406 tx timeout [ 191.452636][ T7231] Bluetooth: hci0: command 0x0406 tx timeout [ 191.459246][ T7231] Bluetooth: hci2: command 0x0406 tx timeout [ 191.469610][ T7231] Bluetooth: hci3: command 0x0406 tx timeout [ 191.909438][ T7128] udevd[7128]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 191.924595][ T7273] fuse: Bad value for 'fd' [ 193.893587][ T7286] overlayfs: failed to clone upperpath [ 193.899015][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.079216][ T7295] netlink: 12 bytes leftover after parsing attributes in process `syz.2.423'. [ 194.650339][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.659829][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.749247][ T7295] bridge1: port 1(erspan0) entered blocking state [ 194.758608][ T7295] bridge1: port 1(erspan0) entered disabled state [ 194.768001][ T7295] erspan0: entered allmulticast mode [ 194.779678][ T7295] erspan0: left allmulticast mode [ 195.709469][ T7308] netlink: 24 bytes leftover after parsing attributes in process `syz.0.428'. [ 196.570930][ T7322] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 196.855045][ T7331] netlink: 24 bytes leftover after parsing attributes in process `syz.1.422'. [ 197.701244][ T7334] syzkaller0: entered promiscuous mode [ 197.712488][ T7334] syzkaller0: entered allmulticast mode [ 197.752990][ T7337] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 199.422453][ T7354] loop1: detected capacity change from 0 to 2048 [ 199.891712][ T7354] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 199.902721][ T7354] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 199.943602][ T7354] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4 [ 199.958184][ T7354] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 206.441681][ T7383] netlink: 4 bytes leftover after parsing attributes in process `syz.3.450'. [ 207.743890][ T7400] netlink: 'syz.0.454': attribute type 1 has an invalid length. [ 207.906020][ T7400] 8021q: adding VLAN 0 to HW filter on device bond5 [ 207.928517][ T7406] overlayfs: failed to clone upperpath [ 207.980274][ T7404] macvlan2: entered promiscuous mode [ 208.056021][ T7404] macvlan2: entered allmulticast mode [ 208.126300][ T7404] bond5: entered promiscuous mode [ 208.131890][ T7404] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 208.163665][ T7411] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20004 [ 208.173995][ T7404] bond5: left promiscuous mode [ 208.246849][ T7400] bond5: (slave ip6gretap1): making interface the new active one [ 208.396465][ T7400] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 209.075989][ T7419] libceph: resolve '96.' (ret=-3): failed [ 209.122021][ T7422] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 211.138767][ T7457] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 211.182267][ T7457] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 211.204272][ T7455] syzkaller0: entered promiscuous mode [ 211.209825][ T7455] syzkaller0: entered allmulticast mode [ 212.044877][ T7464] netlink: 24 bytes leftover after parsing attributes in process `syz.1.469'. [ 212.204057][ T7471] fuse: Bad value for 'fd' [ 213.593724][ T7493] loop2: detected capacity change from 0 to 1024 [ 214.085792][ T7492] hfsplus: found bad thread record in catalog [ 214.964919][ T3540] hfsplus: b-tree write err: -5, ino 25 [ 214.971630][ T3540] hfsplus: b-tree write err: -5, ino 4 [ 215.000251][ T3540] hfsplus: b-tree write err: -5, ino 2 [ 215.009082][ T7500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.156369][ T7509] netlink: 24 bytes leftover after parsing attributes in process `syz.1.485'. [ 218.449246][ T7543] loop1: detected capacity change from 0 to 1024 [ 218.519259][ T7543] hfsplus: found bad thread record in catalog [ 219.214117][ T3508] hfsplus: b-tree write err: -5, ino 25 [ 219.219946][ T3508] hfsplus: b-tree write err: -5, ino 4 [ 219.232281][ T3508] hfsplus: b-tree write err: -5, ino 2 [ 220.314852][ T7558] netlink: 'syz.3.498': attribute type 39 has an invalid length. [ 220.440233][ T7558] syz_tun (unregistering): left allmulticast mode [ 223.960066][ T28] audit: type=1804 audit(1774716941.007:151): pid=7593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.505" name="/newroot/106/file1" dev="fuse" ino=1 res=1 errno=0 [ 224.830744][ T28] audit: type=1800 audit(1774716941.037:152): pid=7593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.505" name="/" dev="fuse" ino=1 res=0 errno=0 [ 225.319754][ T7604] netlink: 'syz.2.511': attribute type 39 has an invalid length. [ 225.949469][ T7604] syz_tun (unregistering): left allmulticast mode [ 226.053489][ T5803] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 226.590133][ T5803] usb 2-1: config 0 has no interfaces? [ 226.608029][ T5803] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 226.654058][ T5803] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.740749][ T5803] usb 2-1: config 0 descriptor?? [ 226.996161][ T23] usb 2-1: USB disconnect, device number 2 [ 227.575902][ T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 228.364071][ T7628] bad cache= option: no%e [ 228.364071][ T7628] [ 228.371418][ T7628] CIFS: VFS: bad cache= option: no%e [ 229.179834][ T23] usb 2-1: device descriptor read/all, error -71 [ 229.488116][ T7648] netlink: 'syz.2.519': attribute type 4 has an invalid length. [ 229.498247][ T7648] netlink: 152 bytes leftover after parsing attributes in process `syz.2.519'. [ 229.696782][ T7648] .