last executing test programs: 3m45.191680465s ago: executing program 0 (id=218): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2000000, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2a442, 0x0) truncate(&(0x7f0000000100)='./file1\x00', 0x6) 3m44.73723275s ago: executing program 0 (id=221): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000004) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x8) bind$inet6(r0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f00000002c0)="a609", 0x2}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket(0x10, 0x3, 0x0) getpeername(r3, 0x0, &(0x7f0000000080)) 3m44.500102364s ago: executing program 0 (id=226): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x82, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x7}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r5, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x3, 0x3}}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 3m44.364902409s ago: executing program 0 (id=227): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dir\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dir\x00', &(0x7f0000000080)='cifs\x00', 0x0, &(0x7f00000000c0)='vers=2.0,sec=none,ip=127.0.0.1,unc=\\\\127.0.0.1\\share,nodfs\x00') 3m43.240267599s ago: executing program 0 (id=233): mmap$IORING_OFF_PBUF_RING(0x0, 0x0, 0x300000a, 0x11, 0xffffffffffffffff, 0x82397a24) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000140)=""/147, &(0x7f0000000280)=0x93) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={&(0x7f0000000b00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r1, 0x0, 0xfffffffffffffffe}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r2, 0x4000) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000007000/0x2000)=nil) 3m42.734138502s ago: executing program 0 (id=236): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0xfb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x6, 0x15e, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x1, 0x3, 0x0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x82, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r1, r10, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0x22, &(0x7f0000000500)={@multicast, @random="02bc00", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x2, 0x14, 0x66, 0x0, 0xfc, 0x2f, 0x0, @local, @loopback}}}}}, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, 0x0) 3m27.444141478s ago: executing program 32 (id=236): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0xfb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x6, 0x15e, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x1, 0x3, 0x0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x82, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r1, r10, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0x22, &(0x7f0000000500)={@multicast, @random="02bc00", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x2, 0x14, 0x66, 0x0, 0xfc, 0x2f, 0x0, @local, @loopback}}}}}, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, 0x0) 43.968981208s ago: executing program 4 (id=717): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf254c0000001c00a900c3dc9cb3c5d9d648046b446f6b47cf564b4db53fc6a6ad000e0001006e657464657673696d0000000f00"], 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x40080) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = fsopen(&(0x7f0000000040)='debugfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x3) fchdir(r6) socket$nl_route(0x10, 0x3, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r7, 0x402, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x76, 0xe9, 0xe4, 0x10, 0x45e, 0x445, 0x87ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x10, 0x4, "", [{{0x9, 0x4, 0xed, 0x5d, 0x2, 0x7d, 0xd8, 0xce, 0x2, [], [{{0x9, 0x5, 0xe, 0x2, 0x200, 0x8, 0x1}}, {{0x9, 0x5, 0x83, 0x2, 0x200, 0x9, 0x1, 0x6}}]}}]}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) 42.852690016s ago: executing program 4 (id=720): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) shmctl$SHM_INFO(r3, 0xe, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}}, 0x0) 41.343397427s ago: executing program 4 (id=723): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22091406, &(0x7f0000000340)={[{@dioread_lock}, {@quota}, {@delalloc}, {@data_journal}, {@nolazytime}, {@nojournal_checksum, 0x2e}, {@nombcache}, {@grpjquota}, {@data_err_abort}, {@mblk_io_submit}], [], 0x2c}, 0x84, 0x4ed, &(0x7f0000001e00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xf, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000280)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff8}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0x15, 0x1, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r4}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0xe, 0x0, &(0x7f00000003c0)='\x00'/14, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 35.272286307s ago: executing program 4 (id=727): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), r0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000c80)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x14, r1, 0x50be6fea6f3bdfbb, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@getae={0xb8, 0x1f, 0x1, 0x70bd2a, 0x25dfdbfb, {{@in=@multicast1, 0x4d5, 0xa, 0x6c}, @in6=@mcast1, 0x0, 0x3500}, [@lastused={0xc, 0xf, 0x63ba}, @srcaddr={0x14, 0xd, @in=@multicast2}, @algo_comp={0x55, 0x3, {{'deflate\x00'}, 0x68, "72db538d77e871ee9f3e0c6f2c"}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00"], 0xfc}}, 0x0) r3 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r3, &(0x7f0000001280)={&(0x7f00000010c0)=@in6={0xa, 0x4e1b, 0x3, @remote, 0x5}, 0x80, 0x0}, 0x4c810) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)={0x30, r5, 0xa11, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x12}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x6}]}, 0x30}}, 0x4044800) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0}, 0x10) 25.873755446s ago: executing program 4 (id=749): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) syz_io_uring_setup(0x363, &(0x7f00000000c0)={0x0, 0xd057, 0x1000, 0x0, 0x2b7}, &(0x7f0000000080), 0x0, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) 23.198971333s ago: executing program 1 (id=754): ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000280)={0x2, 0x1, 0x1000, 0x2000, &(0x7f0000ff2000/0x2000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f00000001c0)=0x1fff) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) socket$nl_route(0x10, 0x3, 0x0) close(0xffffffffffffffff) getpid() mount$bind(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x101020, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') 23.139794524s ago: executing program 4 (id=755): ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f00000000c0)=0x2001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = syz_clone(0x0, 0x0, 0x29, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x8, r3) wait4(0x0, 0x0, 0x0, 0x0) 21.541003371s ago: executing program 2 (id=761): socket(0xa, 0x3, 0x3a) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7f7ffe, 0x400, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x0, 0xfffffffe, 0x146, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x80, 0x0, 0x1f0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x20, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000040)={'\be \x00', 0x0, 0x5, 0x2, 0x0, 0xc, "00000000020000000000002100", '\x00', "0052008f", '\x00', ["fdfeffbf84a438dfc5d5c010", "0000000000000400", "0000efffffffffffbfff00", "000003cefd70f14003556000"]}) 21.531711003s ago: executing program 5 (id=762): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x7fffffff) ftruncate(r3, 0x2007ffb) sendfile(r3, r3, 0x0, 0x1000000201005) 18.364983262s ago: executing program 2 (id=764): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000010000000f00000008000300", @ANYRES32=r5, @ANYBLOB="0500330002000000080032"], 0x44}}, 0x80) 18.265989371s ago: executing program 3 (id=765): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x6e) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) socket$nl_xfrm(0x10, 0x3, 0x6) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) setns(0xc9, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff}, 0x90}, 0x1c) 16.557601919s ago: executing program 2 (id=766): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) 16.437072982s ago: executing program 5 (id=767): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x2, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r1, 0x0, 0x12, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x200000e, 0x401d031, 0xffffffffffffffff, 0x0) 14.802548065s ago: executing program 3 (id=768): syz_open_dev$usbmon(0x0, 0x9, 0x82002) epoll_create1(0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x1, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x7}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x33}, 0x0, @in6=@remote, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) 14.646756564s ago: executing program 2 (id=769): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 13.333728249s ago: executing program 5 (id=770): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x40000000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 12.697059597s ago: executing program 3 (id=771): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000180)=[{&(0x7f0000000080)="9a5f4e13ddb6edf42f1f85cc7efc4c093430c6f3ee0705cd8b92e72fb9a85e9a", 0x20}], 0x1, 0xa) splice(r5, 0x0, r4, 0x0, 0x8000, 0x0) 12.420838899s ago: executing program 2 (id=772): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f00000004c0)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r3, &(0x7f0000000c40)='p:s/p ./file0:0', 0xf) 11.062156522s ago: executing program 1 (id=773): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@quota}]}, 0xfd, 0x269, &(0x7f0000000a00)="$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") write(0xffffffffffffffff, &(0x7f0000000200), 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', 0x0, 0x8, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f00000005c0)=0x18) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) openat$dsp1(0xffffffffffffff9c, 0x0, 0x9c482, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x92, 0x1, 0x2, 0xd59f80, 0x19ef, 0x5, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x13, {0x8, 0xfffffffb}, 0xd0, 0x9}}) 8.523915784s ago: executing program 3 (id=774): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x400000e0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000880)={0x0, 0xfffffffe, 0x800, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c84, 0x8000, 0x3, 0xbab}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2ced, 0x2, 0x1, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x20ec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 7.339283824s ago: executing program 33 (id=755): ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f00000000c0)=0x2001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = syz_clone(0x0, 0x0, 0x29, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x8, r3) wait4(0x0, 0x0, 0x0, 0x0) 7.310042709s ago: executing program 2 (id=776): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000280)={0x0, 0x4, 0x1, [0x59, 0xfffffffffffffffd, 0x9, 0x8, 0xfffffffffffff991], [0xfffffffffffffff8, 0x81, 0xf7, 0x0, 0x2, 0x84fb, 0x76, 0x8000000000000001, 0x0, 0x8, 0x100000001, 0x5, 0x3, 0x3, 0x593, 0x8, 0x3, 0x1e, 0x6, 0x7, 0x10001, 0x83b4, 0x8000000000000000, 0xe, 0x1002, 0x2, 0x4d5afdaf, 0x3, 0x4, 0x7, 0xe03, 0x2b79, 0x7, 0x6, 0x3, 0x2, 0x0, 0x4, 0x6, 0xffffffffffff7fff, 0x912d, 0xe729, 0x80000001, 0x1, 0x401, 0x0, 0x3, 0x40, 0x0, 0x84d7, 0x100, 0x2, 0x3, 0x9, 0x200, 0x6, 0x1000, 0x3, 0x10, 0x4, 0x5, 0x1000, 0x1, 0x7, 0x4, 0xc6d, 0x2, 0x6fd0, 0x6, 0x6, 0x8, 0x8000, 0x9, 0xd87, 0x89, 0x0, 0x62, 0x9a39, 0x4, 0x200, 0x9, 0x4, 0x400, 0x7, 0xb, 0xf, 0x1d68, 0x3, 0x20e, 0xfd, 0x5e, 0x1, 0x40, 0x5, 0xff, 0x4, 0x7fff, 0x1000, 0xfffffffffffffffd, 0x5, 0xd, 0xfff, 0x100, 0xb, 0x7, 0x7, 0x1, 0x0, 0x9, 0xe, 0x1, 0x3000000000000000, 0xa, 0x10000, 0x0, 0x800, 0xff, 0x7ff, 0x9, 0x4, 0x9]}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x0, 0xff, 0x6}, 0xfe}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$kcm(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000cc0)=@allocspi={0xf8, 0x16, 0x1, 0x70bd2b, 0x25dfdbfd, {{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@mcast1, 0x4e23, 0x200, 0x4e20, 0x0, 0xcae7388a885de62c, 0xe0, 0x20, 0x3b}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d3, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, {0x9, 0x100000001, 0x6, 0x2, 0x1, 0x7, 0xc0d, 0x9}, {0xffffffff7fffffff, 0x0, 0x8000000000000, 0x2}, {0x7, 0x2000000, 0x488}, 0x70bd26, 0x3505, 0x2, 0x86fa708a8da4f410, 0x6, 0x82}, 0x0, 0xe}}, 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x4040888) sendmsg$inet(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) r3 = socket(0x10, 0x803, 0x6) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) 7.209114548s ago: executing program 5 (id=777): readv(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0xfffffffd) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000002c0)={0x1, 0x1, 0x2, 0xfb, 0xa4, 0xfd, 0x0, 0x0, 0x1, 0x28, 0x0, 0x0, 0x7, 0xf7}, 0xe) 6.951236496s ago: executing program 1 (id=778): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x5, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29e}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fff, 0x2, 0x8, 0x7, 0x2c}, 0x7d}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4c8c0}, 0x2) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c102fe00ff8807c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x20040000) 2.929965025s ago: executing program 3 (id=779): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, 0x0, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x20, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_MODE={0xa, 0x2, {0xffff, 0x1}}]}, 0x20}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x2, 0x1234, @loopback}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x54, r4, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x7530, @local}}, {0x14, 0x2, @in={0x2, 0x7530, @remote}}}}]}]}, 0x54}}, 0x0) 2.880524954s ago: executing program 5 (id=780): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x2, 0x1, "fa"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, 0x0, 0x0) 1.940669789s ago: executing program 1 (id=781): r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x3, 0x0, 0x0) open(0x0, 0x24842, 0x1a6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1.841420638s ago: executing program 5 (id=782): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRESHEX], 0x3, 0x240, &(0x7f0000000500)="$eJzs2s9rHGUYB/Bn0tbGlHQj/qIF8UUP6mVocvbQIC2IAUW7QhWkUzPRZcfdsLMsrIjJqV79EzyLR2+C9OglF/8CD14klxx7EEe6u5pG4iGI3ZJ+Ppd94N0vzzPMy8t7mP3Xv/6su1XnW8UwFrIsFq7GbtzLYiUW4i+78dorN3964b2bH7y1vrFx7d2Urq/fWF1LKV188ccPv/jupbvDC+9/f/GH87G38tH+wdqve8/tXdr/48annTp16tTrD1ORbvf7w+J2VabNTt3NU3qnKou6TJ1eXQ6OrG9V/e3tcSp6m8tL24OyrlPRG6duOU7DfhoOxqn4pOj0Up7naXkp+C/a395rmjhozt2Kpmme/CYu3I3lX6IV2VMpe/pq9uyt7Pnd7NJB07TmPSr/C+//8fbAob4YUX01ao/a09/p+vpWdKKKMq5EK36P+9tkZlpff3Pj2pU0sRJ3qp1ZfmfUPnM0vxqtWDk+vzrNp7hT/fbEtO3OqH0+liLORczya9GKZ47Prx3mJ/3PTPovxqsvP9A/j1b8/HH0o4rNuJ89zH+5mtIbb2+ko/NfnvwPAOC0ydPfjr2/5fm/rU/zJ7gf/uN+dTYun53vsxNRjz/vFlVVDhRVOVh8NMY4DUVENtlg2WyjzXsexQmLuR5LPCSHL33ekwAAAAAAAAAAAHASD+Nzwnk/IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Gj7MwAA//+3Ycw+") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020) lseek(r3, 0xfffffffffffffff5, 0x1) mknod$loop(&(0x7f0000001b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_reconf_req={{0x19, 0x3, 0x10}, {0xffbd, 0xff46, [0x0, 0xd, 0x8e, 0x9, 0x4, 0x5]}}}}, 0x1d) 1.50522901s ago: executing program 3 (id=783): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socket$kcm(0x10, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0x60}, {}, {0x6, 0x0, 0xfa}, {}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x70}}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pipe2(&(0x7f0000000040), 0x800) r1 = syz_io_uring_setup(0x34bc, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd, 0xf8, 0x0, 0x0, 0x11, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) 835.040515ms ago: executing program 1 (id=784): listen(0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{0x0}], 