last executing test programs: 1m35.773513559s ago: executing program 2 (id=37): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000005c0)='westwood', 0x8) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000980)="91f8a9849519def28691bbc4173c3d6f357d0272b7e95a136b3ffec75b73e6937b7b22a1319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000f2ffffff2e3591ceb1757de97fb25500620d0d30506e7429fa5337b74945da657f794d5b5bf89588e07b14a17f069912dc0c3f201bff8b9a687b85baa11244632642a9be7b42b6b5882b738f05eba73221490e2d5c17cf406be2796eec488a5b5268f507ee8d6f3dd1d64abc785708eb9bd24e352a984b2b1596d35ebe1d3443aa78fb40209dcfa4666bbcc6ca", 0xda}], 0x1}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001500)="24acadd7f04daaa04e88680351d9ce53f67fd2afefe557d4bd561f02df2570f175951d4bdd97ec433ec583c79fa668922a61c8662e0890ce06996f5ba401e582dfb5197822bee50c6cd4b3a6f9d14f1fde9b1698ad6847d4fde0458282ece396a1e212cd02e6fb62599df5ecb5984843ee04e96eb26fa2a8100a0b7b2d032fff965485ded83b39d6c9835416a8db5414a6c54101693e6b05e652b49fceaf4a0cc2b7898034ff0eb5150b3e85b9ff5658ba346d0b6b5a3a71eb084311606cf6b8ccf7c45a79b319a201e9c5ae9f0aab", 0xcf}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1m35.194134473s ago: executing program 2 (id=42): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1], 0x50}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xd, 0x4, 0x4, 0x9, 0x150, r3}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x9, r4, 0x4}, 0x38) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x14, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000052}, 0x4008) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r6, &(0x7f0000000a00)='rd_pages=8', 0xa) r7 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) write(r7, &(0x7f0000000c00)='1', 0x1) mkdir(&(0x7f0000000d00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff) symlink(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', &(0x7f0000000f00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00') socket$inet6_sctp(0xa, 0x1, 0x84) 1m33.383914798s ago: executing program 2 (id=46): r0 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x3}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) close(0xffffffffffffffff) 9.491291515s ago: executing program 4 (id=365): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r5, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000540)="f4efe0430444425a1a9942a2f606", 0xe, 0x0, &(0x7f0000000640)={0x11, 0x4, r9, 0x1, 0xff, 0x6, @remote}, 0x14) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002980)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x10}, {0x0, 0xfff1}, {0x2, 0x3}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x7, 0x8, 0x1, 0x15, 0x12, 0x8, 0x2}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) 9.192604652s ago: executing program 4 (id=369): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58) 8.330510144s ago: executing program 4 (id=373): r0 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x101802, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) pread64(r0, &(0x7f0000000040), 0x34, 0x7ff) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) 5.101508983s ago: executing program 5 (id=380): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r5, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000540)="f4efe0430444425a1a9942a2f606", 0xe, 0x0, &(0x7f0000000640)={0x11, 0x4, r9, 0x1, 0xff, 0x6, @remote}, 0x14) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002980)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x10}, {0x0, 0xfff1}, {0x2, 0x3}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x7, 0x8, 0x1, 0x15, 0x12, 0x8, 0x2}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) 5.044489265s ago: executing program 1 (id=381): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f", @ANYRESHEX], 0x0, 0x34}, 0x28) r0 = socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x43, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4) 4.927260768s ago: executing program 0 (id=382): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='illinois', 0x8) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03214e000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) 3.853642924s ago: executing program 1 (id=386): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0xfffffffffffffed0}], 0x1, 0x11, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x40, @mcast2, 0x8}, 0x1c) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x4a, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x7a, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.776459467s ago: executing program 3 (id=387): setxattr$incfs_metadata(0x0, 0x0, &(0x7f00000031c0), 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', 0x0) r2 = dup(0xffffffffffffffff) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000000)="be39", 0xffeb}, {0x0}], 0x2, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x20}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x1, 0x0, 0x4}) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000340)=0xfffffff9) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)={[{}]}) 3.63915245s ago: executing program 1 (id=388): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x3}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) close(r3) 3.433752245s ago: executing program 0 (id=389): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) creat(0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) socket$nl_xfrm(0x10, 0x3, 0x6) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) 3.154006832s ago: executing program 0 (id=390): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x18, &(0x7f0000000600)={[{@numtail}, {@shortname_win95}, {@rodir}, {}, {@fat=@nfs}, {@shortname_win95}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '857'}}, {@numtail}, {@shortname_mixed}, {@rodir}, {@rodir}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@utf8no}, {@utf8}, {@shortname_lower}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp864'}}]}, 0x7, 0x2a6, &(0x7f0000000240)="$eJzs3c2KI1UUAOBT+ekkukgWrkSYAl24GqZ9gm5kBLVBULJQF9o4GZBUGOhAIK0YZ+UT+AQ+jxtx6cYHUNw5C7GkUpWYzFR6TDvTPTTft+nDuffU/amia1U3n782Gd97ML3/8Otfo9tNonEUR/EoiUE0YuXbqPXz7/V5AOAF9yjP44+81ClT8+0e7R2VrcZznxwA8Fxsvv+3GrzdAeDG+ujjT94/Pjm5+2GadiMm382GSZR/y/bj+/FlZDGKO9GPvyLytTJ+592Tu9FKC4N4Y7KYDYvKyWc/Vtc//i1iWX8Y/RjU1x+mpY36xWzYjpeq8Y+yGH3wQ/TjlaLml/dWc1/Vv1VTH8ODePP1jfnfjn789EU8iCzuPVb/zWGavp1//+dXnxbZoj5ZzIaddb+qd/Oq7gkAAAAAAAAAAAAAAAAAAAAAADff7XRtsH3+zurg/wvanzwfqLc64Gexcb7PnTRN86Ts/299K15tRes61w4AAAAAAAAAAAAAAAAAAAAviun8fHya9SJiGWSjszKTzSNiO7NHsPqsv6Yp/t7OdCLiMkOUwa19q6JZTS1LiiW347+Xt6OzrHx65+aeqyi2PxudJa247IY/GSTrTK8MohFxNr0V5VhFplcGG5n/PXo3yrEq49PkaTe3W/eQPIMgr3n8mjurDh7P9KoV1HTuXTD6wcuXmnPe39GURER7vZkXX6f9bPfw6v4HAQAAAAAAAAAAAAAAAAAApen8fNxYfvRb0/jwGiYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANdgOj8fny5//3+PYFEV7+qTN4ugFVWmZtiDK14mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN9w/AQAA//8XQlpx") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 3.153514592s ago: executing program 5 (id=391): openat(0xffffffffffffff9c, &(0x7f0000000080)='file0\x00', 0x42, 0x1ff) mkdir(0x0, 0x1ff) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$tipc(0x1e, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000400012800c0001006d6163766c616e0030000280080003000300000009000100100000001c0005800a000400aaaaaaaaaa2d00000a0004003426f7b68ed1000008000500", @ANYRES32=r2], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 3.063805614s ago: executing program 4 (id=392): setpriority(0x2, 0x0, 0x65000000) 2.988485106s ago: executing program 4 (id=393): syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0x9d, 0x0) 2.673424363s ago: executing program 1 (id=394): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) kexec_load(0x1, 0x0, 0x0, 0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', 'tr:\x00\x00\x00\x00\x00'}, 0x1d, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, &(0x7f0000000100)}, 0x20) 2.599863005s ago: executing program 0 (id=395): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x3c8, 0xe8, 0x1d0, 0x1d0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@remote, @multicast2, 0x0, 0x0, 0x7, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xfc, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond_slave_1\x00', 'ipvlan1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x40, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000180), 0x2004000, 0x0) 2.43252346s ago: executing program 5 (id=396): epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000c40)={0x8000203d}) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) sendmsg$nl_xfrm(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0xb1, 0x0, 0x10, 0xffeff024}, {0x6, 0x0, 0x83, 0xfffffffd}]}, 0x10) sendmmsg(r4, &(0x7f0000001c00), 0x400000000000159, 0x40840) 1.565860411s ago: executing program 0 (id=397): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) r2 = accept(r0, 0x0, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f00000002c0)="3900000013", 0x5}], 0x1) 1.553649231s ago: executing program 1 (id=398): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000050000000a004e200e8a34c38f36f0c7eb2700d609bcf41076d88144448ebe7994dd1b33d7c8787734cc315672f62261ceeede940774fd94d2767288cfb3a20882449d601ff878eedd3d57c9eb3a723b62102bd534"], 0x310) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd}, 0x48) 1.500631063s ago: executing program 3 (id=399): epoll_create1(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) migrate_pages(0x0, 0x7f, 0x0, &(0x7f0000000040)=0x1) 1.500503903s ago: executing program 5 (id=400): r0 = socket$inet_udp(0x2, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000440)={'filter\x00', 0x0, 0x0, 0x0, [0x1, 0x4, 0x5, 0x7, 0x8, 0x4], 0x1, 0x0, 0x0, [{}]}, 0x88) 1.434560314s ago: executing program 3 (id=401): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x2, 0xffffffffffffffff) 303.424212ms ago: executing program 1 (id=402): r0 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x101802, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) pread64(r0, &(0x7f0000000040), 0x34, 0x7ff) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) 248.539124ms ago: executing program 5 (id=403): mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3, 0x11, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f00000001c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc_mnt/sys/net/ipv4/tcp_migrate_req\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) listen(r0, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000080)=0x1, 0x4) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) listen(r1, 0x10) shutdown(r0, 0x2) listen(r0, 0x10) 248.306294ms ago: executing program 5 (id=404): getpriority(0x3, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$TIOCSTI(r0, 0x5412, 0x0) r1 = syz_usb_connect(0x0, 0x32, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xfe) ptrace(0x4207, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 210.689475ms ago: executing program 3 (id=405): socket$unix(0x1, 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2717, 0x0, &(0x7f0000000400)) 103.732207ms ago: executing program 0 (id=406): mkdir(&(0x7f00000000c0)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./mnt\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='/dev/loop0,', 0xb) 16.57031ms ago: executing program 3 (id=407): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x21c}, @IPSET_ATTR_SIZE={0x8}]}]}, 0x54}}, 0x0) 0s ago: executing program 3 (id=408): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xffffffde, 0x318145a8, 0x0, 0xfffe, 0x2, 0xfffffff6, 0x0, 0x0, 0x8, 0x100}}, 0x50) fchownat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x1000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.214' (ED25519) to the list of known hosts. [ 57.988555][ T4174] cgroup: Unknown subsys name 'net' [ 58.088174][ T4174] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.295032][ T4174] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 61.320094][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 61.354844][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 61.442502][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 61.481797][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 61.517830][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.525204][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.533841][ T4188] device bridge_slave_0 entered promiscuous mode [ 61.559892][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.567120][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.575175][ T4189] device bridge_slave_0 entered promiscuous mode [ 61.583645][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.590865][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.598669][ T4188] device bridge_slave_1 entered promiscuous mode [ 61.606163][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 61.633774][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.641121][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.648861][ T4189] device bridge_slave_1 entered promiscuous mode [ 61.671586][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.678666][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.687080][ T4187] device bridge_slave_0 entered promiscuous mode [ 61.715838][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.727093][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.737235][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.745161][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.752945][ T4187] device bridge_slave_1 entered promiscuous mode [ 61.771087][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.804739][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.822315][ T4188] team0: Port device team_slave_0 added [ 61.857943][ T4188] team0: Port device team_slave_1 added [ 61.865713][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.875104][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.882288][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.889907][ T4190] device bridge_slave_0 entered promiscuous mode [ 61.911587][ T4189] team0: Port device team_slave_0 added [ 61.924338][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.933724][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.941079][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.948684][ T4190] device bridge_slave_1 entered promiscuous mode [ 61.957377][ T4189] team0: Port device team_slave_1 added [ 61.997222][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.004434][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.012639][ T4186] device bridge_slave_0 entered promiscuous mode [ 62.020990][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.027934][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.054117][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.073746][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.088284][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.095563][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.103366][ T4186] device bridge_slave_1 entered promiscuous mode [ 62.110880][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.117834][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.144038][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.157586][ T4187] team0: Port device team_slave_0 added [ 62.168807][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.186082][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.193422][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.219566][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.245908][ T4187] team0: Port device team_slave_1 added [ 62.263644][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.270730][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.296871][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.313365][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.324659][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.340005][ T4190] team0: Port device team_slave_0 added [ 62.348603][ T4190] team0: Port device team_slave_1 added [ 62.378525][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.386260][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.412430][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.430353][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.437543][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.463908][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.487322][ T4188] device hsr_slave_0 entered promiscuous mode [ 62.494841][ T4188] device hsr_slave_1 entered promiscuous mode [ 62.519153][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.526473][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.553319][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.566906][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.574145][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.600488][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.618014][ T4186] team0: Port device team_slave_0 added [ 62.651483][ T4186] team0: Port device team_slave_1 added [ 62.659600][ T4189] device hsr_slave_0 entered promiscuous mode [ 62.666486][ T4189] device hsr_slave_1 entered promiscuous mode [ 62.676461][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.684472][ T4189] Cannot create hsr debugfs directory [ 62.698345][ T4187] device hsr_slave_0 entered promiscuous mode [ 62.705294][ T4187] device hsr_slave_1 entered promiscuous mode [ 62.712046][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.719789][ T4187] Cannot create hsr debugfs directory [ 62.758328][ T4190] device hsr_slave_0 entered promiscuous mode [ 62.765589][ T4190] device hsr_slave_1 entered promiscuous mode [ 62.772776][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.780803][ T4190] Cannot create hsr debugfs directory [ 62.793639][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.801369][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.829404][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.866273][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.873399][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.900210][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.027912][ T4186] device hsr_slave_0 entered promiscuous mode [ 63.034693][ T4186] device hsr_slave_1 entered promiscuous mode [ 63.041593][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.049160][ T4186] Cannot create hsr debugfs directory [ 63.091421][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 63.098485][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 63.100732][ T4191] Bluetooth: hci0: command 0x0409 tx timeout [ 63.105582][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 63.118205][ T4191] Bluetooth: hci1: command 0x0409 tx timeout [ 63.258915][ T4187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.270277][ T4187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.284282][ T4187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.295006][ T4187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.329513][ T4188] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.339193][ T4188] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.365122][ T4188] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.382532][ T4188] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.404595][ T4190] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.431098][ T4190] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.440075][ T4190] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.477208][ T4190] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.535569][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.560182][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.572141][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.584412][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.604123][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.612353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.622143][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.631194][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.641575][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.655399][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.664486][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.673995][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.681244][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.707583][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.716601][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.725585][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.734025][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.791502][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.802665][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.811721][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.818857][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.828733][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.837732][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.846710][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.855321][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.864366][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.871728][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.879419][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.890144][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.899556][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.906663][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.915424][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.925245][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.934367][ T4189] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.945265][ T4189] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.962391][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.972050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.989171][ T4189] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.998501][ T4189] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.012650][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.020838][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.030064][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.039869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.052701][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.069094][ T4187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.079739][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.093555][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.104414][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.113327][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.122342][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.131611][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.141174][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.149463][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.158325][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.192353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.207120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.217031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.226944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.235653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.244201][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.263522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.272243][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.282331][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.298145][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.319696][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.354129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.371433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.387093][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.394311][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.405530][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.414748][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.423575][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.432241][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.441578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.451100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.478741][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.494171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.502582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.511356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.519173][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.535219][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.581093][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.590147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.600315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.609840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.619891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.629727][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.639111][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.648666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.658526][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.667003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.693578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.704392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.713161][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.720213][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.728002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.737903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.748103][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.755200][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.763752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.772392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.785234][ T4187] device veth0_vlan entered promiscuous mode [ 64.793615][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.814210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.827747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.839004][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.852901][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.867468][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.886685][ T4187] device veth1_vlan entered promiscuous mode [ 64.903237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.911773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.919326][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.928021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.938816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.948370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.963652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.973852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.985714][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.999013][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.010111][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.029956][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.050246][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.059859][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.095830][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.105420][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.115209][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.124313][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.133407][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.142061][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.149989][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.159819][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.169481][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.170844][ T2299] Bluetooth: hci1: command 0x041b tx timeout [ 65.177367][ T4233] Bluetooth: hci3: command 0x041b tx timeout [ 65.188520][ T2299] Bluetooth: hci0: command 0x041b tx timeout [ 65.197540][ T2299] Bluetooth: hci4: command 0x041b tx timeout [ 65.202262][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.209870][ T2299] Bluetooth: hci2: command 0x041b tx timeout [ 65.230990][ T4187] device veth0_macvtap entered promiscuous mode [ 65.241247][ T4187] device veth1_macvtap entered promiscuous mode [ 65.263647][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.272862][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.281384][ T1271] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.288411][ T1271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.296166][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.305498][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.314413][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.322774][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.334077][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.343293][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.351862][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.377082][ T4190] device veth0_vlan entered promiscuous mode [ 65.404936][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.414042][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.425423][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.435689][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.445537][ T1271] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.452647][ T1271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.460989][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.468711][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.485990][ T4190] device veth1_vlan entered promiscuous mode [ 65.496399][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.510067][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.527059][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.536056][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.545910][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.554876][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.587279][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.617367][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.627390][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.643490][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.653869][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.664219][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.673505][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.682687][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.694756][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.707846][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.716746][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.727115][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.737811][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.747091][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.755896][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.778265][ T4190] device veth0_macvtap entered promiscuous mode [ 65.794311][ T4188] device veth0_vlan entered promiscuous mode [ 65.802590][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.811875][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.820201][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.828825][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.837764][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.846160][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.854027][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.866227][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.877757][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.887394][ T4190] device veth1_macvtap entered promiscuous mode [ 65.903583][ T4188] device veth1_vlan entered promiscuous mode [ 65.910132][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.918139][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.926783][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.935193][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.944091][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.951677][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.988610][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.002972][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.017894][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.036792][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.055214][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.071502][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.084975][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.110875][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.123515][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.134095][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.143081][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.152502][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.161268][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.189836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.202644][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.216321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.227784][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.239548][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.266431][ T4188] device veth0_macvtap entered promiscuous mode [ 66.301351][ T4188] device veth1_macvtap entered promiscuous mode [ 66.309926][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.318566][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.328404][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.338307][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.376336][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.387001][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.395520][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.414940][ T4186] device veth0_vlan entered promiscuous mode [ 66.423254][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.432367][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.439806][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.447825][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.456926][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.477216][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.485322][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.504562][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.515766][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.525951][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.537390][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.548705][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.565590][ T4186] device veth1_vlan entered promiscuous mode [ 66.575206][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.585280][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.599878][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.611426][ T1271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.612935][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.619342][ T1271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.631045][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.648551][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.660124][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.677819][ T4188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.686936][ T4188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.698443][ T4188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.708359][ T4188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.724784][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.735210][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.744628][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.782940][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.803796][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.814058][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.823534][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.835369][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.844580][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.872789][ T4186] device veth0_macvtap entered promiscuous mode [ 66.894389][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.903462][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.926430][ T4189] device veth0_vlan entered promiscuous mode [ 66.960846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.977449][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.988459][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.992781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.009538][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.013754][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.025329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.035156][ T4186] device veth1_macvtap entered promiscuous mode [ 67.047067][ T4189] device veth1_vlan entered promiscuous mode [ 67.076383][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.085430][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.112900][ T498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.125993][ T498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.159341][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.170122][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.181239][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.192861][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.203231][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.213835][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.225478][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.235794][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.244256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.252066][ T1108] Bluetooth: hci2: command 0x040f tx timeout [ 67.255731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.258849][ T1108] Bluetooth: hci4: command 0x040f tx timeout [ 67.266885][ T4236] Bluetooth: hci0: command 0x040f tx timeout [ 67.272449][ T1108] Bluetooth: hci1: command 0x040f tx timeout [ 67.283640][ T4236] Bluetooth: hci3: command 0x040f tx timeout [ 67.286445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.307314][ T4275] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3'. [ 67.320688][ T4276] device syzkaller0 entered promiscuous mode [ 67.386126][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.405274][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.418259][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.428828][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.438731][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.449422][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.461975][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.477050][ T4189] device veth0_macvtap entered promiscuous mode [ 67.485518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.501234][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.510014][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.525382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.536144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.546592][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.555730][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.575067][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.585047][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.597223][ T1271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.604774][ T4189] device veth1_macvtap entered promiscuous mode [ 67.615206][ T1271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.639979][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.659046][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.670331][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.680357][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.680673][ T1108] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 67.699222][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.709780][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.720638][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.731734][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.746573][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.765253][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.773631][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.782606][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.796657][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.809193][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.820242][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.832153][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.842744][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.854943][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.865591][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.876596][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.889345][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.920789][ T4236] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 67.930064][ T4282] loop4: detected capacity change from 0 to 8192 [ 67.951735][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.955419][ T4282] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 67.966720][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.984073][ T4282] REISERFS (device loop4): using ordered data mode [ 67.986194][ T4189] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.990712][ T4282] reiserfs: using flush barriers [ 68.006135][ T4189] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.015784][ T4282] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 68.016440][ T4189] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.043051][ T4282] REISERFS (device loop4): checking transaction log (loop4) [ 68.051005][ T1108] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 68.066105][ T4189] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.076011][ T4282] REISERFS (device loop4): Using r5 hash to sort names [ 68.084485][ T1108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.096506][ T4282] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 68.097401][ T1108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.116090][ T1108] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 68.200837][ T1108] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 68.211384][ T1108] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 68.237088][ T1271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.245126][ T1108] usb 3-1: Manufacturer: syz [ 68.250633][ T1271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.259227][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.270030][ T1108] usb 3-1: config 0 descriptor?? [ 68.385601][ T1271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.401489][ T1271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.411719][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.415405][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.427424][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.750079][ T498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.758557][ T498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.895178][ T1108] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 68.910692][ T4236] usb 2-1: config 6 has an invalid interface number: 138 but max is 0 [ 68.915717][ T1108] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 68.918886][ T4236] usb 2-1: config 6 has no interface number 0 [ 68.918922][ T4236] usb 2-1: config 6 interface 138 altsetting 5 endpoint 0xF has invalid maxpacket 32, setting to 8 [ 68.943453][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.950766][ T4236] usb 2-1: config 6 interface 138 has no altsetting 0 [ 68.962566][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.972479][ T1108] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 69.231182][ T4236] usb 2-1: string descriptor 0 read error: -22 [ 69.287025][ T4236] usb 2-1: New USB device found, idVendor=12d1, idProduct=7b26, bcdDevice=a2.94 [ 69.421233][ T4236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.493750][ T1108] Bluetooth: hci3: command 0x0419 tx timeout [ 69.721029][ T4236] hub 2-1:6.138: bad descriptor, ignoring hub [ 69.802851][ T4236] hub: probe of 2-1:6.138 failed with error -5 [ 69.944453][ T4236] option 2-1:6.138: GSM modem (1-port) converter detected [ 69.992776][ T4280] sg_write: data in/out 366944/136 bytes for SCSI command 0x0-- guessing data in; [ 69.992776][ T4280] program syz.1.7 not setting count and/or reply_len properly [ 70.079070][ T4304] loop4: detected capacity change from 0 to 64 [ 70.119429][ T1108] Bluetooth: hci1: command 0x0419 tx timeout [ 70.125591][ T1108] Bluetooth: hci0: command 0x0419 tx timeout [ 70.133067][ T1108] Bluetooth: hci4: command 0x0419 tx timeout [ 70.139347][ T1108] Bluetooth: hci2: command 0x0419 tx timeout [ 70.478996][ T4311] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 70.781332][ T1108] usb 2-1: USB disconnect, device number 2 [ 71.105392][ T1108] option 2-1:6.138: device disconnected [ 71.184185][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.190825][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.277573][ T4320] tipc: Failed to remove unknown binding: 66,0,0/0:717885246/717885248 [ 71.299107][ T4324] loop3: detected capacity change from 0 to 128 [ 71.316440][ T4320] tipc: Failed to remove unknown binding: 66,0,0/0:717885246/717885247 [ 71.335846][ T4324] ufs: ufstype=nextstep is supported read-only [ 72.125007][ T4191] usb 3-1: USB disconnect, device number 2 [ 72.520403][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 73.154147][ T4340] loop4: detected capacity change from 0 to 4096 [ 73.239812][ T4343] tipc: Failed to remove unknown binding: 66,0,0/0:2595731901/2595731902 [ 73.824973][ T4345] ======================================================= [ 73.824973][ T4345] WARNING: The mand mount option has been deprecated and [ 73.824973][ T4345] and is ignored by this kernel. Remove the mand [ 73.824973][ T4345] option from the mount