`: renamed from bond0 (while UP) [ 232.251820][ T7674] netlink: 'syz.1.529': attribute type 1 has an invalid length. [ 232.617717][ T7676] bond2: (slave gretap1): making interface the new active one [ 232.774381][ T7676] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 232.864414][ T7677] vlan2: entered allmulticast mode [ 232.873258][ T7677] bond2: entered allmulticast mode [ 232.893305][ T7677] gretap1: entered allmulticast mode [ 232.910057][ T7677] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 233.660414][ T7689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.531'. [ 235.075771][ T7706] netlink: 'syz.0.537': attribute type 4 has an invalid length. [ 235.083560][ T7706] netlink: 152 bytes leftover after parsing attributes in process `syz.0.537'. [ 235.094497][ T7706] net_ratelimit: 23 callbacks suppressed [ 235.094506][ T7706] wlan1: mtu less than device minimum [ 235.167282][ T7708] lo: entered allmulticast mode [ 237.543680][ T7732] netlink: 24 bytes leftover after parsing attributes in process `syz.0.544'. [ 238.140357][ T7740] netlink: 'syz.3.548': attribute type 2 has an invalid length. [ 238.201393][ T7743] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 238.295743][ T7740] netlink: 'syz.3.548': attribute type 2 has an invalid length. [ 239.153434][ T7754] netlink: 12 bytes leftover after parsing attributes in process `syz.1.559'. [ 239.382070][ T7754] netlink: 63 bytes leftover after parsing attributes in process `syz.1.559'. [ 239.799926][ T7784] overlayfs: failed to clone upperpath [ 241.396485][ T7796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.557'. [ 241.451024][ T7796] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.890623][ T7796] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.046605][ T7814] netlink: 24 bytes leftover after parsing attributes in process `syz.0.563'. [ 242.112795][ T7806] kvm: requested 16761 ns i8254 timer period limited to 200000 ns [ 242.129695][ T7806] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 242.153274][ T7806] kvm: requested 167619 ns i8254 timer period limited to 200000 ns [ 242.179009][ T7806] kvm: requested 128228 ns i8254 timer period limited to 200000 ns [ 242.209236][ T7806] kvm: requested 135771 ns i8254 timer period limited to 200000 ns [ 242.244912][ T7806] kvm: requested 79619 ns i8254 timer period limited to 200000 ns [ 242.277451][ T7806] kvm: requested 72914 ns i8254 timer period limited to 200000 ns [ 242.301086][ T7806] kvm: requested 75428 ns i8254 timer period limited to 200000 ns [ 242.339606][ T7806] kvm: requested 25980 ns i8254 timer period limited to 200000 ns [ 242.349029][ T7806] kvm: requested 122361 ns i8254 timer period limited to 200000 ns [ 243.757444][ T7849] loop6: detected capacity change from 0 to 7 [ 243.779467][ T7483] Dev loop6: unable to read RDB block 7 [ 243.787950][ T7483] loop6: unable to read partition table [ 243.798066][ T7483] loop6: partition table beyond EOD, truncated [ 243.845934][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 243.865976][ T7849] Dev loop6: unable to read RDB block 7 [ 243.871774][ T7849] loop6: unable to read partition table [ 243.898528][ T7849] loop6: partition table beyond EOD, truncated [ 243.905616][ T7849] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 244.063270][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 244.070073][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.080460][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 244.091473][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 244.101290][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 244.110992][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 244.128345][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 244.137443][ T9] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 244.145559][ T9] usb 3-1: Manufacturer: syz [ 244.152024][ T9] usb 3-1: config 0 descriptor?? [ 244.427070][ T9] rc_core: IR keymap rc-hauppauge not found [ 244.433507][ T9] Registered IR keymap rc-empty [ 244.439024][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 244.474440][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 244.518387][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 244.536380][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input5 [ 244.556434][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 244.593394][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 244.623311][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 244.653359][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 244.684276][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 244.713381][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 244.743328][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 244.773316][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 