0x1) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d000000000000060400", 0x32}], 0x1) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 0s ago: executing program 1 (id=785): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @broadcast, 0x15, 0x3, 'lblcr\x00', 0xa, 0x4, 0x72}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e24, 0x3, 'lc\x00', 0x39ffc08b9a63492e, 0x8, 0x77}, {@private=0xa010102, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000019900000000000000000000000a60000000060a0b160000000000000000020000083400048018000180080001006f7366000c00028008000140000000041800018008000100647570000c000280080001404e0000150900010073797a30000000000900020073797a"], 0x88}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x8000, 0x100077}, {@remote, 0x4e20, 0x3, 0xcd}}, 0x44) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) kernel console output (not intermixed with test programs): link becomes ready [ 85.018330][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.031172][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.045764][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.055113][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.063034][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.072469][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.099292][ T4278] device veth1_vlan entered promiscuous mode [ 85.113813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.122031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.138534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.152523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.170121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.190730][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.241470][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.250981][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.280579][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.312054][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.331743][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.364407][ T4272] device veth0_vlan entered promiscuous mode [ 85.400555][ T4278] device veth0_macvtap entered promiscuous mode [ 85.415823][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.425824][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.442474][ T4272] device veth1_vlan entered promiscuous mode [ 85.458071][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.470777][ T4278] device veth1_macvtap entered promiscuous mode [ 85.528685][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.567050][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.587846][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.601735][ T4272] device veth0_macvtap entered promiscuous mode [ 85.617368][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.635338][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.647892][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.657533][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.666865][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.679492][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.690233][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.700665][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.712424][ T4272] device veth1_macvtap entered promiscuous mode [ 85.727440][ T4286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.740635][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.772617][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.794364][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.811071][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.819660][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.832877][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.844076][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.853057][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.871033][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.905901][ T4278] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.925164][ T4278] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.935053][ T4278] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.943948][ T4283] Bluetooth: hci0: command 0x040f tx timeout [ 85.950826][ T4278] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.966397][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.982441][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.999456][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.013929][ T4283] Bluetooth: hci2: command 0x040f tx timeout [ 86.020003][ T4283] Bluetooth: hci3: command 0x040f tx timeout [ 86.037841][ T4283] Bluetooth: hci1: command 0x040f tx timeout [ 86.073993][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.082749][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.093803][ T4283] Bluetooth: hci4: command 0x040f tx timeout [ 86.107660][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.116785][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.126534][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.135957][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.145160][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.152652][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.163845][ T4272] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.172586][ T4272] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.182573][ T4272] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.191631][ T4272] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.233825][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.265476][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.279402][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.355385][ T4286] device veth0_vlan entered promiscuous mode [ 86.382154][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.398750][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.410904][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.426094][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.451277][ T4273] device veth0_vlan entered promiscuous mode [ 86.477730][ T4286] device veth1_vlan entered promiscuous mode [ 86.491075][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.501224][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.510231][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.547691][ T4273] device veth1_vlan entered promiscuous mode [ 86.614207][ T4298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.622289][ T4298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.655281][ T27] cfg80211: failed to load regulatory.db [ 86.682676][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.692476][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.724216][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.780681][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.794967][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.814181][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.837182][ T4298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.845603][ T4298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.868006][ T4286] device veth0_macvtap entered promiscuous mode [ 86.887047][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.908086][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.916558][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.925477][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.939858][ T4273] device veth0_macvtap entered promiscuous mode [ 86.958357][ T4286] device veth1_macvtap entered promiscuous mode [ 86.965836][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.000914][ T4273] device veth1_macvtap entered promiscuous mode [ 87.010300][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.050397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.059633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.101752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.124162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.147255][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.163363][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.183216][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.213900][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.236178][ T4286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.259548][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.283715][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.303249][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.321464][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.332819][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.345009][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.365621][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.373785][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.382622][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.434148][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.443023][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.467438][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.493167][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.503053][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.533256][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.564919][ T4286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.575200][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.619948][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.637622][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.666166][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.680554][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.692665][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.712875][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.721539][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.739288][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.752458][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.770054][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.794339][ T4286] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.823220][ T4286] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.842165][ T4286] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.861245][ T4286] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.869244][ T4370] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 87.891638][ T4273] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.908094][ T4273] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.918539][ T4273] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.929220][ T4372] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 87.943046][ T4273] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.982030][ T4370] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 88.013551][ T4283] Bluetooth: hci0: command 0x0419 tx timeout [ 88.050970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.070221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.099018][ T4283] Bluetooth: hci1: command 0x0419 tx timeout [ 88.106327][ T4285] Bluetooth: hci3: command 0x0419 tx timeout [ 88.106340][ T4274] Bluetooth: hci2: command 0x0419 tx timeout [ 88.121516][ T4277] device veth0_vlan entered promiscuous mode [ 88.134097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.150514][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.182074][ T4282] Bluetooth: hci4: command 0x0419 tx timeout [ 88.190687][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.219097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.291743][ T4277] device veth1_vlan entered promiscuous mode [ 88.376797][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.389695][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.409973][ T4380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7'. [ 88.436319][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 88.450359][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.465681][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.477281][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.492549][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.516907][ T4277] device veth0_macvtap entered promiscuous mode [ 88.524441][ T4298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.538334][ T4298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.547569][ T4380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7'. [ 88.564249][ T4380] Zero length message leads to an empty skb [ 88.587265][ T4277] device veth1_macvtap entered promiscuous mode [ 88.610782][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.624370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.639117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.673644][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.684638][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.702284][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.713277][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.724644][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.740122][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.752786][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.771223][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.806249][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.832242][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.851061][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.866648][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.047400][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.066555][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.107278][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.118148][ T4327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.128491][ T4327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.141588][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.335599][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.446794][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.563750][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.668386][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.796812][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.812696][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.826910][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.841148][ T4277] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.850416][ T4277] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.862573][ T4277] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.873012][ T4277] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.981402][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.994159][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.006531][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.031915][ T4393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 90.050694][ T4393] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.059860][ T4393] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.068665][ T4393] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.077483][ T4393] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.090555][ T4394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 90.110279][ T4394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 90.225083][ T4391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.232981][ T4391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.276859][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.333852][ T4298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.349649][ T4298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.377754][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 92.341392][ T4426] loop4: detected capacity change from 0 to 512 [ 92.458643][ T4426] UDF-fs: bad mount option "session500000000000000000005" or missing value [ 94.234022][ T4436] loop1: detected capacity change from 0 to 4096 [ 94.561995][ T4436] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 94.620852][ T4460] loop3: detected capacity change from 0 to 1024 [ 94.830187][ T4460] hfsplus: request for non-existent node 33423360 in B*Tree [ 94.867546][ T4460] hfsplus: request for non-existent node 33423360 in B*Tree [ 94.929207][ T4460] hfsplus: request for non-existent node 33423360 in B*Tree [ 94.947171][ T4460] hfsplus: request for non-existent node 33423360 in B*Tree [ 94.972700][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 95.011317][ T4460] hfsplus: request for non-existent