to silence this warning. [ 73.824973][ T4345] ======================================================= [ 73.859847][ C1] vkms_vblank_simulate: vblank timer overrun [ 73.883810][ T263] block nbd1: Attempted send on invalid socket [ 73.892074][ T263] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 73.908119][ T4345] befs: (nbd1): unable to read superblock [ 74.180384][ C0] sched: RT throttling activated [ 74.370679][ T26] audit: type=1800 audit(1787292399.413:2): pid=4337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.17" name="bus" dev="ramfs" ino=32395 res=0 errno=0 [ 74.513737][ T4340] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 74.650761][ T4361] fuse: Bad value for 'fd' [ 74.855796][ T1108] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 74.964437][ T4364] capability: warning: `syz.0.26' uses deprecated v2 capabilities in a way that may be insecure [ 75.150757][ T1108] usb 4-1: Using ep0 maxpacket: 16 [ 75.231167][ T4359] loop2: detected capacity change from 0 to 32768 [ 75.610502][ T1108] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.621446][ T4359] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.25 (4359) [ 75.689188][ T1108] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 75.719754][ T1108] usb 4-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 75.740065][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.757384][ T1108] usb 4-1: config 0 descriptor?? [ 75.789788][ T4359] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 75.819959][ T4359] BTRFS info (device loop2): setting nodatacow, compression disabled [ 75.860520][ T4359] BTRFS info (device loop2): force clearing of disk cache [ 75.876677][ T4359] BTRFS info (device loop2): turning off barriers [ 75.902368][ T4359] BTRFS info (device loop2): use no compression [ 75.924657][ T4359] BTRFS info (device loop2): disabling free space tree [ 75.953917][ T4359] BTRFS info (device loop2): enabling ssd optimizations [ 75.987621][ T4359] BTRFS info (device loop2): using spread ssd allocation scheme [ 76.010613][ T4359] BTRFS info (device loop2): turning on flush-on-commit [ 76.030555][ T4359] BTRFS info (device loop2): has skinny extents [ 76.244998][ T4389] loop0: detected capacity change from 0 to 8 [ 76.860307][ T4359] BTRFS info (device loop2): clearing free space tree [ 77.058600][ T4359] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 77.130237][ T4359] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 77.198652][ T4359] BTRFS info (device loop2): checking UUID tree [ 77.862602][ T4406] loop4: detected capacity change from 0 to 1024 [ 77.871362][ T21] usb 4-1: USB disconnect, device number 2 [ 78.012500][ T4406] EXT4-fs (loop4): Ignoring removed oldalloc option [ 78.177200][ T4406] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_dev=0x0000000000000002,nodioread_nolock,oldalloc,barrier,delalloc,grpjquota=,,errors=continue. Quota mode: none. [ 78.307427][ T4406] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.437309][ T4408] loop0: detected capacity change from 0 to 8192 [ 78.636943][ T4408] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 78.672759][ T4406] EXT4-fs error (device loop4): ext4_map_blocks:741: inode #15: block 3: comm syz.4.32: lblock 3 mapped to illegal pblock 3 (length 3) [ 78.800702][ T4408] REISERFS (device loop0): using ordered data mode [ 78.807237][ T4408] reiserfs: using flush barriers [ 78.872844][ T4406] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 78.903034][ T4406] EXT4-fs (loop4): This should not happen!! Data will be lost [ 78.903034][ T4406] [ 78.912808][ T4408] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 78.977867][ T4369] EXT4-fs error (device loop4): ext4_map_blocks:741: inode #15: block 8: comm kworker/u4:13: lblock 8 mapped to illegal pblock 8 (length 8) [ 78.984516][ T4408] REISERFS (device loop0): checking transaction log (loop0) [ 79.111089][ T150] block nbd2: Attempted send on invalid socket [ 79.117389][ T150] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 79.145521][ T4408] REISERFS (device loop0): Using r5 hash to sort names [ 79.185908][ T4408] REISERFS (device loop0): using 3.5.x disk format [ 79.240646][ T4369] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 79.326162][ T4408] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 79.441346][ T4369] EXT4-fs (loop4): This should not happen!! Data will be lost [ 79.441346][ T4369] [ 81.415191][ T4437] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 81.440416][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 81.460400][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 81.470399][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 81.480401][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 81.517891][ T1111] cfg80211: failed to load regulatory.db [ 82.505182][ T4464] device syzkaller0 entered promiscuous mode [ 82.562735][ T1111] hid-generic 0005:0457:0009.0002: unknown main item tag 0x0 [ 82.672496][ T1111] hid-generic 0005:0457:0009.0002: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 82.898850][ T4469] syz.0.48 (4469) used greatest stack depth: 20832 bytes left [ 84.065191][ T4485] loop0: detected capacity change from 0 to 512 [ 84.070705][ T4483] loop1: detected capacity change from 0 to 2048 [ 84.157903][ T4485] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 84.210852][ T4485] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 84.234331][ T4483] NILFS (loop1): invalid segment: Magic number mismatch [ 84.261191][ T4483] NILFS (loop1): trying rollback from an earlier position [ 84.385916][ T4485] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 84.430125][ T4483] NILFS (loop1): recovery complete [ 84.483918][ T4493] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 84.487587][ T4485] EXT4-fs (loop0): 1 truncate cleaned up [ 84.528375][ T4485] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 84.737471][ T4500] netlink: 20 bytes leftover after parsing attributes in process `syz.3.59'. [ 84.933172][ T4500] netlink: 20 bytes leftover after parsing attributes in process `syz.3.59'. [ 85.333784][ T4507] device syzkaller0 entered promiscuous mode [ 85.406867][ T4500] netlink: 20 bytes leftover after parsing attributes in process `syz.3.59'. [ 85.725707][ T4515] Zero length message leads to an empty skb [ 86.493480][ T4297] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.520424][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 86.530431][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 86.540414][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 86.550419][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 86.560416][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 86.881584][ T4297] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.047633][ T4297] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.386356][ T4297] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.474392][ T4549] i2c i2c-0: new_device: Can't parse I2C address [ 89.693940][ T23] lg-g15 0003:046D:0A07.0003: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 89.705423][ T23] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0003/input/input5 [ 90.381441][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 90.678078][ T4538] chnl_net:caif_netlink_parms(): no params data found [ 90.917606][ T4574] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 92.460619][ T4235] Bluetooth: hci4: command 0x041b tx timeout [ 92.778505][ T4538] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.816535][ T4538] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.979431][ T4538] device bridge_slave_0 entered promiscuous mode [ 93.017977][ T4538] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.026344][ T4538] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.035960][ T4538] device bridge_slave_1 entered promiscuous mode [ 93.086677][ T4538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.468576][ T4538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.531539][ T4269] Bluetooth: hci4: command 0x040f tx timeout [ 94.642696][ T4538] team0: Port device team_slave_0 added [ 94.717241][ T4538] team0: Port device team_slave_1 added [ 94.824399][ T4538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.886206][ T4538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.921573][ T4538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.062743][ T4538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.070851][ T4538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.179590][ T4538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.366270][ T4538] device hsr_slave_0 entered promiscuous mode [ 95.384896][ T4538] device hsr_slave_1 entered promiscuous mode [ 95.405849][ T4538] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.451856][ T4538] Cannot create hsr debugfs directory [ 95.464601][ T4668] netlink: 'syz.3.97': attribute type 10 has an invalid length. [ 95.504534][ T4668] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.513256][ T4668] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.580866][ T4668] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.588062][ T4668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.597363][ T4668] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.604569][ T4668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.617940][ T4668] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 95.659621][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 96.119176][ T4297] device hsr_slave_0 left promiscuous mode [ 96.129482][ T4297] device hsr_slave_1 left promiscuous mode [ 96.145523][ T4297] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.158011][ T4297] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.195406][ T4297] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.239133][ T4297] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.257408][ T4297] device bridge_slave_1 left promiscuous mode [ 96.283985][ T4297] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.379402][ T4297] device bridge_slave_0 left promiscuous mode [ 96.415664][ T4297] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.415783][ T4691] loop4: detected capacity change from 0 to 512 [ 96.620597][ T4545] Bluetooth: hci4: command 0x0419 tx timeout [ 96.639445][ T4691] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 96.741542][ T4297] device veth1_macvtap left promiscuous mode [ 96.898577][ T4297] device veth0_macvtap left promiscuous mode [ 97.044558][ T4297] device veth1_vlan left promiscuous mode [ 97.056407][ T4297] device veth0_vlan left promiscuous mode [ 97.152341][ T4691] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #17: comm syz.4.104: inode has both inline data and extents flags [ 97.227578][ T4691] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.104: couldn't read orphan inode 17 (err -117) [ 97.291398][ T4691] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 97.544664][ T4721] loop7: detected capacity change from 0 to 7 [ 97.563479][ T4178] Dev loop7: unable to read RDB block 7 [ 97.579332][ T4178] loop7: unable to read partition table [ 97.594306][ T4178] loop7: partition table beyond EOD, truncated [ 97.622154][ T4721] Dev loop7: unable to read RDB block 7 [ 97.629772][ T4721] loop7: unable to read partition table [ 97.636223][ T4721] loop7: partition table beyond EOD, truncated [ 97.643060][ T4721] loop_reread_partitions: partition scan of loop7 (ъщ) failed (rc=-5) [ 97.900901][ T4297] team0 (unregistering): Port