244.804526][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 244.843325][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 244.877194][ T9] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 244.886289][ T9] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 244.900800][ T9] usb 3-1: USB disconnect, device number 7 [ 245.478584][ T7862] netlink: 12 bytes leftover after parsing attributes in process `syz.3.580'. [ 245.518786][ T7862] 8021q: adding VLAN 0 to HW filter on device bond2 [ 246.085084][ T7862] bond2: entered promiscuous mode [ 246.091299][ T7862] bond2: entered allmulticast mode [ 246.120430][ T7862] 8021q: adding VLAN 0 to HW filter on device bond2 [ 246.178530][ T7862] team0: Port device bond2 added [ 246.520718][ T7869] vxcan3: entered promiscuous mode [ 246.553765][ T7869] bond2: (slave vxcan3): refused to change device type [ 249.124842][ T7894] netlink: zone id is out of range [ 249.191748][ T7894] netlink: zone id is out of range [ 249.199555][ T7894] netlink: zone id is out of range [ 249.205101][ T7894] netlink: zone id is out of range [ 249.213536][ T7894] netlink: zone id is out of range [ 249.225097][ T7894] netlink: zone id is out of range [ 249.233411][ T7894] netlink: zone id is out of range [ 249.254351][ T7894] netlink: zone id is out of range [ 249.264428][ T7894] netlink: zone id is out of range [ 249.274743][ T7894] netlink: zone id is out of range [ 250.353715][ T7908] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 251.501739][ T7915] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.509461][ T7915] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.773396][ T7915] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.807654][ T7915] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.084228][ T7915] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.093116][ T7915] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.102052][ T7915] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.111493][ T7915] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.182960][ T7915] bond1: left allmulticast mode [ 252.190983][ T7915] bridge1: left allmulticast mode [ 252.196139][ T7915] bridge2: left allmulticast mode [ 253.842870][ T7932] netlink: 'syz.0.592': attribute type 1 has an invalid length. [ 253.869585][ T7932] 8021q: adding VLAN 0 to HW filter on device bond6 [ 253.925513][ T7936] UBIFS error (pid: 7936): cannot open "./file0", error -22 [ 254.312688][ T7932] netlink: 28 bytes leftover after parsing attributes in process `syz.0.592'. [ 254.338105][ T7932] bond6: entered promiscuous mode [ 254.343287][ T7932] bond6: entered allmulticast mode [ 254.487850][ T7932] bond6: (slave dummy0): making interface the new active one [ 254.495642][ T7932] dummy0: entered promiscuous mode [ 254.500946][ T7932] dummy0: entered allmulticast mode [ 254.508869][ T7932] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 254.590151][ T7946] xt_TPROXY: Can be used only with -p tcp or -p udp [ 256.095196][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.101706][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.384405][ T7955] tipc: Enabled bearer , priority 10 [ 256.420024][ T7955] tipc: Enabled bearer , priority 0 [ 256.518766][ T7962] netlink: 'syz.0.606': attribute type 1 has an invalid length. [ 256.547319][ T7962] 8021q: adding VLAN 0 to HW filter on device bond7 [ 256.635435][ T7962] bond7: (slave veth9): Enslaving as an active interface with a down link [ 256.718581][ T7962] vlan2: entered allmulticast mode [ 256.723796][ T7962] veth0_to_bond: entered allmulticast mode [ 256.731150][ T7962] bond7: (slave vlan2): Opening slave failed [ 256.901263][ T7971] syzkaller0: entered promiscuous mode [ 256.937854][ T7971] syzkaller0: entered allmulticast mode [ 257.289469][ T7971] tipc: Started in network mode [ 257.351315][ T7971] tipc: Node identity fe51450cc4c9, cluster identity 4711 [ 257.453224][ T7971] tipc: Enabled bearer , priority 0 [ 257.514120][ T7970] tipc: Resetting bearer [ 257.560469][ T7970] tipc: Disabling bearer [ 257.663694][ T7981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.604'. [ 258.965123][ T7981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.033044][ T7989] tipc: Enabled bearer , priority 10 [ 259.049518][ T7989] tipc: Enabled bearer , priority 0 [ 260.089258][ T8] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 260.143380][ T23] tipc: Node number set to 983057676 [ 260.293245][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 260.307146][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.312491][ T8012] netlink: 'syz.1.613': attribute type 1 has an invalid length. [ 260.334038][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 260.364043][ T8012] 8021q: adding VLAN 0 to HW filter on device bond4 [ 260.373756][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 260.400213][ T8] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 260.440553][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 260.565759][ T8018] vlan2: entered allmulticast mode [ 260.644689][ T8018] veth0_to_bond: entered allmulticast mode [ 260.651046][ T8] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 