node 33423360 in B*Tree [ 95.041229][ T4460] hfsplus: request for non-existent node 33423360 in B*Tree [ 95.083403][ T4460] hfsplus: request for non-existent node 33423360 in B*Tree [ 95.090782][ T4460] hfsplus: request for non-existent node 33423360 in B*Tree [ 95.159391][ T4469] netlink: 164 bytes leftover after parsing attributes in process `syz.1.27'. [ 95.172212][ T4470] hfsplus: request for non-existent node 33423360 in B*Tree [ 95.219192][ T4470] hfsplus: request for non-existent node 33423360 in B*Tree [ 95.287933][ T4474] hfsplus: request for non-existent node 33423360 in B*Tree [ 95.316150][ T4476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28'. [ 95.346008][ T4474] hfsplus: request for non-existent node 33423360 in B*Tree [ 95.376247][ T4460] hfsplus: request for non-existent node 33423360 in B*Tree [ 95.393356][ T4460] hfsplus: request for non-existent node 33423360 in B*Tree [ 95.394780][ T4476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28'. [ 95.438857][ T4470] hfsplus: request for non-existent node 33423360 in B*Tree [ 95.473103][ T4470] hfsplus: request for non-existent node 33423360 in B*Tree [ 95.511253][ T4460] hfsplus: request for non-existent node 33423360 in B*Tree [ 95.529006][ T4460] hfsplus: request for non-existent node 33423360 in B*Tree [ 95.547402][ T4478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.29'. [ 95.558254][ T4460] hfsplus: request for non-existent node 33423360 in B*Tree [ 95.577549][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 95.593063][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 95.593705][ T4460] hfsplus: request for non-existent node 33423360 in B*Tree [ 95.624794][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 95.897933][ T4485] loop3: detected capacity change from 0 to 256 [ 95.911358][ T4485] ======================================================= [ 95.911358][ T4485] WARNING: The mand mount option has been deprecated and [ 95.911358][ T4485] and is ignored by this kernel. Remove the mand [ 95.911358][ T4485] option from the mount to silence this warning. [ 95.911358][ T4485] ======================================================= [ 96.054500][ T4485] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 96.084443][ T4485] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 96.131200][ T4485] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 96.170991][ T4485] exFAT-fs (loop3): failed to load alloc-bitmap [ 96.192799][ T4485] exFAT-fs (loop3): failed to recognize exfat type [ 98.066869][ T4499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.213194][ C0] sched: RT throttling activated [ 98.213262][ T4495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.353287][ T4495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.194877][ T4540] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 101.194877][ T4540] program syz.4.44 not setting count and/or reply_len properly [ 102.468063][ T4563] netlink: 12 bytes leftover after parsing attributes in process `syz.2.48'. [ 102.681673][ T4564] netlink: 'syz.1.49': attribute type 1 has an invalid length. [ 105.659566][ T4603] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 106.356304][ T4608] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 107.381532][ T4622] process 'syz.4.59' launched './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 107.383772][ T4618] loop3: detected capacity change from 0 to 512 [ 108.230891][ T4618] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 108.263327][ T4618] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.403088][ T4636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.439445][ T4634] loop1: detected capacity change from 0 to 4096 [ 108.527268][ T4634] ntfs3: loop1: Failed to load $Extend. [ 108.545242][ T4318] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 108.557970][ T4318] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 108.770591][ T4651] ntfs3: loop1: ino=23, "memory.events.local" mmap(write) compressed not supported [ 108.835827][ T4318] libceph: mon0 (1)0.0.0.0:6789 socket closed (con state V1_BANNER) [ 108.913898][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 108.945673][ T4272] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 108.952389][ T4272] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 109.123207][ T4657] netlink: 'syz.0.69': attribute type 49 has an invalid length. [ 109.271132][ T4657] device veth0_to_bond entered promiscuous mode [ 109.317990][ T4647] ceph: No mds server is up or the cluster is laggy [ 109.363990][ T4330] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 109.916987][ T4330] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 110.138071][ T4330] usb 1-1: Using ep0 maxpacket: 16 [ 110.230121][ T4330] usb 1-1: config 0 has an invalid descriptor of length 250, skipping remainder of the config [ 110.447534][ T4330] usb 1-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 110.631629][ T4330] usb 1-1: config 0 interface 0 has no altsetting 0 [ 110.653271][ T4330] usb 1-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 110.734313][ T4330] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.779014][ T4330] usb 1-1: config 0 descriptor?? [ 110.830582][ T4330] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 111.188618][ T14] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 111.307453][ T4700] loop1: detected capacity change from 0 to 512 [ 111.404133][ T4700] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 111.453281][ T4700] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.514133][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 111.764197][ T4708] netlink: 104 bytes leftover after parsing attributes in process `syz.1.80'. [ 111.874075][ T4713] loop3: detected capacity change from 0 to 128 [ 111.891821][ T4715] netlink: 104 bytes leftover after parsing attributes in process `syz.1.80'. [ 111.920418][ T4713] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 111.960481][ T4713] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.079498][ T4330] usb 1-1: USB disconnect, device number 2 [ 112.572151][ T4730] loop2: detected capacity change from 0 to 512 [ 112.659647][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 112.711020][ T4730] netlink: 96 bytes leftover after parsing attributes in process `syz.2.82'. [ 112.749801][ T4730] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 112.816983][ T4734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.84'. [ 112.831918][ T4730] FAT-fs (loop2): Filesystem has been set read-only [ 112.890018][ T4735] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 113.973294][ T14] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 113.998806][ T4746] input: syz1 as /devices/virtual/input/input5 [ 114.194504][ T14] usb 3-1: Using ep0 maxpacket: 16 [ 114.209469][ T14] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 114.366734][ T14] usb 3-1: config 1 has no interface number 0 [ 114.431788][ T14] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 114.600972][ T14] usb 3-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid maxpacket 24896, setting to 1024 [ 114.760748][ T14] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1024 [ 114.844465][ T14] usb 3-1: config 1 interface 105 has no altsetting 0 [ 114.909360][ T14] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 114.927254][ T14] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 114.942940][ T14] usb 3-1: Product: syz [ 114.949468][ T14] usb 3-1: Manufacturer: syz [ 114.958874][ T14] usb 3-1: SerialNumber: syz [ 115.001197][ T4730] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 115.021061][ T4730] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 115.140854][ T4752] futex_wake_op: syz.4.87 tries to shift op by 144; fix this program [ 115.151456][ T4752] futex_wake_op: syz.4.87 tries to shift op by 144; fix this program [ 115.370663][ T4759] loop3: detected capacity change from 0 to 512 [ 115.401070][ T4759] EXT4-fs: Ignoring removed orlov option [ 115.421549][ T4733] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.430091][ T4733] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.457053][ T4730] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 115.465955][ T4730] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 115.527015][ T4759] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 115.551741][ T4759] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.749990][ T4759] capability: warning: `syz.3.88' uses 32-bit capabilities (legacy support in use) [ 115.997538][ T14] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 116.075645][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 116.146920][ T14] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 116.251584][ T14] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 116.672824][ T4770] loop3: detected capacity change from 0 to 512 [ 116.732752][ T4770] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 116.800414][ T4770] FAT-fs (loop3): Filesystem has been set read-only [ 117.165898][ T4733] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.222492][ T4733] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.708994][ T4733] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.718141][ T4733] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.727474][ T4733] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.736458][ T4733] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.905913][ T14] aqc111 3-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 52:58:39:1a:b9:27 [ 117.919036][ T4775] netlink: 'syz.2.92': attribute type 1 has an invalid length. [ 118.000225][ T14] usb 3-1: USB disconnect, device number 2 [ 118.029714][ T14] aqc111 3-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 118.977780][ T14] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 119.103520][ T14] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 119.112971][ T14] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 119.177576][ T4805] netlink: 'syz.1.98': attribute type 1 has an invalid length. [ 119.288969][ T4805] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.415997][ T4815] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.513236][ T4815] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.526411][ T4815] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.535599][ T4815] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.549134][ T4815] bond1: (slave geneve2): making interface the new active one [ 119.583417][ T4815] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 119.605287][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 119.899802][ T4825] syz.2.104 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 121.363228][ T4825] serio: Serial port ptm0 [ 121.578790][ T4848] xt_CONNSECMARK: invalid mode: 0 [ 123.250090][ T4865] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.301680][ T4865] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.313180][ T4314] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 123.478161][ T4842] 9pnet_virtio: no channels available for device 127.0.0.1 [ 123.705483][ T4314] usb 3-1: unable to get BOS descriptor or descriptor too short [ 124.559655][ T4314] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 124.567818][ T4314] usb 3-1: can't read configurations, error -71 [ 126.660826][ T4890] loop0: detected capacity change from 0 to 256 [ 126.723143][ T0] NOHZ tick-stop error: local softirq work is pending, handler #29a!!! [ 127.207124][ T4352] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 127.433436][ T4319] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 127.448289][ T4352] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.506698][ T4352] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.663266][ T4319] usb 1-1: Using ep0 maxpacket: 32 [ 127.680773][ T4319] usb 1-1: unable to get BOS descriptor or descriptor too short [ 127.712802][ T4352] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 127.803499][ T4907] FAULT_INJECTION: forcing a failure. [ 127.803499][ T4907] name failslab, interval 1, probability 0, space 0, times 1 [ 127.829374][ T4319] usb 1-1: config 254 has an invalid interface number: 103 but max is 0 [ 127.887279][ T4352] usb 5-1: New USB device found, idVendor=056a, idProduct=002a, bcdDevice= 0.00 [ 127.973143][ T4319] usb 1-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 127.993536][ T4907] CPU: 0 PID: 4907 Comm: syz.2.126 Not tainted syzkaller #0 [ 128.000920][ T4907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 128.011033][ T4907] Call Trace: [ 128.014372][ T4907] [ 128.017337][ T4907] dump_stack_lvl+0x188/0x24e [ 128.022093][ T4907] ? show_regs_print_info+0x12/0x12 [ 128.027344][ T4907] ? load_image+0x410/0x410 [ 128.031906][ T4907] ? __might_sleep+0xd0/0xd0 [ 128.036578][ T4907] ? __lock_acquire+0x7ea0/0x7ea0 [ 128.041660][ T4907] should_fail_ex+0x390/0x4c0 [ 128.046394][ T4907] should_failslab+0x5/0x20 [ 128.050941][ T4907] slab_pre_alloc_hook+0x59/0x300 [ 128.056038][ T4907] ? cache_create_net+0x8e/0x250 [ 128.061027][ T4907] __kmem_cache_alloc_node+0x4f/0x270 [ 128.066446][ T4907] ? rcu_is_watching+0x11/0xa0 [ 128.071268][ T4907] ? cache_create_net+0x8e/0x250 [ 128.076251][ T4907] __kmalloc+0xa3/0x240 [ 128.080457][ T4907] cache_create_net+0x8e/0x250 [ 128.085282][ T4907] nfsd_idmap_init+0xe4/0x1e0 [ 128.090004][ T4907] ? nfsd_init_net+0x34/0x1e0 [ 128.094739][ T4907] nfsd_init_net+0x47/0x1e0 [ 128.099296][ T4907] ops_init+0x360/0x5e0 [ 128.103502][ T4907] setup_net+0x4f2/0xbd0 [ 128.107847][ T4907] ? copy_net_ns+0x5b0/0x5b0 [ 128.112492][ T4907] ? copy_net_ns+0x324/0x5b0 [ 128.117151][ T4907] ? down_read_killable+0x1cc/0x340 [ 128.122426][ T4907] copy_net_ns+0x33e/0x5b0 [ 128.126905][ T4907] create_new_namespaces+0x3ce/0x700 [ 128.132247][ T4907] unshare_nsproxy_namespaces+0x116/0x160 [ 128.138013][ T4907] ksys_unshare+0x4f6/0x8e0 [ 128.142564][ T4907] ? sighand_ctor+0x40/0x40 [ 128.147130][ T4907] __x64_sys_unshare+0x34/0x40 [ 128.151955][ T4907] do_syscall_64+0x4c/0xa0 [ 128.156431][ T4907] ? clear_bhb_loop+0x60/0xb0 [ 128.161165][ T4907] ? clear_bhb_loop+0x60/0xb0 [ 128.165902][ T4907] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 128.171864][ T4907] RIP: 0033:0x7fd01919e159 [ 128.176320][ T4907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.195974][ T4907] RSP: 002b:00007fd01a083028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 128.204464][ T4907] RAX: ffffffffffffffda RBX: 00007fd019425fa0 RCX: 00007fd01919e159 [ 128.212481][ T4907] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 128.220505][ T4907] RBP: 00007fd01923506b R08: 0000000000000000 R09: 0000000000000000 [ 128.228516][ T4907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.236533][ T4907] R13: 00007fd019426038 R14: 00007fd019425fa0 R15: 00007ffcbcfe8d68 [ 128.244577][ T4907] [ 128.273157][ T4352] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.283369][ T4319] usb 1-1: config 254 has no interface number 0 [ 128.289688][ T4319] usb 1-1: config 254 interface 103 has no altsetting 0 [ 128.324968][ T4352] usb 5-1: config 0 descriptor?? [ 128.338577][ T4319] usb 1-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=64.5b [ 128.355730][ T4319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.374362][ T4319] usb 1-1: Product: syz [ 128.380461][ T4319] usb 1-1: Manufacturer: syz [ 128.390606][ T4319] usb 1-1: SerialNumber: syz [ 128.634188][ T4319] usbserial_generic 1-1:254.103: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 128.676549][ T4319] usbserial_generic 1-1:254.103: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 128.718897][ T4319] usbserial_generic 1-1:254.103: device has no bulk endpoints [ 128.764989][ T4319] usb 1-1: USB disconnect, device number 3 [ 128.787031][ T4352] wacom 0003:056A:002A.0001: ignoring exceeding usage max [ 128.857380][ T4352] wacom 0003:056A:002A.0001: Unknown device_type for 'HID 056a:002a'. Assuming pen. [ 128.905166][ T4352] wacom 0003:056A:002A.0001: hidraw0: USB HID v0.00 Device [HID 056a:002a] on usb-dummy_hcd.4-1/input0 [ 128.922149][ T4352] input: Wacom Intuos5 M Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:002A.0001/input/input6 [ 129.080214][ T4352] usb 5-1: USB disconnect, device number 2 [ 129.614586][ T4923] fido_id[4923]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 