last executing test programs: 5m38.291853108s ago: executing program 32 (id=209): sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000004000000000000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000851000000c00000018120000", @ANYRES32, @ANYBLOB="000000000000000018420000fdffffff000000000000000018110000", @ANYRES32, @ANYBLOB="0085000000860010003b46a1803f33a8bf91000000000000b70200000200000085000084000000b7000000000000009500"], &(0x7f0000000480)='syzkaller\x00', 0x5, 0xd9, &(0x7f0000000680)=""/217, 0x41000, 0x22}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.time\x00', 0x275a, 0x0) r4 = semget$private(0x0, 0x6, 0x0) semtimedop(r4, &(0x7f00000003c0), 0x0, 0x0) semop(r4, &(0x7f00000000c0)=[{0x2, 0x0, 0x1000}], 0x1) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000a20000/0x2000)=nil) epoll_create1(0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$GIO_SCRNMAP(r5, 0x4b40, &(0x7f00000001c0)=""/30) syz_clone3(&(0x7f0000000080)={0x180801400, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r6, &(0x7f00000002c0)={0x1f, 0x2, @none, 0x40, 0x1}, 0xe) 4m10.893942075s ago: executing program 33 (id=427): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x66}, 0x28) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x481, 0x0) r3 = dup(r2) ioctl$PTP_EXTTS_REQUEST2(r3, 0x40043d14, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x9, 0x3}, @func_proto, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}}, 0x0, 0x3e, 0x0, 0x1}, 0x28) sendmsg$NFT_BATCH(r7, 0x0, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048885}, 0x2004c0c4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file1\x00', 0x844, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'cp949'}}, {@shortname_lower}, {@utf8}, {@fat=@flush}, {@utf8}, {@shortname_win95}, {@rodir}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@fat=@codepage={'codepage', 0x3d, '855'}}, {@rodir}, {@utf8}, {@utf8}, {@shortname_winnt}, {@utf8no}, {@fat=@tz_utc}]}, 0x1, 0x292, &(0x7f0000000340)="$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") read$FUSE(0xffffffffffffffff, &(0x7f0000002980)={0x2020}, 0x2020) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) 2m18.071441891s ago: executing program 34 (id=721): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x4044040) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, 0x0, &(0x7f0000000280)) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x2}, 0x8) listen(r0, 0x4) 1m50.251016852s ago: executing program 6 (id=833): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf25670000"], 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0xc800) 1m49.87299666s ago: executing program 6 (id=834): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="0c0100001000010025bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8db20200ad3e0100140003006e65746465"], 0x10c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 1m49.480986729s ago: executing program 6 (id=836): timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) close(0x3) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) shutdown(0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) 1m47.910605349s ago: executing program 6 (id=839): syz_mount_image$hfsplus(&(0x7f00000002c0), &(0x7f0000000180)='./bus\x00', 0xc, &(0x7f0000000dc0)=ANY=[@ANYRES8=0x0, @ANYBLOB="050000006fe9bab3f0ab797f1eec2c308c47ccf9510a98013053ad64c2a1184e15", @ANYRES64, @ANYRES8, @ANYRES8=0x0, @ANYRESHEX=0x0, @ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRES32, @ANYBLOB="5f9c36fa3b65193646fd9835c7d87c180bed25c821c5bce901fb63a3241bb1a27f9e7c33f450f8b8b454ea6765554f1fc79bcd4b63529dc5690c97f9bf9e1e90fa931d3a64f1b800000034ab4e4ea247d309cddb93373add7a92f0aa2408a97f780a372e98868a8bb2c9b8d2ba8c04a1ef8970a0b770473b97e0becb361381429b92d594d0373cfb70a5fdd780220c251107aba11d6f8a44c8810c007804e92398b45c96661c438dbcea15d3a6c4c750233608ffba88e1abea1e0d72eb3279645a70a09c", @ANYRESHEX], 0x1, 0x71f, &(0x7f0000000380)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) setrlimit(0x7, &(0x7f0000000000)) 1m47.312363036s ago: executing program 6 (id=841): socket$netlink(0x10, 0x3, 0x14) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e1c}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x8000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xffffff81}]}) setns(0xffffffffffffffff, 0x24020000) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x121200, 0x0) read$msr(0xffffffffffffffff, &(0x7f00000000c0)=""/180, 0xb4) fcntl$dupfd(r1, 0x0, r1) 1m46.122821668s ago: executing program 6 (id=846): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mremap(&(0x7f00001c7000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000080)=""/1, 0x1) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r4 = fsmount(r3, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) socket$inet(0x2, 0x2, 0x1) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000500)=[{0x6, 0x20, 0x0, 0x480}]}, 0x8) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x44, &(0x7f0000000000)={0x4d, 0x0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0xdabc3000) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYBLOB, @ANYBLOB, @ANYRES32], 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, r2, 0x1b, 0x0, @val=@tcx}, 0x1c) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1m44.456926845s ago: executing program 35 (id=846): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mremap(&(0x7f00001c7000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000080)=""/1, 0x1) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r4 = fsmount(r3, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) socket$inet(0x2, 0x2, 0x1) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000500)=[{0x6, 0x20, 0x0, 0x480}]}, 0x8) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x44, &(0x7f0000000000)={0x4d, 0x0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0xdabc3000) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYBLOB, @ANYBLOB, @ANYRES32], 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, r2, 0x1b, 0x0, @val=@tcx}, 0x1c) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1m32.188989799s ago: executing program 5 (id=867): prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r4, 0x10001, 0x0) 1m30.292430717s ago: executing program 5 (id=870): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000400)={0x1, 0x0, 0x0, &(0x7f0000020000), &(0x7f0000018000)}) write(r1, &(0x7f0000018000)="000001", 0x3) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0) write$tun(r1, &(0x7f0000000800)=ANY=[], 0x10) 1m29.650208992s ago: executing program 5 (id=872): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='nv', 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) writev(r0, &(0x7f00000012c0)=[{&(0x7f00000001c0)="8d", 0x1}], 0x1) 1m29.351087375s ago: executing program 5 (id=873): syz_mount_image$hfsplus(&(0x7f00000002c0), &(0x7f0000000180)='./bus\x00', 0xc, &(0x7f0000000dc0)=ANY=[@ANYRES8=0x0, @ANYBLOB="050000006fe9bab3f0ab797f1eec2c308c47ccf9510a98013053ad64c2a1184e15", @ANYRES64, @ANYRES8, @ANYRES8=0x0, @ANYRESHEX=0x0, @ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRES32, @ANYBLOB="5f9c36fa3b65193646fd9835c7d87c180bed25c821c5bce901fb63a3241bb1a27f9e7c33f450f8b8b454ea6765554f1fc79bcd4b63529dc5690c97f9bf9e1e90fa931d3a64f1b800000034ab4e4ea247d309cddb93373add7a92f0aa2408a97f780a372e98868a8bb2c9b8d2ba8c04a1ef8970a0b770473b97e0becb361381429b92d594d0373cfb70a5fdd780220c251107aba11d6f8a44c8810c007804e92398b45c96661c438dbcea15d3a6c4c750233608ffba88e1abea1e0d72eb3279645a70a09c", @ANYRESHEX], 0x1, 0x71f, &(0x7f0000000380)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) setrlimit(0x7, &(0x7f0000000000)) 1m28.162821647s ago: executing program 5 (id=875): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x200000000000000, 0x0, 0x1, 0xfcff, &(0x7f0000000180)="b3"}) 1m24.264738511s ago: executing program 5 (id=880): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0x7, 0x801) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000080)={0x0, r1}) 1m23.634808323s ago: executing program 36 (id=880): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0x7, 0x801) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000080)={0x0, r1}) 1m18.178885735s ago: executing program 7 (id=886): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_get$pid(0x3, r2) 1m17.578822662s ago: executing program 7 (id=887): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x200000000000000, 0x0, 0x1, 0xfcff, &(0x7f0000000180)="b3"}) 1m17.402222704s ago: executing program 7 (id=888): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000400)={0x1, 0x0, 0x0, &(0x7f0000020000), &(0x7f0000018000)}) write(r1, &(0x7f0000018000)="000001", 0x3) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000600)={0x1, r1}) write$tun(r1, 0x0, 0x10) 1m17.000669015s ago: executing program 7 (id=889): syz_mount_image$hfsplus(&(0x7f00000002c0), &(0x7f0000000180)='./bus\x00', 0xc, &(0x7f0000000dc0)=ANY=[@ANYRES8=0x0, @ANYBLOB="050000006fe9bab3f0ab797f1eec2c308c47ccf9510a98013053ad64c2a1184e15", @ANYRES64, @ANYRES8, @ANYRES8=0x0, @ANYRESHEX=0x0, @ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRES32, @ANYBLOB="5f9c36fa3b65193646fd9835c7d87c180bed25c821c5bce901fb63a3241bb1a27f9e7c33f450f8b8b454ea6765554f1fc79bcd4b63529dc5690c97f9bf9e1e90fa931d3a64f1b800000034ab4e4ea247d309cddb93373add7a92f0aa2408a97f780a372e98868a8bb2c9b8d2ba8c04a1ef8970a0b770473b97e0becb361381429b92d594d0373cfb70a5fdd780220c251107aba11d6f8a44c8810c007804e92398b45c96661c438dbcea15d3a6c4c750233608ffba88e1abea1e0d72eb3279645a70a09c", @ANYRESHEX], 0x1, 0x71f, &(0x7f0000000380)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) setrlimit(0x7, &(0x7f0000000000)) 1m16.494377745s ago: executing program 7 (id=890): prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r4, 0x10001, 0x0) 1m15.537643015s ago: executing program 7 (id=891): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/exception_policy\x00', 0x2, 0x0) writev(r0, &(0x7f00000023c0)=[{&(0x7f0000000e00)="da3c0df6268e31dd9d845d583e62b35da79a039a5af68668c421eb6cf79a473175b048f95b8659a39e0e048cf9eb453bd27ad174c139eb407ef4ccead12f71a9a7fad04fa5692d5bc9c0ff5e6d97f9e21689cae4c8bfc51cd52e58bf3c8c2620f287c6e64be8314d30935363d2882fa4ae272d365d1f68d4b1b7ce693833c8712d630028e1c953ba8d54a502035e930aec", 0x91}], 0x1) 1m15.044928853s ago: executing program 37 (id=891): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/exception_policy\x00', 0x2, 0x0) writev(r0, &(0x7f00000023c0)=[{&(0x7f0000000e00)="da3c0df6268e31dd9d845d583e62b35da79a039a5af68668c421eb6cf79a473175b048f95b8659a39e0e048cf9eb453bd27ad174c139eb407ef4ccead12f71a9a7fad04fa5692d5bc9c0ff5e6d97f9e21689cae4c8bfc51cd52e58bf3c8c2620f287c6e64be8314d30935363d2882fa4ae272d365d1f68d4b1b7ce693833c8712d630028e1c953ba8d54a502035e930aec", 0x91}], 0x1) 1m9.523989887s ago: executing program 4 (id=900): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0x0, 0x13) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r1 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000300)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000000), &(0x7f0000000200), &(0x7f0000000000)=[0x2], 0x0, 0x1}) 1m8.714887261s ago: executing program 4 (id=901): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}, 0xf1a2}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@gettfilter={0x24, 0x2e, 0x2, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xe, 0xb}, {0x9, 0xe}}}, 0x24}}, 0x8000) 1m6.426426548s ago: executing program 4 (id=903): ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r5 = dup(r4) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f0000000340)=ANY=[], 0x50) 1m3.989364373s ago: executing program 4 (id=904): syz_mount_image$hfsplus(&(0x7f00000002c0), &(0x7f0000000180)='./bus\x00', 0xc, &(0x7f0000000dc0)=ANY=[@ANYRES8=0x0, @ANYBLOB="050000006fe9bab3f0ab797f1eec2c308c47ccf9510a98013053ad64c2a1184e15", @ANYRES64, @ANYRES8, @ANYRES8=0x0, @ANYRESHEX=0x0, @ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRES32, @ANYBLOB="5f9c36fa3b65193646fd9835c7d87c180bed25c821c5bce901fb63a3241bb1a27f9e7c33f450f8b8b454ea6765554f1fc79bcd4b63529dc5690c97f9bf9e1e90fa931d3a64f1b800000034ab4e4ea247d309cddb93373add7a92f0aa2408a97f780a372e98868a8bb2c9b8d2ba8c04a1ef8970a0b770473b97e0becb361381429b92d594d0373cfb70a5fdd780220c251107aba11d6f8a44c8810c007804e92398b45c96661c438dbcea15d3a6c4c750233608ffba88e1abea1e0d72eb3279645a70a09c", @ANYRESHEX], 0x1, 0x71f, &(0x7f0000000380)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setrlimit(0x7, &(0x7f0000000000)) 1m3.174881578s ago: executing program 4 (id=905): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) 59.080974177s ago: executing program 8 (id=881): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0xd4b3, @dev={0xfe, 0x80, '\x00', 0x22}, 0x10}, 0x19, &(0x7f0000000040)=[{&(0x7f0000000240)="5e01000000000000007f021226574ce00ceed449e578745fb970e0f1115f774f90b43474d4fedf1f3773fb52ce95483fc31e90d5403449f8d41dd571dae44cdcf78ad289ddfb139f4ed9cfa24ef5d0e8fd", 0x51}], 0x1}}], 0x1, 0xc010) 58.762904723s ago: executing program 8 (id=909): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}, 0xf1a2}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@gettfilter={0x24, 0x2e, 0x2, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xe, 0xb}, {0x9, 0xe}}}, 0x24}}, 0x8000) 57.806026294s ago: executing program 8 (id=910): ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r5 = dup(r4) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f0000000340)=ANY=[], 0x50) 56.405788863s ago: executing program 8 (id=911): syz_mount_image$hfsplus(&(0x7f00000002c0), &(0x7f0000000180)='./bus\x00', 0xc, &(0x7f0000000dc0)=ANY=[@ANYRES8=0x0, @ANYBLOB="050000006fe9bab3f0ab797f1eec2c308c47ccf9510a98013053ad64c2a1184e15", @ANYRES64, @ANYRES8, @ANYRES8=0x0, @ANYRESHEX=0x0, @ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRES32, @ANYBLOB="5f9c36fa3b65193646fd9835c7d87c180bed25c821c5bce901fb63a3241bb1a27f9e7c33f450f8b8b454ea6765554f1fc79bcd4b63529dc5690c97f9bf9e1e90fa931d3a64f1b800000034ab4e4ea247d309cddb93373add7a92f0aa2408a97f780a372e98868a8bb2c9b8d2ba8c04a1ef8970a0b770473b97e0becb361381429b92d594d0373cfb70a5fdd780220c251107aba11d6f8a44c8810c007804e92398b45c96661c438dbcea15d3a6c4c750233608ffba88e1abea1e0d72eb3279645a70a09c", @ANYRESHEX], 0x1, 0x71f, &(0x7f0000000380)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setrlimit(0x7, &(0x7f0000000000)) 56.206787339s ago: executing program 4 (id=912): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="0c0100001000010025bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8db20200ad3e0100140003006e657464657673696d30000000000000c400"], 0x10c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 55.520838371s ago: executing program 38 (id=912): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="0c0100001000010025bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8db20200ad3e0100140003006e657464657673696d30000000000000c400"], 0x10c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 53.314879504s ago: executing program 8 (id=916): setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000380)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x40080c1}, 0x800) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) 53.159643471s ago: executing program 9 (id=917): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000051c0)={0x1, 0x1000}, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}, 0xf1a2}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@gettfilter={0x24, 0x2e, 0x2, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xe, 0xb}, {0x9, 0xe}}}, 0x24}}, 0x8000) 52.946439559s ago: executing program 9 (id=919): setns(0xc9, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f40)={0x18, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f00000003c0)='GPL\x00', 0x8, 0x1017, &(0x7f0000002e80)=""/4119, 0x0, 0xd}, 0xd3) r0 = socket(0x1f, 0x5, 0x8) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3f0, 0x330, 0x0, 0x298, 0x0, 0x298, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1, 0xff000000, 0xff000000, 'veth0_macvtap\x00', 'veth1\x00', {0xff}, {0xff}, 0x32, 0x2, 0x3f}, 0x7a00, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x1, 0x1}}}, {{@ip={@empty, @local, 0x0, 0xff, 'veth0_to_batadv\x00', 'nicvf0\x00', {}, {}, 0x8}, 0x0, 0xb0, 0xe0, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x0, 0x3, 0x2, 0x7, 0x6, 0x2], 0x5, 0x6}}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x7ff, 0x6, @ipv4=@empty, 0x4e21}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x14}, @multicast1, 0x0, 0x0, 'syzkaller0\x00', 'wg0\x00', {}, {}, 0x89, 0x0, 0x35}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0xb3, 0x1}}}, {{@ip={@local, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x18}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0xa5, 0x57}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) getsockname$llc(r0, &(0x7f0000000480)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000004c0)=0x10) 52.649168313s ago: executing program 9 (id=920): prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r4, 0x10001, 0x0) 52.225712408s ago: executing program 8 (id=921): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaf1aaaaaaaaaaaaaaaaaa08060001080006040001aaaaaaaaaa2fac1414bb0180c2000000ac1414"], 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) fanotify_mark(0xffffffffffffffff, 0x698, 0x40000001, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000b00)={0x7, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000000)={0x34, "e71fefea00aed2dbc2c9adc6296a524d530835ce1d98c75b1d59bb82f3535a8e"}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000000)='S', 0x1) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f0000000080)=0x2b) 51.135994692s ago: executing program 39 (id=921): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaf1aaaaaaaaaaaaaaaaaa08060001080006040001aaaaaaaaaa2fac1414bb0180c2000000ac1414"], 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) fanotify_mark(0xffffffffffffffff, 0x698, 0x40000001, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000b00)={0x7, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000000)={0x34, "e71fefea00aed2dbc2c9adc6296a524d530835ce1d98c75b1d59bb82f3535a8e"}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000000)='S', 0x1) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f0000000080)=0x2b) 51.099440548s ago: executing program 9 (id=923): syz_mount_image$hfsplus(&(0x7f00000002c0), &(0x7f0000000180)='./bus\x00', 