260.660382][ T8] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 260.668454][ T8] usb 3-1: Manufacturer: syz [ 261.100010][ T8] usb 3-1: config 0 descriptor?? [ 261.140039][ T8018] bond4: (slave vlan2): making interface the new active one [ 261.555625][ T8018] bond4: (slave vlan2): Enslaving as an active interface with an up link [ 261.605430][ T8] rc_core: IR keymap rc-hauppauge not found [ 261.638080][ T8] Registered IR keymap rc-empty [ 261.643097][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 261.686022][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 261.726297][ T8] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 261.792103][ T8] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input6 [ 261.827254][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 261.886721][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 261.924252][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 261.988496][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 262.063957][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 262.127517][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 262.182928][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 262.225144][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 262.273355][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 262.315782][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 262.356986][ T8] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 262.398724][ T8] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 262.426180][ T8] usb 3-1: USB disconnect, device number 8 [ 263.642450][ T8062] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 263.727466][ T8] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 263.943958][ T8] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 264.032047][ T8] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 264.175746][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 264.284765][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 264.365414][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 264.391192][ T8] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 264.406644][ T8] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 264.418973][ T8] usb 3-1: Product: syz [ 264.434028][ T8] usb 3-1: Manufacturer: syz [ 264.461401][ T8] cdc_wdm 3-1:1.0: skipping garbage [ 264.500045][ T8] cdc_wdm 3-1:1.0: skipping garbage [ 264.544903][ T8] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 264.550853][ T8] cdc_wdm 3-1:1.0: Unknown control protocol [ 264.598178][ T8070] netlink: 'syz.1.632': attribute type 10 has an invalid length. [ 264.616481][ T8070] netlink: 40 bytes leftover after parsing attributes in process `syz.1.632'. [ 264.668989][ T8070] team0: Port device geneve0 added [ 264.684329][ T8073] debugfs: Directory 'netdev:nicvf0' with parent 'phy3' already present! [ 264.713065][ T23] usb 3-1: USB disconnect, device number 9 [ 264.723930][ T8070] syz.1.632 (8070) used greatest stack depth: 19472 bytes left [ 265.600091][ T8092] loop2: detected capacity change from 0 to 256 [ 265.627901][ T8092] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 266.373567][ T8092] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 266.389518][ T8092] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 266.621728][ T8092] exFAT-fs (loop2): error, invalid access to FAT (entry 0xffffffff) [ 266.651373][ T8092] exFAT-fs (loop2): Filesystem has been set read-only [ 266.680170][ T8092] exFAT-fs (loop2): error, invalid access to FAT (entry 0xffffffff) [ 268.638806][ T8113] netlink: 24 bytes leftover after parsing attributes in process `syz.0.642'. [ 268.657823][ T8117] loop2: detected capacity change from 0 to 764 [ 268.705827][ T8115] netlink: 28 bytes leftover after parsing attributes in process `syz.0.642'. [ 268.715421][ T8115] veth11: entered promiscuous mode [ 268.733508][ T7483] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 268.736623][ T8115] veth11: entered allmulticast mode [ 269.102433][ T8127] netlink: 12 bytes leftover after parsing attributes in process `syz.0.646'. [ 269.181612][ T8127] 8021q: adding VLAN 0 to HW filter on device bond8 [ 269.314829][ T8127] macvlan2: entered promiscuous mode [ 269.320144][ T8127] macvlan2: entered allmulticast mode [ 269.729292][ T8135] loop1: detected capacity change from 0 to 512 [ 269.745206][ T8137] team0: Port device bridge0 added [ 269.751521][ T8138] netlink: 'syz.2.647': attribute type 1 has an invalid length. [ 269.767237][ T8135] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 2: comm syz.1.649: invalid block [ 269.787973][ T8135] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.649: invalid indirect mapped block 10 (level 1) [ 269.818824][ T8135] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.649: invalid indirect mapped block 8 (level 1) [ 269.844805][ T8138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.866486][ T8135] EXT4-fs (loop1): 1 truncate cleaned up [ 269.878886][ T8144] bond0: (slave veth5): Enslaving as an active interface with a down link [ 269.890473][ T8137] bond6: left promiscuous mode [ 269.900324][ T8135] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.912840][ T8137] dummy0: left promiscuous mode [ 269.945765][ T8137] veth11: left promiscuous mode [ 269.951747][ T8137] macvlan2: left promiscuous mode [ 269.984350][ T8135] EXT4-fs error (device loop1): ext4_lookup:1858: inode #12: comm syz.1.649: inode has both inline data and extents flags [ 270.034007][ T8145] vlan2: entered allmulticast mode [ 270.034028][ T8145] veth0_to_bond: entered allmulticast mode [ 270.034760][ T8145] veth0_to_bond: entered promiscuous mode [ 270.035352][ T8145] veth0_to_bond: left promiscuous mode [ 270.037209][ T8145] bond0: (slave vlan2): making interface the new active one [ 270.037799][ T8145] veth0_to_bond: entered promiscuous mode [ 270.038463][ T8145] vlan2: entered promiscuous mode [ 270.038968][ T8145] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 270.424429][ T8154] capability: warning: `syz.0.651' uses 32-bit capabilities (legacy support in use) [ 270.598012][ T5763] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.218994][ T8174] xt_connbytes: Forcing CT accounting to be enabled [ 272.226619][ T8174] x_tables: ip_tables: sctp match: only valid for protocol 132 [ 274.005421][ T8189] loop1: detected capacity change from 0 to 764 [ 277.638029][ T8225] net_ratelimit: 23 callbacks suppressed [ 277.638043][ T8225] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 279.408339][ T8225] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 279.970754][ T8238] netlink: 'syz.3.672': attribute type 5 has an invalid length. [ 283.829339][ T8272] loop2: detected capacity change from 0 to 256 [ 283.904060][ T8272] exfat: Deprecated parameter 'utf8' [ 283.909495][ T8272] exfat: Deprecated parameter 'utf8' [ 283.999633][ T8272] exfat: Deprecated parameter 'namecase' [ 284.012760][ T8272] exfat: Deprecated parameter 'utf8' [ 284.048665][ T8272] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36a12e94, utbl_chksum : 0xe619d30d) [ 284.915333][ T23] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 286.230583][ T23] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 286.242496][ T23] usb 2-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 286.662372][ T23] usb 2-1: New USB device found, idVendor=03f0, idProduct=0f9b, bcdDevice=d2.cf [ 286.683025][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.691632][ T23] usb 2-1: Product: syz [ 286.696127][ T23] usb 2-1: Manufacturer: syz [ 286.700798][ T23] usb 2-1: SerialNumber: syz [ 287.077648][ T5825] usb 2-1: USB disconnect, device number 5 [ 289.197244][ T8325] netlink: 'syz.2.699': attribute type 1 has an invalid length. [ 289.212333][ T8325] loop2: detected capacity change from 0 to 512 [ 289.304145][ T8325] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 289.359434][ T8325] EXT4-fs (loop2): 1 truncate cleaned up [ 289.374716][ T8325] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.430577][ T8325] ext4: Unknown parameter 'YڄyFmZ1(O[ [ 289.430577][ T8325] ^+E]0rQ#{̎cp6;:PrflIG>?υ-H"&F)!I|.z' [ 289.733691][ T5825] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 289.795871][ T3508] vlan2: left promiscuous mode [ 289.935551][ T5825] usb 3-1: unable to get BOS descriptor or descriptor too short [ 289.944601][ T5825] usb 3-1: not running at top speed; connect to a high speed hub [ 289.954101][ T5825] usb 3-1: config 1 has an invalid descriptor of length 3, skipping remainder of the config [ 289.968241][ T5825] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 289.982850][ T5825] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 289.998703][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.007488][ T5825] usb 3-1: Product: syz [ 290.020327][ T5825] usb 3-1: Manufacturer: syz [ 290.029608][ T5825] usb 3-1: SerialNumber: syz [ 290.395856][ T5825] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 290.836940][ T8329] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 290.840057][ T5825] usb 3-1: unit 5 not found! [ 290.906604][ T8329] EXT4-fs (loop2): Remounting filesystem read-only [ 290.986856][ T5825] usb 3-1: USB disconnect, device number 10 [ 291.121373][ T8361] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 291.160132][ T8361] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 291.196177][ T8361] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 291.249231][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.358382][ T8371] syzkaller0: entered promiscuous mode [ 291.364277][ T8371] syzkaller0: entered allmulticast mode [ 291.465801][ T8371] tipc: Enabled bearer , priority 0 [ 291.484949][ T8370] tipc: Resetting bearer [ 291.543641][ T8370] tipc: Disabling bearer [ 291.586174][ T8374] netlink: 'syz.3.715': attribute type 21 has an invalid length. [ 291.943327][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!! [ 296.468357][ T8430] block device autoloading is deprecated and will be removed. [ 296.766459][ T8428] md: could not open device unknown-block(0,0). [ 296.783588][ T8428] md: md_import_device returned -6 [ 296.790204][ T8441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.731'. [ 299.834033][ T8476] netlink: 'syz.3.740': attribute type 1 has an invalid