device team_slave_1 removed [ 97.916119][ T4297] team0 (unregistering): Port device team_slave_0 removed [ 97.937379][ T4297] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.956197][ T4297] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.036117][ T4297] bond0 (unregistering): Released all slaves [ 98.350554][ T4538] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 98.377800][ T4538] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 98.415109][ T4538] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 98.437713][ T4538] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 98.507656][ T21] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 98.822351][ T4538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.880439][ T21] usb 2-1: Using ep0 maxpacket: 8 [ 98.919804][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.989475][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.124469][ T4538] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.405430][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.565022][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.626494][ T4371] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.633830][ T4371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.642644][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 99.654393][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.663641][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.673843][ T4371] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.681147][ T4371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.689254][ T21] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 99.720696][ T21] usb 2-1: config 0 has no interface number 0 [ 99.727016][ T21] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 99.780836][ T21] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 99.800808][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 99.811766][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 99.823664][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.847430][ T4772] unsupported nlmsg_type 40 [ 99.848615][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 99.875094][ T21] usb 2-1: config 0 descriptor?? [ 99.908998][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 99.948881][ T21] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 99.961189][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 99.987156][ T4538] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 100.035150][ T4538] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.067928][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 100.087377][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 100.121295][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 100.130144][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.149320][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 100.162919][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.182397][ T4269] usb 2-1: USB disconnect, device number 3 [ 100.217660][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 100.573945][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 100.602129][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 100.694211][ T4538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.678155][ T4836] netlink: 24 bytes leftover after parsing attributes in process `syz.0.133'. [ 104.712594][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 104.729774][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 104.794772][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 104.814632][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 104.883244][ T4538] device veth0_vlan entered promiscuous mode [ 104.890898][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 104.916060][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 104.987346][ T4538] device veth1_vlan entered promiscuous mode [ 104.994474][ T4846] futex_wake_op: syz.0.135 tries to shift op by 144; fix this program [ 105.982660][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 105.998617][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 106.007431][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 106.023728][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 106.042436][ T4538] device veth0_macvtap entered promiscuous mode [ 106.081367][ T4538] device veth1_macvtap entered promiscuous mode [ 106.201984][ T4538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.281666][ T4538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.338374][ T4538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.376066][ T4538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.433434][ T4538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.482545][ T4538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.522671][ T4538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.553935][ T4538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.567177][ T4538] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.587217][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 106.599145][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 106.646180][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 106.680207][ T4538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.717234][ T4538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.738470][ T4538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.749056][ T4538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.764580][ T4538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.776432][ T4538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.792829][ T4538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.804587][ T4538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.819646][ T4538] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.830998][ T4545] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 106.847025][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 106.860919][ T1271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 107.056088][ T4538] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.120650][ T4538] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.491710][ T4545] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 107.532283][ T4545] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.817897][ T4545] usb 2-1: config 0 descriptor?? [ 107.858271][ T4538] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.886342][ T4538] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.071395][ T4369] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.104461][ T4369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.203678][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 108.239314][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.285990][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.313125][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 108.472666][ T4897] loop5: detected capacity change from 0 to 128 [ 108.496308][ T4897] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 108.582258][ T4897] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 108.801685][ T4901] loop3: detected capacity change from 0 to 32768 [ 108.840797][ T4545] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 108.849376][ T4545] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 108.980557][ T4545] [drm:udl_init] *ERROR* Selecting channel failed [ 109.017083][ T4545] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 109.045134][ T4901] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 109.071298][ T4545] [drm] Initialized udl on minor 2 [ 109.121460][ T4545] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 109.289408][ T4545] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 109.508104][ T4545] usb 2-1: USB disconnect, device number 4 [ 109.850826][ T13] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 109.864448][ T13] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 109.874657][ T13] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 109.924016][ T4369] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 110.046856][ T4892] loop4: detected capacity change from 0 to 32768 [ 110.130135][ T4892] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 110.188580][ T4892] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 110.254533][ T4892] JBD2: Ignoring recovery information on journal [ 110.384476][ T4892] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 110.560818][ T26] audit: type=1800 audit(1787292435.603:3): pid=4892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.146" name="file1" dev="loop4" ino=17059 res=0 errno=0 [ 110.610740][ T4892] syz.4.146 (4892) used greatest stack depth: 18192 bytes left [ 110.752659][ T4188] ocfs2: Unmounting device (7,4) on (node local) [ 111.898308][ T4189] ocfs2: Unmounting device (7,3) on (node local) [ 111.983701][ T4950] loop4: detected capacity change from 0 to 8 [ 112.137389][ T4945] loop5: detected capacity change from 0 to 4096 [ 112.194745][ T4951] loop1: detected capacity change from 0 to 4096 [ 112.195698][ T4945] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 112.388754][ T4951] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 112.668324][ T4964] loop0: detected capacity change from 0 to 1024 [ 112.799530][ T4964] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: writeback. [ 112.807379][ T4975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.160'. [ 112.859790][ T4975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.160'. [ 112.878004][ T4964] EXT4-fs warning (device loop0): empty_inline_dir:1870: bad inline directory (dir #12) - no `..' [ 112.882966][ T4538] ntfs3: loop5: ntfs_sync_fs r=1a failed, -22. [ 112.947037][ T4538] ntfs3: loop5: ntfs_evict_inode r=1a failed, -22. [ 112.966247][ T4538] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 113.316331][ T4990] Invalid ELF header magic: != ELF [ 114.080966][ T4987] loop0: detected capacity change from 0 to 32768 [ 114.885719][ T26] audit: type=1326 audit(1787292439.933:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5012 comm="syz.5.169" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb7962130d9 code=0x0 [ 115.149141][ T5025] loop1: detected capacity change from 0 to 8 [ 115.280581][ T4234] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 115.378521][ T5031] loop1: detected capacity change from 0 to 512 [ 115.445877][ T5031] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 115.583366][ T5031] EXT4-fs warning (device loop1): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 115.615311][ T5031] EXT4-fs (loop1): mount failed [ 115.698062][ T4234] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 115.940851][ T13] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 116.351186][ T13] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.388156][ T13] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 116.459348][ T4234] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.470568][ T4234] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.480570][ T4234] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 116.554179][ T5055] device syzkaller0 entered promiscuous mode [ 116.571839][ T4234] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 116.590521][ T4234] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 116.599336][ T4234] usb 4-1: Manufacturer: syz [ 116.608307][ T4234] usb 4-1: config 0 descriptor?? [ 116.646066][ T13] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 