last executing test programs: 19m26.676077866s ago: executing program 3 (id=963): fanotify_init(0x4, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0x8, &(0x7f0000000380)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$FUSE(r3, &(0x7f00000040c0)={0x2020}, 0x2020) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x48, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'H.245\x00'}}]}, 0x48}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x7}, [@tail_call={{}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r7, 0x0, 0x0}, 0x10) sendto$inet6(r6, 0x0, 0x0, 0x24008000, &(0x7f00000001c0)={0xa, 0x2, 0x20398, @empty, 0xffffffff}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000080)='vegas', 0x5) shutdown(r6, 0x1) 19m22.821109427s ago: executing program 3 (id=966): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x8c, 0x200) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0}, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40046f41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r3, &(0x7f0000001580)={&(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, 0x0}, 0x2106) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = dup3(r3, 0xffffffffffffffff, 0x0) flock(r0, 0x8) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x20) r5 = io_uring_setup(0x581a, &(0x7f0000000000)={0x0, 0x3d53, 0x2, 0x5, 0x391}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r5, 0x13, &(0x7f0000000400)=[0xe758, 0xf8de], 0x2) sendmmsg$inet6(r4, 0x0, 0x0, 0x810) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) setsockopt(r6, 0x84, 0x81, 0x0, 0x0) mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socket$netlink(0x10, 0x3, 0x15) 19m21.050032765s ago: executing program 3 (id=971): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_TSC(0x1a, 0x1) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r3, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @mcast2}, 0x1c) connect$inet6(r3, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff74", 0x10, 0x8000, 0x0, 0x0) recvmmsg(r3, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0], 0x1, 0x194, &(0x7f0000000640)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) read(r4, 0x0, 0x0) read$FUSE(r4, &(0x7f0000003f00)={0x2020}, 0x2020) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) setgroups(0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000480), 0x8000, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noxattr}], [{@uid_eq}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@fsname={'fsname', 0x3d, 'smaps\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x00'}}, {@appraise_type}, {@obj_type={'obj_type', 0x3d, '\x00'}}]}}) setreuid(0xee01, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 19m17.421972214s ago: executing program 3 (id=975): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x6a76) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb4c, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000100)={0x0, 0x4, 0x9, 0x3, 0xf, 0xa, 0xfffffffc}) r2 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6}, {0x0, 0xfff1}, {0x0, 0x9}}}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r3) sendmsg$TIPC_NL_MON_SET(r3, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b"], 0x50) socket$igmp(0x2, 0x3, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) syz_mount_image$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x208402, 0x0, 0x0, 0x0, 0x0) write$sysctl(0xffffffffffffffff, &(0x7f0000000580)='1\x00', 0x2) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, 0x0, 0x190) 19m10.00814156s ago: executing program 3 (id=989): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000200)="3a85429c498eb5954dae45976c5d7843330ecc0d", 0x14}], 0x1, &(0x7f00000002c0)=ANY=[], 0x18, 0x24004000}, 0xc800) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(r1, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$TIOCL_SETVESABLANK(r6, 0x560e, &(0x7f0000000140)) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x64, 0x0, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0x64}}, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00', 0x4}) write$sndseq(r9, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) shutdown(r7, 0x0) ioctl$TIOCL_BLANKSCREEN(r6, 0x541c, &(0x7f0000000040)) 19m8.088785895s ago: executing program 3 (id=990): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdc, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) rt_sigqueueinfo(0x0, 0x6, &(0x7f0000000080)={0x13, 0x5, 0x28}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) 18m52.571511542s ago: executing program 32 (id=990): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdc, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) rt_sigqueueinfo(0x0, 0x6, &(0x7f0000000080)={0x13, 0x5, 0x28}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) 8m1.393051949s ago: executing program 4 (id=2858): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x6, 0xfffffffffffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 8m0.084389304s ago: executing program 4 (id=2861): fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x24008080) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x200000, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, 0x0, 0x0) 7m59.830213197s ago: executing program 4 (id=2863): io_uring_setup(0x667, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x0, 0x8000}) 7m50.952347658s ago: executing program 4 (id=2879): openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@block_validity}, {}, {@nombcache}, {@inode_readahead_blks}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpjquota}]}, 0x3, 0x57b, &(0x7f0000000800)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/disk', 0x20202, 0x112) socket(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000140)=ANY=[@ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) 7m50.363892197s ago: executing program 4 (id=2883): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_create(0x1, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 7m48.243621083s ago: executing program 4 (id=2885): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$OCFS2_IOC_RESVSP64(r0, 0x4030582a, &(0x7f00000001c0)={0x2, 0x0, 0x7, 0x6, 0x1, 0x2}) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x15, 0x5, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}}, {{@in=@dev, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x4}}, 0xe8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@mpls_delroute={0x24, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, {0x97c, 0x0, 0x1}}]}, 0x24}}, 0x4) 7m31.705503613s ago: executing program 33 (id=2885): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$OCFS2_IOC_RESVSP64(r0, 0x4030582a, &(0x7f00000001c0)={0x2, 0x0, 0x7, 0x6, 0x1, 0x2}) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x15, 0x5, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}}, {{@in=@dev, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x4}}, 0xe8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@mpls_delroute={0x24, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, {0x97c, 0x0, 0x1}}]}, 0x24}}, 0x4) 5.534881455s ago: executing program 2 (id=3926): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8041, 0x10c) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) fchown(r0, 0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f0000000bc0)={0x2020}, 0x2020) 5.397893712s ago: executing program 2 (id=3928): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000400)={{0x7, 0x2}, 0x0, 0xfffffeff, 0x7fffffff, {0x80, 0xe}, 0x3, 0x53d}) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000340)='./file0\x00', 0x3000010, &(0x7f00000000c0)={[{@adinicb}, {@unhide}, {@uid}, {@umask={'umask', 0x3d, 0x3d}}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@gid_forget}, {@shortad}, {@uid_ignore}, {@adinicb}]}, 0x1, 0xc65, &(0x7f00000022c0)="$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") openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000080)={[{@errors_remount}, {@mblk_io_submit}, {@inlinecrypt}, {@test_dummy_encryption_v1}, {@barrier}, {@mblk_io_submit}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000140)=@v2={0x2, @aes256, 0x1, '\x00', @b}) connect$inet(0xffffffffffffffff, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r2, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r3, r2, 0x0, 0x578410eb) 5.284870947s ago: executing program 5 (id=3931): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f00000000c0)='sysfs\x00', 0x989, 0x0) 4.560381833s ago: executing program 5 (id=3935): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x4004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) r7 = fsopen(&(0x7f0000000280)='ext4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) fsopen(&(0x7f0000000180)='omfs\x00', 0x1) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 4.336627594s ago: executing program 2 (id=3937): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000500)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000540)={0x48, 0xa, r3, 0x0, r4}) 3.343031464s ago: executing program 2 (id=3941): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0xb, &(0x7f00000001c0)={0x3, 0x8}, &(0x7f0000000300)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00'}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 3.342169964s ago: executing program 5 (id=3942): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) syz_read_part_table(0x5a9, &(0x7f0000000000)="$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") write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x12, "b0bf6ebb48e700"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) 3.175818192s ago: executing program 2 (id=3943): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9547ed387dbe9abc86a457991", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x300, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2, 0x7ffffff, 0x500}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0x4e) 2.787605701s ago: executing program 2 (id=3948): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.757304233s ago: executing program 1 (id=3949): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x101002, 0x0) sendfile(r1, r2, 0x0, 0x20fffe82) truncate(&(0x7f00000000c0)='./file1\x00', 0x6e3) 2.589068091s ago: executing program 0 (id=3950): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg(r0, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r0, &(0x7f0000000a00)={0x1, {&(0x7f0000000080)=""/52, 0x34, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000006c0)={0x2, 0x0, {&(0x7f0000000340)=""/69, 0x45, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000002b00)={0x2, 0x0, {&(0x7f00000003c0)=""/14, 0xe, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg(r0, &(0x7f0000000640)={0x1, {&(0x7f0000000400)=""/234, 0xfede, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x48) 2.465713328s ago: executing program 5 (id=3951): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0xb, &(0x7f00000001c0)={0x3, 