130.642984][ T4934] loop0: detected capacity change from 0 to 8 [ 131.596674][ T4942] SQUASHFS error: Failed to read block 0x4de: -5 [ 131.603998][ T4942] SQUASHFS error: Failed to read block 0x4de: -5 [ 131.621116][ T26] audit: type=1800 audit(1791039347.522:2): pid=4942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.131" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 131.771580][ T4285] Bluetooth: hci2: link tx timeout [ 131.777806][ T4285] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 131.799116][ T4285] Bluetooth: hci2: link tx timeout [ 131.804515][ T4285] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 131.851632][ T4285] Bluetooth: hci2: link tx timeout [ 131.856937][ T4285] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 131.926266][ T4285] Bluetooth: Too big LE L2CAP SDU length: len 44510 > 1280 [ 131.935776][ T4285] Bluetooth: hci2: link tx timeout [ 131.940969][ T4285] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 132.042359][ T4949] loop3: detected capacity change from 0 to 8 [ 132.102134][ T4949] SQUASHFS error: zstd decompression error: 10 [ 132.131255][ T4949] SQUASHFS error: zstd decompression failed, data probably corrupt [ 132.139725][ T4949] SQUASHFS error: Failed to read block 0x4ea: -5 [ 132.146661][ T4949] SQUASHFS error: Unable to read metadata cache entry [4e8] [ 132.154218][ T4949] SQUASHFS error: Unable to read inode 0x11f [ 132.738259][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.750537][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.104185][ T4963] loop4: detected capacity change from 0 to 512 [ 133.148736][ T4963] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 133.188432][ T4963] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 133.220290][ T4963] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.139: invalid indirect mapped block 9 (level 0) [ 133.263307][ T4963] EXT4-fs (loop4): 1 truncate cleaned up [ 133.269638][ T4963] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 133.854216][ T4285] Bluetooth: hci2: command 0x0406 tx timeout [ 134.302898][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 134.646147][ T4984] batman_adv: batadv0: Adding interface: veth0 [ 134.674548][ T4984] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.740300][ T4984] batman_adv: batadv0: Interface activated: veth0 [ 135.016588][ T4984] batman_adv: batadv0: Interface deactivated: veth0 [ 135.079346][ T4984] batman_adv: batadv0: Removing interface: veth0 [ 135.436767][ T4984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.493286][ T4984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.514235][ T4984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.521761][ T4984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.633281][ T5022] loop3: detected capacity change from 0 to 8 [ 137.664323][ T5022] SQUASHFS error: lzo decompression failed, data probably corrupt [ 137.672278][ T5022] SQUASHFS error: Failed to read block 0x91: -5 [ 137.678645][ T5022] SQUASHFS error: Unable to read metadata cache entry [8f] [ 137.685946][ T5022] SQUASHFS error: Unable to read inode 0x7 [ 137.869159][ T5027] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 137.960176][ T5028] loop0: detected capacity change from 0 to 1024 [ 138.100585][ T5028] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 138.294177][ T5028] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 138.313006][ T5040] device veth1_to_bond entered promiscuous mode [ 138.335622][ T5040] bridge0: port 3(veth1_to_bond) entered blocking state [ 138.417831][ T5040] bridge0: port 3(veth1_to_bond) entered disabled state [ 138.474650][ T5040] bridge0: port 3(veth1_to_bond) entered blocking state [ 138.482250][ T5040] bridge0: port 3(veth1_to_bond) entered forwarding state [ 139.553969][ T5051] netlink: 'syz.1.156': attribute type 8 has an invalid length. [ 139.561855][ T5051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.156'. [ 139.629403][ T5051] device bond0 entered promiscuous mode [ 139.638955][ T5051] device bond_slave_0 entered promiscuous mode [ 139.659340][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 139.664697][ T5051] device bond_slave_1 entered promiscuous mode [ 139.702290][ T5051] device gretap0 entered promiscuous mode [ 139.745976][ T5051] device team0 entered promiscuous mode [ 139.774878][ T5051] device team_slave_0 entered promiscuous mode [ 139.801690][ T5051] device team_slave_1 entered promiscuous mode [ 139.829374][ T5051] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 139.858864][ T5051] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 139.883249][ T5051] hsr1: Interlink (team0) is not up; please bring it up to get a fully working HSR network [ 139.898274][ T5051] device hsr1 entered promiscuous mode [ 139.994274][ T26] audit: type=1326 audit(1791039355.902:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5060 comm="syz.4.159" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178f99e159 code=0x7ffc0000 [ 140.036806][ T26] audit: type=1326 audit(1791039355.912:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5060 comm="syz.4.159" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178f99e159 code=0x7ffc0000 [ 140.099592][ T26] audit: type=1326 audit(1791039355.942:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5060 comm="syz.4.159" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f178f99e159 code=0x7ffc0000 [ 140.126527][ T26] audit: type=1326 audit(1791039355.942:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5060 comm="syz.4.159" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178f99e159 code=0x7ffc0000 [ 140.176073][ T5063] device wlan0 entered promiscuous mode [ 140.211064][ T26] audit: type=1326 audit(1791039355.942:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5060 comm="syz.4.159" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178f99e159 code=0x7ffc0000 [ 140.240024][ T26] audit: type=1326 audit(1791039355.942:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5060 comm="syz.4.159" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f178f99e159 code=0x7ffc0000 [ 140.268575][ T26] audit: type=1326 audit(1791039355.942:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5060 comm="syz.4.159" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178f99e159 code=0x7ffc0000 [ 140.357984][ T26] audit: type=1326 audit(1791039355.942:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5060 comm="syz.4.159" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178f99e159 code=0x7ffc0000 [ 140.386984][ T26] audit: type=1326 audit(1791039355.942:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5060 comm="syz.4.159" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f178f99e159 code=0x7ffc0000 [ 140.420143][ T26] audit: type=1326 audit(1791039355.942:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5060 comm="syz.4.159" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178f99e159 code=0x7ffc0000 [ 140.875671][ T5078] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 140.882568][ T5078] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 140.917757][ T5078] vhci_hcd vhci_hcd.0: Device attached [ 140.933264][ T4352] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 141.135325][ T4352] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 141.148668][ T4352] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.162458][ T4352] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 141.176083][ T4352] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 141.200422][ T4352] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 141.222258][ T4352] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 141.232716][ T4352] usb 3-1: Product: syz [ 141.241675][ T4352] usb 3-1: Manufacturer: syz [ 141.604629][ T2123] vhci_hcd: vhci_device speed not set [ 141.663289][ T4318] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 141.745447][ T2123] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 141.889832][ T4318] usb 1-1: config 0 has no interfaces? [ 141.896633][ T4318] usb 1-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 142.027228][ T4352] cdc_wdm 3-1:1.0: skipping garbage [ 142.033600][ T4352] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 142.061395][ T4318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.103649][ T4318] usb 1-1: config 0 descriptor?? [ 142.261574][ T4352] usb 3-1: USB disconnect, device number 5 [ 142.329176][ T5079] vhci_hcd: unknown pdu 2 [ 142.340409][ T4390] vhci_hcd: stop threads [ 142.346759][ T4390] vhci_hcd: release socket [ 142.372304][ T4330] usb 1-1: USB disconnect, device number 4 [ 142.379768][ T4390] vhci_hcd: disconnect device [ 142.446198][ T5096] netlink: 4 bytes leftover after parsing attributes in process `syz.4.168'. [ 142.883496][ T4352] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 143.101085][ T2123] vhci_hcd: vhci_device speed not set [ 143.106643][ T4316] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 143.186113][ T4352] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 143.216717][ T4352] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.235053][ T4352] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 143.308472][ T4316] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 143.343513][ T4316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.402232][ T4316] usb 4-1: Product: syz [ 143.417089][ T4316] usb 4-1: Manufacturer: syz [ 143.421786][ T4316] usb 4-1: SerialNumber: syz [ 143.456549][ T4352] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 143.473771][ T4352] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 143.482881][ T4352] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 143.513159][ T4352] usb 3-1: Product: syz [ 143.517404][ T4352] usb 3-1: Manufacturer: syz [ 143.571784][ T4352] cdc_wdm 3-1:1.0: skipping garbage [ 144.245146][ T4352] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 144.303733][ T4352] usb 3-1: USB disconnect, device number 6 [ 144.445700][ T5115] loop4: detected capacity change from 0 to 512 [ 144.721548][ T5124] netlink: 300 bytes leftover after parsing attributes in process `syz.1.173'. [ 145.283486][ T4316] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 145.309258][ T4316] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 145.324777][ T4316] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 145.336677][ T4316] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 145.349566][ T4316] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 145.497029][ T4316] lan78xx: probe of 4-1:1.0 failed with error -71 [ 145.561298][ T4316] usb 4-1: USB disconnect, device number 3 [ 145.621027][ T5135] device veth1_to_bond entered promiscuous mode [ 145.813188][ T5137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.177'. [ 147.262494][ T5137] bond0: (slave bond_slave_1): Releasing backup interface [ 148.009825][ T5137] device bond_slave_1 left promiscuous mode [ 150.023150][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 151.182057][ T5232] loop3: detected capacity change from 0 to 256 [ 151.276428][ T5232] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 152.995961][ T26] kauditd_printk_skb: 25 callbacks suppressed [ 152.995976][ T26] audit: type=1804 audit(1791039368.912:38): pid=5247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.192" name="bus" dev="ramfs" ino=36338 res=1 errno=0 [ 153.612601][ T26] audit: type=1804 audit(1791039369.242:39): pid=5247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.192" name="bus" dev="ramfs" ino=36338 res=1 errno=0 [ 153.967737][ T5249] 8021q: adding VLAN 0 to HW filter on device bond2 [ 154.163157][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 154.183150][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 154.193139][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 154.203145][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 154.213140][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 154.223138][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 154.233141][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 154.243135][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 156.306989][ T5275] netlink: 'syz.3.199': attribute type 30 has an invalid length. [ 156.340788][ T5275] netlink: 16 bytes leftover after parsing attributes in process `syz.3.199'. [ 156.729527][ T5282] ip_tables: iptables: counters copy to user failed while replacing table [ 157.206556][ T5290] netlink: 'syz.1.204': attribute type 4 has an invalid length. [ 157.214565][ T5290] netlink: 152 bytes leftover after parsing attributes in process `syz.1.204'. [ 158.141686][ T26] audit: type=1804 audit(1791039374.052:40): pid=5295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.206" name="bus" dev="ramfs" ino=36398 res=1 errno=0 [ 158.209262][ T26] audit: type=1804 audit(1791039374.052:41): pid=5295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.206" name="bus" dev="ramfs" ino=36398 res=1 errno=0 [ 160.295451][ T5320] netlink: 'syz.4.213': attribute type 1 has an invalid length. [ 160.428985][ T5320] bond1: (slave veth3): Enslaving as an active interface with a down link [ 160.493862][ T5329] bond1: (slave veth0_to_bond): making interface the new active one [ 160.513493][ T5329] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 160.590996][ T5332] ip_tables: iptables: counters copy to user failed while replacing table [ 160.820989][ T5338] x86/PAT: syz.4.216:5338 freeing invalid memtype [mem 0xfe005000-0xfe005fff] [ 160.900652][ T5341] loop0: detected capacity change from 0 to 256 [ 160.919877][ T5341] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 160.991869][ T26] audit: type=1800 audit(1791039376.902:42): pid=5337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.218" name="file1" dev="loop0" ino=1048611 res=0 errno=0 [ 161.046139][ T5342] netlink: 'syz.3.217': attribute type 4 has an invalid length. [ 161.083546][ T5342] netlink: 152 bytes leftover after parsing attributes in process `syz.3.217'. [ 161.123887][ T5335] x86/PAT: syz.4.216:5335 freeing invalid memtype [mem 0xfe004000-0xfe004fff] [ 161.462385][ T5354] 8021q: adding VLAN 0 to HW filter on device bond1 [ 161.541640][ T5354] bond1: (slave geneve2): making interface the new active one [ 161.557199][ T5354] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 161.583546][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 161.950712][ T5370] CIFS mount error: No usable UNC path provided in device string! [ 161.950712][ T5370] [ 161.961273][ T5370] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 162.649336][ T2123] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 162.670240][ T5376] FAULT_INJECTION: forcing a failure. [ 162.670240][ T5376] name failslab, interval 1, probability 0, space 0, times 0 [ 162.698774][ T5376] CPU: 0 PID: 5376 Comm: syz.3.231 Not tainted syzkaller #0 [ 162.706147][ T5376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 162.716272][ T5376] Call Trace: [ 162.719592][ T5376] [ 162.722561][ T5376] dump_stack_lvl+0x188/0x24e [ 162.727292][ T5376] ? show_regs_print_info+0x12/0x12 [ 162.732549][ T5376] ? load_image+0x410/0x410 [ 162.737119][ T5376] ? __lock_acquire+0x7ea0/0x7ea0 [ 162.742198][ T5376] ? ida_alloc_range+0x7ca/0x860 [ 162.747195][ T5376] should_fail_ex+0x390/0x4c0 [ 162.751938][ T5376] should_failslab+0x5/0x20 [ 162.756487][ T5376] slab_pre_alloc_hook+0x59/0x300 [ 162.761568][ T5376] ? blk_alloc_queue_stats+0x48/0xf0 [ 162.766917][ T5376] __kmem_cache_alloc_node+0x4f/0x270 [ 162.772339][ T5376] ? blk_alloc_queue_stats+0x48/0xf0 [ 162.777680][ T5376] kmalloc_trace+0x26/0xe0 [ 162.782141][ T5376] blk_alloc_queue_stats+0x48/0xf0 [ 162.787309][ T5376] blk_alloc_queue+0x15e/0x5b0 [ 162.792130][ T5376] __blk_alloc_disk+0x17/0x80 [ 162.796852][ T5376] dm_create+0x46b/0xf90 [ 162.801143][ T5376] dev_create+0x12e/0x2c0 [ 162.805560][ T5376] ? list_devices+0x820/0x820 [ 162.810310][ T5376] ? __might_fault+0xc2/0x120 [ 162.815050][ T5376] ? __might_fault+0xa6/0x120 [ 162.819782][ T5376] dm_ctl_ioctl+0xa9c/0xec0 [ 162.824343][ T5376] ? list_devices+0x820/0x820 [ 162.829076][ T5376] ? dm_poll+0x120/0x120 [ 162.833414][ T5376] ? bpf_lsm_file_ioctl+0x5/0x10 [ 162.838408][ T5376] ? security_file_ioctl+0x7c/0xa0 [ 162.843575][ T5376] ? dm_poll+0x120/0x120 [ 162.847869][ T5376] __se_sys_ioctl+0xfa/0x170 [ 162.852513][ T5376] do_syscall_64+0x4c/0xa0 [ 162.856988][ T5376] ? clear_bhb_loop+0x60/0xb0 [ 162.861733][ T5376] ? clear_bhb_loop+0x60/0xb0 [ 162.866465][ T5376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 162.872399][ T5376] RIP: 0033:0x7f651839e159 [ 162.876858][ T5376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.896512][ T5376] RSP: 002b:00007f65165f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 162.904976][ T5376] RAX: ffffffffffffffda RBX: 00007f6518625fa0 RCX: 00007f651839e159 [ 162.908110][ T2123] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 162.913119][ T5376] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 162.913140][ T5376] RBP: 00007f651843506b R08: 0000000000000000 R09: 0000000000000000 [ 162.913154][ T5376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.913168][ T5376] R13: 00007f6518626038 R14: 00007f6518625fa0 R15: 00007ffea14496d8 [ 162.921781][ T2123] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.929809][ T5376] [ 163.039509][ T2123] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 163.048787][ T2123] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 163.079544][ T2123] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 163.099722][ T2123] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 163.119997][ T2123] usb 5-1: Product: syz [ 163.127090][ T2123] usb 5-1: Manufacturer: syz [ 163.152468][ T2123] cdc_wdm 5-1:1.0: skipping garbage [ 163.168149][ T2123] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 163.403839][ T4314] usb 5-1: USB disconnect, device number 3 [ 163.529693][ T5396] Bluetooth: ISO socket layer initialized [ 163.993272][ T4314] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 164.208572][ T4314] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 164.363189][ T4314] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.429066][ T4314] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 164.474858][ T4314] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 164.552383][ T5403] netlink: 12 bytes leftover after parsing attributes in process `syz.2.240'. [ 164.567553][ T4314] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 164.593890][ T5403] device bond1 entered promiscuous mode [ 164.612354][ T4314] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 164.657328][ T4314] usb 5-1: Product: syz [ 164.677584][ T4314] usb 5-1: Manufacturer: syz [ 164.711074][ T4314] usb 5-1: can't set config #1, error -71 [ 164.772607][ T4314] usb 5-1: USB disconnect, device number 4 [ 170.755845][ T5485] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 170.795573][ T5485] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 175.630456][ T5532] loop3: detected capacity change from 0 to 1024 [ 175.689887][ T5532] EXT4-fs: Ignoring removed bh option [ 175.822090][ T5532] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 175.982325][ T5541] netlink: 'syz.1.265': attribute type 3 has an invalid length. [ 176.002366][ T5541] netlink: 11575 bytes leftover after parsing attributes in process `syz.1.265'. [ 177.159257][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 178.290639][ T5567] loop3: detected capacity change from 0 to 512 [ 178.346006][ T5567] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 178.418180][ T5567] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.270: invalid indirect mapped block 9 (level 0) [ 178.471515][ T5567] EXT4-fs (loop3): 1 truncate cleaned up [ 178.481495][ T5567] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 180.016229][ T5581] loop2: detected capacity change from 0 to 128 [ 180.241968][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 180.335174][ T5585] syz.2.275: attempt to access beyond end of device [ 180.335174][ T5585] loop2: rw=2049, sector=145, nr_sectors = 408 limit=128 [ 180.440147][ T4282] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 180.458085][ T4283] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 180.466535][ T4283] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 180.474692][ T4283] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 180.486248][ T4283] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 180.493817][ T4283] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 180.943208][ T4353] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 181.602974][ T5600] loop2: detected capacity change from 0 to 512 [ 181.749955][ T5600] EXT4-fs: Ignoring removed nobh option [ 181.905736][ T4353] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 181.923381][ T4353] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 115, changing to 7 [ 181.952635][ T4353] usb 4-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 181.971984][ T4353] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.989168][ T4353] usb 4-1: Product: syz [ 181.997036][ T4353] usb 4-1: Manufacturer: syz [ 182.008774][ T4353] usb 4-1: SerialNumber: syz [ 182.013863][ T5600] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #3: comm syz.2.282: corrupted inode contents [ 182.032096][ T5608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.283'. [ 182.083184][ T5600] EXT4-fs (loop2): Remounting filesystem read-only [ 182.089789][ T5600] EXT4-fs error (device loop2): ext4_dirty_inode:6166: inode #3: comm syz.2.282: mark_inode_dirty error [ 182.121069][ T5590] chnl_net:caif_netlink_parms(): no params data found [ 182.128574][ T5600] EXT4-fs (loop2): Remounting filesystem read-only [ 182.168010][ T5600] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #3: comm syz.2.282: corrupted inode contents [ 182.229397][ T5600] EXT4-fs (loop2): Remounting filesystem read-only [ 182.236449][ T5600] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #3: comm syz.2.282: mark_inode_dirty error [ 182.248489][ T5600] EXT4-fs (loop2): Remounting filesystem read-only [ 182.290110][ T5600] Quota error (device loop2): write_blk: dquota write failed [ 182.315402][ T5600] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 182.364284][ T5600] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.282: Failed to acquire dquot type 0 [ 182.367197][ T4353] usb 4-1: Can't get UAC3 power state for id 10 [ 182.392669][ T5620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.285'. [ 182.402119][ T5600] EXT4-fs (loop2): Remounting filesystem read-only [ 182.412057][ T5590] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.419880][ T5590] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.428984][ T5590] device bridge_slave_0 entered promiscuous mode [ 182.439485][ T5590] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.446934][ T5590] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.455571][ T5590] device bridge_slave_1 entered promiscuous mode [ 182.466116][ T4353] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 182.488078][ T5590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.501041][ T5590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.515960][ T4353] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 182.544585][ T5600] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #16: comm syz.2.282: corrupted inode contents [ 182.573483][ T4283] Bluetooth: hci5: command 0x0409 tx timeout [ 182.625725][ T5590] team0: Port device team_slave_0 added [ 182.632456][ T5600] EXT4-fs (loop2): Remounting filesystem read-only [ 182.661925][ T5590] team0: Port device team_slave_1 added [ 182.677872][ T5600] EXT4-fs error (device loop2): ext4_dirty_inode:6166: inode #16: comm syz.2.282: mark_inode_dirty error [ 182.696400][ T4353] snd-usb-audio: probe of 4-1:1.0 failed with error -71 [ 182.719959][ T4353] usb 4-1: USB disconnect, device number 4 [ 182.834755][ T5600] EXT4-fs (loop2): Remounting filesystem read-only [ 182.843622][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.850630][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.853926][ T5600] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #16: comm syz.2.282: corrupted inode contents [ 182.921885][ T5590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.959760][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.984328][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.008149][ T5624] udevd[5624]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 183.053834][ T5600] EXT4-fs (loop2): Remounting filesystem read-only [ 183.060439][ T5600] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.282: mark_inode_dirty error [ 183.080028][ T5590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.194089][ T5600] EXT4-fs (loop2): Remounting filesystem read-only [ 183.207167][ T5590] device hsr_slave_0 entered promiscuous mode [ 183.230350][ T5590] device hsr_slave_1 entered promiscuous mode [ 183.243330][ T5600] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #16: comm syz.2.282: corrupted inode contents [ 183.257338][ T5590] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 183.275088][ T5590] Cannot create hsr debugfs directory [ 183.373357][ T5600] EXT4-fs (loop2): Remounting filesystem read-only [ 183.415965][ T5600] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 183.507905][ T5600] EXT4-fs (loop2): Remounting filesystem read-only [ 183.523149][ T5600] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #16: comm syz.2.282: corrupted inode contents [ 183.699519][ T5600] EXT4-fs (loop2): Remounting filesystem read-only [ 183.968556][ T5600] EXT4-fs error (device loop2): ext4_truncate:4325: inode #16: comm syz.2.282: mark_inode_dirty error [ 184.208349][ T5600] EXT4-fs (loop2): Remounting filesystem read-only [ 184.271291][ T5600] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 184.293504][ T5600] EXT4-fs (loop2): Remounting filesystem read-only [ 184.304400][ T5600] EXT4-fs (loop2): 1 truncate cleaned up [ 184.310144][ T5600] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 184.375533][ T5600] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.485461][ T5639] device syzkaller0 entered promiscuous mode [ 184.514355][ T5641] overlayfs: failed to clone upperpath [ 184.628397][ T5590] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 184.653482][ T4283] Bluetooth: hci5: command 0x041b tx timeout [ 184.671618][ T5590] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 184.687958][ T4286] EXT4-fs (loop2): unmounting filesystem. [ 184.719172][ T5590] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 184.732146][ T5590] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 186.009613][ T5590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.031355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 186.044013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.167040][ T5590] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.249244][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 186.314531][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 186.333945][ T4452] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.341189][ T4452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.395283][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 186.462094][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 186.511191][ T4452] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.518557][ T4452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.591277][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 186.734816][ T4283] Bluetooth: hci5: command 0x040f tx timeout [ 187.128488][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 187.143258][ T4330] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 187.157484][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 187.198693][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 187.234470][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 187.274166][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 187.300562][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 187.336289][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 187.350130][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 187.368193][ T4330] usb 5-1: config index 0 descriptor too short (expected 224, got 18) [ 187.381538][ T5590] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 187.383736][ T4330] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.409381][ T5590] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 187.420404][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 187.439977][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 187.448174][ T4330] usb 5-1: config 0 has no interfaces? [ 187.461892][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 187.472895][ T4330] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 187.503120][ T4330] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.526780][ T4330] usb 5-1: Product: syz [ 187.541055][ T4330] usb 5-1: Manufacturer: syz [ 187.557001][ T4330] usb 5-1: SerialNumber: syz [ 187.593810][ T4330] usb 5-1: config 0 descriptor?? [ 187.939645][ T4330] usb 5-1: USB disconnect, device number 5 [ 188.813611][ T4283] Bluetooth: hci5: command 0x0419 tx timeout [ 188.867169][ T5689] netlink: 144 bytes leftover after parsing attributes in process `syz.3.306'. [ 188.959535][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 188.980861][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 188.997948][ T5590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.272752][ T5700] device syzkaller0 entered promiscuous mode [ 192.275760][ T5724] tipc: Failed to remove unknown binding: 66,0,0/0:1972164435/1972164436 [ 192.351901][ T5725] tipc: Failed to remove unknown binding: 66,0,0/0:4039819308/4039819310 [ 192.421596][ T5724] tipc: Failed to remove unknown binding: 66,0,0/0:1972164435/1972164436 [ 193.164666][ T5590] device veth0_vlan entered promiscuous mode [ 193.234093][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 193.253026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 193.323930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 193.344858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 193.390863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 193.666801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 193.743641][ T4352] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 193.978629][ T4352] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 194.012166][ T4352] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 115, changing to 7 [ 194.073245][ T14] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 194.091369][ T4352] usb 3-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 194.134466][ T5590] device veth1_vlan entered promiscuous mode [ 194.164648][ T4352] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.177118][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.183505][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.211465][ T4352] usb 3-1: Product: syz [ 194.232099][ T4352] usb 3-1: Manufacturer: syz [ 194.241800][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 194.243362][ T14] usb 5-1: device descriptor read/64, error -71 [ 194.277905][ T4352] usb 3-1: SerialNumber: syz [ 194.280173][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 194.323541][ T5590] device veth0_macvtap entered promiscuous mode [ 194.366861][ T5590] device veth1_macvtap entered promiscuous mode [ 194.421553][ T5590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.481555][ T5590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.502025][ T5590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.546415][ T5590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.553377][ T14] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 194.595430][ T5590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.644414][ T5590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.679160][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.698422][ T4352] usb 3-1: Can't get UAC3 power state for id 10 [ 194.712335][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 194.723200][ T14] usb 5-1: device descriptor read/64, error -71 [ 194.731987][ T4352] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 194.741071][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 194.774875][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 194.778898][ T4352] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 194.807640][ T5590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.833805][ T5590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.844121][ T14] usb usb5-port1: attempt power