116.666434][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.690864][ T13] usb 1-1: Product: syz [ 116.695447][ T13] usb 1-1: Manufacturer: syz [ 116.700235][ T13] usb 1-1: SerialNumber: syz [ 116.774855][ T13] cdc_mbim 1-1:1.0: skipping garbage [ 116.999730][ T5049] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 117.055201][ T5052] loop5: detected capacity change from 0 to 32768 [ 117.120461][ T5052] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.180 (5052) [ 117.256442][ T5052] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 117.272619][ T5052] BTRFS info (device loop5): disabling free space tree [ 117.283828][ T5052] BTRFS info (device loop5): setting nodatacow, compression disabled [ 117.294917][ T5052] BTRFS info (device loop5): turning off barriers [ 117.303276][ T5052] BTRFS info (device loop5): use no compression [ 117.375333][ T4234] usbhid 4-1:0.0: can't add hid device: -71 [ 117.378310][ T5052] BTRFS warning (device loop5): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 117.390103][ T4234] usbhid: probe of 4-1:0.0 failed with error -71 [ 117.440840][ T5052] BTRFS info (device loop5): trying to use backup root at mount time [ 117.445584][ T4234] usb 4-1: USB disconnect, device number 3 [ 117.466065][ T5052] BTRFS error (device loop5): cannot disable free space tree [ 117.554750][ T5052] BTRFS error (device loop5): open_ctree failed: -22 [ 117.681981][ T5049] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 117.710650][ T13] cdc_mbim 1-1:1.0: setting tx_max = 16384 [ 117.718580][ T13] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 117.798333][ T13] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, de:2e:d4:7f:bd:f2 [ 117.958122][ T1108] usb 1-1: USB disconnect, device number 2 [ 117.969607][ T1108] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 118.008355][ T5079] loop3: detected capacity change from 0 to 512 [ 118.105470][ T5079] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 118.242770][ T5079] EXT4-fs (loop3): 1 truncate cleaned up [ 118.250576][ T5079] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 119.194643][ T5087] ipt_ECN: cannot use operation on non-tcp rule [ 119.379235][ T5103] loop3: detected capacity change from 0 to 1024 [ 119.723228][ T5108] device syzkaller0 entered promiscuous mode [ 119.829788][ T26] audit: type=1800 audit(1787292444.873:5): pid=5103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.191" name="file0" dev="loop3" ino=18 res=0 errno=0 [ 120.221763][ T5120] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 120.238152][ T5120] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 121.696626][ T5145] syz.4.200 uses obsolete (PF_INET,SOCK_PACKET) [ 122.016500][ T5149] loop4: detected capacity change from 0 to 512 [ 122.087633][ T5149] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 122.277292][ T5149] EXT4-fs (loop4): 1 truncate cleaned up [ 122.284424][ T5149] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 122.624246][ T5147] loop1: detected capacity change from 0 to 131072 [ 122.931255][ T5147] F2FS-fs (loop1): invalid crc value [ 122.992863][ T5147] F2FS-fs (loop1): Found nat_bits in checkpoint [ 123.040308][ T5147] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 123.067270][ T5147] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 123.562017][ T5161] device syzkaller0 entered promiscuous mode [ 125.214054][ T5190] loop5: detected capacity change from 0 to 512 [ 125.932684][ T5190] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 125.993777][ T5190] EXT4-fs (loop5): 1 truncate cleaned up [ 126.004925][ T5190] EXT4-fs (loop5): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 126.530779][ T5211] capability: warning: `syz.1.215' uses 32-bit capabilities (legacy support in use) [ 126.810774][ T5212] ipt_ECN: cannot use operation on non-tcp rule [ 127.144372][ T5220] device syzkaller0 entered promiscuous mode [ 128.370754][ T5232] netlink: 40 bytes leftover after parsing attributes in process `syz.5.217'. [ 128.466769][ T5232] netlink: 40 bytes leftover after parsing attributes in process `syz.5.217'. [ 129.936344][ T5262] using random self ethernet address [ 129.944006][ T5262] using random host ethernet address [ 130.111205][ T26] audit: type=1800 audit(1787292455.163:6): pid=5263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.227" name="idProduct" dev="configfs" ino=37147 res=0 errno=0 [ 130.117205][ T5260] loop4: detected capacity change from 0 to 512 [ 130.287650][ T26] audit: type=1800 audit(1787292455.333:7): pid=5262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.227" name="idVendor" dev="configfs" ino=36079 res=0 errno=0 [ 130.408466][ T5260] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 130.426249][ T5269] ipt_ECN: cannot use operation on non-tcp rule [ 130.585371][ T5274] device syzkaller0 entered promiscuous mode [ 130.601271][ T5260] EXT4-fs (loop4): 1 truncate cleaned up [ 130.607070][ T5260] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 132.995856][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.008195][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.320917][ T5298] loop3: detected capacity change from 0 to 128 [ 133.550800][ T5298] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 133.569903][ T5298] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.585028][ T5298] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.237: No space for directory leaf checksum. Please run e2fsck -D. [ 133.617651][ T5298] EXT4-fs error (device loop3): htree_dirblock_to_tree:1083: inode #2: comm syz.3.237: Directory block failed checksum [ 133.862698][ T5316] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.237: No space for directory leaf checksum. Please run e2fsck -D. [ 133.958399][ T5316] EXT4-fs error (device loop3): __ext4_find_entry:1696: inode #2: comm syz.3.237: checksumming directory block 0 [ 134.275447][ T5320] ipt_ECN: cannot use operation on non-tcp rule [ 135.946171][ T5339] device syzkaller0 entered promiscuous mode [ 136.559091][ T5347] loop3: detected capacity change from 0 to 8192 [ 136.659962][ T5347] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 136.739018][ T5347] REISERFS (device loop3): using ordered data mode [ 136.774426][ T5347] reiserfs: using flush barriers [ 136.783036][ T5347] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 136.816556][ T5347] REISERFS (device loop3): checking transaction log (loop3) [ 136.995230][ T5369] loop4: detected capacity change from 0 to 512 [ 137.111848][ T5369] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 137.225055][ T5347] REISERFS (device loop3): Using tea hash to sort names [ 137.277004][ T5369] EXT4-fs (loop4): 1 truncate cleaned up [ 137.279274][ T5347] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 137.360818][ T5382] ipt_ECN: cannot use operation on non-tcp rule [ 137.760715][ T5369] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 138.739170][ T5347] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 2) not found (pos 4) [ 138.984105][ T5347] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 2) not found (pos 4) [ 139.246854][ T5394] device syzkaller0 entered promiscuous mode [ 139.482419][ T5396] loop5: detected capacity change from 0 to 4096 [ 139.777392][ T5396] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 140.567171][ T26] audit: type=1800 audit(1787292465.613:8): pid=5396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.261" name="file0" dev="loop5" ino=0 res=0 errno=0 [ 141.189063][ T4234] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 141.299462][ T4234] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 141.561229][ T5431] ipt_ECN: cannot use operation on non-tcp rule [ 142.795992][ T5441] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input7 [ 143.007578][ T5446] loop1: detected capacity change from 0 to 512 [ 143.206693][ T5446] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 143.302979][ T5446] EXT4-fs (loop1): 1 truncate cleaned up [ 143.308669][ T5446] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 144.181046][ T5462] loop3: detected capacity change from 0 to 512 [ 144.367934][ T5462] EXT4-fs (loop3): inline encryption not supported [ 144.380450][ T5469] loop4: detected capacity change from 0 to 256 [ 144.442712][ T5471] device syzkaller0 entered promiscuous mode [ 144.465772][ T5462] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,grpjquota=,inlinecrypt,,errors=continue. Quota mode: writeback. [ 144.528944][ T5469] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xf9634425, utbl_chksum : 0xe619d30d) [ 144.604720][ T5462] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.125874][ T5493] ipt_ECN: cannot use operation on non-tcp rule [ 147.709315][ T5515] loop1: detected capacity change from 0 to 512 [ 147.739627][ T5513] loop3: detected capacity change from 0 to 1024 [ 148.130077][ T5515] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 148.452899][ T5513] hfsplus: invalid length 1280 has been corrected to 255 [ 148.514405][ T5513] hfsplus: invalid length 1280 has been corrected to 255 [ 148.573060][ T5515] EXT4-fs (loop1): 1 truncate cleaned up [ 148.578810][ T5515] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 148.671542][ T5528] device syzkaller0 entered promiscuous mode [ 148.716949][ T1271] hfsplus: invalid length 1280 has been corrected to 255 [ 149.805579][ T5545] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 151.036446][ T5565] loop0: detected capacity change from 0 to 4096 [ 151.386193][ T5554] ipt_ECN: cannot use operation on non-tcp rule [ 151.461864][ T5565] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 151.480546][ T5565] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 151.507819][ T5565] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 151.534832][ T5565] loop0: [ 152.271569][ T5591] device syzkaller0 entered promiscuous mode [ 153.777982][ T5614] process 'syz.5.314' launched './file0' with NULL argv: empty string added [ 156.483489][ T5669] device syzkaller0 entered promiscuous mode [ 156.644714][ T5671] loop3: detected capacity change from 0 to 4096 [ 157.127700][ T5671] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 157.213553][ T5677] loop5: detected capacity change from 0 to 512 [ 157.256519][ T5677] EXT4-fs (loop5): Ignoring removed bh option [ 157.402033][ T5677] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 158.025750][ T5677] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 158.036365][ T26] audit: type=1800 audit(1787292483.083:9): pid=5689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.327" name="file1" dev="loop3" ino=30 res=0 errno=0 [ 158.124309][ T4189] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 158.389867][ T5700] loop0: detected capacity change from 0 to 2048 [ 159.182892][ T5677] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:476: comm syz.5.326: Invalid block bitmap block 0 in block_group 0 [ 159.213380][ T5700] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 159.240056][ T5677] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 159.279776][ T5713] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 159.280818][ T5712] device syzkaller0 entered promiscuous mode [ 159.320843][ T5677] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #11: comm syz.5.326: attempt to clear invalid blocks 983261 len 1 [ 159.408769][ T5677] EXT4-fs error (device loop5): __ext4_get_inode_loc:4334: comm syz.5.326: Invalid inode table block 0 in block_group 0 [ 159.540149][ T5677] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 159.622187][ T5677] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 159.700966][ T5677] EXT4-fs error (device loop5): __ext4_get_inode_loc:4334: comm syz.5.326: Invalid inode table block 0 in block_group 0 [ 159.743589][ T5730] loop4: detected capacity change from 0 to 64 [ 159.759342][ T5677] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 159.775191][ T5677] EXT4-fs error (device loop5): ext4_truncate:4286: inode #11: comm syz.5.326: mark_inode_dirty error [ 159.789566][ T5677] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 159.807695][ T5677] EXT4-fs error (device loop5): __ext4_get_inode_loc:4334: comm syz.5.326: Invalid inode table block 0 in block_group 0 [ 159.877586][ T5677] EXT4-fs (loop5): 1 truncate cleaned up [ 159.885858][ T5677] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,grpquota,bh,noblock_validity,,errors=continue. Quota mode: writeback. [ 162.739575][ T5760] device syzkaller0 entered promiscuous mode [ 162.845559][ T5766] device syzkaller0 entered promiscuous mode [ 164.390504][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 164.824730][ T26] audit: type=1800 audit(1787292489.873:10): pid=5850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.353" name="max_speed" dev="configfs" ino=36731 res=0 errno=0 [ 165.020786][ T7] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.074263][ T7] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 165.287072][ T7] usb 1-1: config 0 interface 0 has no altsetting 0 [ 165.294160][ T7] usb 1-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 165.303731][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.580541][ T7] usb 1-1: config 0 descriptor?? [ 166.217465][ T5884] loop5: detected capacity change from 0 to 8 [ 166.287367][ T5887] device syzkaller0 entered promiscuous mode [ 166.353512][ T5884] SQUASHFS error: Failed to read block 0x2d7: -5 [ 166.395926][ T5884] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 166.398757][ T5891] loop3: detected capacity change from 0 to 64 [ 166.685527][ T26] audit: type=1326 audit(1787292491.733:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5896 comm="syz.4.369" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5081c070d9 code=0x7ffc0000 [ 166.810036][ T5908] loop0: detected capacity change from 0 to 256 [ 166.838513][ T26] audit: type=1326 audit(1787292491.823:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5896 comm="syz.4.369" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5081c070d9 code=0x7ffc0000 [ 166.890553][ T7] usbhid 1-1:0.0: can't add hid device: -71 [ 166.896837][ T5908] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 166.919668][ T7] usbhid: probe of 1-1:0.0 failed with error -71 [ 166.938533][ T7] usb 1-1: USB disconnect, device number 3 [ 166.955443][ T26] audit: type=1326 audit(1787292491.843:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5896 comm="syz.4.369" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5081bc790e code=0x7ffc0000 [ 167.014974][ T26] audit: type=1326 audit(1787292491.853:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5896 comm="syz.4.369" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5081bc790e code=0x7ffc0000 [ 167.151914][ T26] audit: type=1326 audit(1787292491.863:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5896 comm="syz.4.369" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5081bc790e code=0x7ffc0000 [ 167.199676][ T26] audit: type=1326 audit(1787292491.873:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5896 comm="syz.4.369" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5081bc790e code=0x7ffc0000 [ 167.238681][ T26] audit: type=1326 audit(1787292491.873:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5896 comm="syz.4.369" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5081bc790e code=0x7ffc0000 [ 167.263167][ T26] audit: type=1326 audit(1787292491.873:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5896 comm="syz.4.369" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5081bc790e code=0x7ffc0000 [ 167.292360][ T26] audit: type=1326 audit(1787292491.883:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5896 comm="syz.4.369" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5081bc790e code=0x7ffc0000 [ 167.520487][ T7] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 168.881092][ T7] usb 1-1: config 0 has no interfaces? [ 169.060786][ T7] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 169.101767][ T5947] netlink: 8 bytes leftover after parsing attributes in process `syz.5.377'. [ 169.121060][ T7] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 169.129075][ T7] usb 1-1: Product: syz [ 169.164758][ T5947] netlink: 4 bytes leftover after parsing attributes in process `syz.5.377'. [ 169.190721][ T7] usb 1-1: Manufacturer: syz [ 169.230495][ T7] usb 1-1: config 0 descriptor?? [ 169.481689][ T5945] usb 1-1: USB disconnect, device number 4 [ 169.947104][ T5962] program syz.5.379 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 169.964933][ T5962] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 172.172928][ T5994] device syzkaller0 entered promiscuous mode [ 172.435475][ T5996] tipc: Failed to remove unknown binding: 66,0,0/0:2413723929/2413723930 [ 172.606596][ T6002] loop0: detected capacity change from 0 to 256 [ 172.939838][ T6009] netlink: 'syz.5.391': attribute type 1 has an invalid length. [ 173.098769][ T6009] device syz_tun entered promiscuous mode [ 173.316910][ T6018] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 174.249151][ T26] kauditd_printk_skb: 63 callbacks suppressed [ 174.249166][ T26] audit: type=1326 audit(1787292499.293:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6028 comm="syz.3.399" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90dc390d9 code=0x7ffc0000 [ 175.471765][ T26] audit: type=1326 audit(1787292499.293:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6028 comm="syz.3.399" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe90dc390d9 code=0x7ffc0000 [ 175.575905][ T5821] Bluetooth: hci5: Frame reassembly failed (-84) [ 175.582521][ T26] audit: type=1326 audit(1787292499.293:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6028 comm="syz.3.399" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90dc390d9 code=0x7ffc0000 [ 175.615554][ T26] audit: type=1326 audit(1787292499.293:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6028 comm="syz.3.399" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7fe90dc390d9 code=0x7ffc0000 [ 175.637458][ T6041] Bluetooth: hci5: Frame reassembly failed (-84) [ 175.641693][ T26] audit: type=1326 audit(1787292499.303:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6028 comm="syz.3.399" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90dc390d9 code=0x7ffc0000 [ 175.716691][ T6048] divide error: 0000 [#1] PREEMPT SMP KASAN [ 175.722676][ T6048] CPU: 0 PID: 6048 Comm: syz.0.406 Not tainted syzkaller #0 [ 175.729972][ T6048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 175.740144][ T6048] RIP: 0010:block2mtd_setup2+0x5b0/0xd90 [ 175.745795][ T6048] Code: 48 c1 e8 03 49 bd 00 00 00 00 00 fc ff df 42 80 3c 28 00 4c 8b 7c 24 18 74 08 4c 89 f7 e8 88 8c 91 fc 49 8b 06 49 63 cf 48 99 <48> f7 f9 49 89 d6 31 ff 48 89 d6 e8 10 6c 4c fc 4d 85 f6 0f 85 98 [ 175.766217][ T6048] RSP: 0018:ffffc900032bf9e0 EFLAGS: 00010246 [ 175.772304][ T6048] RAX: 0000000000000000 RBX: 1ffff1100327ac02 RCX: 0000000000000000 [ 175.780375][ T6048] RDX: 0000000000000000 RSI: 0000000000700000 RDI: 0000000001f00000 [ 175.788442][ T6048] RBP: ffffc900032bfbd0 R08: ffff8880203e44af R09: 1ffff1100407c895 [ 175.797471][ T6048] R10: dffffc0000000000 R11: ffffed100407c896 R12: ffffc900032bfa60 [ 175.805454][ T6048] R13: dffffc0000000000 R14: ffff88814088cd60 R15: 0000000000000000 [ 175.813611][ T6048] FS: 00007f62a049e6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 175.822558][ T6048] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 175.829577][ T6048] CR2: 000000110c2b4485 CR3: 000000005a8f4000 CR4: 00000000003506f0 [ 175.838701][ T6048] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 175.846684][ T6048] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 175.855188][ T6048] Call Trace: [ 175.858558][ T6048] [ 175.861552][ T6048] ? block2mtd_setup+0x40/0x40 [ 175.866412][ T6048] ? __mutex_lock_common+0x435/0x2400 [ 175.871907][ T6048] ? read_lock_is_recursive+0x10/0x10 [ 175.877297][ T6048] block2mtd_setup+0x1f/0x40 [ 175.881942][ T6048] param_attr_store+0x20a/0x300 [ 175.886803][ T6048] ? param_attr_show+0x170/0x170 [ 175.891748][ T6048] ? sysfs_kf_read+0x350/0x350 [ 175.897131][ T6048] module_attr_store+0x5b/0x80 [ 175.901904][ T6048] kernfs_fop_write_iter+0x3a8/0x500 [ 175.907292][ T6048] vfs_write+0x748/0xd70 [ 175.911547][ T6048] ? file_end_write+0x250/0x250 [ 175.916853][ T6048] ? mutex_lock_nested+0x17/0x20 [ 175.922386][ T6048] ? __fdget_pos+0x2bf/0x370 [ 175.927025][ T6048] ? ksys_write+0x70/0x260 [ 175.931711][ T6048] ksys_write+0x153/0x260 [ 175.936051][ T6048] ? __ia32_sys_read+0x80/0x80 [ 175.940831][ T6048] ? lockdep_hardirqs_on+0x94/0x140 [ 175.946047][ T6048] do_syscall_64+0x4c/0xa0 [ 175.950649][ T6048] ? clear_bhb_loop+0x30/0x80 [ 175.955342][ T6048] ? clear_bhb_loop+0x30/0x80 [ 175.960029][ T6048] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 175.966028][ T6048] RIP: 0033:0x7f62a22460d9 [ 175.970487][ T6048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.991415][ T6048] RSP: 002b:00007f62a049e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 176.000798][ T6048] RAX: ffffffffffffffda RBX: 00007f62a24cdfa0 RCX: 00007f62a22460d9 [ 176.008870][ T6048] RDX: 000000000000000b RSI: 0000200000000200 RDI: 0000000000000003 [ 176.016938][ T6048] RBP: 00007f62a22dd024 R08: 0000000000000000 R09: 0000000000000000 [ 176.025112][ T6048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.033176][ T6048] R13: 00007f62a24ce038 R14: 00007f62a24cdfa0 R15: 00007ffdeb5463d8 [ 176.041253][ T6048] [ 176.044291][ T6048] Modules linked in: [ 176.060863][ T6048] ---[ end trace 6faf63ee5178ea99 ]--- [ 176.070971][ T6048] RIP: 0010:block2mtd_setup2+0x5b0/0xd90 [ 176.083554][ T6048] Code: 48 c1 e8 03 49 bd 00 00 00 00 00 fc ff df 42 80 3c 28 00 4c 8b 7c 24 18 74 08 4c 89 f7 e8 88 8c 91 fc 49 8b 06 49 63 cf 48 99 <48> f7 f9 49 89 d6 31 ff 48 89 d6 e8 10 6c 4c fc 4d 85 f6 0f 85 98 [ 176.125536][ T6048] RSP: 0018:ffffc900032bf9e0 EFLAGS: 00010246 [ 176.138989][ T6048] RAX: 0000000000000000 RBX: 1ffff1100327ac02 RCX: 0000000000000000 [ 176.147479][ T6048] RDX: 0000000000000000 RSI: 0000000000700000 RDI: 0000000001f00000 [ 176.156913][ T6048] RBP: ffffc900032bfbd0 R08: ffff8880203e44af R09: 1ffff1100407c895 [ 176.165485][ T6048] R10: dffffc0000000000 R11: ffffed100407c896 R12: ffffc900032bfa60 [ 176.173898][ T6048] R13: dffffc0000000000 R14: ffff88814088cd60 R15: 0000000000000000 [ 176.182400][ T6048] FS: 00007f62a049e6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 176.191717][ T6048] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 176.198373][ T6048] CR2: 00007f62a22937c0 CR3: 000000005a8f4000 CR4: 00000000003506f0 [ 176.208293][ T6048] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 176.216916][ T6048] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 176.227277][ T6048] Kernel panic - not syncing: Fatal exception [ 176.234081][ T6048] Kernel Offset: disabled [ 176.238496][ T6048] Rebooting in 86400 seconds..