0x8}, &(0x7f0000000300)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00'}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2.422997659s ago: executing program 0 (id=3952): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nojournal_checksum}, {@bh}, {@test_dummy_encryption_v1}]}, 0xf7, 0x485, &(0x7f0000001040)="$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") symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x210a055, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) 2.142375783s ago: executing program 5 (id=3953): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4006, 0x9}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 1.981890301s ago: executing program 0 (id=3954): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x400}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r3, r2, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) close(r4) 1.816915919s ago: executing program 1 (id=3955): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.706587275s ago: executing program 1 (id=3956): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0xb, &(0x7f00000001c0)={0x3, 0x8}, &(0x7f0000000300)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x1, 0x0, 0x10000202, 0xfff, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x272, 0xb, 0x0, 0x9, 0x3, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x7, 0x4, 0x0, 0x0, 0x0, 0x81, 0x0, 0x10, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1b, 0xfffffffc, 0x3, 0x0, 0x7, 0x0, 0xb97, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x7, 0x0, 0xc, 0x10, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0xfffffffd, 0x3ff, 0x0, 0x80003, 0x0, 0x0, 0x1, 0x0, 0x400, 0x0, 0x0, 0xffffffff, 0x40, 0x0, 0xfffffffd, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x81, 0x20, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x440000, 0x0, 0x2, 0x800000, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xae, 0x400000, 0x0, 0xfffffffc, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x2, 0x0, 0x0, 0x100001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x0, 0x6, 0x0, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff, 0x0, 0x0, 0x0, 0x0, 0x8d4}, 0x0, 0x7f}}]}}]}, 0x45c}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000240)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "03000a", 0x18, 0x0, 0x0, @private0, @local, {[@hopopts={0x3a, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x6}]}]}}}}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f00000000c0)=@tcp6=r3, 0x1}, 0x20) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000280), 0x2000001, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x6003, 0x135) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000040)=r0) openat$kvm(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000004c0)={0x0, &(0x7f00000017c0)}) geteuid() syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f00000004c0)={[{@noblock_validity}, {@mblk_io_submit}, {@journal_dev={'journal_dev', 0x3d, 0x1ff}}, {@grpid}, {@data_ordered}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@quota}, {@init_itable_val={'init_itable', 0x3d, 0x5}}]}, 0x1, 0x47a, &(0x7f0000000ac0)="$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") 1.614042559s ago: executing program 5 (id=3957): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000080)={[{@usebackuproot}, {@nodatasum}, {@ssd_spread}, {@user_subvol_rm}, {@flushoncommit}, {@compress_force}, {@acl}, {@nodiscard}]}, 0xfb, 0x50f9, &(0x7f0000005140)="$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") syz_usb_connect(0x0, 0x3f, 0x0, 0x0) r0 = open(&(0x7f0000000280)='./file1\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) 741.332873ms ago: executing program 1 (id=3958): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 696.977105ms ago: executing program 0 (id=3959): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x439, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0xb081}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x7}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4040844) sendto$packet(r0, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @local}, 0x14) 583.745621ms ago: executing program 1 (id=3960): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xffffffff}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000002c0)={0x0, 0x3, 0x4, [0x9, 0x5, 0x8, 0x81]}, 0x10) 310.480574ms ago: executing program 0 (id=3961): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0xb, &(0x7f00000001c0)={0x3, 0x8}, &(0x7f0000000300)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00'}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 253.797307ms ago: executing program 1 (id=3962): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xffe0}, {}, {0x6, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_POLICE={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc858}, 0x40400c0) 0s ago: executing program 0 (id=3963): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000002030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000060000000006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000005c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x80, 0x1c, {0x2, 0x94c7, 0x1000, 0x4, 0x101, 0x3bbb, 0x1, 0x0, 0xfc00, 0x100, 0x8000, 0x40}}, &(0x7f0000000440)={0x20, 0x85, 0x4, 0x6}, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) kernel console output (not intermixed with test programs): ous mode [ 732.995261][ T2898] hsr_slave_1: left promiscuous mode [ 733.004579][ T2898] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 733.014918][ T2898] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 733.022680][ T2898] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 733.034395][ T2898] bridge_slave_1: left allmulticast mode [ 733.041329][ T2898] bridge_slave_1: left promiscuous mode [ 733.049624][ T2898] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.065652][ T2898] bridge_slave_0: left allmulticast mode [ 733.071588][ T2898] bridge_slave_0: left promiscuous mode [ 733.077555][ T2898] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.126697][ T2898] veth1_macvtap: left promiscuous mode [ 733.133522][ T5777] Bluetooth: hci1: command tx timeout [ 733.140326][ T2898] veth0_macvtap: left promiscuous mode [ 733.146186][ T2898] veth1_vlan: left promiscuous mode [ 733.153253][ T2898] veth0_vlan: left promiscuous mode [ 734.170204][ T2898] team0 (unregistering): Port device team_slave_1 removed [ 734.241506][ T2898] team0 (unregistering): Port device team_slave_0 removed [ 734.307164][ T2898] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 734.379171][ T2898] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 734.911868][ T2898] bond0 (unregistering): Released all slaves [ 735.051353][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.059320][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 735.205503][ T9854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 735.209590][ T5777] Bluetooth: hci1: command tx timeout [ 735.556525][ T9854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 735.974995][ T9854] veth0_vlan: entered promiscuous mode [ 735.995765][ T9854] veth1_vlan: entered promiscuous mode [ 736.061553][ T9854] veth0_macvtap: entered promiscuous mode [ 736.086025][ T9854] veth1_macvtap: entered promiscuous mode [ 736.146160][ T9854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 736.158135][ T9854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.169972][ T9854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 736.181682][ T9854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.191924][ T9854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 736.202994][ T9854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.216140][ T9854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 736.239200][ T9854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 736.251763][ T9854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.261962][ T9854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 736.273297][ T9854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.285027][ T9854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 736.301915][ T9854] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.311390][ T9854] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.320732][ T9854] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.335954][ T9854] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.453159][ T3435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.472037][ T3435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.517270][ T3435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.537380][ T3435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 738.445421][ T5777] Bluetooth: hci1: command tx timeout [ 740.176190][ T9952] loop2: detected capacity change from 0 to 256 [ 740.281039][ T9952] exfat: Deprecated parameter 'namecase' [ 740.310723][ T9952] exfat: Deprecated parameter 'utf8' [ 740.518102][ T9952] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 741.280354][ T9959] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 744.113518][ T9983] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1023'. [ 744.191929][ T9984] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1023'. [ 744.275817][ T9985] lo speed is unknown, defaulting to 1000 [ 745.137404][ T9998] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1039'. [ 745.161770][ T9996] loop4: detected capacity change from 0 to 512 [ 745.221808][T10001] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1040'. [ 745.300859][T10002] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1040'. [ 745.824548][ T9996] EXT4-fs: Ignoring removed nobh option [ 745.835398][T10003] lo speed is unknown, defaulting to 1000 [ 745.986260][T10004] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1039'. [ 746.283959][ T9996] EXT4-fs error (device loop4): ext4_orphan_get:1398: inode #15: comm syz.4.1028: iget: bad i_size value: 38620345925642 [ 746.338377][ T9996] EXT4-fs error (device loop4): ext4_orphan_get:1403: comm syz.4.1028: couldn't read orphan inode 15 (err -117) [ 747.773222][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.779960][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.802521][ T9996] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 747.829386][T10011] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 748.401914][ T9854] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 750.246677][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 750.588786][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 750.639837][ T23] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 750.740433][ T23] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x94, skipping [ 750.835619][ T23] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 751.195943][ T23] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 751.210584][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.238093][ T23] usb 5-1: Product: syz [ 751.242349][ T23] usb 