0xc, &(0x7f0000000dc0)=ANY=[@ANYRES8=0x0, @ANYBLOB="050000006fe9bab3f0ab797f1eec2c308c47ccf9510a98013053ad64c2a1184e15", @ANYRES64, @ANYRES8, @ANYRES8=0x0, @ANYRESHEX=0x0, @ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRES32, @ANYBLOB="5f9c36fa3b65193646fd9835c7d87c180bed25c821c5bce901fb63a3241bb1a27f9e7c33f450f8b8b454ea6765554f1fc79bcd4b63529dc5690c97f9bf9e1e90fa931d3a64f1b800000034ab4e4ea247d309cddb93373add7a92f0aa2408a97f780a372e98868a8bb2c9b8d2ba8c04a1ef8970a0b770473b97e0becb361381429b92d594d0373cfb70a5fdd780220c251107aba11d6f8a44c8810c007804e92398b45c96661c438dbcea15d3a6c4c750233608ffba88e1abea1e0d72eb3279645a70a09c", @ANYRESHEX], 0x1, 0x71f, &(0x7f0000000380)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setrlimit(0x7, &(0x7f0000000000)) 50.333910594s ago: executing program 9 (id=924): syz_emit_ethernet(0x76, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) clock_adjtime(0x0, &(0x7f0000000280)={0x1000000000066fb, 0x800000000004, 0x376, 0x0, 0x0, 0x51, 0x0, 0x4, 0x0, 0x0, 0x0, 0x200000240b, 0x3f, 0x9, 0x0, 0x80, 0xfffffffffffffffd, 0x1fff, 0xfffffffffffffffc, 0x4, 0x1010000000000, 0x0, 0x0, 0x100000000003f89, 0x0, 0x7fffffffffffffff}) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000d40)={0x0, 0x7}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/graphics/fbcon/rotate\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='1', 0x1) close(r3) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000600)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x5, 0x2, 0x20, 0xa0, 0x6c}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x40000, 0x1000000000004, 0x2, 0xa78a}, 0xfffffffe, 0x0, 0x2, 0x0, 0x3}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3506, 0x4, 0x2, 0x2}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000000)={[{@grpjquota}]}, 0x1, 0x603, &(0x7f0000000700)="$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") 48.534648495s ago: executing program 9 (id=926): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x0, 0x0}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xfc}, 0x1, 0x0, 0x0, 0x64040081}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'batadv_slave_1\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x31, 0x12, 0x9, {0x11, @sctp_ip6_spec={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4e21, 0x4e24, 0x1f}, {0x0, @broadcast, 0x6, 0x3ff, [0x8a1, 0x3ec]}, @hdata="61cbededcd2510ba564ee3c13e1f8160d725aed23dac44bb255e4479894308d94dad71c126e361d3ca2e5c11dd7c38351eb6b006", {0x0, @remote, 0x0, 0x8, [0x1]}, 0x5, 0x9}}}) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="21000000470010aaaaaaaaaa000000000000000000000000000000000340000000000000000000000000000000000000000300"/76, 0x4d) 47.967114106s ago: executing program 40 (id=926): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x0, 0x0}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xfc}, 0x1, 0x0, 0x0, 0x64040081}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'batadv_slave_1\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x31, 0x12, 0x9, {0x11, @sctp_ip6_spec={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4e21, 0x4e24, 0x1f}, {0x0, @broadcast, 0x6, 0x3ff, [0x8a1, 0x3ec]}, @hdata="61cbededcd2510ba564ee3c13e1f8160d725aed23dac44bb255e4479894308d94dad71c126e361d3ca2e5c11dd7c38351eb6b006", {0x0, @remote, 0x0, 0x8, [0x1]}, 0x5, 0x9}}}) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="21000000470010aaaaaaaaaa000000000000000000000000000000000340000000000000000000000000000000000000000300"/76, 0x4d) 7.181442101s ago: executing program 1 (id=1029): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f40)={0x18, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f00000003c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xd}, 0x94) 6.773232354s ago: executing program 1 (id=1032): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, 0x0, 0x0, 0x44010, &(0x7f0000000040)={0x11, 0x4, r2, 0x1, 0x7}, 0x14) 6.581367678s ago: executing program 1 (id=1034): syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x3c}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc0}}, &(0x7f0000000080)='GPL\x00', 0xf, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000180)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 5.394942539s ago: executing program 0 (id=1037): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x81, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x4044040) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, 0x0, &(0x7f0000000280)) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x2, 0x1, "fa"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x2}, 0x8) listen(r0, 0x4) 5.393963279s ago: executing program 2 (id=1038): openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)='fdinfo\x00') socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x106, 0x3}}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 5.182759527s ago: executing program 2 (id=1039): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) syz_emit_ethernet(0x2a, &(0x7f0000000700)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010300, @local}, @info_reply={0xd, 0x0, 0x0, 0xfffe}}}}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000002080)='net/igmp\x00') read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2020) preadv(r2, &(0x7f00000026c0)=[{&(0x7f0000002180)=""/109, 0x6d}], 0x1, 0xffffffff, 0x34) dup(0xffffffffffffffff) 4.65779899s ago: executing program 2 (id=1040): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f40)={0x18, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f00000003c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xd}, 0x94) 4.0980221s ago: executing program 0 (id=1042): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, 0x0, 0x0, 0x44010, &(0x7f0000000040)={0x11, 0x4, r2, 0x1, 0x7}, 0x14) 4.010924785s ago: executing program 3 (id=1043): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140), 0xa7a, r0}, 0x38) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 3.856280733s ago: executing program 2 (id=1044): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2010018, &(0x7f0000000000), 0x0, 0x4b4, &(0x7f0000000a00)="$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") syz_clone(0x28840300, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0xd01ce0, 0x0, 0x82, 0x0, &(0x7f0000000080)) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./bus/file0\x00', 0x2, 0xffffffff) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000140)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x90}, 0x4040000) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="02c82028002400010007d3040007c4faff020c04000300d3"], 0x2d) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="04080400c8"], 0x7) lseek(0xffffffffffffffff, 0x20000, 0x1) 3.680523945s ago: executing program 1 (id=1045): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x240, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xffff8c05, 0x7, 0x6, 0x9, 0xfffffffa}}]}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r3, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000088a8ffff86ddee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x80) 3.678951695s ago: executing program 3 (id=1046): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0xffe7}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 3.3707716s ago: executing program 0 (id=1047): mount(0x0, 0x0, &(0x7f0000000380)='configfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x204) r4 = socket$inet(0x2, 0x1, 0x0) socket$inet(0x2, 0x1, 0x6) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x15, 0x0, 'wrr\x00', 0x10}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, 0x0, 0x0) r5 = socket$inet(0x2, 0x1, 0x6) connect(r5, &(0x7f0000000200)=@in={0x2, 0x15, @loopback}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_open_dev$tty1(0xc, 0x4, 0x1) 3.346244944s ago: executing program 3 (id=1048): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) syz_emit_ethernet(0x2a, &(0x7f0000000700)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010300, @local}, @info_reply={0xd, 0x0, 0x0, 0xfffe}}}}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000002080)='net/igmp\x00') read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2020) preadv(r2, &(0x7f00000026c0)=[{&(0x7f0000002180)=""/109, 0x6d}], 0x1, 0xffffffff, 0x34) dup(0xffffffffffffffff) 3.330521047s ago: executing program 1 (id=1049): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1fc) unshare(0x64020600) syz_usb_connect$uac3(0x3, 0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="12010003000000"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x800) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) quotactl_fd$Q_SYNC(0xffffffffffffffff, 0xffffffff80000102, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @local}, 0x357, 0x0, 0x0, 0x0, 0x11, 0x0, 0x1, 0x80}) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uac1_legacy.usb0/fn_play\x00', 0x1, 0x4) write(r2, &(0x7f0000000280)='m', 0x1) 2.856245701s ago: executing program 3 (id=1050): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000000), 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x4044040) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, 0x0, &(0x7f0000000280)) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x2, 0x1, "fa"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x2}, 0x8) listen(r0, 0x4) 1.809422338s ago: executing program 0 (id=1051): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000080)={0x20004, r1, 0x80000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000440)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x59, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x1, r4, 0xff, 0x100007, 0xa, 0x1ff, 0x1}) writev(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 1.759038297s ago: executing program 3 (id=1052): unshare(0x68040000) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x4, 0x8, 0x201, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1}, 0x6e) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040302"], 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 1.708445196s ago: executing program 2 (id=1053): syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x3c}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc0}}, &(0x7f0000000080)='GPL\x00', 0xf, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000180)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 685.838578ms ago: executing program 0 (id=1054): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r3, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1f371693c3ceafd2}, 0x20004880) io_uring_setup(0x676d, 0x0) 254.814455ms ago: executing program 0 (id=1055): r0 = syz_io_uring_setup(0x34b9, &(0x7f00000001c0)={0x0, 0x6f7, 0x100, 0x7, 0x3d5}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0xb, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x400, 0x6000, 0x0, {0x0, r4}}) io_uring_enter(r0, 0x521c, 0x1, 0x61, 0x0, 0x18) 129.141857ms ago: executing program 3 (id=1056): mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000110)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r0, &(0x7f0000000250)='/dev/zram0,6', 0xb3) 120.269209ms ago: executing program 1 (id=1057): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x240, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xffff8c05, 0x7, 0x6, 0x9, 0xfffffffa}}]}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r3, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000088a8ffff86ddee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x80) 0s ago: executing program 2 (id=1058): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) syz_emit_ethernet(0x2a, &(0x7f0000000700)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010300, @local}, @info_reply={0xd, 0x0, 0x0, 0xfffe}}}}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000002080)='net/igmp\x00') read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2020) preadv(r2, &(0x7f00000026c0)=[{&(0x7f0000002180)=""/109, 0x6d}], 0x1, 0xffffffff, 0x34) dup(0xffffffffffffffff) kernel console output (not intermixed with test programs): 00003e syscall=202 compat=0 ip=0x7f82f099e159 code=0x7fc00000 [ 253.455431][ T7269] loop4: detected capacity change from 0 to 128 [ 253.472714][ T7269] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 253.505801][ T7269] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 253.986326][ T7280] Config c/1 of g1 needs at least one function. [ 253.993020][ T7280] udc dummy_udc.0: failed to start g1: -22 [ 253.999069][ T7280] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 254.007458][ T7280] UDC core: g1: couldn't find an available UDC or it's busy [ 255.813904][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.820488][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.109296][ T7297] 9pnet_virtio: no channels available for device syz [ 257.128821][ T7301] loop2: detected capacity change from 0 to 512 [ 257.187730][ T7301] EXT4-fs error (device loop2): ext4_iget_extra_inode:4752: inode #15: comm syz.2.311: corrupted in-inode xattr: invalid ea_ino [ 257.268411][ T7301] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.311: couldn't read orphan inode 15 (err -117) [ 257.298594][ T7297] kvm: kvm [7296]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000002e00 [ 257.357268][ T7301] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.387238][ T7297] kvm: kvm [7296]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 257.479123][ T7297] kvm: kvm [7296]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000002e00 [ 257.505928][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.515322][ T7297] kvm: kvm [7296]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 257.550285][ T7297] kvm: kvm [7296]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x800000002e00 [ 257.591846][ T7297] kvm: kvm [7296]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xffff000000002e00 [ 257.611259][ T7297] kvm: kvm [7296]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xffff000000002e00 [ 257.627422][ T7297] kvm: kvm [7296]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xffff000000002e00 [ 257.643562][ T7297] kvm: kvm [7296]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xffff000000002e00 [ 257.661794][ T7297] kvm: kvm [7296]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xffff000000002e00 [ 258.057184][ T7314] Config c/1 of g1 needs at least one function. [ 258.063908][ T7314] udc dummy_udc.0: failed to start g1: -22 [ 258.069781][ T7314] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 258.078166][ T7314] UDC core: g1: couldn't find an available UDC or it's busy [ 262.093162][ T7337] loop1: detected capacity change from 0 to 128 [ 262.184685][ T7337] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 262.355680][ T7337] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 264.269369][ T7354] loop4: detected capacity change from 0 to 512 [ 264.421156][ T7354] EXT4-fs error (device loop4): ext4_do_update_inode:5268: inode #15: comm syz.4.329: corrupted inode contents [ 264.434666][ T7354] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 264.446797][ T7354] EXT4-fs error (device loop4): ext4_do_update_inode:5268: inode #15: comm syz.4.329: corrupted inode contents [ 264.458989][ T7354] EXT4-fs error (device loop4): ext4_evict_inode:302: inode #15: comm syz.4.329: mark_inode_dirty error [ 264.470808][ T7354] EXT4-fs (loop4): 1 orphan inode deleted [ 264.478067][ T7354] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.075246][ T6653] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.837655][ T23] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 266.693715][ T7379] Config c/1 of g1 needs at least one function. [ 266.700167][ T7379] udc dummy_udc.0: failed to start g1: -22 [ 266.706098][ T7379] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 266.714324][ T7379] UDC core: g1: couldn't find an available UDC or it's busy [ 268.122470][ T23] usb 2-1: unable to get BOS descriptor or descriptor too short [ 268.130560][ T23] usb 2-1: no configurations [ 268.135703][ T23] usb 2-1: can't read configurations, error -22 [ 268.879176][ T7395] loop2: detected capacity change from 0 to 512 [ 268.919263][ T7395] EXT4-fs error (device loop2): ext4_do_update_inode:5268: inode #15: comm syz.2.340: corrupted inode contents [ 268.933723][ T7395] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 268.945174][ T7395] EXT4-fs error (device loop2): ext4_do_update_inode:5268: inode #15: comm syz.2.340: corrupted inode contents [ 268.957762][ T7395] EXT4-fs error (device loop2): ext4_evict_inode:302: inode #15: comm syz.2.340: mark_inode_dirty error [ 268.969600][ T7395] EXT4-fs (loop2): 1 orphan inode deleted [ 268.976881][ T7395] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.088075][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.237314][ T7400] loop4: detected capacity change from 0 to 128 [ 269.459799][ T7400] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 270.016557][ T7400] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 270.414029][ T5818] IPVS: starting estimator thread 0... [ 270.563760][ T7411] IPVS: using max 19 ests per chain, 45600 per kthread [ 270.787511][ T7419] Config c/1 of g1 needs at least one function. [ 270.794096][ T7419] udc dummy_udc.0: failed to start g1: -22 [ 270.799955][ T7419] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 270.808182][ T7419] UDC core: g1: couldn't find an available UDC or it's busy [ 271.440009][ T7428] netlink: 68 bytes leftover after parsing attributes in process `syz.4.349'. [ 271.479480][ T7428] Bluetooth: MGMT ver 1.22 [ 271.879256][ T7430] loop4: detected capacity change from 0 to 1024 [ 272.673343][ T7434] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 272.723126][ T7433] loop1: detected capacity change from 0 to 512 [ 272.731704][ T7434] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 272.757676][ T7433] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #15: comm syz.1.350: corrupted inode contents [ 272.809629][ T7433] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 272.844395][ T7433] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #15: comm syz.1.350: corrupted inode contents [ 272.859196][ T7433] EXT4-fs error (device loop1): ext4_evict_inode:302: inode #15: comm syz.1.350: mark_inode_dirty error [ 272.877264][ T7433] EXT4-fs (loop1): 1 orphan inode deleted [ 272.885044][ T7433] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.027627][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.104535][ T2943] hfsplus: b-tree write err: -5, ino 25 [ 273.114249][ T2943] hfsplus: b-tree write err: -5, ino 4 [ 273.119946][ T2943] hfsplus: b-tree write err: -5, ino 2 [ 273.135299][ T2943] hfsplus: b-tree write err: -5, ino 26 [ 274.668065][ T7457] Config c/1 of g1 needs at least one function. [ 274.674530][ T7457] udc dummy_udc.0: failed to start g1: -22 [ 274.680365][ T7457] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 274.688649][ T7457] UDC core: g1: couldn't find an available UDC or it's busy [ 275.511165][ T7472] loop2: detected capacity change from 0 to 1024 [ 276.137431][ T7475] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 276.362265][ T7475] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 276.706479][ T3505] hfsplus: b-tree write err: -5, ino 25 [ 276.712387][ T3505] hfsplus: b-tree write err: -5, ino 4 [ 276.723022][ T3505] hfsplus: b-tree write err: -5, ino 2 [ 276.730751][ T3505] hfsplus: b-tree write err: -5, ino 26 [ 276.856308][ T7486] loop1: detected capacity change from 0 to 512 [ 277.221030][ T7498] Config c/1 of g1 needs at least one function. [ 277.227654][ T7498] udc dummy_udc.0: failed to start g1: -22 [ 277.233601][ T7498] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 277.241897][ T7498] UDC core: g1: couldn't find an available UDC or it's busy [ 277.292678][ T7486] EXT4-fs error (device loop1): ext4_iget_extra_inode:4752: inode #15: comm syz.1.365: corrupted in-inode xattr: invalid ea_ino [ 277.313020][ T7486] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.365: couldn't read orphan inode 15 (err -117) [ 277.334027][ T7486] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.520807][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.628735][ T7506] loop1: detected capacity change from 0 to 128 [ 277.698306][ T7506] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 277.726140][ T7506] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 277.978909][ T7512] loop2: detected capacity change from 0 to 1024 [ 278.854340][ T7524] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 278.860822][ T7524] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 278.944689][ T12] hfsplus: b-tree write err: -5, ino 25 [ 278.950816][ T12] hfsplus: b-tree write err: -5, ino 4 [ 278.962252][ T12] hfsplus: b-tree write err: -5, ino 2 [ 278.972671][ T12] hfsplus: b-tree write err: -5, ino 26 [ 279.060467][ T7528] loop2: detected capacity change from 0 to 512 [ 279.085041][ T7528] EXT4-fs error (device loop2): ext4_iget_extra_inode:4752: inode #15: comm syz.2.382: corrupted in-inode xattr: invalid ea_ino [ 279.100395][ T7528] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.382: couldn't read orphan inode 15 (err -117) [ 279.115170][ T7528] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.228398][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.259073][ T7531] syzkaller1: entered promiscuous mode [ 279.264811][ T7531] syzkaller1: entered allmulticast mode [ 279.827248][ T7541] Config c/1 of g1 needs at least one function. [ 279.833869][ T7541] udc dummy_udc.0: failed to start g1: -22 [ 279.839745][ T7541] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 279.848033][ T7541] UDC core: g1: couldn't find an available UDC or it's busy [ 284.009049][ T7604] Config c/1 of g1 needs at least one function. [ 284.015683][ T7604] udc dummy_udc.0: failed to start g1: -22 [ 284.021545][ T7604] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 284.029797][ T7604] UDC core: g1: couldn't find an available UDC or it's busy [ 285.253662][ T7622] loop4: detected capacity change from 0 to 1024 [ 286.115082][ T7628] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 286.121755][ T7628] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 286.200023][ T2924] hfsplus: b-tree write err: -5, ino 25 [ 286.208142][ T2924] hfsplus: b-tree write err: -5, ino 4 [ 286.215874][ T2924] hfsplus: b-tree write err: -5, ino 2 [ 286.223189][ T2924] hfsplus: b-tree write err: -5, ino 26 [ 287.694687][ T7645] Config c/1 of g1 needs at least one function. [ 287.701099][ T7645] udc dummy_udc.0: failed to start g1: -22 [ 287.707101][ T7645] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 287.715278][ T7645] UDC core: g1: couldn't find an available UDC or it's busy [ 288.647508][ T5842] IPVS: starting estimator thread 0... [ 289.113688][ T7660] IPVS: using max 21 ests per chain, 50400 per kthread [ 289.128446][ T7662] loop2: detected capacity change from 0 to 512 [ 289.206144][ T7662] EXT4-fs error (device loop2): ext4_iget_extra_inode:4752: inode #15: comm syz.2.409: corrupted in-inode xattr: invalid ea_ino [ 289.252596][ T7662] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.409: couldn't read orphan inode 15 (err -117) [ 289.286778][ T7666] loop4: detected capacity change from 0 to 1024 [ 289.315831][ T7662] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.425890][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.698045][ T7671] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 289.705300][ T7671] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 289.781586][ T34] hfsplus: b-tree write err: -5, ino 25 [ 289.788335][ T34] hfsplus: b-tree write err: -5, ino 4 [ 289.801711][ T34] hfsplus: b-tree write err: -5, ino 2 [ 289.814722][ T34] hfsplus: b-tree write err: -5, ino 26 [ 291.132802][ T7687] syzkaller0: entered promiscuous mode [ 291.177799][ T7687] syzkaller0: entered allmulticast mode [ 291.337371][ T7691] Config c/1 of g1 needs at least one function. [ 291.344824][ T7691] udc dummy_udc.0: failed to start g1: -22 [ 291.350689][ T7691] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 291.358970][ T7691] UDC core: g1: couldn't find an available UDC or it's busy [ 292.088837][ T7698] IPVS: wrr: TCP 127.0.0.1:21 - no destination available [ 292.827381][ T7702] loop4: detected capacity change from 0 to 512 [ 292.887767][ T7702] EXT4-fs error (device loop4): ext4_iget_extra_inode:4752: inode #15: comm syz.4.420: corrupted in-inode xattr: invalid ea_ino [ 292.904193][ T7702] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.420: couldn't read orphan inode 15 (err -117) [ 292.917845][ T7702] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.986748][ T7708] loop2: detected capacity change from 0 to 1024 [ 293.144072][ T6653] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.533178][ T5778] hfsplus: bad catalog entry type [ 293.539912][ T7715] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 293.546391][ T7715] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 293.646041][ T5778] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 294.044889][ T2970] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.051081][ T34] hfsplus: b-tree write err: -5, ino 25 [ 294.061470][ T34] hfsplus: b-tree write err: -5, ino 4 [ 294.068272][ T34] hfsplus: b-tree write err: -5, ino 2 [ 294.149042][ T2970] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.246690][ T2970] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.353138][ T2970] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.962439][ T5791] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 294.975580][ T5791] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 294.983790][ T5791] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 295.004301][ T5791] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 295.013691][ T5791] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 295.021590][ T5791] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 295.375640][ T7747] IPVS: wrr: TCP 127.0.0.1:21 - no destination available [ 296.218931][ T7734] chnl_net:caif_netlink_parms(): no params data found [ 296.546645][ T7734] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.555725][ T7734] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.562998][ T7734] bridge_slave_0: entered allmulticast mode [ 296.586821][ T7734] bridge_slave_0: entered promiscuous mode [ 296.620069][ T7765] loop4: detected capacity change from 0 to 512 [ 296.627735][ T7734] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.640679][ T7734] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.648733][ T7734] bridge_slave_1: entered allmulticast mode [ 296.662568][ T7734] bridge_slave_1: entered promiscuous mode [ 296.746835][ T7765] EXT4-fs error (device loop4): ext4_iget_extra_inode:4752: inode #15: comm syz.4.433: corrupted in-inode xattr: invalid ea_ino [ 296.822574][ T7765] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.433: couldn't read orphan inode 15 (err -117) [ 296.851988][ T7765] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.031986][ T7734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.058792][ T7734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.086610][ T5791] Bluetooth: hci2: command tx timeout [ 297.110187][ T6653] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.204618][ T7734] team0: Port device team_slave_0 added [ 297.243120][ T7734] team0: Port device team_slave_1 added [ 297.390171][ T7734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.414743][ T7734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.681482][ T7734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.706762][ T7734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.714618][ T7734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.773573][ T7734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.106046][ T7734] hsr_slave_0: entered promiscuous mode [ 299.142689][ T7734] hsr_slave_1: entered promiscuous mode [ 299.153858][ T7734] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 299.161454][ T7734] Cannot create hsr debugfs directory [ 299.173084][ T5791] Bluetooth: hci2: command tx timeout [ 299.274707][ T2970] hsr_slave_0: left promiscuous mode [ 299.303736][ T2970] hsr_slave_1: left promiscuous mode [ 299.326046][ T2970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.338911][ T2970] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.351532][ T2970] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.363702][ T2970] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.372515][ T2970] bridge_slave_1: left allmulticast mode [ 299.378469][ T2970] bridge_slave_1: left promiscuous mode [ 299.385559][ T2970] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.401349][ T2970] bridge_slave_0: left allmulticast mode [ 299.413498][ T2970] bridge_slave_0: left promiscuous mode [ 299.419326][ T2970] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.486495][ T2970] veth1_macvtap: left promiscuous mode [ 299.495554][ T2970] veth0_macvtap: left promiscuous mode [ 299.501257][ T2970] veth1_vlan: left promiscuous mode [ 299.512194][ T2970] veth0_vlan: left promiscuous mode [ 300.243760][ T5820] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 300.417337][ T2970] team0 (unregistering): Port device team_slave_1 removed [ 300.476896][ T2970] team0 (unregistering): Port device team_slave_0 removed [ 300.546080][ T2970] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 300.599712][ T2970] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 301.243632][ T5791] Bluetooth: hci2: command tx timeout [ 301.411341][ T2970] bond0 (unregistering): Released all slaves [ 301.617050][ T7815] netlink: 68 bytes leftover after parsing attributes in process `syz.4.440'. [ 301.999949][ T7734] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 302.044666][ T7734] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 302.065075][ T7734] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 302.086538][ T7734] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 302.386542][ T7828] Config c/1 of g1 needs at least one function. [ 302.393040][ T7828] udc dummy_udc.0: failed to start g1: -22 [ 302.399093][ T7828] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 302.407661][ T7828] UDC core: g1: couldn't find an available UDC or it's busy [ 302.534975][ T2970] IPVS: stop unused estimator thread 0... [ 302.604481][ T7734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.852979][ T7734] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.991991][ T3480] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.999284][ T3480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.069356][ T3480] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.076595][ T3480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.185461][ T7734] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 303.213891][ T7734] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 303.323900][ T5791] Bluetooth: hci2: command tx timeout [ 303.483491][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 303.593483][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 305.491546][ T5820] usb 2-1: unable to get BOS descriptor or descriptor too short [ 305.503875][ T5820] usb 2-1: no configurations [ 305.508540][ T5820] usb 2-1: can't read configurations, error -22 [ 305.627884][ T7734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.673912][ T5820] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 305.834115][ T5820] usb 2-1: device descriptor read/64, error -32 [ 305.953761][ T5820] usb usb2-port1: attempt power cycle [ 306.365419][ T5820] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 306.406203][ T5820] usb 2-1: device descriptor read/8, error -32 [ 306.650993][ T7734] veth0_vlan: entered promiscuous mode [ 306.673349][ T7734] veth1_vlan: entered promiscuous mode [ 306.679050][ T5820] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 306.714475][ T5820] usb 2-1: device descriptor read/8, error -32 [ 306.796645][ T7734] veth0_macvtap: entered promiscuous mode [ 306.845147][ T5820] usb usb2-port1: unable to enumerate USB device [ 306.925951][ T7734] veth1_macvtap: entered promiscuous mode [ 306.996007][ T7734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.010802][ T7734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.021463][ T7734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.032283][ T7734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.042451][ T7734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.063585][ T7734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.074994][ T7734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.097446][ T7734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.108604][ T7734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.122972][ T7734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.133765][ T7734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.160152][ T7734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.184602][ T7734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.215141][ T7734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.230546][ T7734] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.249675][ T7734] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.276383][ T7734] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.286749][ T7734] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.457618][ T3505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.477558][ T3505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.531043][ T2970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.560196][ T2970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.236817][ T7952] Config c/1 of g1 needs at least one function. [ 309.243276][ T7952] udc dummy_udc.0: failed to start g1: -22 [ 309.249502][ T7952] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 309.257923][ T7952] UDC core: g1: couldn't find an available UDC or it's busy [ 310.985584][ T7981] IPVS: wrr: TCP 127.0.0.1:21 - no destination available [ 314.232441][ T8037] Config c/1 of g1 needs at least one function. [ 314.239229][ T8037] udc dummy_udc.0: failed to start g1: -22 [ 314.245224][ T8037] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 314.254072][ T8037] UDC core: g1: couldn't find an available UDC or it's busy [ 315.551951][ T8054] loop4: detected capacity change from 0 to 512 [ 315.663811][ T8054] EXT4-fs error (device loop4): ext4_do_update_inode:5268: inode #15: comm syz.4.477: corrupted inode contents [ 315.678094][ T8054] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 315.687592][ T8054] EXT4-fs error (device loop4): ext4_do_update_inode:5268: inode #15: comm syz.4.477: corrupted inode contents [ 315.701623][ T8054] EXT4-fs error (device loop4): ext4_evict_inode:302: inode #15: comm syz.4.477: mark_inode_dirty error [ 315.713604][ T8054] EXT4-fs (loop4): 1 orphan inode deleted [ 315.720681][ T8054] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.272148][ T6653] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.235811][ T8076] Config c/1 of g1 needs at least one function. [ 317.242386][ T8076] udc dummy_udc.0: failed to start g1: -22 [ 317.250574][ T8076] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 317.258905][ T8076] UDC core: g1: couldn't find an available UDC or it's busy [ 317.272047][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.278465][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.642715][ T8091] loop5: detected capacity change from 0 to 128 [ 319.210977][ T8114] loop5: detected capacity change from 0 to 512 [ 321.144520][ T8114] EXT4-fs error (device loop5): ext4_do_update_inode:5268: inode #15: comm syz.5.489: corrupted inode contents [ 321.158194][ T8114] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 321.168895][ T8114] EXT4-fs error (device loop5): ext4_do_update_inode:5268: inode #15: comm syz.5.489: corrupted inode contents [ 321.181501][ T8114] EXT4-fs error (device loop5): ext4_evict_inode:302: inode #15: comm syz.5.489: mark_inode_dirty error [ 321.195379][ T8114] EXT4-fs (loop5): 1 orphan inode deleted [ 321.202150][ T8114] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.279568][ T7734] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.626917][ T8129] Config c/1 of g1 needs at least one function. [ 323.633730][ T8129] udc dummy_udc.0: failed to start g1: -22 [ 323.639655][ T8129] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 323.649536][ T8129] UDC core: g1: couldn't find an available UDC or it's busy [ 324.332336][ T8137] loop5: detected capacity change from 0 to 128 [ 325.788121][ T970] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 327.010982][ T970] usb 5-1: unable to get BOS descriptor or descriptor too short [ 327.022693][ T970] usb 5-1: no configurations [ 327.029097][ T970] usb 5-1: can't read configurations, error -22 [ 329.092591][ T8186] Config c/1 of g1 needs at least one function. [ 329.098994][ T8186] udc dummy_udc.0: failed to start g1: -22 [ 329.104868][ T8186] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 329.112898][ T8186] UDC core: g1: couldn't find an available UDC or it's busy [ 329.746551][ T8200] loop4: detected capacity change from 0 to 128 [ 332.593812][ T5818] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 334.303629][ T5818] usb 6-1: unable to get BOS descriptor or descriptor too short [ 334.311389][ T5818] usb 6-1: no configurations [ 334.383630][ T5818] usb 6-1: can't read configurations, error -22 [ 335.416166][ T8265] loop5: detected capacity change from 0 to 128 [ 336.702350][ T8276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.521'. [ 339.790987][ T8306] syzkaller0: entered promiscuous mode [ 339.803548][ T8306] syzkaller0: entered allmulticast mode [ 339.883553][ T5791] Bluetooth: hci0: command 0x0406 tx timeout [ 340.468527][ T8319] Config c/1 of g1 needs at least one function. [ 340.475108][ T8319] udc dummy_udc.0: failed to start g1: -22 [ 340.480992][ T8319] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 340.490949][ T8319] UDC core: g1: couldn't find an available UDC or it's busy [ 341.095966][ T8347] loop4: detected capacity change from 0 to 128 [ 342.341063][ T8362] syzkaller0: entered promiscuous mode [ 342.391305][ T8362] syzkaller0: entered allmulticast mode [ 344.285708][ T8383] Config c/1 of g1 needs at least one function. [ 344.292140][ T8383] udc dummy_udc.0: failed to start g1: -22 [ 344.298544][ T8383] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 344.306904][ T8383] UDC core: g1: couldn't find an available UDC or it's busy [ 346.469688][ T8417] loop5: detected capacity change from 0 to 128 [ 347.150435][ T8413] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 347.158765][ T8413] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 347.184941][ T8413] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 347.191212][ T8413] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 347.209606][ T8413] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 347.222188][ T8413] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 347.240903][ T8413] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 347.267942][ T8413] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 347.277755][ T8413] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 347.711845][ T8441] Config c/1 of g1 needs at least one function. [ 347.718486][ T8441] udc dummy_udc.0: failed to start g1: -22 [ 347.724620][ T8441] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 347.732851][ T8441] UDC core: g1: couldn't find an available UDC or it's busy [ 348.473926][ T5820] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 348.535279][ T5791] Bluetooth: hci1: command 0x0406 tx timeout [ 349.221833][ T8463] loop5: detected capacity change from 0 to 128 [ 349.243784][ T5791] Bluetooth: hci2: command 0x0c1a tx timeout [ 349.246617][ T5781] Bluetooth: hci0: command 0x0406 tx timeout [ 349.250056][ T5791] Bluetooth: hci3: command 0x0406 tx timeout [ 349.517702][ T5820] usb 5-1: unable to get BOS descriptor or descriptor too short [ 349.535998][ T5820] usb 5-1: no configurations [ 349.540837][ T5820] usb 5-1: can't read configurations, error -22 [ 349.723175][ T8468] fuse: Bad value for 'fd' [ 350.405174][ T8477] Config c/1 of g1 needs at least one function. [ 350.438468][ T8477] udc dummy_udc.0: failed to start g1: -22 [ 350.474760][ T8477] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 350.547764][ T8477] UDC core: g1: couldn't find an available UDC or it's busy [ 350.604094][ T5791] Bluetooth: hci1: command 0x0406 tx timeout [ 350.920720][ T8489] netlink: 20 bytes leftover after parsing attributes in process `syz.4.568'. [ 350.940138][ T8489] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 351.255525][ T8496] fuse: Bad value for 'fd' [ 351.323534][ T5791] Bluetooth: hci0: command 0x0406 tx timeout [ 351.326339][ T5781] Bluetooth: hci3: command 0x0406 tx timeout [ 351.329615][ T5791] Bluetooth: hci2: command 0x0c1a tx timeout [ 351.363532][ T970] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 351.446157][ T8500] loop5: detected capacity change from 0 to 128 [ 352.434962][ T970] usb 2-1: unable to get BOS descriptor or descriptor too short [ 352.442734][ T970] usb 2-1: no configurations [ 352.460748][ T970] usb 2-1: can't read configurations, error -22 [ 352.825394][ T8528] loop5: detected capacity change from 0 to 512 [ 353.003764][ T8528] EXT4-fs error (device loop5): ext4_do_update_inode:5268: inode #15: comm syz.5.579: corrupted inode contents [ 353.023519][ T8528] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 353.299551][ T8528] EXT4-fs error (device loop5): ext4_do_update_inode:5268: inode #15: comm syz.5.579: corrupted inode contents [ 353.314680][ T8528] EXT4-fs error (device loop5): ext4_evict_inode:302: inode #15: comm syz.5.579: mark_inode_dirty error [ 353.329079][ T8528] EXT4-fs (loop5): 1 orphan inode deleted [ 353.337528][ T8528] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.403949][ T5791] Bluetooth: hci2: command 0x0c1a tx timeout [ 353.465094][ T8534] Config c/1 of g1 needs at least one function. [ 353.471486][ T8534] udc dummy_udc.0: failed to start g1: -22 [ 353.496671][ T8534] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 353.530237][ T8534] UDC core: g1: couldn't find an available UDC or it's busy [ 353.575334][ T7734] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.919777][ T8550] loop4: detected capacity change from 0 to 128 [ 354.317663][ T8554] netlink: 68 bytes leftover after parsing attributes in process `syz.0.588'. [ 355.107757][ T8572] loop4: detected capacity change from 0 to 512 [ 355.315513][ T8572] EXT4-fs error (device loop4): ext4_do_update_inode:5268: inode #15: comm syz.4.593: corrupted inode contents [ 355.348509][ T8572] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 355.360423][ T8572] EXT4-fs error (device loop4): ext4_do_update_inode:5268: inode #15: comm syz.4.593: corrupted inode contents [ 355.378702][ T8572] EXT4-fs error (device loop4): ext4_evict_inode:302: inode #15: comm syz.4.593: mark_inode_dirty error [ 355.399223][ T8572] EXT4-fs (loop4): 1 orphan inode deleted [ 355.409117][ T8572] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.075061][ T6653] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.472392][ T8584] netlink: 68 bytes leftover after parsing attributes in process `syz.0.597'. [ 358.762321][ T8622] netlink: 68 bytes leftover after parsing attributes in process `syz.1.608'. [ 358.944044][ T8627] Config c/1 of g1 needs at least one function. [ 358.950487][ T8627] udc dummy_udc.0: failed to start g1: -22 [ 358.960862][ T8627] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 358.974275][ T8627] UDC core: g1: couldn't find an available UDC or it's busy [ 359.613667][ T5818] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 359.929873][ T5818] usb 5-1: unable to get BOS descriptor or descriptor too short [ 359.949178][ T5818] usb 5-1: no configurations [ 359.957735][ T5818] usb 5-1: can't read configurations, error -22 [ 360.934639][ T8666] syzkaller0: entered promiscuous mode [ 360.940183][ T8666] syzkaller0: entered allmulticast mode [ 361.229022][ T8681] loop4: detected capacity change from 0 to 128 [ 362.014277][ T8688] IPVS: wrr: TCP 127.0.0.1:21 - no destination available [ 362.033628][ T5842] IPVS: starting estimator thread 0... [ 362.103202][ T8677] Config c/1 of g1 needs at least one function. [ 362.116906][ T8677] udc dummy_udc.0: failed to start g1: -22 [ 362.122927][ T8677] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 362.135606][ T8691] IPVS: using max 18 ests per chain, 43200 per kthread [ 362.523638][ T8677] UDC core: g1: couldn't find an available UDC or it's busy [ 362.993718][ T5842] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 363.096368][ T8711] netlink: 12 bytes leftover after parsing attributes in process `syz.5.638'. [ 363.237023][ T5842] usb 5-1: unable to get BOS descriptor or descriptor too short [ 363.244927][ T5842] usb 5-1: no configurations [ 363.251030][ T5842] usb 5-1: can't read configurations, error -22 [ 363.568730][ T8718] loop1: detected capacity change from 0 to 128 [ 364.526713][ T8732] IPVS: wrr: TCP 127.0.0.1:21 - no destination available [ 364.864441][ T1190] IPVS: starting estimator thread 0... [ 364.968382][ T8734] IPVS: using max 17 ests per chain, 40800 per kthread [ 365.620554][ T8747] netlink: 12 bytes leftover after parsing attributes in process `syz.4.647'. [ 366.185431][ T28] audit: type=1326 audit(1790938448.496:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8739 comm="syz.5.646" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6be59e159 code=0x7fc00000 [ 366.659494][ T8758] netlink: 4 bytes leftover after parsing attributes in process `syz.5.652'. [ 367.322242][ T8763] Config c/1 of g1 needs at least one function. [ 367.331173][ T8763] udc dummy_udc.0: failed to start g1: -22 [ 367.356494][ T8763] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 367.379817][ T8758] team0: Port device team_slave_0 removed [ 367.522960][ T8763] UDC core: g1: couldn't find an available UDC or it's busy [ 368.392869][ T8775] netlink: 68 bytes leftover after parsing attributes in process `syz.0.656'. [ 368.826003][ T8780] netlink: 12 bytes leftover after parsing attributes in process `syz.5.658'. [ 370.098374][ T28] audit: type=1326 audit(1790938452.376:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8783 comm="syz.0.660" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82f099e159 code=0x7fc00000 [ 370.854642][ T8802] loop4: detected capacity change from 0 to 128 [ 374.142590][ T28] audit: type=1326 audit(1790938456.426:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8820 comm="syz.4.670" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feefef9e159 code=0x7fc00000 [ 377.217355][ T8844] loop1: detected capacity change from 0 to 128 [ 378.699703][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.706215][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.652594][ T28] audit: type=1326 audit(1790938461.956:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8861 comm="syz.5.682" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6be59e159 code=0x7fc00000 [ 379.790130][ T8869] zram: Cannot change disksize for initialized device [ 385.582174][ T28] audit: type=1326 audit(1790938467.886:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8906 comm="syz.0.692" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82f099e159 code=0x7fc00000 [ 390.919938][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 391.128903][ T8984] netlink: 68 bytes leftover after parsing attributes in process `syz.1.719'. [ 391.739960][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 391.747844][ T9] usb 5-1: no configurations [ 391.752490][ T9] usb 5-1: can't read configurations, error -22 [ 396.783582][ T5881] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 398.274484][ T5881] usb 5-1: unable to get BOS descriptor or descriptor too short [ 398.283744][ T5881] usb 5-1: no configurations [ 398.288362][ T5881] usb 5-1: can't read configurations, error -22 [ 399.416396][ T28] audit: type=1326 audit(1790938481.716:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9042 comm="syz.0.729" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82f099e159 code=0x7ffc0000 [ 399.460749][ T28] audit: type=1326 audit(1790938481.716:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9042 comm="syz.0.729" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82f099e159 code=0x7ffc0000 [ 399.524853][ T28] audit: type=1326 audit(1790938481.716:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9042 comm="syz.0.729" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f82f099e159 code=0x7ffc0000 [ 399.593572][ T28] audit: type=1326 audit(1790938481.716:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9042 comm="syz.0.729" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82f099e159 code=0x7ffc0000 [ 399.647635][ T9045] loop4: detected capacity change from 0 to 512 [ 399.698209][ T9045] EXT4-fs error (device loop4): ext4_iget_extra_inode:4752: inode #15: comm syz.4.738: corrupted in-inode xattr: invalid ea_ino [ 399.732444][ T9045] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.738: couldn't read orphan inode 15 (err -117) [ 399.753842][ T9045] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 400.709951][ T5791] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 404.034172][ T9059] hub 8-0:1.0: USB hub found [ 404.040135][ T9059] hub 8-0:1.0: 1 port detected [ 405.181649][ T6653] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.146176][ T5781] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 408.156532][ T5781] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 408.165170][ T5781] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 408.173361][ T5781] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 408.181951][ T5781] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 408.189826][ T5781] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 408.657260][ T9086] loop5: detected capacity change from 0 to 512 [ 408.741391][ T9086] EXT4-fs error (device loop5): ext4_iget_extra_inode:4752: inode #15: comm syz.5.751: corrupted in-inode xattr: invalid ea_ino [ 408.773557][ T9086] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.751: couldn't read orphan inode 15 (err -117) [ 408.808344][ T9086] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.957443][ T9077] chnl_net:caif_netlink_parms(): no params data found [ 409.121218][ T9077] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.128609][ T9077] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.143018][ T9077] bridge_slave_0: entered allmulticast mode [ 409.151607][ T9077] bridge_slave_0: entered promiscuous mode [ 409.165170][ T9077] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.172451][ T9077] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.182238][ T9077] bridge_slave_1: entered allmulticast mode [ 409.191176][ T9077] bridge_slave_1: entered promiscuous mode [ 409.225915][ T9077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.238049][ T9077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.275993][ T9077] team0: Port device team_slave_0 added [ 409.285356][ T9077] team0: Port device team_slave_1 added [ 409.342902][ T9077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.383664][ T9077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.431138][ T9077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.512575][ T5791] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 410.283753][ T5791] Bluetooth: hci4: command tx timeout [ 410.337790][ T7734] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.350456][ T9077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.388652][ T9077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.496580][ T9077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.862059][ T9077] hsr_slave_0: entered promiscuous mode [ 410.921522][ T9077] hsr_slave_1: entered promiscuous mode [ 411.277929][ T9077] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 411.298832][ T9077] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 411.316620][ T9077] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 411.337828][ T9077] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 411.579487][ T9077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.726790][ T9077] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.772203][ T2986] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.779427][ T2986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.045724][ T3480] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.052893][ T3480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.490618][ T5791] Bluetooth: hci4: command tx timeout [ 413.437591][ T9077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.793669][ T5791] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 413.842345][ T9139] netlink: 68 bytes leftover after parsing attributes in process `syz.4.764'. [ 414.111935][ T9077] veth0_vlan: entered promiscuous mode [ 414.122595][ T9077] veth1_vlan: entered promiscuous mode [ 414.167403][ T9077] veth0_macvtap: entered promiscuous mode [ 414.181251][ T9077] veth1_macvtap: entered promiscuous mode [ 414.212599][ T9077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.226866][ T9077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.237167][ T9077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.252162][ T9077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.272539][ T9077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.300102][ T9077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.322062][ T9077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.343809][ T9077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.355500][ T9077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.374472][ T9077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.395186][ T9077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.412881][ T9077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.434903][ T9077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.455468][ T9077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.470789][ T9077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.488220][ T9077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.507227][ T9077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.518662][ T9077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.534684][ T5791] Bluetooth: hci4: command tx timeout [ 414.552044][ T9077] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.561304][ T9077] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.598197][ T9077] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.617484][ T9077] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.463581][ T2986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.495577][ T2986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.849163][ T34] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.886501][ T2943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.912485][ T2943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.991912][ T34] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.082304][ T34] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.165939][ T34] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.604083][ T5791] Bluetooth: hci4: command tx timeout [ 418.837972][ T9204] FAULT_INJECTION: forcing a failure. [ 418.837972][ T9204] name failslab, interval 1, probability 0, space 0, times 1 [ 418.878514][ T9204] CPU: 0 PID: 9204 Comm: syz.6.779 Not tainted syzkaller #0 [ 418.885934][ T9204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 418.896066][ T9204] Call Trace: [ 418.899421][ T9204] [ 418.902394][ T9204] dump_stack_lvl+0x18c/0x250 [ 418.907245][ T9204] ? show_regs_print_info+0x20/0x20 [ 418.912499][ T9204] ? load_image+0x420/0x420 [ 418.917096][ T9204] ? __might_sleep+0xe0/0xe0 [ 418.921983][ T9204] ? __lock_acquire+0x7d80/0x7d80 [ 418.927081][ T9204] should_fail_ex+0x394/0x4c0 [ 418.931845][ T9204] should_failslab+0x9/0x20 [ 418.936410][ T9204] slab_pre_alloc_hook+0x59/0x300 [ 418.941533][ T9204] ? __up_read+0x2b8/0x6b0 [ 418.945989][ T9204] ? crypto_create_tfm_node+0x77/0x380 [ 418.951640][ T9204] ? crypto_create_tfm_node+0x77/0x380 [ 418.957148][ T9204] __kmem_cache_alloc_node+0x53/0x250 [ 418.962589][ T9204] ? crypto_create_tfm_node+0x77/0x380 [ 418.968087][ T9204] __kmalloc_node+0xa6/0x240 [ 418.972731][ T9204] crypto_create_tfm_node+0x77/0x380 [ 418.978057][ T9204] ? crypto_alg_mod_lookup+0x1ad/0x570 [ 418.983569][ T9204] crypto_alloc_tfm_node+0x17b/0x360 [ 418.988886][ T9204] sctp_auth_init_hmacs+0x314/0x4a0 [ 418.994234][ T9204] sctp_auth_init+0x288/0x460 [ 418.999037][ T9204] sctp_setsockopt_auth_supported+0x302/0x530 [ 419.005140][ T9204] sctp_setsockopt+0x571/0x11e0 [ 419.010075][ T9204] ? sock_common_recvmsg+0x190/0x190 [ 419.015425][ T9204] do_sock_setsockopt+0x175/0x1a0 [ 419.020516][ T9204] ? __fdget+0x180/0x210 [ 419.024840][ T9204] __x64_sys_setsockopt+0x182/0x200 [ 419.030094][ T9204] do_syscall_64+0x55/0xb0 [ 419.034541][ T9204] ? clear_bhb_loop+0x40/0x90 [ 419.039335][ T9204] ? clear_bhb_loop+0x40/0x90 [ 419.044062][ T9204] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 419.050032][ T9204] RIP: 0033:0x7f570359e159 [ 419.054495][ T9204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.074133][ T9204] RSP: 002b:00007f570446e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 419.082580][ T9204] RAX: ffffffffffffffda RBX: 00007f5703825fa0 RCX: 00007f570359e159 [ 419.090598][ T9204] RDX: 0000000000000081 RSI: 0000000000000084 RDI: 0000000000000004 [ 419.098609][ T9204] RBP: 00007f570363506b R08: 0000000000000008 R09: 0000000000000000 [ 419.106628][ T9204] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000000 [ 419.114633][ T9204] R13: 00007f5703826038 R14: 00007f5703825fa0 R15: 00007ffc86901b28 [ 419.122647][ T9204] [ 419.544731][ T9212] netlink: 8 bytes leftover after parsing attributes in process `syz.5.780'. [ 419.557312][ T9212] netlink: 'syz.5.780': attribute type 30 has an invalid length. [ 419.640428][ T9212] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.651160][ T9212] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.660185][ T9212] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.669067][ T9212] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.127571][ T9238] netlink: 68 bytes leftover after parsing attributes in process `syz.5.787'. [ 423.250967][ T9283] netlink: 68 bytes leftover after parsing attributes in process `syz.5.798'. [ 423.889643][ T34] hsr_slave_0: left promiscuous mode [ 424.024642][ T34] hsr_slave_1: left promiscuous mode [ 424.064456][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.082426][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.171463][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.253557][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.302233][ T34] bridge_slave_1: left allmulticast mode [ 424.323664][ T34] bridge_slave_1: left promiscuous mode [ 424.351161][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.419742][ T34] bridge_slave_0: left allmulticast mode [ 424.439926][ T34] bridge_slave_0: left promiscuous mode [ 424.459937][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.743499][ T34] veth1_macvtap: left promiscuous mode [ 424.759305][ T34] veth0_macvtap: left promiscuous mode [ 424.783650][ T34] veth1_vlan: left promiscuous mode [ 424.797126][ T34] veth0_vlan: left promiscuous mode [ 427.978998][ T34] team0 (unregistering): Port device team_slave_1 removed [ 428.063129][ T34] team0 (unregistering): Port device team_slave_0 removed [ 428.173135][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 428.465169][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 429.072628][ T34] bond0 (unregistering): Released all slaves [ 429.281796][ T9339] netlink: 236 bytes leftover after parsing attributes in process `syz.5.813'. [ 431.069978][ T9367] netlink: 28 bytes leftover after parsing attributes in process `syz.5.821'. [ 431.177807][ T9370] netlink: 236 bytes leftover after parsing attributes in process `syz.6.823'. [ 431.253366][ T9372] netlink: 68 bytes leftover after parsing attributes in process `syz.5.824'. [ 431.784788][ T9379] 8021q: VLANs not supported on gre0 [ 431.966564][ T34] IPVS: stop unused estimator thread 0... [ 435.289283][ T9426] netlink: 28 bytes leftover after parsing attributes in process `syz.6.833'. [ 435.602463][ T9432] netlink: 216 bytes leftover after parsing attributes in process `syz.6.834'. [ 436.013522][ T5855] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 436.778133][ T9445] 8021q: VLANs not supported on gre0 [ 437.436587][ T5855] usb 1-1: unable to get BOS descriptor or descriptor too short [ 437.453521][ T5855] usb 1-1: no configurations [ 437.458185][ T5855] usb 1-1: can't read configurations, error -22 [ 437.555944][ T9460] loop6: detected capacity change from 0 to 1024 [ 437.975186][ T9077] hfsplus: bad catalog entry type [ 438.057871][ T9466] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 438.064434][ T9466] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 438.134079][ T9466] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 438.309819][ T9473] netlink: 28 bytes leftover after parsing attributes in process `syz.4.842'. [ 438.960531][ T3480] hfsplus: b-tree write err: -5, ino 25 [ 438.999878][ T3480] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 439.036447][ T3480] hfsplus: b-tree write err: -5, ino 2 [ 440.128427][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.143250][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.988940][ T9503] loop5: detected capacity change from 0 to 1024 [ 442.010193][ T9507] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 442.023916][ T9507] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 442.708326][ T3480] hfsplus: b-tree write err: -5, ino 25 [ 442.723850][ T3480] hfsplus: b-tree write err: -5, ino 4 [ 442.753548][ T3480] hfsplus: b-tree write err: -5, ino 2 [ 442.794048][ T3480] hfsplus: b-tree write err: -5, ino 26 [ 442.835345][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 442.844545][ T5781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 442.853196][ T5781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 442.928077][ T5781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 442.955510][ T5781] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 442.974628][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 443.690180][ T9528] (null): rxe_set_mtu: Set mtu to 1024 [ 444.431004][ T9528] infiniband syz0: set active [ 444.436029][ T9528] infiniband syz0: added veth1_to_bridge [ 444.489170][ T9528] RDS/IB: syz0: added [ 444.494173][ T9528] smc: adding ib device syz0 with port count 1 [ 444.500486][ T9528] smc: ib device syz0 port 1 has pnetid [ 445.093692][ T5781] Bluetooth: hci1: command tx timeout [ 446.150531][ T9550] netlink: 216 bytes leftover after parsing attributes in process `syz.0.855'. [ 447.424291][ T5781] Bluetooth: hci1: command tx timeout [ 447.631175][ T34] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.879376][ T9516] chnl_net:caif_netlink_parms(): no params data found [ 448.022843][ T34] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.305494][ T9573] IPVS: wrr: TCP 127.0.0.1:21 - no destination available [ 448.405246][ T34] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.549188][ T34] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.793508][ T9516] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.983833][ T9516] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.991132][ T9516] bridge_slave_0: entered allmulticast mode [ 449.040310][ T9516] bridge_slave_0: entered promiscuous mode [ 449.093516][ T9516] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.103628][ T9516] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.143726][ T9516] bridge_slave_1: entered allmulticast mode [ 449.152298][ T9516] bridge_slave_1: entered promiscuous mode [ 449.289678][ T9516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.880442][ T5791] Bluetooth: hci1: command tx timeout [ 450.891611][ T9516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.288496][ T9516] team0: Port device team_slave_0 added [ 451.326456][ T9516] team0: Port device team_slave_1 added [ 451.534185][ T9600] loop5: detected capacity change from 0 to 1024 [ 452.293059][ T9603] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 452.348477][ T9603] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 452.398722][ T9603] syz.5.860 (9603) used greatest stack depth: 20376 bytes left [ 452.520986][ T9516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.547395][ T9516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.619260][ T9516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.689472][ T3480] hfsplus: b-tree write err: -5, ino 25 [ 452.696734][ T3480] hfsplus: b-tree write err: -5, ino 4 [ 452.702404][ T3480] hfsplus: b-tree write err: -5, ino 2 [ 452.716824][ T3480] hfsplus: b-tree write err: -5, ino 26 [ 452.781861][ T9516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.801137][ T9516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.855718][ T9516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.933659][ T5781] Bluetooth: hci1: command tx timeout [ 452.961826][ T9612] netlink: 216 bytes leftover after parsing attributes in process `syz.5.866'. [ 452.981207][ T9612] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 453.734529][ T9516] hsr_slave_0: entered promiscuous mode [ 453.750670][ T9516] hsr_slave_1: entered promiscuous mode [ 453.757511][ T9516] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 453.775196][ T9516] Cannot create hsr debugfs directory [ 455.394053][ T9516] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 455.452127][ T9516] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 455.521635][ T9516] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 455.617042][ T9516] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 456.079931][ T9656] loop5: detected capacity change from 0 to 1024 [ 456.129641][ T34] hsr_slave_0: left promiscuous mode [ 456.136733][ T34] hsr_slave_1: left promiscuous mode [ 456.173724][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 456.184302][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 456.341509][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 456.353523][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 456.373648][ T34] bridge_slave_1: left allmulticast mode [ 456.431029][ T34] bridge_slave_1: left promiscuous mode [ 456.437953][ T9660] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 456.469352][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.618742][ T9660] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 456.763908][ T34] bridge_slave_0: left allmulticast mode [ 456.861556][ T34] bridge_slave_0: left promiscuous mode [ 456.938356][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.069033][ T7734] hfsplus: bad catalog entry type [ 457.243973][ T34] veth1_macvtap: left promiscuous mode [ 457.256156][ T34] veth0_macvtap: left promiscuous mode [ 457.273795][ T34] veth1_vlan: left promiscuous mode [ 457.302459][ T34] veth0_vlan: left promiscuous mode [ 457.332704][ T9660] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 457.467615][ T11] hfsplus: b-tree write err: -5, ino 25 [ 457.486143][ T11] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 457.492473][ T11] hfsplus: b-tree write err: -5, ino 2 [ 458.514404][ T34] team0 (unregistering): Port device team_slave_1 removed [ 458.625897][ T34] team0 (unregistering): Port device team_slave_0 removed [ 458.720088][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 458.793534][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 459.202308][ T34] bond0 (unregistering): Released all slaves [ 459.339966][ T9659] netlink: 216 bytes leftover after parsing attributes in process `syz.4.874'. [ 459.616476][ T9516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.679413][ T9516] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.748796][ T2924] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.755967][ T2924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.796605][ T2924] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.803876][ T2924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.311912][ T9516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 461.728878][ T34] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 461.742440][ T34] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.986311][ T34] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 461.999409][ T34] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.018193][ T34] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.032209][ T34] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.270147][ T34] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 464.287177][ T34] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.381461][ T9516] veth0_vlan: entered promiscuous mode [ 464.412959][ T9516] veth1_vlan: entered promiscuous mode [ 464.490135][ T9516] veth0_macvtap: entered promiscuous mode [ 464.503652][ T5791] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 464.512848][ T5791] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 464.521785][ T5791] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 464.530703][ T5791] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 464.538999][ T5791] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 464.548771][ T5791] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 464.594654][ T9516] veth1_macvtap: entered promiscuous mode [ 464.756350][ T9516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 464.773658][ T9516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.793510][ T9516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 464.804667][ T9516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.814936][ T9516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 464.837381][ T9516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.870368][ T9516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 464.910952][ T9516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.939425][ T9516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.954662][ T9516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.979033][ T9516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.013773][ T9516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 465.028678][ T9516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.059778][ T9516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 465.074224][ T9516] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.082974][ T9516] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.103465][ T9516] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.112242][ T9516] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.393563][ T3505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.401438][ T3505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.513594][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.521574][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.615583][ T5781] Bluetooth: hci2: command tx timeout [ 467.778534][ T9761] binder_alloc: 9760: binder_alloc_buf, no vma [ 467.839634][ T9718] chnl_net:caif_netlink_parms(): no params data found [ 468.396868][ T9779] loop7: detected capacity change from 0 to 1024 [ 468.443645][ T9718] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.451011][ T9718] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.461179][ T9718] bridge_slave_0: entered allmulticast mode [ 468.473353][ T9718] bridge_slave_0: entered promiscuous mode [ 468.484425][ T9718] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.491781][ T9718] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.499254][ T9718] bridge_slave_1: entered allmulticast mode [ 468.506541][ T9718] bridge_slave_1: entered promiscuous mode [ 468.728915][ T5781] Bluetooth: hci2: command tx timeout [ 468.753871][ T9718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.758200][ T9516] hfsplus: bad catalog entry type [ 468.769558][ T9718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.802761][ T9783] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 468.809301][ T9783] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 468.895667][ T9516] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 468.968211][ T9718] team0: Port device team_slave_0 added [ 469.004039][ T9718] team0: Port device team_slave_1 added [ 469.394746][ T9718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.401770][ T9718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.463661][ T9718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.477129][ T9718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.501929][ T9718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.533437][ T9718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.571922][ T2986] hfsplus: b-tree write err: -5, ino 25 [ 469.609208][ T2986] hfsplus: b-tree write err: -5, ino 4 [ 469.639537][ T2986] hfsplus: b-tree write err: -5, ino 2 [ 469.830266][ T9792] netlink: 216 bytes leftover after parsing attributes in process `syz.4.884'. [ 470.366991][ T9718] hsr_slave_0: entered promiscuous mode [ 470.378352][ T9718] hsr_slave_1: entered promiscuous mode [ 470.763809][ T5781] Bluetooth: hci2: command tx timeout [ 471.047636][ T5791] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 471.058877][ T5791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 