cycle [ 194.870153][ T5590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.909541][ T5590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.928056][ T4352] snd-usb-audio: probe of 3-1:1.0 failed with error -71 [ 194.954141][ T5590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.004141][ T4352] usb 3-1: USB disconnect, device number 7 [ 195.007583][ T5590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.078744][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.113788][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 195.145040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 195.188393][ T5590] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.232300][ T5590] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.242591][ T5590] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.253175][ T14] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 195.272949][ T5590] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.279220][ T5758] udevd[5758]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 195.301759][ T14] usb 5-1: device descriptor read/8, error -71 [ 195.528165][ T5185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.559894][ T5185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.580271][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 195.585730][ T14] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 195.624498][ T14] usb 5-1: device descriptor read/8, error -71 [ 195.662969][ T5185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.689489][ T5185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.712557][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 195.753931][ T14] usb usb5-port1: unable to enumerate USB device [ 196.147391][ T5767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.325'. [ 196.613408][ T5770] ip_tables: iptables: counters copy to user failed while replacing table [ 196.966186][ T5784] netlink: 12 bytes leftover after parsing attributes in process `syz.4.329'. [ 197.096111][ T5786] loop3: detected capacity change from 0 to 256 [ 197.166520][ T5786] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 197.211811][ T5791] netlink: 'syz.5.334': attribute type 8 has an invalid length. [ 197.256827][ T26] audit: type=1800 audit(1791039413.172:43): pid=5786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.332" name="file1" dev="loop3" ino=1048616 res=0 errno=0 [ 197.750566][ T5801] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 198.956990][ T5805] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 200.717915][ T5811] sctp: [Deprecated]: syz.1.340 (pid 5811) Use of struct sctp_assoc_value in delayed_ack socket option. [ 200.717915][ T5811] Use struct sctp_sack_info instead [ 200.950507][ T5820] loop4: detected capacity change from 0 to 128 [ 200.981885][ T5820] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 201.029632][ T5820] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 201.130004][ T26] audit: type=1326 audit(1791039417.042:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5819 comm="syz.4.342" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f178f99e159 code=0x0 [ 201.284439][ T5824] netlink: 8 bytes leftover after parsing attributes in process `syz.5.344'. [ 202.437007][ T127] smpboot: CPU 1 is now offline [ 202.753692][ T5836] x86: Booting SMP configuration: [ 202.792837][ T5836] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 202.867868][ T5845] tipc: Failed to remove unknown binding: 66,0,0/0:3799591916/3799591918 [ 202.925672][ T5845] tipc: Failed to remove unknown binding: 66,0,0/0:3799591916/3799591917 [ 202.993739][ T5845] tipc: Failed to remove unknown binding: 66,0,0/0:3799591916/3799591918 [ 203.023323][ T5845] tipc: Failed to remove unknown binding: 66,0,0/0:3799591916/3799591917 [ 203.471737][ T5858] loop2: detected capacity change from 0 to 512 [ 203.567919][ T5858] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 203.675382][ T5858] EXT4-fs (loop2): 1 truncate cleaned up [ 203.772467][ T5858] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 204.493199][ T4283] Bluetooth: hci3: command 0x0406 tx timeout [ 204.499308][ T4283] Bluetooth: hci0: command 0x0406 tx timeout [ 204.510718][ T4286] EXT4-fs (loop2): unmounting filesystem. [ 206.503183][ T4283] Bluetooth: hci4: command 0x0406 tx timeout [ 208.737783][ T5896] loop2: detected capacity change from 0 to 512 [ 208.811115][ T5896] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 208.819417][ T5896] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.365: corrupted in-inode xattr [ 208.835813][ T5896] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.365: couldn't read orphan inode 15 (err -117) [ 208.848049][ T5896] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 209.136379][ T4286] EXT4-fs (loop2): unmounting filesystem. [ 209.595016][ T5910] loop4: detected capacity change from 0 to 512 [ 209.700237][ T5910] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 209.845967][ T5910] EXT4-fs (loop4): 1 truncate cleaned up [ 209.852823][ T5179] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.944512][ T5910] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 210.583946][ T5179] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.702540][ T5179] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.988984][ T5179] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.210740][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 218.052233][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 218.380666][ T5991] syz.4.378 uses obsolete (PF_INET,SOCK_PACKET) [ 218.993124][ T6005] capability: warning: `syz.1.366' uses deprecated v2 capabilities in a way that may be insecure [ 220.250087][ T6033] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 220.250087][ T6033] The task syz.1.383 (6033) triggered the difference, watch for misbehavior. [ 220.319243][ T6034] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 220.401919][ T6034] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 220.557034][ T6034] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 220.644094][ T6034] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 220.765405][ T6034] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 220.862077][ T6034] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 220.992823][ T6034] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 221.219257][ T6043] netlink: 12 bytes leftover after parsing attributes in process `syz.4.386'. [ 221.866928][ T6049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.386'. [ 221.886228][ T6049] netlink: 24 bytes leftover after parsing attributes in process `syz.4.386'. [ 222.042096][ T6049] bond2: (slave veth5): Enslaving as an active interface with an up link [ 222.231002][ T6044] device syzkaller0 entered promiscuous mode [ 222.660281][ T6064] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 222.725279][ T6064] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 223.963866][ T6087] loop2: detected capacity change from 0 to 512 [ 224.085284][ T6091] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 228.925884][ T6106] PKCS8: Unsupported PKCS#8 version [ 230.234740][ T26] audit: type=1326 audit(1791039446.152:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6108 comm="syz.2.398" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd01919e159 code=0x0 [ 233.382243][ T6071] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 233.451168][ T6088] device syzkaller0 entered promiscuous mode [ 236.651903][ T6129] ip_tables: iptables: counters copy to user failed while replacing table [ 236.667492][ T6122] device syzkaller0 entered promiscuous mode [ 236.741586][ T6122] tipc: Started in network mode [ 236.768881][ T6122] tipc: Node identity 7ee0756f5b33, cluster identity 4711 [ 236.835497][ T6122] tipc: Enabled bearer , priority 0 [ 237.146087][ T6121] tipc: Resetting bearer [ 237.675646][ T6121] tipc: Disabling bearer [ 237.814291][ T5179] device hsr_slave_0 left promiscuous mode [ 237.835670][ T5179] device hsr_slave_1 left promiscuous mode [ 237.842480][ T5179] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.856068][ T5179] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.867270][ T5179] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.878995][ T5179] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.900290][ T5179] device bridge_slave_1 left promiscuous mode [ 237.913859][ T5179] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.938912][ T5179] device bridge_slave_0 left promiscuous mode [ 237.950747][ T5179] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.039193][ T5179] device veth1_macvtap left promiscuous mode [ 238.053960][ T5179] device veth0_macvtap left promiscuous mode [ 238.060220][ T5179] device veth1_vlan left promiscuous mode [ 238.072469][ T5179] device veth0_vlan left promiscuous mode [ 238.370881][ T5179] bond1 (unregistering): Released all slaves [ 238.521962][ T6169] kAFS: No cell specified [ 240.104514][ T5179] team0 (unregistering): Port device team_slave_1 removed [ 240.195035][ T5179] team0 (unregistering): Port device team_slave_0 removed [ 240.249487][ T6188] loop5: detected capacity change from 0 to 2048 [ 240.321900][ T5179] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.465066][ T5179] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.750248][ T6194] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 241.008580][ T26] audit: type=1800 audit(1791039456.922:46): pid=6188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.416" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 241.135745][ T26] audit: type=1804 audit(1791039456.992:47): pid=6188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.416" name="/newroot/22/file2/file1" dev="loop5" ino=15 res=1 errno=0 [ 241.786115][ T5179] bond0 (unregistering): Released all slaves [ 241.830141][ T6188] syz.5.416 (6188) used greatest stack depth: 19360 bytes left [ 241.995538][ T6196] netlink: 12 bytes leftover after parsing attributes in process `syz.2.406'. [ 242.035946][ T6201] device syzkaller0 entered promiscuous mode [ 242.880714][ T6239] netlink: 'syz.3.425': attribute type 1 has an invalid length. [ 243.037259][ T6241] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 243.191315][ T6239] netlink: 28 bytes leftover after parsing attributes in process `syz.3.425'. [ 243.222036][ T5179] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 243.237402][ T6239] 8021q: adding VLAN 0 to HW filter on device bond2 [ 243.281269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 243.375253][ T5179] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 247.473932][ T6302] netlink: 12 bytes leftover after parsing attributes in process `syz.4.431'. [ 248.948064][ T6343] loop2: detected capacity change from 0 to 256 [ 248.992686][ T6343] exfat: Deprecated parameter 'utf8' [ 249.033823][ T6343] exfat: Deprecated parameter 'utf8' [ 249.155284][ T6343] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 251.208358][ T6401] netlink: 52 bytes leftover after parsing attributes in process `syz.2.446'. [ 251.241802][ T6401] bridge0: port 3(veth1_to_bond) entered disabled state [ 251.249963][ T6401] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.257626][ T6401] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.354488][ T6406] netlink: 76 bytes leftover after parsing attributes in process `syz.2.446'. [ 251.392104][ T6406] bridge0: port 3(veth1_to_bond) entered blocking state [ 251.399324][ T6406] bridge0: port 3(veth1_to_bond) entered forwarding state [ 251.406860][ T6406] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.414037][ T6406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.421535][ T6406] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.428733][ T6406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.593877][ T6406] netlink: 52 bytes leftover after parsing attributes in process `syz.2.446'. [ 251.950035][ T6406] bridge0: port 3(veth1_to_bond) entered disabled state [ 251.957407][ T6406] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.964688][ T6406] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.814260][ T6440] block device autoloading is deprecated and will be removed. [ 252.917880][ T6449] loop5: detected capacity change from 0 to 512 [ 252.934888][ T6435] md: invalid raid superblock magic on ram1 [ 252.946409][ T6435] md: ram1 does not have a valid v0.0 superblock, not importing! [ 252.987160][ T6435] md: md_import_device returned -22 [ 253.070812][ T6449] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 253.115771][ T6449] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.871099][ T5590] EXT4-fs (loop5): unmounting filesystem. [ 254.188199][ T6484] netlink: 4 bytes leftover after parsing attributes in process `syz.5.459'. [ 254.322319][ T6489] loop5: detected capacity change from 0 to 512 [ 254.457476][ T6489] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 255.615057][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.621456][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.285826][ T6508] ceph: No mds server is up or the cluster is laggy [ 257.776601][ T6553] loop5: detected capacity change from 0 to 256 [ 257.831524][ T6553] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 259.320935][ T6595] jffs2: notice: (6595) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 260.070170][ T6603] netlink: 276 bytes leftover after parsing attributes in process `syz.5.479'. [ 260.176345][ T6603] tipc: Enabling of bearer rejected, failed to enable media [ 262.746354][ T4285] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 264.520577][ T6671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.489'. [ 266.082806][ T6692] futex_wake_op: syz.4.496 tries to shift op by 144; fix this program [ 266.293412][ T6695] device ip6gre1 entered promiscuous mode [ 266.392447][ T6696] bridge0: port 3(veth1_to_bond) entered blocking state [ 266.399643][ T6696] bridge0: port 3(veth1_to_bond) entered forwarding state [ 266.407130][ T6696] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.414321][ T6696] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.421740][ T6696] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.428962][ T6696] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.698397][ T127] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 266.717186][ T127] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 266.786327][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 266.787351][ T14] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 267.312185][ T6705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.499'. [ 267.613430][ T127] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 268.013294][ T14] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 268.748472][ T6740] loop5: detected capacity change from 0 to 4096 [ 269.073173][ T6740] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 269.179630][ T6768] udevd[6768]: incorrect nilfs2 checksum on /dev/loop5 [ 269.362307][ T6768] udevd[6768]: incorrect nilfs2 checksum on /dev/loop5 [ 269.416562][ T6740] NILFS (loop5): mounting unchecked fs [ 269.594669][ T6740] NILFS (loop5): recovery complete [ 269.637749][ T6779] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 269.675399][ T6777] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.684423][ T6777] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.693262][ T6777] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.702040][ T6777] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.962517][ T6777] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 270.902537][ T6804] loop2: detected capacity change from 0 to 4096 [ 271.045551][ T6804] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 271.133270][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 272.503499][ T14] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 272.853146][ T14] usb 3-1: Using ep0 maxpacket: 32 [ 272.859764][ T14] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 273.145779][ T14] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 273.195451][ T14] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 273.245173][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 273.303344][ T14] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 273.359997][ T14] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 273.434718][ T14] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 273.507034][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.565213][ T14] usb 3-1: config 0 descriptor?? [ 273.600883][ T14] usb 3-1: can't set config #0, error -71 [ 273.632411][ T14] usb 3-1: USB disconnect, device number 8 [ 273.661444][ T4286] EXT4-fs (loop2): unmounting filesystem. [ 274.420830][ T6849] loop3: detected capacity change from 0 to 512 [ 274.543269][ T6849] EXT4-fs: inline encryption not supported [ 274.631892][ T6849] EXT4-fs (loop3): Test dummy encryption mode enabled [ 274.697976][ T6849] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 274.760984][ T6849] EXT4-fs error (device loop3): ext4_orphan_get:1435: comm syz.3.521: bad orphan inode 131083 [ 274.854865][ T6849] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 275.093506][ T6867] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 275.223315][ T14] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 275.255280][ T6867] CIFS: Attempting to mount \\127.0.0.1\share [ 275.444488][ T14] usb 3-1: not running at top speed; connect to a high speed hub [ 275.463421][ T14] usb 3-1: config 1 has an invalid descriptor of length 140, skipping remainder of the config [ 275.521857][ T14] usb 3-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 275.569368][ T14] usb 3-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 275.622288][ T14] usb 3-1: Product: syz [ 275.643317][ T14] usb 3-1: Manufacturer: syz [ 275.697448][ T14] usb 3-1: Found UVC 1.00 device syz (225a:e1d4) [ 275.737120][ T14] usb 3-1: No streaming interface found for terminal 2. [ 275.904415][ T6867] CIFS: VFS: cifs_mount failed w/return code = -112 [ 275.926042][ T4314] usb 3-1: USB disconnect, device number 9 [ 277.272055][ T6899] netlink: 'syz.5.534': attribute type 1 has an invalid length. [ 277.423675][ T6902] netlink: 28 bytes leftover after parsing attributes in process `syz.5.534'. [ 277.516384][ T6902] 8021q: adding VLAN 0 to HW filter on device bond1 [ 277.585240][ T6905] 8021q: adding VLAN 0 to HW filter on device bond1 [ 277.640850][ T6905] bond1: (slave geneve2): Error -99 calling set_mac_address [ 278.213471][ T6919] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 278.443446][ T6919] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 278.803725][ T6919] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 278.880465][ T6919] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 278.957399][ T6919] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 279.158898][ T6919] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 279.245967][ T6919] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 279.337648][ T6919] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 279.465049][ T6919] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 279.544282][ T6919] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 279.620044][ T6919] device bridge_slave_0 left promiscuous mode [ 279.675378][ T6919] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.752440][ T6919] device bridge_slave_1 left promiscuous mode [ 279.801089][ T6919] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.875784][ T6919] bond0: (slave bond_slave_0): Releasing backup interface [ 279.940133][ T6919] bond0: (slave bond_slave_1): Releasing backup interface [ 279.947588][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 280.308914][ T6919] team0: Port device team_slave_0 removed [ 280.406874][ T6919] team0: Port device team_slave_1 removed [ 280.451108][ T6919] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.500684][ T6919] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.558369][ T6919] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.632824][ T6919] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.760311][ T6935] netlink: 'syz.4.547': attribute type 4 has an invalid length. [ 280.910831][ T6956] netlink: 'syz.2.552': attribute type 1 has an invalid length. [ 280.997543][ T6958] netlink: 28 bytes leftover after parsing attributes in process `syz.2.552'. [ 281.054043][ T6958] 8021q: adding VLAN 0 to HW filter on device bond2 [ 281.140762][ T6961] 8021q: adding VLAN 0 to HW filter on device bond2 [ 281.184883][ T6963] netlink: 'syz.4.554': attribute type 1 has an invalid length. [ 281.203562][ T6961] bond2: (slave geneve2): Error -99 calling set_mac_address [ 281.576711][ T6967] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 281.674023][ T6967] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.268983][ T6967] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 283.433233][ T6968] netlink: 'syz.4.556': attribute type 9 has an invalid length. [ 284.609280][ T6866] EXT4-fs (loop3): unmounting filesystem. [ 284.990257][ T6998] device syzkaller0 entered promiscuous mode [ 285.034758][ T7000] netlink: 'syz.1.566': attribute type 1 has an invalid length. [ 285.081378][ T7003] netlink: 'syz.3.567': attribute type 1 has an invalid length. [ 285.140399][ T7003] device bond3 entered promiscuous mode [ 285.174427][ T7003] 8021q: adding VLAN 0 to HW filter on device bond3 [ 285.301654][ T7006] bond3: (slave veth3): Enslaving as an active interface with a down link [ 285.370840][ T7009] 8021q: adding VLAN 0 to HW filter on device bond3 [ 285.412350][ T7009] bond3: (slave gre1): The slave device specified does not support setting the MAC address [ 285.445815][ T7009] bond3: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 285.497472][ T7009] bond3: (slave gre1): making interface the new active one [ 285.523764][ T7009] device gre1 entered promiscuous mode [ 285.549494][ T7009] bond3: (slave gre1): Enslaving as an active interface with an up link [ 285.604574][ T7000] bond3: (slave veth5): Enslaving as an active interface with a down link [ 285.658897][ T7011] netlink: 4 bytes leftover after parsing attributes in process `syz.3.567'. [ 285.998848][ T4314] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 286.125715][ T7011] bond3 (unregistering): (slave gre1): Releasing backup interface [ 286.143512][ T7011] device gre1 left promiscuous mode [ 286.170668][ T7011] bond3 (unregistering): Released all slaves [ 286.194687][ T4314] usb 6-1: config 0 has an invalid interface number: 11 but max is 0 [ 286.209782][ T4314] usb 6-1: config 0 has no interface number 0 [ 286.225051][ T4314] usb 6-1: config 0 interface 11 altsetting 253 endpoint 0x7 has an invalid bInterval 129, changing to 11 [ 286.249995][ T4314] usb 6-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 286.279240][ T4314] usb 6-1: config 0 interface 11 altsetting 253 endpoint 0x87 has invalid wMaxPacketSize 0 [ 286.301871][ T4314] usb 6-1: config 0 interface 11 has no altsetting 0 [ 286.317936][ T4314] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 286.343184][ T4314] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.363213][ T7012] netlink: 28 bytes leftover after parsing attributes in process `syz.1.566'. [ 286.377770][ T4314] usb 6-1: config 0 descriptor?? [ 286.390862][ T7012] 8021q: adding VLAN 0 to HW filter on device bond3 [ 286.424995][ T4314] keyspan 6-1:0.11: Keyspan 2 port adapter converter detected [ 286.465891][ T4314] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 81 [ 286.512161][ T4314] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 82 [ 286.559081][ T4314] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 1 [ 286.598938][ T4314] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 2 [ 286.645948][ T4314] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 85 [ 286.677104][ T4314] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 5 [ 286.717259][ T4314] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 286.753104][ T7018] netlink: 'syz.4.568': attribute type 1 has an invalid length. [ 286.783585][ T7020] netlink: 28 bytes leftover after parsing attributes in process `syz.4.568'. [ 286.794205][ T4314] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 83 [ 286.802019][ T4314] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 84 [ 286.839235][ T4314] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 3 [ 286.857745][ T4314] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 4 [ 286.877456][ T4314] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 86 [ 286.903874][ T4314] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 6 [ 286.950578][ T4314] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 287.013759][ T4314] usb 6-1: USB disconnect, device number 2 [ 287.044281][ T7040] fuse: Unknown parameter 'group_i' [ 287.104603][ T4314] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 287.175502][ T4314] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 287.247727][ T4314] keyspan 6-1:0.11: device disconnected [ 287.277917][ T7042] netlink: 28 bytes leftover after parsing attributes in process `syz.2.574'. [ 291.794803][ T7068] loop5: detected capacity change from 0 to 64 [ 293.932449][ T7088] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 293.941457][ T7088] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 293.949010][ T7088] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 293.971265][ T7088] device bond1 left promiscuous mode [ 293.976705][ T7088] device ip6gre1 left promiscuous mode [ 294.102321][ T4352] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 294.303692][ T7094] Bluetooth: MGMT ver 1.22 [ 294.355199][ T7096] netlink: 'syz.3.589': attribute type 1 has an invalid length. [ 294.440482][ T4283] Bluetooth: hci4: unexpected subevent 0x01 length: 19 > 18 [ 294.452139][ T4283] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 294.663296][ T4352] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 295.364109][ T7127] tipc: Started in network mode [ 295.404391][ T7127] tipc: Node identity c6a074d645a7, cluster identity 4711 [ 295.450963][ T7127] tipc: Enabled bearer , priority 0 [ 295.513457][ T7129] device syzkaller0 entered promiscuous mode [ 295.560393][ T7127] tipc: Resetting bearer [ 295.604594][ T7126] tipc: Resetting bearer [ 295.761620][ T7126] tipc: Disabling bearer [ 296.333542][ T4283] Bluetooth: hci0: command 0x0c1a tx timeout [ 296.339803][ T4285] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 297.073984][ T7138] fuse: Bad value for 'fd' [ 297.853418][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 304.079714][ T7192] loop2: detected capacity change from 0 to 128 [ 305.549442][ T7205] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 305.794386][ T7210] overlayfs: failed to clone upperpath [ 306.119506][ T7213] device geneve2 entered promiscuous mode [ 306.693562][ T7226] netlink: 'syz.5.628': attribute type 11 has an invalid length. [ 307.021208][ T26] audit: type=1800 audit(1791039522.932:48): pid=7233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.630" name="protocol" dev="configfs" ino=43431 res=0 errno=0 [ 307.052893][ T26] audit: type=1800 audit(1791039522.962:49): pid=7233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.630" name="UDC" dev="configfs" ino=43432 res=0 errno=0 [ 307.065316][ T7233] Config c/1 of g1 needs at least one function. [ 307.119117][ T7233] udc dummy_udc.0: failed to start g1: -22 [ 307.152909][ T7233] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 307.194612][ T7233] UDC core: g1: couldn't find an available UDC or it's busy [ 314.109687][ T7280] No such timeout policy "syz1" [ 315.712803][ T7285] netlink: 'syz.5.644': attribute type 1 has an invalid length. [ 316.835808][ T7289] 8021q: adding VLAN 0 to HW filter on device bond3 [ 316.894755][ T7289] bond2: (slave bond3): making interface the new active one [ 316.932863][ T7289] bond2: (slave bond3): Enslaving as an active interface with an up link [ 317.008575][ T7292] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 317.057279][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.063824][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.347566][ T7296] jffs2: notice: (7296) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 318.071596][ T7313] __vm_enough_memory: pid: 7313, comm: syz.2.653, no enough memory for the allocation [ 321.924565][ T7341] loop2: detected capacity change from 0 to 2048 [ 321.952785][ T7341] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 321.971344][ T7341] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 322.872155][ T7353] device lo entered promiscuous mode [ 323.252307][ T7353] device tunl0 entered promiscuous mode [ 323.284163][ T7353] device gre0 entered promiscuous mode [ 326.995252][ T7353] device gretap0 entered promiscuous mode [ 327.106392][ T7353] device erspan0 entered promiscuous mode [ 327.196321][ T7353] device ip_vti0 entered promiscuous mode [ 327.393950][ T7353] device ip6_vti0 entered promiscuous mode [ 327.679898][ T7371] nftables ruleset with unbound set [ 327.822252][ T7353] device sit0 entered promiscuous mode [ 328.155790][ T7353] device ip6tnl0 entered promiscuous mode [ 328.353914][ T7353] device ip6gre0 entered promiscuous mode [ 328.447091][ T7353] device syz_tun entered promiscuous mode [ 328.553525][ T7353] device ip6gretap0 entered promiscuous mode [ 328.637822][ T7353] bridge0: port 3(veth1_to_bond) entered disabled state [ 328.645171][ T7353] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.652486][ T7353] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.682440][ T7389] futex_wake_op: syz.5.673 tries to shift op by 144; fix this program [ 328.719964][ T7389] syz.5.673 sent an empty control message without MSG_MORE. [ 328.741458][ T7353] device bridge0 entered promiscuous mode [ 328.801461][ T7353] device vcan0 entered promiscuous mode [ 328.829276][ T7353] device bond0 entered promiscuous mode [ 328.838277][ T7391] raw_sendmsg: syz.3.674 forgot to set AF_INET. Fix it! [ 328.855477][ T7353] device bond_slave_0 entered promiscuous mode [ 328.882255][ T7353] device bond_slave_1 entered promiscuous mode [ 328.987870][ T7353] device team0 entered promiscuous mode [ 328.994248][ T7353] device team_slave_0 entered promiscuous mode [ 329.019583][ T7353] device team_slave_1 entered promiscuous mode [ 329.122073][ T7353] device dummy0 entered promiscuous mode [ 329.262473][ T7353] device nlmon0 entered promiscuous mode [ 329.293960][ T7353] device caif0 entered promiscuous mode [ 329.325510][ T7353] device batadv0 entered promiscuous mode [ 329.846265][ T7353] device vxcan0 entered promiscuous mode [ 329.874713][ T7353] device vxcan1 entered promiscuous mode [ 329.901129][ T7353] device veth0 entered promiscuous mode [ 329.954529][ T7353] device veth1 entered promiscuous mode [ 330.010411][ T7353] device wg0 entered promiscuous mode [ 330.053728][ T7353] device wg1 entered promiscuous mode [ 330.091509][ T7353] device wg2 entered promiscuous mode [ 330.136915][ T7353] device veth0_to_bridge entered promiscuous mode [ 330.323371][ T7353] device veth1_to_bridge entered promiscuous mode [ 330.405472][ T7353] device veth0_to_bond entered promiscuous mode [ 330.536151][ T7353] device veth0_to_team entered promiscuous mode [ 330.610785][ T7353] device veth1_to_team entered promiscuous mode [ 330.694553][ T7353] device veth0_to_batadv entered promiscuous mode [ 330.712256][ T7353] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.755125][ T7353] device batadv_slave_0 entered promiscuous mode [ 330.832148][ T7353] device veth1_to_batadv entered promiscuous mode [ 330.852535][ T7353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.899064][ T7353] device batadv_slave_1 entered promiscuous mode [ 330.905898][ T26] audit: type=1800 audit(1791039546.822:50): pid=7400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.678" name="bus" dev="ramfs" ino=43883 res=0 errno=0 [ 330.964118][ T7353] device xfrm0 entered promiscuous mode [ 331.007460][ T7353] device veth0_to_hsr entered promiscuous mode [ 331.086226][ T7353] device veth1_to_hsr entered promiscuous mode [ 331.133229][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 331.170690][ T7353] device hsr0 entered promiscuous mode [ 331.221740][ T7353] device veth1_virt_wifi entered promiscuous mode [ 331.253400][ T7353] device veth0_virt_wifi entered promiscuous mode [ 331.262141][ T7353] device virt_wifi0 entered promiscuous mode [ 331.348111][ T7353] device vlan0 entered promiscuous mode [ 331.371495][ T7353] device vlan1 entered promiscuous mode [ 331.413522][ T7353] device macvlan0 entered promiscuous mode [ 331.460304][ T7353] device