length. [ 300.061911][ T8476] 8021q: adding VLAN 0 to HW filter on device bond3 [ 300.176097][ T8477] macvlan2: entered promiscuous mode [ 300.181440][ T8477] macvlan2: entered allmulticast mode [ 300.259573][ T8477] bond3: entered promiscuous mode [ 300.265152][ T8477] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 300.318311][ T8477] bond3: left promiscuous mode [ 301.279858][ T28] audit: type=1107 audit(1774717018.327:153): pid=8490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 301.390649][ T8479] bond3: (slave ip6gretap2): making interface the new active one [ 301.462081][ T8479] bond3: (slave ip6gretap2): Enslaving as an active interface with an up link [ 301.837989][ T8499] mmap: syz.2.745 (8499) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 302.260484][ T8491] syz.0.744 (8491) used greatest stack depth: 17936 bytes left [ 302.684485][ T8493] syz.0.744 (8493) used greatest stack depth: 16848 bytes left [ 302.979192][ T8508] warning: `syz.3.749' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 302.991876][ T8508] bridge_slave_0: left allmulticast mode [ 302.999216][ T8508] bridge_slave_0: left promiscuous mode [ 303.018980][ T8508] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.038494][ T8508] bridge_slave_1: left allmulticast mode [ 303.044709][ T8508] bridge_slave_1: left promiscuous mode [ 303.051158][ T8508] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.078127][ T8508] bond0: (slave bond_slave_0): Releasing backup interface [ 303.088217][ T8508] bond0: (slave bond_slave_1): Releasing backup interface [ 303.109961][ T8508] team0: Port device team_slave_0 removed [ 303.119771][ T8508] team0: Port device team_slave_1 removed [ 303.127882][ T8508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.138185][ T8508] bond0: (slave wlan1): Releasing backup interface [ 303.153167][ T8508] ip6gretap1: left allmulticast mode [ 303.158643][ T8508] ip6gretap1: left promiscuous mode [ 303.164287][ T8508] bridge0: port 3(ip6gretap1) entered disabled state [ 303.173302][ T8508] bond1: (slave veth3): Releasing active interface [ 303.191200][ T8508] team0: Port device bond2 removed [ 303.200004][ T967] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 303.209963][ T8508] bond3: (slave ip6gretap2): Releasing active interface [ 303.224316][ T8510] netlink: 'syz.3.749': attribute type 10 has an invalid length. [ 303.241114][ T8510] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 303.416364][ T8517] overlayfs: failed to clone upperpath [ 303.447801][ T967] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 303.474066][ T967] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 303.483170][ T967] usb 3-1: config 220 interface 0 has no altsetting 0 [ 303.532224][ T967] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 303.543221][ T967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.551242][ T967] usb 3-1: Product: syz [ 303.560914][ T967] usb 3-1: Manufacturer: syz [ 303.568492][ T967] usb 3-1: SerialNumber: syz [ 303.922337][ T8521] loop1: detected capacity change from 0 to 40427 [ 303.933789][ T8521] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 303.941538][ T8521] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 303.954490][ T8521] F2FS-fs (loop1): invalid crc value [ 303.960043][ T967] usb 3-1: Found UVC 0.00 device syz (8086:0b07) [ 303.975288][ T967] usb 3-1: No valid video chain found. [ 303.984882][ T967] usb 3-1: USB disconnect, device number 11 [ 303.991452][ T8521] F2FS-fs (loop1): Found nat_bits in checkpoint [ 304.046851][ T8521] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 304.054158][ T8521] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 304.250648][ T5763] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 304.262707][ T5763] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 304.275381][ T5763] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 304.283081][ T5763] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 304.291479][ T5763] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 304.308369][ T5763] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 304.316639][ T5763] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 305.115749][ T8530] syz.1.754: attempt to access beyond end of device [ 305.115749][ T8530] loop1: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 305.369598][ T8540] loop2: detected capacity change from 0 to 1024 [ 305.457676][ T8540] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.923396][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 308.064340][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.199522][ T8572] netlink: 64 bytes leftover after parsing attributes in process `syz.3.768'. [ 308.323717][ T8572] bond0: (slave wlan1): Releasing backup interface [ 309.528541][ T8572] ------------[ cut here ]------------ [ 309.536645][ T8572] WARNING: CPU: 0 PID: 8572 at net/mac80211/chan.c:2022 ieee80211_link_release_channel+0x154/0x180 [ 309.547717][ T8572] Modules linked in: [ 309.551698][ T8572] CPU: 0 PID: 8572 Comm: syz.3.768 Not tainted syzkaller #0 [ 309.561372][ T8572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 