471.067820][ T5791] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 471.078506][ T5791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 471.087135][ T5791] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 471.101887][ T5791] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 471.557485][ T34] hsr_slave_0: left promiscuous mode [ 471.584490][ T34] hsr_slave_1: left promiscuous mode [ 471.631770][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 471.641872][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.650897][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 471.658998][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 471.682404][ T34] bridge_slave_1: left allmulticast mode [ 471.688424][ T34] bridge_slave_1: left promiscuous mode [ 471.694605][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.706057][ T34] bridge_slave_0: left allmulticast mode [ 471.711914][ T34] bridge_slave_0: left promiscuous mode [ 471.722397][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.770901][ T34] veth1_macvtap: left promiscuous mode [ 471.779553][ T34] veth0_macvtap: left promiscuous mode [ 471.791406][ T34] veth1_vlan: left promiscuous mode [ 471.803305][ T34] veth0_vlan: left promiscuous mode [ 472.275501][ T9821] binder_alloc: 9820: binder_alloc_buf, no vma [ 473.853720][ T5791] Bluetooth: hci2: command tx timeout [ 473.859255][ T5791] Bluetooth: hci1: command tx timeout [ 473.995715][ T34] team0 (unregistering): Port device team_slave_1 removed [ 474.061123][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 474.158342][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 474.713825][ T34] bond0 (unregistering): Released all slaves [ 475.050161][ T9718] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 475.071864][ T9718] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 475.098359][ T9718] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 475.141563][ T9718] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 475.439292][ T34] IPVS: stop unused estimator thread 0... [ 475.614313][ T9836] ip_tables: iptables: counters copy to user failed while replacing table [ 475.826515][ T34] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.882019][ T9814] chnl_net:caif_netlink_parms(): no params data found [ 475.896579][ T5791] Bluetooth: hci1: command tx timeout [ 476.049364][ T34] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.187995][ T34] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.527567][ T34] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.592468][ T9814] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.603631][ T9814] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.610937][ T9814] bridge_slave_0: entered allmulticast mode [ 476.645052][ T9814] bridge_slave_0: entered promiscuous mode [ 476.659033][ T9814] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.671817][ T9814] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.679940][ T9814] bridge_slave_1: entered allmulticast mode [ 476.694144][ T9814] bridge_slave_1: entered promiscuous mode [ 476.728584][ T9718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.791411][ T9718] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.816058][ T9814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 476.839590][ T9814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.896441][ T2924] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.903683][ T2924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.977447][ T3480] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.984709][ T3480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.139606][ T9814] team0: Port device team_slave_0 added [ 477.149529][ T9814] team0: Port device team_slave_1 added [ 478.704320][ T5791] Bluetooth: hci1: command tx timeout [ 478.773474][ T9814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.803757][ T9814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.843876][ T9814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.865392][ T9814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.872433][ T9814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.904727][ T9814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 479.251601][ T9814] hsr_slave_0: entered promiscuous mode [ 479.264693][ T9814] hsr_slave_1: entered promiscuous mode [ 479.287924][ T9814] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 479.296050][ T9814] Cannot create hsr debugfs directory [ 480.430094][ T9718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.624942][ T9814] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 480.765627][ T5791] Bluetooth: hci1: command tx timeout [ 480.932039][ T9814] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 481.032475][ T9814] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 481.153344][ T9814] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 481.527553][ T9897] loop4: detected capacity change from 0 to 1024 [ 481.814732][ T9814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.050944][ T6653] hfsplus: bad catalog entry type [ 482.064686][ T9902] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 482.071087][ T9902] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 482.182319][ T9814] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.261657][ T6653] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 482.314199][ T2924] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.321323][ T2924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.359041][ T2924] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.366212][ T2924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.422620][ T9718] veth0_vlan: entered promiscuous mode [ 482.646204][ T34] hsr_slave_0: left promiscuous mode [ 482.652374][ T34] hsr_slave_1: left promiscuous mode [ 482.665938][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.674959][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.683063][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.693455][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 482.704600][ T34] bridge_slave_1: left allmulticast mode [ 482.710293][ T34] bridge_slave_1: left promiscuous mode [ 482.734019][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.874385][ T34] bridge_slave_0: left allmulticast mode [ 482.880100][ T34] bridge_slave_0: left promiscuous mode [ 482.887058][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.016162][ T34] veth1_macvtap: left promiscuous mode [ 483.028930][ T34] veth0_macvtap: left promiscuous mode [ 483.036130][ T34] veth1_vlan: left promiscuous mode [ 483.041480][ T34] veth0_vlan: left promiscuous mode [ 483.200543][ T2970] hfsplus: b-tree write err: -5, ino 25 [ 483.207570][ T2970] hfsplus: b-tree write err: -5, ino 4 [ 483.222315][ T2970] hfsplus: b-tree write err: -5, ino 2 [ 484.010447][ T34] team0 (unregistering): Port device team_slave_1 removed [ 484.057350][ T34] team0 (unregistering): Port device team_slave_0 removed [ 484.101216][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 484.157059][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 484.504440][ T34] bond0 (unregistering): Released all slaves [ 484.601237][ T9911] netlink: 20 bytes leftover after parsing attributes in process `syz.0.902'. [ 484.610826][ T9911] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 484.714227][ T9814] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 484.762553][ T9718] veth1_vlan: entered promiscuous mode [ 484.876861][ T9718] veth0_macvtap: entered promiscuous mode [ 484.937101][ T9718] veth1_macvtap: entered promiscuous mode [ 484.979379][ T9922] ip_tables: iptables: counters copy to user failed while replacing table [ 485.053314][ T9718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.109343][ T9718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.153669][ T9718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.187374][ T9718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.226107][ T9718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 485.289315][ T9718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.343469][ T9718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.363848][ T9718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.380100][ T9718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.424625][ T9718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 485.446042][ T9718] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.473800][ T9718] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.482681][ T9718] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.533724][ T9718] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.727792][ T9814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 485.984199][ T2970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.992184][ T2970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.049779][ T3505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.082096][ T3505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.514087][ T34] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.779944][ T34] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.351106][ T34] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.424972][ T9814] veth0_vlan: entered promiscuous mode [ 487.442705][ T9814] veth1_vlan: entered promiscuous mode [ 487.544704][ T34] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.737852][ T9814] veth0_macvtap: entered promiscuous mode [ 487.763399][ T9814] veth1_macvtap: entered promiscuous mode [ 487.819222][ T9814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.854857][ T9814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.891129][ T9814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.882278][ T9814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.947499][ T9814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.043406][ T9814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.066222][ T9814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 489.108546][ T9814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.153537][ T9814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.172188][ T9814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.202340][ T9814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.225831][ T9814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.255699][ T9814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.275049][ T9814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 489.336279][ T9814] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.384010][ T9814] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.392875][ T9814] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.423470][ T9814] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.789531][ T9961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.835789][ T9961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.978904][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.024058][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.621152][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 490.640734][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 490.650835][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 491.319750][ T5781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 491.329583][ T5781] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 491.340718][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 491.493049][T10003] loop8: detected capacity change from 0 to 1024 [ 491.704319][T10007] loop2: detected capacity change from 0 to 7 [ 491.907890][ T9718] hfsplus: bad catalog entry type [ 491.921466][T10007] Dev loop2: unable to read RDB block 7 [ 491.932982][T10009] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 491.939549][T10009] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 492.020809][ T9718] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 492.042454][T10007] loop2: unable to read partition table [ 492.068921][T10007] loop2: partition table beyond EOD, truncated [ 492.075352][T10007] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 492.654782][ T2970] hfsplus: b-tree write err: -5, ino 25 [ 492.683627][ T2970] hfsplus: b-tree write err: -5, ino 4 [ 492.689280][ T2970] hfsplus: b-tree write err: -5, ino 2 [ 493.565323][ T5781] Bluetooth: hci0: command tx timeout [ 494.305106][T10033] loop9: detected capacity change from 0 to 1024 [ 494.929550][ T9814] hfsplus: bad catalog entry type [ 495.015876][T10042] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 495.022458][T10042] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 495.088919][T10042] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 495.148743][ T9999] chnl_net:caif_netlink_parms(): no params data found [ 495.244369][ T5791] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 495.254629][ T5791] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 495.264392][ T5791] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 495.293037][ T5791] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 495.302328][ T5791] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 495.312454][ T5791] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 495.384480][ T11] hfsplus: b-tree write err: -5, ino 25 [ 495.407236][ T11] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 495.422843][ T11] hfsplus: b-tree write err: -5, ino 2 [ 495.644126][ T5781] Bluetooth: hci0: command tx timeout [ 495.786390][ T9999] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.793785][ T9999] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.804038][ T9999] bridge_slave_0: entered allmulticast mode [ 495.811254][ T9999] bridge_slave_0: entered promiscuous mode [ 495.821973][ T9999] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.829398][ T9999] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.836675][ T9999] bridge_slave_1: entered allmulticast mode [ 495.844222][ T9999] bridge_slave_1: entered promiscuous mode [ 495.878332][ T9999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.892418][ T9999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.305343][ T9999] team0: Port device team_slave_0 added [ 496.327804][ T9999] team0: Port device team_slave_1 added [ 496.779437][ T9999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.802356][ T9999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.863989][ T9999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.895660][ T9999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.902762][ T9999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.973623][ T9999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 497.285215][ T9999] hsr_slave_0: entered promiscuous mode [ 497.320901][ T9999] hsr_slave_1: entered promiscuous mode [ 497.329380][ T9999] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 497.368999][ T9999] Cannot create hsr debugfs directory [ 497.403630][ T5781] Bluetooth: hci2: command tx timeout [ 497.725259][ T5781] Bluetooth: hci0: command tx timeout [ 498.089740][ T34] hsr_slave_0: left promiscuous mode [ 498.100910][ T34] hsr_slave_1: left promiscuous mode [ 498.108674][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 498.116328][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 498.131709][ T5791] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 498.142131][ T5791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 498.151036][ T5791] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 498.159665][ T5791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 498.167634][ T5791] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 498.176422][ T5791] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 498.286486][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 498.351257][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 498.393733][ T34] bridge_slave_1: left allmulticast mode [ 498.399509][ T34] bridge_slave_1: left promiscuous mode [ 498.443773][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.468155][ T34] bridge_slave_0: left allmulticast mode [ 498.487377][ T34] bridge_slave_0: left promiscuous mode [ 498.493226][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.612776][ T34] veth1_macvtap: left promiscuous mode [ 498.645105][ T34] veth0_macvtap: left promiscuous mode [ 498.658894][ T34] veth1_vlan: left promiscuous mode [ 498.664595][ T34] veth0_vlan: left promiscuous mode [ 499.943718][ T5791] Bluetooth: hci2: command tx timeout [ 499.943750][ T5781] Bluetooth: hci0: command tx timeout [ 500.203900][ T5781] Bluetooth: hci1: command tx timeout [ 501.431542][ T34] team0 (unregistering): Port device team_slave_1 removed [ 501.539193][ T34] team0 (unregistering): Port device team_slave_0 removed [ 501.585757][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.592238][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.615872][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 501.705147][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 501.982159][ T5781] Bluetooth: hci2: command tx timeout [ 502.283579][ T5781] Bluetooth: hci1: command tx timeout [ 502.428651][ T34] bond0 (unregistering): Released all slaves [ 502.617038][T10043] chnl_net:caif_netlink_parms(): no params data found [ 504.235683][ T5781] Bluetooth: hci2: command tx timeout [ 504.371202][ T5781] Bluetooth: hci1: command tx timeout [ 505.159012][T10115] binder: BINDER_SET_CONTEXT_MGR already set [ 505.171584][T10115] binder: 10114:10115 ioctl 4018620d 200000004a80 returned -16 [ 505.302442][T10043] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.309993][T10043] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.317396][T10043] bridge_slave_0: entered allmulticast mode [ 505.325475][T10043] bridge_slave_0: entered promiscuous mode [ 505.355619][T10043] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.362803][T10043] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.383869][T10043] bridge_slave_1: entered allmulticast mode [ 505.391437][T10043] bridge_slave_1: entered promiscuous mode [ 505.501206][ T34] IPVS: stop unused estimator thread 0... [ 505.550446][T10043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.576902][T10043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.672472][T10043] team0: Port device team_slave_0 added [ 505.688832][T10043] team0: Port device team_slave_1 added [ 