5-1: Manufacturer: syz [ 751.247081][ T23] usb 5-1: SerialNumber: syz [ 751.306204][ T23] usb 5-1: config 0 descriptor?? [ 751.447777][T10025] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 751.959478][T10050] xt_CT: You must specify a L4 protocol and not use inversions on it [ 753.860760][ T23] usb 5-1: USB disconnect, device number 2 [ 754.751368][T10064] 0x000000000007-0x000000020007 : "" [ 754.756913][T10064] mtd: partition "" extends beyond the end of device "mtdram test device" -- size truncated to 0x1fff9 [ 754.772848][T10064] ftl_cs: FTL header corrupt! [ 754.932895][T10070] xt_TCPMSS: Only works on TCP SYN packets [ 755.370546][ T5814] IPVS: starting estimator thread 0... [ 755.531044][T10071] IPVS: using max 26 ests per chain, 62400 per kthread [ 755.744081][T10076] PKCS7: Unknown OID: [4] (bad) [ 755.749186][T10076] PKCS7: Only support pkcs7_signedData type [ 756.434180][T10076] xt_connbytes: Forcing CT accounting to be enabled [ 756.442190][T10076] x_tables: ip_tables: sctp match: only valid for protocol 132 [ 759.241483][T10089] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1049'. [ 759.265178][T10089] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1049'. [ 759.346029][T10090] lo speed is unknown, defaulting to 1000 [ 760.267907][T10098] syz.4.1050 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 760.311120][T10098] ptrace attach of "./syz-executor exec"[9854] was attempted by " [ 760.399954][T10099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1051'. [ 763.038031][T10115] ptrace attach of "./syz-executor exec"[9854] was attempted by " [ 766.202426][T10128] loop2: detected capacity change from 0 to 128 [ 766.453433][T10128] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 766.521323][T10128] ext4 filesystem being mounted at /236/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 767.606341][ T5780] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 768.117761][T10144] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 768.156354][T10144] tipc: Enabled bearer , priority 10 [ 770.105424][ T5811] tipc: Node number set to 622693237 [ 770.814264][T10161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1058'. [ 771.435590][T10161] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 774.201444][T10193] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 774.226308][T10193] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1061'. [ 775.287874][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 779.164388][T10227] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1065'. [ 779.738276][T10234] Error parsing options; rc = [-22] [ 784.716246][T10267] ALSA: mixer_oss: invalid OSS volume 'LI' [ 784.762036][T10267] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1074'. [ 784.799922][T10268] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1074'. [ 785.688327][T10276] ALSA: mixer_oss: invalid OSS volume '' [ 789.049819][T10292] autofs4:pid:10292:autofs_fill_super: called with bogus options [ 790.071553][T10303] fuse: Bad value for 'fd' [ 798.586293][T10356] Cannot find set identified by id 1 to match [ 798.846257][T10368] fuse: Bad value for 'fd' [ 801.040736][T10384] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1095'. [ 801.128834][T10387] Error parsing options; rc = [-22] [ 801.184856][T10387] loop2: detected capacity change from 0 to 64 [ 802.368421][T10399] ptrace attach of "./syz-executor exec"[5780] was attempted by " [ 803.968817][T10404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1099'. [ 804.338682][T10414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1100'. [ 805.709617][T10429] fuse: Bad value for 'fd' [ 808.669807][T10437] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1104'. [ 809.978421][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.984840][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.152708][T10459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1109'. [ 810.225138][T10459] lo speed is unknown, defaulting to 1000 [ 812.972380][ T786] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 813.248081][ T786] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 813.262642][ T786] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 813.298619][T10491] fuse: Bad value for 'fd' [ 813.324945][ T786] usb 3-1: config 0 has no interface number 0 [ 814.470849][T10473] siw: device registration error -23 [ 814.499167][ T786] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 814.514386][ T786] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 814.532353][ T786] usb 3-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 814.672451][ T786] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 814.765905][ T786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.779671][ T786] usb 3-1: Product: syz [ 814.784829][ T786] usb 3-1: Manufacturer: syz [ 814.797792][ T786] usb 3-1: SerialNumber: syz [ 814.809120][ T786] usb 3-1: config 0 descriptor?? [ 814.816912][ T786] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 814.830428][ T786] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 814.933123][ T786] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 815.193634][ T786] usb 3-1: USB disconnect, device number 5 [ 815.311248][T10500] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1123'. [ 815.438950][ T786] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 815.740360][ T786] cyberjack 3-1:0.69: device disconnected [ 817.647834][ T9856] Bluetooth: hci1: command tx timeout [ 