309.571781][ T8572] RIP: 0010:ieee80211_link_release_channel+0x154/0x180 [ 309.578814][ T8572] Code: 7c 2d 00 00 74 08 48 89 df e8 68 7e d6 f7 bf 60 1e 00 00 48 03 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 71 bc 85 00 e8 3c 42 7e f7 <0f> 0b eb c5 48 c7 c1 6c 37 8b 8e 80 e1 07 80 c1 03 38 c1 0f 8c 51 [ 309.599098][ T8572] RSP: 0018:ffffc900047cf0c8 EFLAGS: 00010246 [ 309.605402][ T8572] RAX: ffffffff8a08dde4 RBX: ffff88805d2e1598 RCX: 0000000000080000 [ 309.613532][ T8572] RDX: ffffc9000d1fa000 RSI: 000000000007ffff RDI: 0000000000080000 [ 309.621545][ T8572] RBP: 0000000000000000 R08: ffffffff8e8b02af R09: 1ffffffff1d16055 [ 309.629832][ T8572] R10: dffffc0000000000 R11: fffffbfff1d16056 R12: ffff88805d2e2c08 [ 309.640683][ T8572] R13: 1ffff1100ba5c2b3 R14: ffff88805d2e23c0 R15: dffffc0000000000 [ 309.649782][ T8572] FS: 00007f71dd46c6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 309.660978][ T8572] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 309.667713][ T8572] CR2: 00007fbd3a006001 CR3: 00000000637fd000 CR4: 00000000003506f0 [ 309.675883][ T8572] Call Trace: [ 309.679223][ T8572] [ 309.682227][ T8572] ? trace_drv_return_void+0x1c0/0x1c0 [ 309.687995][ T8572] unregister_netdevice_many_notify+0x133d/0x1900 [ 309.694664][ T8572] ? unregister_netdevice_many+0x20/0x20 [ 309.700420][ T8572] ? kernfs_remove_by_name_ns+0x117/0x150 [ 309.706398][ T8572] ? __lock_acquire+0x7d40/0x7d40 [ 309.711530][ T8572] unregister_netdevice_queue+0x32c/0x370 [ 309.717494][ T8572] ? list_netdevice+0x730/0x730 [ 309.722452][ T8572] ? kernfs_remove_by_name_ns+0x117/0x150 [ 309.728326][ T8572] _cfg80211_unregister_wdev+0x16b/0x580 [ 309.734143][ T8572] ieee80211_if_remove+0x1c1/0x2c0 [ 309.739340][ T8572] ieee80211_del_iface+0x19/0x20 [ 309.744527][ T8572] cfg80211_remove_virtual_intf+0x224/0x3c0 [ 309.750609][ T8572] genl_family_rcv_msg_doit+0x211/0x310 [ 309.756324][ T8572] ? end_current_label_crit_section+0x170/0x170 [ 309.764824][ T8572] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 309.770807][ T8572] ? bpf_lsm_capable+0x9/0x10 [ 309.775636][ T8572] ? security_capable+0x89/0xb0 [ 309.780562][ T8572] genl_rcv_msg+0x619/0x7a0 [ 309.785143][ T8572] ? genl_bind+0x360/0x360 [ 309.789621][ T8572] ? nl80211_exit+0x30/0x30 [ 309.794226][ T8572] ? nl80211_new_interface+0xe60/0xe60 [ 309.799741][ T8572] ? nl80211_pre_doit+0x930/0x930 [ 309.805047][ T8572] netlink_rcv_skb+0x241/0x4d0 [ 309.809885][ T8572] ? genl_bind+0x360/0x360 [ 309.814536][ T8572] ? netlink_ack+0x1180/0x1180 [ 309.819396][ T8572] ? __lock_acquire+0x7d40/0x7d40 [ 309.824541][ T8572] ? net_generic+0x1e/0x240 [ 309.829097][ T8572] ? down_read+0x1ac/0x2e0 [ 309.833746][ T8572] genl_rcv+0x28/0x40 [ 309.837808][ T8572] netlink_unicast+0x751/0x8d0 [ 309.842649][ T8572] netlink_sendmsg+0x8d0/0xbf0 [ 309.847966][ T8572] ? netlink_getsockopt+0x590/0x590 [ 309.853289][ T8572] ? aa_sock_msg_perm+0x94/0x150 [ 309.858281][ T8572] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 309.866130][ T8572] ? security_socket_sendmsg+0x80/0xa0 [ 309.871680][ T8572] ? netlink_getsockopt+0x590/0x590 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 309.877050][ T8572] ____sys_sendmsg+0x5ba/0x960 [ 309.881925][ T8572] ? __asan_memset+0x22/0x40 [ 309.886740][ T8572] ? __sys_sendmsg_sock+0x30/0x30 [ 309.893321][ T8572] ? __import_iovec+0x5f2/0x850 [ 309.898492][ T8572] ? import_iovec+0x73/0xa0 [ 309.902960][ T5085] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 309.903288][ T8572] ___sys_sendmsg+0x2a6/0x360 [ 309.912801][ T5085] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 309.916275][ T8572] ? __sys_sendmsg+0x2a0/0x2a0 [ 309.927241][ T8572] __se_sys_sendmsg+0x1c2/0x2b0 [ 309.932126][ T8572] ? __x64_sys_sendmsg+0x80/0x80 [ 309.937226][ T8572] ? lockdep_hardirqs_on+0x98/0x150 [ 309.942483][ T8572] do_syscall_64+0x55/0xa0 [ 309.947053][ T8572] ? clear_bhb_loop+0x40/0x90 [ 309.951816][ T8572] ? clear_bhb_loop+0x40/0x90 [ 309.956725][ T8572] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 309.962706][ T8572] RIP: 0033:0x7f71dc59c819 [ 309.969899][ T8572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.989757][ T8572] RSP: 002b:00007f71dd46c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 309.998422][ T8572] RAX: ffffffffffffffda RBX: 00007f71dc815fa0 RCX: 00007f71dc59c819 [ 310.006621][ T8572] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 310.014829][ T8572] RBP: 00007f71dc632c91 R08: 0000000000000000 R09: 0000000000000000 [ 310.022890][ T8572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 310.031067][ T8572] R13: 00007f71dc816038 R14: 00007f71dc815fa0 R15: 00007fffc1375138 [ 310.039296][ T8572] [ 310.042401][ T8572] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 310.049677][ T8572] CPU: 0 PID: 8572 Comm: syz.3.768 Not tainted syzkaller #0 [ 310.056947][ T8572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 310.066987][ T8572] Call Trace: [ 310.070254][ T8572] [ 310.073172][ T8572] dump_stack_lvl+0x18c/0x250 [ 310.077863][ T8572] ? show_regs_print_info+0x20/0x20 [ 310.083052][ T8572] ? load_image+0x400/0x400 [ 310.087552][ T8572] panic+0x2dc/0x730 [ 