505.770540][T10043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.779562][T10043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.805903][T10043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.821432][T10043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.828780][T10043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.860599][T10043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.895132][ T34] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.034803][ T34] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.069579][T10081] chnl_net:caif_netlink_parms(): no params data found [ 506.131721][ T34] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.155232][T10043] hsr_slave_0: entered promiscuous mode [ 506.161969][T10043] hsr_slave_1: entered promiscuous mode [ 506.169442][T10043] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 506.177620][T10043] Cannot create hsr debugfs directory [ 506.272808][ T34] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.340447][ T9999] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 506.356616][ T9999] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 506.398759][ T9999] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 506.444036][ T5781] Bluetooth: hci1: command tx timeout [ 506.474265][ T9999] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 506.606434][T10081] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.613761][T10081] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.621308][T10081] bridge_slave_0: entered allmulticast mode [ 506.629545][T10081] bridge_slave_0: entered promiscuous mode [ 507.036053][T10081] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.043295][T10081] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.051243][T10081] bridge_slave_1: entered allmulticast mode [ 507.060626][T10081] bridge_slave_1: entered promiscuous mode [ 507.308259][ T34] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.331666][T10081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.347402][T10081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 507.422385][T10081] team0: Port device team_slave_0 added [ 507.445758][T10081] team0: Port device team_slave_1 added [ 507.506540][ T34] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.548504][T10081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 507.560498][T10081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.589360][T10081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 507.625209][ T34] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.648164][T10081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 507.655691][T10081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.681593][ C1] vkms_vblank_simulate: vblank timer overrun [ 507.688762][T10081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 507.764671][T10081] hsr_slave_0: entered promiscuous mode [ 507.771421][T10081] hsr_slave_1: entered promiscuous mode [ 507.778308][T10081] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 507.787231][T10081] Cannot create hsr debugfs directory [ 507.809800][ T34] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.898771][ T9999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.036607][ T9999] 8021q: adding VLAN 0 to HW filter on device team0 [ 508.066914][ T2986] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.074200][ T2986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 508.085746][ T2986] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.092989][ T2986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 508.836882][ T9999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 508.983339][ T9999] veth0_vlan: entered promiscuous mode [ 509.000952][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805d95e800: rx timeout, send abort [ 509.013294][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88805d95e800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 509.032637][ T9999] veth1_vlan: entered promiscuous mode [ 509.118715][ T9999] veth0_macvtap: entered promiscuous mode [ 509.132507][ T9999] veth1_macvtap: entered promiscuous mode [ 509.199361][ T9999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.210151][ T9999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.221083][ T9999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.231990][ T9999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.242158][ T9999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.253248][ T9999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.269565][ T9999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 509.322396][ T9999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.333822][ T9999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.343896][ T9999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.354796][ T9999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.364738][ T9999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.375387][ T9999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.387147][ T9999] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 509.407494][ T9999] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.416809][ T9999] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.427176][ T9999] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.436372][ T9999] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.653641][ T3480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.661624][ T3480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.727082][ T3480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.738533][ T3480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.212964][T10141] ip_tables: iptables: counters copy to user failed while replacing table [ 510.647715][T10144] syz_tun: entered allmulticast mode [ 511.107570][T10137] syz_tun: left allmulticast mode [ 511.117724][T10148] loop3: detected capacity change from 0 to 4096 [ 511.206527][T10148] EXT4-fs (loop3): Test dummy encryption mode enabled [ 511.367751][T10148] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 511.412053][T10154] fuse: Bad value for 'rootmode' [ 511.823277][ T34] hsr_slave_0: left promiscuous mode [ 511.831407][ T34] hsr_slave_1: left promiscuous mode [ 511.839311][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 511.853663][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 511.871994][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 511.884637][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 511.892664][ T34] bridge_slave_1: left allmulticast mode [ 511.900803][ T34] bridge_slave_1: left promiscuous mode [ 511.908192][ T9999] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.918674][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.937685][ T34] bridge_slave_0: left allmulticast mode [ 511.947582][ T34] bridge_slave_0: left promiscuous mode [ 511.953474][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.998555][ T34] hsr_slave_0: left promiscuous mode [ 512.015931][ T34] hsr_slave_1: left promiscuous mode [ 512.032193][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 512.043664][ T970] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 512.063957][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 512.081014][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 512.090772][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 512.108438][ T34] bridge_slave_1: left allmulticast mode [ 512.114525][ T34] bridge_slave_1: left promiscuous mode [ 512.120281][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.130199][ T34] bridge_slave_0: left allmulticast mode [ 512.137398][ T34] bridge_slave_0: left promiscuous mode [ 512.143219][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.207412][ T34] veth1_macvtap: left promiscuous mode [ 512.212965][ T34] veth0_macvtap: left promiscuous mode [ 512.219308][ T34] veth1_vlan: left promiscuous mode [ 512.224744][ T34] veth0_vlan: left promiscuous mode [ 512.231624][ T34] veth1_macvtap: left promiscuous mode [ 512.237856][ T34] veth0_macvtap: left promiscuous mode [ 512.245392][ T34] veth1_vlan: left promiscuous mode [ 512.250789][ T34] veth0_vlan: left promiscuous mode [ 512.276035][ T970] usb 1-1: config 2 has an invalid interface number: 79 but max is 0 [ 512.290392][ T970] usb 1-1: config 2 has no interface number 0 [ 512.304338][ T970] usb 1-1: config 2 interface 79 has no altsetting 0 [ 512.325984][ T970] usb 1-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=ca.fb [ 512.343661][ T970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.351711][ T970] usb 1-1: Product: syz [ 512.374301][ T970] usb 1-1: Manufacturer: syz [ 512.378939][ T970] usb 1-1: SerialNumber: syz [ 512.690644][ T970] esd_usb 1-1:2.79: sending version message failed [ 512.702126][ T970] esd_usb: probe of 1-1:2.79 failed with error -22 [ 512.721242][ T970] usb 1-1: USB disconnect, device number 6 [ 513.272372][ T34] team0 (unregistering): Port device team_slave_1 removed [ 513.320887][ T34] team0 (unregistering): Port device team_slave_0 removed [ 513.395285][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 513.471684][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 513.907727][ T34] bond0 (unregistering): Released all slaves [ 513.924215][ T1190] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 514.099996][ T1190] usb 1-1: device descriptor read/64, error -71 [ 514.399431][ T1190] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 514.564040][ T1190] usb 1-1: device descriptor read/64, error -71 [ 514.597427][ T34] team0 (unregistering): Port device team_slave_1 removed [ 514.648498][ T34] team0 (unregistering): Port device team_slave_0 removed [ 514.693769][ T1190] usb usb1-port1: attempt power cycle [ 514.701791][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 514.756884][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 515.124030][ T1190] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 515.161836][ T34] bond0 (unregistering): Released all slaves [ 515.193518][ T1190] usb 1-1: device descriptor read/8, error -71 [ 515.321249][T10177] fuse: Bad value for 'rootmode' [ 515.473478][ T1190] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 515.494806][T10179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.945'. [ 515.529362][ T1190] usb 1-1: device descriptor read/8, error -71 [ 515.621944][T10043] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 515.664990][ T1190] usb usb1-port1: unable to enumerate USB device [ 515.857052][T10043] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 515.871966][T10183] loop3: detected capacity change from 0 to 1024 [ 515.884562][T10043] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 515.893330][T10183] EXT4-fs: Ignoring removed bh option [ 515.913132][T10043] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 516.009049][T10183] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 516.032570][T10183] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 516.106074][T10183] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #15: block 3: comm syz.3.947: lblock 3 mapped to illegal pblock 3 (length 3) [ 516.138384][T10183] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 516.173425][T10183] EXT4-fs (loop3): This should not happen!! Data will be lost [ 516.173425][T10183] [ 516.216388][T10187] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #15: block 3: comm syz.3.947: lblock 3 mapped to illegal pblock 3 (length 1) [ 516.260250][T10187] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #15: block 3: comm syz.3.947: lblock 3 mapped to illegal pblock 3 (length 1) [ 516.309850][T10188] EXT4-fs error (device loop3): ext4_ext_remove_space:2957: inode #15: comm syz.3.947: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 516.351058][T10188] EXT4-fs error (device loop3) in ext4_setattr:5695: Corrupt filesystem [ 516.461491][ T9999] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 516.817566][T10043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.951040][T10043] 8021q: adding VLAN 0 to HW filter on device team0 [ 516.985985][T10081] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 517.017840][T10081] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 517.049616][ T2924] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.056931][ T2924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 517.082577][ T2924] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.089849][ T2924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 517.106931][T10081] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 517.171962][T10081] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 517.289922][T10043] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 517.492754][T10081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.558641][T10081] 8021q: adding VLAN 0 to HW filter on device team0 [ 517.597776][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.605040][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 517.669406][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.676795][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 518.045566][T10043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 518.190409][T10043] veth0_vlan: entered promiscuous mode [ 518.224022][T10043] veth1_vlan: entered promiscuous mode [ 518.287788][T10043] veth0_macvtap: entered promiscuous mode [ 518.331060][T10043] veth1_macvtap: entered promiscuous mode [ 518.387849][T10043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 518.411367][T10043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.428032][T10043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 518.440045][T10043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.452600][T10043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 518.471758][T10043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.485415][T10043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.505256][T10043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.521669][T10043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.534855][T10043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 518.577048][T10043] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.598793][T10043] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.608374][T10043] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.617420][T10043] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.631397][T10081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 518.776245][ T3480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.795539][ T3480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.834541][ T2924] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.850749][ T2924] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.907526][T10081] veth0_vlan: entered promiscuous mode [ 518.942279][T10081] veth1_vlan: entered promiscuous mode [ 519.034773][T10081] veth0_macvtap: entered promiscuous mode [ 519.069604][T10081] veth1_macvtap: entered promiscuous mode [ 519.425763][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.542793][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.670870][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.897011][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.964623][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.975705][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.987435][T10081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 520.002168][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 520.013112][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.027767][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 520.056260][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.073660][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 520.098679][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.139677][T10081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 520.166434][T10240] fuse: Unknown parameter 'use00000000000000000000' [ 520.204757][T10081] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.235136][T10081] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.273432][T10081] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.282757][T10081] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.347155][T10246] loop3: detected capacity change from 0 to 512 [ 520.368204][T10246] EXT4-fs error (device loop3): ext4_iget_extra_inode:4752: inode #15: comm syz.3.954: corrupted in-inode xattr: invalid ea_ino [ 520.447357][T10246] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.954: couldn't read orphan inode 15 (err -117) [ 520.509498][T10246] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 520.704237][T10251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.952'. [ 520.810111][T10258] loop2: detected capacity change from 0 to 1024 [ 520.818329][T10258] EXT4-fs: Ignoring removed bh option [ 520.834261][ T2970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.850056][ T2970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.895803][T10258] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 520.934045][T10258] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 520.966551][T10258] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: block 3: comm syz.2.955: lblock 3 mapped to illegal pblock 3 (length 3) [ 520.995170][ T2924] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.012200][T10258] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 521.024749][ T2924] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.050235][T10258] EXT4-fs (loop2): This should not happen!! Data will be lost [ 521.050235][T10258] [ 521.078563][T10263] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: block 3: comm syz.2.955: lblock 3 mapped to illegal pblock 3 (length 1) [ 521.108479][T10263] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: block 3: comm syz.2.955: lblock 3 mapped to illegal pblock 3 (length 1) [ 521.128808][T10263] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: block 3: comm syz.2.955: lblock 3 mapped to illegal pblock 3 (length 1) [ 521.151953][T10258] EXT4-fs error (device loop2): ext4_ext_remove_space:2957: inode #15: comm syz.2.955: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 521.220539][T10258] EXT4-fs error (device loop2) in ext4_setattr:5695: Corrupt filesystem [ 521.272997][ T9999] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.308987][T10043] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 521.874911][ T5881] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 522.236454][ T5881] usb 2-1: device descriptor read/64, error -71 [ 522.561200][T10287] fuse: Unknown parameter 'use00000000000000000000' [ 522.613553][ T5881] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 522.784489][ T5881] usb 2-1: device descriptor read/64, error -71 [ 522.842130][T10298] loop3: detected capacity change from 0 to 512 [ 522.894510][T10298] EXT4-fs error (device loop3): ext4_iget_extra_inode:4752: inode #15: comm syz.3.964: corrupted in-inode xattr: invalid ea_ino [ 522.909862][T10298] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.964: couldn't read orphan inode 15 (err -117) [ 522.926114][ T5881] usb usb2-port1: attempt power cycle [ 522.926395][T10298] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 523.055486][T10307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.966'. [ 523.541955][ T5881] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 523.584348][ T5881] usb 2-1: device descriptor read/8, error -71 [ 524.237003][ T9999] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.430456][T10332] fuse: Unknown parameter 'use00000000000000000000' [ 524.521832][T10337] FAULT_INJECTION: forcing a failure. [ 524.521832][T10337] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 524.536235][ T5881] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 524.544112][T10337] CPU: 1 PID: 10337 Comm: syz.2.973 Not tainted syzkaller #0 [ 524.551537][T10337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 524.561623][T10337] Call Trace: [ 524.564969][T10337] [ 524.567951][T10337] dump_stack_lvl+0x18c/0x250 [ 524.572708][T10337] ? show_regs_print_info+0x20/0x20 [ 524.577982][T10337] ? load_image+0x420/0x420 [ 524.582545][T10337] ? __might_fault+0xaa/0x120 [ 524.587273][T10337] ? __lock_acquire+0x7d80/0x7d80 [ 524.592348][T10337] ? vfs_write+0x5de/0x9a0 [ 524.596860][T10337] should_fail_ex+0x394/0x4c0 [ 524.601596][T10337] _copy_from_user+0x2f/0xe0 [ 524.606225][T10337] do_seccomp+0x3b5/0xdc0 [ 524.610641][T10337] ? prctl_set_seccomp+0x60/0x60 [ 524.615621][T10337] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 524.621658][T10337] ? lockdep_hardirqs_on+0x98/0x150 [ 524.626963][T10337] do_syscall_64+0x55/0xb0 [ 524.631407][T10337] ? clear_bhb_loop+0x40/0x90 [ 524.636114][T10337] ? clear_bhb_loop+0x40/0x90 [ 524.640812][T10337] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 524.646729][T10337] RIP: 0033:0x7f79a3b9e159 [ 524.651183][T10337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 524.670811][T10337] RSP: 002b:00007f79a4a9c028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 524.679244][T10337] RAX: ffffffffffffffda RBX: 00007f79a3e25fa0 RCX: 00007f79a3b9e159 [ 524.687241][T10337] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 524.695231][T10337] RBP: 00007f79a3c3506b R08: 0000000000000000 R09: 0000000000000000 [ 524.703238][T10337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.711259][T10337] R13: 00007f79a3e26038 R14: 00007f79a3e25fa0 R15: 00007ffda1adee28 [ 524.719272][T10337] [ 524.765805][ T5881] usb 2-1: device descriptor read/8, error -71 [ 525.010070][ T5881] usb usb2-port1: unable to enumerate USB device [ 525.027543][T10340] ip_tables: iptables: counters copy to user failed while replacing table [ 525.179523][T10346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.975'. [ 525.249798][T10350] loop2: detected capacity change from 0 to 512 [ 525.332646][T10357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.976'. [ 525.335665][T10350] EXT4-fs error (device loop2): ext4_iget_extra_inode:4752: inode #15: comm syz.2.979: corrupted in-inode xattr: invalid ea_ino [ 525.423538][T10350] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.979: couldn't read orphan inode 15 (err -117) [ 525.517905][T10350] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 526.392669][T10369] fuse: Unknown parameter 'user_i00000000000000000000' [ 526.585767][T10043] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.837474][ T5855] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 527.993731][ T5855] usb 4-1: device descriptor read/64, error -71 [ 528.065587][T10387] ip_tables: iptables: counters copy to user failed while replacing table [ 528.211101][T10392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.987'. [ 528.293839][ T5855] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 528.479100][ T5855] usb 4-1: device descriptor read/64, error -71 [ 528.626187][ T5855] usb usb4-port1: attempt power cycle [ 529.045048][ T5855] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 529.072855][T10420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.991'. [ 529.117810][ T5855] usb 4-1: device descriptor read/8, error -71 [ 529.423884][ T5855] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 529.504409][ T5855] usb 4-1: device descriptor read/8, error -71 [ 529.666046][ T5855] usb usb4-port1: unable to enumerate USB device [ 529.888238][T10426] fuse: Unknown parameter 'user_i00000000000000000000' [ 529.986717][T10430] loop2: detected capacity change from 0 to 512 [ 530.096036][T10430] EXT4-fs error (device loop2): ext4_iget_extra_inode:4752: inode #15: comm syz.2.994: corrupted in-inode xattr: invalid ea_ino [ 530.275649][T10430] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.994: couldn't read orphan inode 15 (err -117) [ 530.358703][T10440] syz_tun: entered allmulticast mode [ 530.392255][T10436] ip_tables: iptables: counters copy to user failed while replacing table [ 530.934276][T10432] syz_tun: left allmulticast mode [ 531.080668][T10430] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 531.269871][T10447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.999'. [ 531.339665][T10448] syzkaller0: entered promiscuous mode [ 531.373259][T10448] syzkaller0: entered allmulticast mode [ 531.640819][T10459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1003'. [ 532.487508][T10043] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.673742][ T1190] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 532.869619][T10473] dccp_invalid_packet: P.Data Offset(4) too small [ 532.878414][T10471] ip_tables: iptables: counters copy to user failed while replacing table [ 532.915026][ T1190] usb 4-1: device descriptor read/64, error -71 [ 533.223706][ T1190] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 533.393746][ T1190] usb 4-1: device descriptor read/64, error -71 [ 533.608356][ T1190] usb usb4-port1: attempt power cycle [ 533.737203][T10497] syz_tun: entered allmulticast mode [ 534.053987][ T1190] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 534.158979][ T1190] usb 4-1: device descriptor read/8, error -71 [ 534.269808][T10484] syz_tun: left allmulticast mode [ 534.556190][T10503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1012'. [ 534.593708][ T1190] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 534.635073][ T1190] usb 4-1: device descriptor read/8, error -71 [ 534.835681][ T5781] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 534.925869][ T1190] usb usb4-port1: unable to enumerate USB device [ 535.205564][T10520] ip_tables: iptables: counters copy to user failed while replacing table [ 536.100352][T10541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1022'. [ 536.198320][T10542] syz_tun: entered allmulticast mode [ 536.881944][T10534] syz_tun: left allmulticast mode [ 537.513783][ T5788] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 537.927288][T10562] ip_tables: iptables: counters copy to user failed while replacing table [ 537.963616][ T5788] usb 4-1: device descriptor read/64, error -71 [ 538.304621][ T5788] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 538.445778][ T5781] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 538.470248][ T5788] usb 4-1: device descriptor read/64, error -71 [ 538.514359][T10575] loop2: detected capacity change from 0 to 7 [ 538.540966][T10575] Dev loop2: unable to read RDB block 7 [ 538.556371][T10575] loop2: AHDI p1 p2 p3 [ 538.567979][T10575] loop2: partition table partially beyond EOD, truncated [ 538.576331][T10578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1032'. [ 538.591854][T10575] loop2: p1 start 1601398130 is beyond EOD, truncated [ 538.611978][T10575] loop2: p2 start 1702059890 is beyond EOD, truncated [ 538.630143][ T5788] usb usb4-port1: attempt power cycle [ 539.063570][ T5788] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 539.122464][ T5788] usb 4-1: device descriptor read/8, error -71 [ 539.943425][ T5788] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 539.977721][ T5788] usb 4-1: device descriptor read/8, error -71 [ 540.108925][ T5788] usb usb4-port1: unable to enumerate USB device [ 540.333526][T10611] ip_tables: iptables: counters copy to user failed while replacing table [ 541.361163][T10628] loop2: detected capacity change from 0 to 7 [ 541.386852][T10628] Dev loop2: unable to read RDB block 7 [ 541.399291][T10627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1042'. [ 541.408374][T10628] loop2: AHDI p1 p2 p3 [ 541.423091][T10628] loop2: partition table partially beyond EOD, truncated [ 541.441333][T10628] loop2: p1 start 1601398130 is beyond EOD, truncated [ 541.453842][T10628] loop2: p2 start 1702059890 is beyond EOD, truncated [ 541.633253][T10636] syzkaller0: entered promiscuous mode [ 541.635207][T10633] loop2: detected capacity change from 0 to 512 [ 541.647002][T10636] syzkaller0: entered allmulticast mode [ 541.714454][T10633] EXT4-fs error (device loop2): ext4_iget_extra_inode:4752: inode #15: comm syz.2.1044: corrupted in-inode xattr: invalid ea_ino [ 541.747045][T10633] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.1044: couldn't read orphan inode 15 (err -117) [ 541.791006][T10633] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 541.981830][ T5781] Bluetooth: hci2: link tx timeout [ 541.988212][ T5781] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 542.274899][T10649] ip_tables: iptables: counters copy to user failed while replacing table [ 542.483588][ T23] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 542.799246][T10665] IPVS: wrr: TCP 127.0.0.1:21 - no destination available [ 543.501054][ T23] usb 2-1: device descriptor read/64, error -71 [ 543.594950][T10043] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.724298][ T5791] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 543.783587][ T23] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 544.013632][ T23] usb 2-1: device descriptor read/64, error -71 [ 544.054140][ T5791] Bluetooth: hci2: command 0x0406 tx timeout [ 544.133699][ T23] usb usb2-port1: attempt power cycle [ 544.553466][ T23] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 544.620382][ T23] usb 2-1: device descriptor read/8, error -71 [ 544.893453][ T23] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 544.924538][ T23] usb 2-1: device descriptor read/8, error -71 [ 545.043969][ T23] usb usb2-port1: unable to enumerate USB device [ 545.267820][T10710] block2mtd: erasesize must be a divisor of device size [ 545.292623][T10711] syzkaller0: entered promiscuous mode [ 545.294885][T10710] ------------[ cut here ]------------ [ 545.300427][T10711] syzkaller0: entered allmulticast mode [ 545.305279][T10710] WARNING: CPU: 0 PID: 10710 at block/bdev.c:643 blkdev_flush_mapping+0xac/0x290 [ 545.319487][T10710] Modules linked in: [ 545.323921][T10710] CPU: 0 PID: 10710 Comm: syz.3.1056 Not tainted syzkaller #0 [ 545.331436][T10710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 545.341956][T10710] RIP: 0010:blkdev_flush_mapping+0xac/0x290 [ 545.348514][T10710] Code: 42 80 3c 28 00 74 08 4c 89 f7 e8 4f d2 cb fd 49 8b 3e 48 ba ff ff ff ff ff ff ff 7f 31 f6 e8 4b 57 a1 fd eb 11 e8 14 46 73 fd <0f> 0b 48 85 db 75 9f e8 08 46 73 fd 48 89 1c 24 4c 8d b3 80 00 00 [ 545.368701][T10710] RSP: 0018:ffffc9000522f970 EFLAGS: 00010283 [ 545.375968][T10710] RAX: ffffffff8414453c RBX: ffff888148b18bc0 RCX: 0000000000080000 [ 545.384363][T10710] RDX: ffffc900116f6000 RSI: 000000000000c772 RDI: 000000000000c773 [ 545.392425][T10710] RBP: 0000000000000002 R08: ffff888148b18bfb R09: 1ffff1102916317f [ 545.400539][T10710] R10: dffffc0000000000 R11: ffffed1029163180 R12: dffffc0000000000 [ 545.408903][T10710] R13: dffffc0000000000 R14: ffff888148b18cf4 R15: ffff888148b18bf8 [ 545.416981][T10710] FS: 00007fe09a7236c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 545.425995][T10710] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 545.432637][T10710] CR2: 00007f79a49556c8 CR3: 0000000073bed000 CR4: 00000000003506f0 [ 545.441040][T10710] Call Trace: [ 545.444523][T10710] [ 545.447507][T10710] ? blkdev_put+0x492/0x7a0 [ 545.452075][T10710] blkdev_put+0x49a/0x7a0 [ 545.456523][T10710] block2mtd_setup2+0x98f/0xe30 [ 545.461509][T10710] ? block2mtd_setup+0xd0/0xd0 [ 545.466407][T10710] ? rcu_is_watching+0x15/0xb0 [ 545.471686][T10710] ? mutex_lock_nested+0x20/0x20 [ 545.476925][T10710] ? __virt_addr_valid+0x10c/0x380 [ 545.482135][T10710] ? kernfs_fop_write_iter+0x1dc/0x520 [ 545.487836][T10710] block2mtd_setup+0x27/0xd0 [ 545.492488][T10710] param_attr_store+0x20e/0x300 [ 545.497610][T10710] ? param_attr_show+0x170/0x170 [ 545.502652][T10710] ? sysfs_kf_read+0x360/0x360 [ 545.507539][T10710] module_attr_store+0x5f/0x80 [ 545.512373][T10710] kernfs_fop_write_iter+0x3a4/0x520 [ 545.517763][T10710] vfs_write+0x474/0x9a0 [ 545.522078][T10710] ? file_end_write+0x250/0x250 [ 545.527066][T10710] ? __fget_files+0x3fc/0x460 [ 545.531829][T10710] ? __fdget_pos+0x2a3/0x330 [ 545.536537][T10710] ? ksys_write+0x74/0x260 [ 545.541025][T10710] ksys_write+0x151/0x260 [ 545.545460][T10710] ? __ia32_sys_read+0x90/0x90 [ 545.550287][T10710] ? lockdep_hardirqs_on+0x98/0x150 [ 545.555590][T10710] do_syscall_64+0x55/0xb0 [ 545.560059][T10710] ? clear_bhb_loop+0x40/0x90 [ 545.565213][T10710] ? clear_bhb_loop+0x40/0x90 [ 545.570375][T10710] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 545.576464][T10710] RIP: 0033:0x7fe09979e159 [ 545.580927][T10710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 545.600852][T10710] RSP: 002b:00007fe09a723028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 545.609392][T10710] RAX: ffffffffffffffda RBX: 00007fe099a25fa0 RCX: 00007fe09979e159 [ 545.617506][T10710] RDX: 00000000000000b3 RSI: 0000200000000250 RDI: 0000000000000003 [ 545.625595][T10710] RBP: 00007fe09983506b R08: 0000000000000000 R09: 0000000000000000 [ 545.633679][T10710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 545.641721][T10710] R13: 00007fe099a26038 R14: 00007fe099a25fa0 R15: 00007fff474cf658 [ 545.649991][T10710] [ 545.653078][T10710] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 545.660395][T10710] CPU: 0 PID: 10710 Comm: syz.3.1056 Not tainted syzkaller #0 [ 545.667889][T10710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 545.677985][T10710] Call Trace: [ 545.681339][T10710] [ 545.684343][T10710] dump_stack_lvl+0x18c/0x250 [ 545.689077][T10710] ? show_regs_print_info+0x20/0x20 [ 545.694336][T10710] ? load_image+0x420/0x420 [ 545.698908][T10710] panic+0x2ca/0x720 [ 545.702872][T10710] ? bpf_jit_dump+0xd0/0xd0 [ 545.707446][T10710] __warn+0x2e0/0x470 [ 545.711495][T10710] ? blkdev_flush_mapping+0xac/0x290 [ 545.716832][T10710] ? blkdev_flush_mapping+0xac/0x290 [ 545.722173][T10710] report_bug+0x2be/0x4f0 [ 545.726723][T10710] ? blkdev_flush_mapping+0xac/0x290 [ 545.732073][T10710] ? blkdev_flush_mapping+0xac/0x290 [ 545.737419][T10710] ? blkdev_flush_mapping+0xae/0x290 [ 545.742738][T10710] handle_bug+0xcf/0x120 [ 545.747022][T10710] exc_invalid_op+0x1a/0x50 [ 545.751558][T10710] asm_exc_invalid_op+0x1a/0x20 [ 545.756438][T10710] RIP: 0010:blkdev_flush_mapping+0xac/0x290 [ 545.762358][T10710] Code: 42 80 3c 28 00 74 08 4c 89 f7 e8 4f d2 cb fd 49 8b 3e 48 ba ff ff ff ff ff ff ff 7f 31 f6 e8 4b 57 a1 fd eb 11 e8 14 46 73 fd <0f> 0b 48 85 db 75 9f e8 08 46 73 fd 48 89 1c 24 4c 8d b3 80 00 00 [ 545.782083][T10710] RSP: 0018:ffffc9000522f970 EFLAGS: 00010283 [ 545.788177][T10710] RAX: ffffffff8414453c RBX: ffff888148b18bc0 RCX: 0000000000080000 [ 545.796166][T10710] RDX: ffffc900116f6000 RSI: 000000000000c772 RDI: 000000000000c773 [ 545.804166][T10710] RBP: 0000000000000002 R08: ffff888148b18bfb R09: 1ffff1102916317f [ 545.812154][T10710] R10: dffffc0000000000 R11: ffffed1029163180 R12: dffffc0000000000 [ 545.820137][T10710] R13: dffffc0000000000 R14: ffff888148b18cf4 R15: ffff888148b18bf8 [ 545.828132][T10710] ? blkdev_flush_mapping+0xac/0x290 [ 545.833471][T10710] ? blkdev_put+0x492/0x7a0 [ 545.838027][T10710] blkdev_put+0x49a/0x7a0 [ 545.842387][T10710] block2mtd_setup2+0x98f/0xe30 [ 545.847268][T10710] ? block2mtd_setup+0xd0/0xd0 [ 545.852088][T10710] ? rcu_is_watching+0x15/0xb0 [ 545.856888][T10710] ? mutex_lock_nested+0x20/0x20 [ 545.861842][T10710] ? __virt_addr_valid+0x10c/0x380 [ 545.866987][T10710] ? kernfs_fop_write_iter+0x1dc/0x520 [ 545.872475][T10710] block2mtd_setup+0x27/0xd0 [ 545.877096][T10710] param_attr_store+0x20e/0x300 [ 545.882004][T10710] ? param_attr_show+0x170/0x170 [ 545.886970][T10710] ? sysfs_kf_read+0x360/0x360 [ 545.891757][T10710] module_attr_store+0x5f/0x80 [ 545.896547][T10710] kernfs_fop_write_iter+0x3a4/0x520 [ 545.901875][T10710] vfs_write+0x474/0x9a0 [ 545.906163][T10710] ? file_end_write+0x250/0x250 [ 545.911048][T10710] ? __fget_files+0x3fc/0x460 [ 545.915761][T10710] ? __fdget_pos+0x2a3/0x330 [ 545.920390][T10710] ? ksys_write+0x74/0x260 [ 545.924843][T10710] ksys_write+0x151/0x260 [ 545.929206][T10710] ? __ia32_sys_read+0x90/0x90 [ 545.934011][T10710] ? lockdep_hardirqs_on+0x98/0x150 [ 545.939246][T10710] do_syscall_64+0x55/0xb0 [ 545.943715][T10710] ? clear_bhb_loop+0x40/0x90 [ 545.948427][T10710] ? clear_bhb_loop+0x40/0x90 [ 545.953166][T10710] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 545.959101][T10710] RIP: 0033:0x7fe09979e159 [ 545.963593][T10710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 545.983238][T10710] RSP: 002b:00007fe09a723028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 545.991691][T10710] RAX: ffffffffffffffda RBX: 00007fe099a25fa0 RCX: 00007fe09979e159 [ 545.999799][T10710] RDX: 00000000000000b3 RSI: 0000200000000250 RDI: 0000000000000003 [ 546.007810][T10710] RBP: 00007fe09983506b R08: 0000000000000000 R09: 0000000000000000 [ 546.015808][T10710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 546.023808][T10710] R13: 00007fe099a26038 R14: 00007fe099a25fa0 R15: 00007fff474cf658 [ 546.031845][T10710] [ 546.035496][T10710] Kernel Offset: disabled [ 546.039950][T10710] Rebooting in 86400 seconds..