817.653439][ T9856] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 817.663542][ T9856] Bluetooth: hci1: Injecting HCI hardware error event [ 817.672975][ T9856] Bluetooth: hci1: hardware error 0x00 [ 820.578066][ T9856] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 820.859809][T10549] Cannot find add_set index 0 as target [ 820.976728][T10553] loop2: detected capacity change from 0 to 64 [ 823.412267][T10581] fuse: Bad value for 'fd' [ 827.249249][ T5811] libceph: connect (1)[c::]:6789 error -101 [ 827.274870][ T5811] libceph: mon0 (1)[c::]:6789 connect error [ 827.468063][T10617] ceph: No mds server is up or the cluster is laggy [ 827.480089][ T5811] libceph: connect (1)[c::]:6789 error -101 [ 827.493882][ T5811] libceph: mon0 (1)[c::]:6789 connect error [ 827.944293][T10639] fuse: Bad value for 'group_id' [ 828.633185][T10651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1142'. [ 831.292219][T10651] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 833.575687][T10685] fuse: Bad value for 'group_id' [ 833.680421][ T5830] libceph: connect (1)[c::]:6789 error -101 [ 833.687303][ T5830] libceph: mon0 (1)[c::]:6789 connect error [ 833.927125][T10693] fuse: Bad value for 'group_id' [ 833.965746][ T5830] libceph: connect (1)[c::]:6789 error -101 [ 834.735276][ T5830] libceph: mon0 (1)[c::]:6789 connect error [ 834.777484][T10687] ceph: No mds server is up or the cluster is laggy [ 835.103470][T10709] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 835.306068][ T8] libceph: connect (1)[c::]:6789 error -101 [ 835.383589][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 836.225797][T10722] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1158'. [ 837.420377][T10725] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1158'. [ 837.884776][T10737] loop2: detected capacity change from 0 to 2048 [ 838.431995][T10738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1160'. [ 838.582232][T10738] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 843.866503][T10760] syz.2.1166 (10760): drop_caches: 2 [ 844.155901][T10764] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 844.497851][ T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 844.738602][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 844.749579][ T8] usb 3-1: unable to get BOS descriptor or descriptor too short [ 844.759637][ T8] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 107, changing to 7 [ 844.776059][ T8] usb 3-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice= 0.40 [ 844.785768][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.794257][ T8] usb 3-1: Product: syz [ 844.799010][ T8] usb 3-1: Manufacturer: syz [ 844.803772][ T8] usb 3-1: SerialNumber: syz [ 845.220950][ T28] audit: type=1326 audit(1773941096.996:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10766 comm="syz.2.1168" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9c1619c799 code=0x0 [ 845.324992][ T5777] block nbd2: Receive control failed (result -32) [ 845.348674][ T5782] block nbd2: Receive control failed (result -32) [ 845.351050][ T9856] block nbd2: Receive control failed (result -32) [ 845.382692][ T8] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 845.403457][T10767] block nbd2: shutting down sockets [ 845.415955][T10772] orangefs_mount: mount request failed with -4 [ 845.448102][ T8] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 845.744156][ T8] snd-usb-audio: probe of 3-1:1.0 failed with error -71 [ 845.761233][ T8] usb 3-1: USB disconnect, device number 6 [ 845.988826][T10790] netlink: 'syz.2.1173': attribute type 4 has an invalid length. [ 849.134343][T10765] udevd[10765]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 852.561224][ T28] audit: type=1326 audit(1773941104.336:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10811 comm="syz.0.1178" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f981239c799 code=0x0 [ 853.665488][T10821] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 857.827253][T10855] xt_socket: unknown flags 0x4 [ 859.447146][T10868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1180'. [ 859.523445][T10868] infiniband syz1: set active [ 859.555559][T10868] infiniband syz1: set active [ 859.685956][T10868] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 870.657446][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.664577][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 874.227510][T10923] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1198'. [ 876.373445][T10927] infiniband syz1: set active [ 876.378638][T10927] infiniband syz1: set active [ 876.536313][T10927] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 878.587846][ T28] audit: type=1326 audit(1773941130.346:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10930 comm="syz.4.1208" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb2f799c799 code=0x0 [ 882.671497][T10966] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 883.178579][T10970] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1217'. [ 884.457361][T10979] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1217'. [ 885.012235][T10989] futex_wake_op: syz.2.1224 tries to shift op by 32; fix this program [ 885.553850][T10993] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 886.388127][ T5812] IPVS: starting estimator thread 0... [ 886.488863][T10996] IPVS: using max 19 ests per chain, 45600 per kthread [ 888.080430][T11003] infiniband syz1: set active [ 