macvlan1 entered promiscuous mode [ 331.474642][ T7353] device ipvlan0 entered promiscuous mode [ 331.497513][ T7353] device ipvlan1 entered promiscuous mode [ 331.635501][ T7353] device macvtap0 entered promiscuous mode [ 331.703709][ T7353] device macsec0 entered promiscuous mode [ 331.760066][ T7353] device geneve0 entered promiscuous mode [ 331.790345][ T7353] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.799673][ T7353] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.808768][ T7353] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.818129][ T7353] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.827372][ T7353] device geneve1 entered promiscuous mode [ 331.857779][ T7353] device netdevsim0 entered promiscuous mode [ 331.880218][ T7353] device netdevsim1 entered promiscuous mode [ 331.902180][ T7353] device netdevsim2 entered promiscuous mode [ 331.930519][ T7353] device netdevsim3 entered promiscuous mode [ 331.959450][ T7353] device wlan0 entered promiscuous mode [ 331.982913][ T7353] device wlan1 entered promiscuous mode [ 332.005924][ T7353] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.014987][ T7353] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.024200][ T7353] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.033211][ T7353] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.042505][ T7353] device  entered promiscuous mode [ 332.065074][ T7353] device sit1 entered promiscuous mode [ 332.070662][ T7353] device bond1 entered promiscuous mode [ 332.077187][ T7353] device ip6gre1 entered promiscuous mode [ 332.091979][ T7353] device bond2 entered promiscuous mode [ 332.104827][ T7353] device sit2 entered promiscuous mode [ 332.136296][ T7353] device syztnl2 entered promiscuous mode [ 332.175566][ T7415] device syzkaller0 entered promiscuous mode [ 334.623587][ T7446] futex_wake_op: syz.2.690 tries to shift op by 144; fix this program [ 334.671937][ T7448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.689'. [ 334.953453][ T7457] loop2: detected capacity change from 0 to 128 [ 334.960814][ T7456] using random self ethernet address [ 335.202963][ T7456] using random host ethernet address [ 335.766486][ T7471] futex_wake_op: syz.1.698 tries to shift op by 144; fix this program [ 336.050577][ T7479] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4278] was attempted by " [ 341.144568][ T7520] netlink: 20 bytes leftover after parsing attributes in process `syz.4.713'. [ 343.542018][ T7538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.719'. [ 343.551812][ T7538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.719'. [ 343.560876][ T7538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.719'. [ 343.569957][ T7538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.719'. [ 343.578988][ T7538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.719'. [ 350.519211][ T7562] device syzkaller0 entered promiscuous mode [ 350.634586][ T7559] tipc: Enabled bearer , priority 0 [ 350.683805][ T7559] tipc: Resetting bearer [ 350.692992][ T7556] tipc: Resetting bearer [ 351.151271][ T7556] tipc: Disabling bearer [ 352.513131][ T4314] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 353.037327][ T7592] netlink: 4 bytes leftover after parsing attributes in process `syz.5.733'. [ 353.073601][ T4314] usb 3-1: Using ep0 maxpacket: 8 [ 353.080675][ T4314] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 353.116074][ T4314] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 353.160905][ T4314] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 353.228064][ T4314] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 353.267959][ T4314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.326521][ T4314] usbtmc 3-1:16.0: bulk endpoints not found [ 356.539641][ T4285] Bluetooth: hci0: hcon ffff88807c1fa000 sent 1 < count 1025 [ 356.626131][ T4319] usb 3-1: USB disconnect, device number 10 [ 359.693803][ T7623] netlink: 68 bytes leftover after parsing attributes in process `syz.4.727'. [ 362.766523][ T7653] netlink: 'syz.2.751': attribute type 4 has an invalid length. [ 363.287834][ T7661] "syz.3.752" (7661) uses obsolete ecb(arc4) skcipher [ 363.581494][ T7665] loop2: detected capacity change from 0 to 512 [ 363.625295][ T7665] EXT4-fs: Ignoring removed i_version option [ 363.788235][ T7665] EXT4-fs: Ignoring removed oldalloc option [ 363.896399][ T7665] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 364.045498][ T4286] EXT4-fs (loop2): unmounting filesystem. [ 364.099220][ T7675] device syzkaller0 entered promiscuous mode [ 367.420891][ T26] audit: type=1804 audit(1791039583.332:51): pid=7688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.762" name="bus" dev="ramfs" ino=45525 res=1 errno=0 [ 367.446061][ T26] audit: type=1804 audit(1791039583.332:52): pid=7688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.762" name="bus" dev="ramfs" ino=45525 res=1 errno=0 [ 369.199066][ T7694] netlink: 24 bytes leftover after parsing attributes in process `syz.2.764'. [ 369.414536][ T7697] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 376.107470][ T7723] netlink: 'syz.5.770': attribute type 1 has an invalid length. [ 378.504122][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.510514][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.908455][ T4283] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 378.919078][ T4283] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 378.931066][ T4283] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 378.939279][ T4283] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 378.947223][ T4283] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 378.954602][ T4283] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 379.712471][ T7738] chnl_net:caif_netlink_parms(): no params data found [ 380.328259][ T7738] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.359507][ T7738] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.403348][ T7738] device bridge_slave_0 entered promiscuous mode [ 380.452960][ T7738] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.478675][ T7738] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.521933][ T7738] device bridge_slave_1 entered promiscuous mode [ 380.775682][ T7738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.836262][ T7738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.053590][ T4283] Bluetooth: hci1: command 0x0409 tx timeout [ 381.085202][ T7738] team0: Port device team_slave_0 added [ 381.144061][ T7738] team0: Port device team_slave_1 added [ 382.883713][ T7738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.911794][ T7738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.100155][ T7738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.133180][ T4283] Bluetooth: hci1: command 0x041b tx timeout [ 383.175553][ T7738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.243035][ T7738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.359676][ T7738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.874173][ T7738] device hsr_slave_0 entered promiscuous mode [ 383.908723][ T7738] device hsr_slave_1 entered promiscuous mode [ 383.919251][ T7738] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 383.930946][ T7738] Cannot create hsr debugfs directory [ 383.944592][ T7765] tipc: New replicast peer: 172.20.20.187 [ 383.962373][ T7765] tipc: Enabled bearer , priority 10 [ 384.353048][ T7738] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 384.421537][ T7738] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 384.441319][ T7738] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 384.464433][ T7738] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 384.570193][ T7738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.599321][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 384.617206][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 384.634334][ T7738] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.653614][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 384.670858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 384.679796][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.686980][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.722287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 384.739597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 384.751846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 384.766623][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.773803][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.787288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 384.800273][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 384.832588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 384.847405][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 384.865704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 384.882698][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 384.899909][ T7738] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 384.922220][ T7738] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 384.948351][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 384.962530][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 384.972721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 384.990582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 385.001271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 385.028602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 385.102441][ T14] tipc: Node number set to 634615151 [ 385.119298][ T7778] loop5: detected capacity change from 0 to 128 [ 385.213257][ T4283] Bluetooth: hci1: command 0x040f tx timeout [ 385.787946][ T4283] Bluetooth: Wrong link type (-22) [ 385.889075][ T14] ------------[ cut here ]------------ [ 385.895181][ T14] sysfs group 'byte_queue_limits' not found for kobject 'tx-0' [ 385.926758][ T14] WARNING: CPU: 0 PID: 14 at fs/sysfs/group.c:280 sysfs_remove_group+0x177/0x290 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 385.936303][ T14] Modules linked in: [ 385.940251][ T14] CPU: 0 PID: 14 Comm: kworker/0:1 Not tainted syzkaller #0 [ 385.948037][ T14] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 385.958382][ T14] Workqueue: events delete_netdev [ 385.963521][ T14] RIP: 0010:sysfs_remove_group+0x177/0x290 [ 385.969402][ T14] Code: 8b 1b 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 9b 27 cb ff 49 8b 17 48 c7 c7 a0 72 9c 8a 48 89 de e8 29 40 45 ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 d3 cc 79 ff [ 385.989134][ T14] RSP: 0018:ffffc900001378e0 EFLAGS: 00010246 [ 385.995306][ T14] RAX: 8309b59a22b11100 RBX: ffffffff8b8c4d00 RCX: ffff88813fec9e00 [ 386.003394][ T14] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 386.011452][ T14] RBP: 000000000000006d R08: ffff8880b8e279db R09: 1ffff110171c4f3b [ 386.019534][ T14] R10: dffffc0000000000 R11: ffffed10171c4f3c R12: 1ffffffff17188b4 [ 386.027605][ T14] R13: dffffc0000000000 R14: ffff88807e37dbc8 R15: ffff8880294d3820 [ 386.035674][ T14] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 386.044698][ T14] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 386.051340][ T14] CR2: 00007f04b1d556c8 CR3: 0000000063be3000 CR4: 00000000003506f0 [ 386.059431][ T14] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 386.067479][ T14] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 386.075552][ T14] Call Trace: [ 386.078867][ T14] [ 386.081838][ T14] ? netdev_queue_update_kobjects+0x3a2/0x480 [ 386.088021][ T14] netdev_queue_update_kobjects+0x3dd/0x480 [ 386.094005][ T14] netdev_unregister_kobject+0x104/0x250 [ 386.099690][ T14] unregister_netdevice_many_notify+0x14b6/0x1990 [ 386.106230][ T14] ? unregister_netdevice_many+0x20/0x20 [ 386.111920][ T14] ? __mutex_lock+0x1bf/0xae0 [ 386.116760][ T14] unregister_netdevice_queue+0x2e5/0x330 [ 386.122538][ T14] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 386.128650][ T14] ? list_netdevice+0x640/0x640 [ 386.133592][ T14] ? read_lock_is_recursive+0x10/0x10 [ 386.139020][ T14] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 386.145044][ T14] ? _raw_spin_unlock+0x40/0x40 [ 386.149947][ T14] ? process_one_work+0x7b4/0x1160 [ 386.155166][ T14] ? process_one_work+0x7b4/0x1160 [ 386.160327][ T14] lowpan_unregister_netdev+0x18/0x20 [ 386.165825][ T14] unregister_dev+0x70/0x1a0 [ 386.170464][ T14] ? process_one_work+0x7b4/0x1160 [ 386.175685][ T14] process_one_work+0x8ab/0x1160 [ 386.180694][ T14] ? worker_detach_from_pool+0x240/0x240 [ 386.186448][ T14] ? _raw_spin_lock_irq+0xb7/0xf0 [ 386.191562][ T14] ? _raw_spin_lock_irqsave+0x100/0x100 [ 386.197243][ T14] ? wq_worker_running+0x97/0x190 [ 386.202324][ T14] worker_thread+0xaf5/0x12a0 [ 386.207124][ T14] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 386.213121][ T14] kthread+0x29d/0x330 [ 386.217238][ T14] ? worker_clr_flags+0x1a0/0x1a0 [ 386.222315][ T14] ? kthread_blkcg+0xd0/0xd0 [ 386.227023][ T14] ret_from_fork+0x1f/0x30 [ 386.231517][ T14] [ 386.234670][ T14] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 386.241990][ T14] CPU: 0 PID: 14 Comm: kworker/0:1 Not tainted syzkaller #0 [ 386.249317][ T14] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 386.259411][ T14] Workqueue: events delete_netdev [ 386.264516][ T14] Call Trace: [ 386.267824][ T14] [ 386.270794][ T14] dump_stack_lvl+0x188/0x24e [ 386.275537][ T14] ? memcpy+0x3c/0x60 [ 386.279584][ T14] ? show_regs_print_info+0x12/0x12 [ 386.284824][ T14] ? load_image+0x410/0x410 [ 386.289419][ T14] panic+0x2d3/0x710 [ 386.293372][ T14] ? bpf_jit_dump+0xd0/0xd0 [ 386.297937][ T14] ? ret_from_fork+0x1f/0x30 [ 386.302613][ T14] __warn+0x2f8/0x4f0 [ 386.306650][ T14] ? sysfs_remove_group+0x177/0x290 [ 386.311900][ T14] ? sysfs_remove_group+0x177/0x290 [ 386.317150][ T14] report_bug+0x2ba/0x4f0 [ 386.321545][ T14] ? sysfs_remove_group+0x177/0x290 [ 386.326791][ T14] handle_bug+0x3a/0x70 [ 386.330999][ T14] exc_invalid_op+0x16/0x40 [ 386.335544][ T14] asm_exc_invalid_op+0x16/0x20 [ 386.340434][ T14] RIP: 0010:sysfs_remove_group+0x177/0x290 [ 386.346300][ T14] Code: 8b 1b 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 9b 27 cb ff 49 8b 17 48 c7 c7 a0 72 9c 8a 48 89 de e8 29 40 45 ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 d3 cc 79 ff [ 386.365937][ T14] RSP: 0018:ffffc900001378e0 EFLAGS: 00010246 [ 386.372034][ T14] RAX: 8309b59a22b11100 RBX: ffffffff8b8c4d00 RCX: ffff88813fec9e00 [ 386.380029][ T14] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 386.388043][ T14] RBP: 000000000000006d R08: ffff8880b8e279db R09: 1ffff110171c4f3b [ 386.396036][ T14] R10: dffffc0000000000 R11: ffffed10171c4f3c R12: 1ffffffff17188b4 [ 386.404035][ T14] R13: dffffc0000000000 R14: ffff88807e37dbc8 R15: ffff8880294d3820 [ 386.412044][ T14] ? netdev_queue_update_kobjects+0x3a2/0x480 [ 386.418169][ T14] netdev_queue_update_kobjects+0x3dd/0x480 [ 386.424103][ T14] netdev_unregister_kobject+0x104/0x250 [ 386.429767][ T14] unregister_netdevice_many_notify+0x14b6/0x1990 [ 386.436249][ T14] ? unregister_netdevice_many+0x20/0x20 [ 386.441942][ T14] ? __mutex_lock+0x1bf/0xae0 [ 386.446670][ T14] unregister_netdevice_queue+0x2e5/0x330 [ 386.452428][ T14] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 386.458447][ T14] ? list_netdevice+0x640/0x640 [ 386.463348][ T14] ? read_lock_is_recursive+0x10/0x10 [ 386.468764][ T14] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 386.474682][ T14] ? _raw_spin_unlock+0x40/0x40 [ 386.479555][ T14] ? process_one_work+0x7b4/0x1160 [ 386.484695][ T14] ? process_one_work+0x7b4/0x1160 [ 386.489861][ T14] lowpan_unregister_netdev+0x18/0x20 [ 386.495258][ T14] unregister_dev+0x70/0x1a0 [ 386.499872][ T14] ? process_one_work+0x7b4/0x1160 [ 386.505015][ T14] process_one_work+0x8ab/0x1160 [ 386.509995][ T14] ? worker_detach_from_pool+0x240/0x240 [ 386.515684][ T14] ? _raw_spin_lock_irq+0xb7/0xf0 [ 386.520737][ T14] ? _raw_spin_lock_irqsave+0x100/0x100 [ 386.526318][ T14] ? wq_worker_running+0x97/0x190 [ 386.531370][ T14] worker_thread+0xaf5/0x12a0 [ 386.536081][ T14] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 386.542024][ T14] kthread+0x29d/0x330 [ 386.546132][ T14] ? worker_clr_flags+0x1a0/0x1a0 [ 386.551191][ T14] ? kthread_blkcg+0xd0/0xd0 [ 386.555822][ T14] ret_from_fork+0x1f/0x30 [ 386.560284][ T14] [ 386.563902][ T14] Kernel Offset: disabled [ 386.568343][ T14] Rebooting in 86400 seconds..