310.091435][ T8572] ? bpf_jit_dump+0xd0/0xd0 [ 310.095958][ T8572] __warn+0x2e0/0x470 [ 310.099950][ T8572] ? ieee80211_link_release_channel+0x154/0x180 [ 310.106188][ T8572] ? ieee80211_link_release_channel+0x154/0x180 [ 310.112422][ T8572] report_bug+0x2be/0x4f0 [ 310.116737][ T8572] ? ieee80211_link_release_channel+0x154/0x180 [ 310.122970][ T8572] ? ieee80211_link_release_channel+0x154/0x180 [ 310.129194][ T8572] ? ieee80211_link_release_channel+0x156/0x180 [ 310.135418][ T8572] handle_bug+0xcf/0x120 [ 310.139648][ T8572] exc_invalid_op+0x1a/0x50 [ 310.144144][ T8572] asm_exc_invalid_op+0x1a/0x20 [ 310.148985][ T8572] RIP: 0010:ieee80211_link_release_channel+0x154/0x180 [ 310.155823][ T8572] Code: 7c 2d 00 00 74 08 48 89 df e8 68 7e d6 f7 bf 60 1e 00 00 48 03 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 71 bc 85 00 e8 3c 42 7e f7 <0f> 0b eb c5 48 c7 c1 6c 37 8b 8e 80 e1 07 80 c1 03 38 c1 0f 8c 51 [ 310.175414][ T8572] RSP: 0018:ffffc900047cf0c8 EFLAGS: 00010246 [ 310.181468][ T8572] RAX: ffffffff8a08dde4 RBX: ffff88805d2e1598 RCX: 0000000000080000 [ 310.189423][ T8572] RDX: ffffc9000d1fa000 RSI: 000000000007ffff RDI: 0000000000080000 [ 310.193845][ T5085] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 310.195983][ T5085] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 310.211202][ T8572] RBP: 0000000000000000 R08: ffffffff8e8b02af R09: 1ffffffff1d16055 [ 310.219160][ T8572] R10: dffffc0000000000 R11: fffffbfff1d16056 R12: ffff88805d2e2c08 [ 310.227116][ T8572] R13: 1ffff1100ba5c2b3 R14: ffff88805d2e23c0 R15: dffffc0000000000 [ 310.235096][ T8572] ? ieee80211_link_release_channel+0x154/0x180 [ 310.241341][ T8572] ? ieee80211_link_release_channel+0x154/0x180 [ 310.247574][ T8572] ? trace_drv_return_void+0x1c0/0x1c0 [ 310.253025][ T8572] unregister_netdevice_many_notify+0x133d/0x1900 [ 310.259436][ T8572] ? unregister_netdevice_many+0x20/0x20 [ 310.265058][ T8572] ? kernfs_remove_by_name_ns+0x117/0x150 [ 310.270767][ T8572] ? __lock_acquire+0x7d40/0x7d40 [ 310.275783][ T8572] unregister_netdevice_queue+0x32c/0x370 [ 310.281491][ T8572] ? list_netdevice+0x730/0x730 [ 310.286327][ T8572] ? kernfs_remove_by_name_ns+0x117/0x150 [ 310.292036][ T8572] _cfg80211_unregister_wdev+0x16b/0x580 [ 310.297669][ T8572] ieee80211_if_remove+0x1c1/0x2c0 [ 310.302775][ T8572] ieee80211_del_iface+0x19/0x20 [ 310.307701][ T8572] cfg80211_remove_virtual_intf+0x224/0x3c0 [ 310.313584][ T8572] genl_family_rcv_msg_doit+0x211/0x310 [ 310.319121][ T8572] ? end_current_label_crit_section+0x170/0x170 [ 310.325354][ T8572] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 310.331236][ T8572] ? bpf_lsm_capable+0x9/0x10 [ 310.335902][ T8572] ? security_capable+0x89/0xb0 [ 310.340745][ T8572] genl_rcv_msg+0x619/0x7a0 [ 310.345240][ T8572] ? genl_bind+0x360/0x360 [ 310.349645][ T8572] ? nl80211_exit+0x30/0x30 [ 310.354133][ T8572] ? nl80211_new_interface+0xe60/0xe60 [ 310.359577][ T8572] ? nl80211_pre_doit+0x930/0x930 [ 310.364596][ T8572] netlink_rcv_skb+0x241/0x4d0 [ 310.369353][ T8572] ? genl_bind+0x360/0x360 [ 310.373752][ T8572] ? netlink_ack+0x1180/0x1180 [ 310.378510][ T8572] ? __lock_acquire+0x7d40/0x7d40 [ 310.383521][ T8572] ? net_generic+0x1e/0x240 [ 310.388014][ T8572] ? down_read+0x1ac/0x2e0 [ 310.392412][ T8572] genl_rcv+0x28/0x40 [ 310.396379][ T8572] netlink_unicast+0x751/0x8d0 [ 310.401138][ T8572] netlink_sendmsg+0x8d0/0xbf0 [ 310.405895][ T8572] ? netlink_getsockopt+0x590/0x590 [ 310.411083][ T8572] ? aa_sock_msg_perm+0x94/0x150 [ 310.416012][ T8572] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 310.421283][ T8572] ? security_socket_sendmsg+0x80/0xa0 [ 310.426727][ T8572] ? netlink_getsockopt+0x590/0x590 [ 310.431916][ T8572] ____sys_sendmsg+0x5ba/0x960 [ 310.436666][ T8572] ? __asan_memset+0x22/0x40 [ 310.441242][ T8572] ? __sys_sendmsg_sock+0x30/0x30 [ 310.446250][ T8572] ? __import_iovec+0x5f2/0x850 [ 310.451097][ T8572] ? import_iovec+0x73/0xa0 [ 310.455587][ T8572] ___sys_sendmsg+0x2a6/0x360 [ 310.460265][ T8572] ? __sys_sendmsg+0x2a0/0x2a0 [ 310.465055][ T8572] __se_sys_sendmsg+0x1c2/0x2b0 [ 310.469887][ T8572] ? __x64_sys_sendmsg+0x80/0x80 [ 310.474818][ T8572] ? lockdep_hardirqs_on+0x98/0x150 [ 310.480010][ T8572] do_syscall_64+0x55/0xa0 [ 310.484417][ T8572] ? clear_bhb_loop+0x40/0x90 [ 310.489078][ T8572] ? clear_bhb_loop+0x40/0x90 [ 310.493741][ T8572] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 310.499622][ T8572] RIP: 0033:0x7f71dc59c819 [ 310.504022][ T8572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.523610][ T8572] RSP: 002b:00007f71dd46c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 310.532008][ T8572] RAX: ffffffffffffffda RBX: 00007f71dc815fa0 RCX: 00007f71dc59c819 [ 310.539963][ T8572] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 310.547921][ T8572] RBP: 00007f71dc632c91 R08: 0000000000000000 R09: 0000000000000000 [ 310.555876][ T8572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 310.563832][ T8572] R13: 00007f71dc816038 R14: 00007f71dc815fa0 R15: 00007fffc1375138 [ 310.571800][ T8572] [ 310.575159][ T8572] Kernel Offset: disabled [ 310.579568][ T8572] Rebooting in 86400 seconds..