888.316950][T11003] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 889.450605][T11010] infiniband syz1: set active [ 889.868184][T11010] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 892.393066][T11037] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 893.831826][T11036] infiniband syz1: set active [ 893.983609][T11036] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 895.263822][T11044] netlink: 'syz.2.1248': attribute type 16 has an invalid length. [ 895.301536][T11044] netlink: 'syz.2.1248': attribute type 17 has an invalid length. [ 895.350010][T11044] infiniband syz1: set active [ 895.368319][T11044] infiniband syz1: set active [ 895.373751][T11044] infiniband syz1: set active [ 895.408238][T11044] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 896.903812][T11062] infiniband syz1: set active [ 896.909781][T11062] infiniband syz1: set active [ 897.022547][T11062] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 898.011942][T11075] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 900.250306][T11096] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 900.890874][T11092] fuse: Bad value for 'group_id' [ 902.303175][T11110] infiniband syz1: set active [ 902.869664][T11110] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 903.250994][T11118] fuse: Bad value for 'group_id' [ 907.619356][T11143] fuse: Bad value for 'group_id' [ 909.057119][T11165] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 913.690784][T11201] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 915.749947][T11217] infiniband syz1: set active [ 915.778807][T11217] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 917.279782][T11227] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 918.035387][T11249] fuse: Bad value for 'fd' [ 918.693417][T11264] infiniband syz1: set active [ 919.319901][T11264] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 919.798481][T11265] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 920.091795][T11275] fuse: Bad value for 'user_id' [ 920.198578][T11279] infiniband syz1: set active [ 920.214149][T11279] infiniband syz1: set active [ 920.905066][T11298] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 921.444785][T11299] fuse: Bad value for 'user_id' [ 921.599874][T11305] fuse: Bad value for 'fd' [ 922.004898][T11325] fuse: Bad value for 'fd' [ 922.104980][T11330] fuse: Bad value for 'fd' [ 922.458647][T11348] fuse: Bad value for 'fd' [ 922.738566][T11361] fuse: Bad value for 'fd' [ 922.939241][T11369] fuse: Bad value for 'fd' [ 923.428008][T11386] fuse: Bad value for 'fd' [ 923.445179][T11387] fuse: Bad value for 'fd' [ 926.308715][T11411] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 926.421893][T11408] fuse: Unknown parameter 'grou00000000000000000000' [ 928.138341][T11428] fuse: Bad value for 'fd' [ 928.951849][T11432] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 928.987764][T11434] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 929.307372][T11439] fuse: Bad value for 'fd' [ 932.095766][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.102639][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.767493][T11465] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 933.816195][T11467] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 933.888272][T11474] fuse: Unknown parameter 'grou00000000000000000000' [ 941.173692][T11529] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1438'. [ 942.019212][T11531] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 942.151175][T11533] fuse: Unknown parameter 'group_i00000000000000000000' [ 943.695217][T11549] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 944.102708][T11557] fuse: Bad value for 'fd' [ 944.943425][T11560] infiniband syz1: set active [ 944.950672][T11560] infiniband syz1: set active [ 945.237973][T11560] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 947.201501][T11577] infiniband syz1: set active [ 947.217962][T11577] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 947.645539][T11588] fuse: Unknown parameter 'group_id00000000000000000000' [ 949.916700][T11593] infiniband syz1: set active [ 949.936849][T11593] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 950.439098][T11612] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1469'. [ 950.460691][T11612] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1469'. [ 951.908382][T11623] tipc: Enabled bearer , priority 10 [ 967.760004][T11763] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1529'. [ 969.279128][T11773] fuse: Bad value for 'fd' [ 969.462922][T11777] 9pnet_fd: Insufficient options for proto=fd [ 971.783083][T11790] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 973.213915][T11813] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_1, syncid = 4, id = 0 [ 974.616791][T11828] infiniband syz1: set active [ 974.627317][T11828] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 974.754863][T11833] fuse: Bad value for 'user_id' [ 975.320252][T11851] fuse: Bad value for 'user_id' [ 975.664941][T11863] fuse: Bad value for 'fd' [ 976.131186][T11870] infiniband syz1: set active [ 976.139914][T11870] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 976.212393][T11874] fuse: Bad value for 'user_id' [ 976.944368][T11885] fuse: Bad value for 'fd' [ 978.306980][T11891] infiniband syz1: set active [ 978.372317][T11891] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 978.586112][T11896] fuse: Bad value for 'fd' [ 980.571471][T11909] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 981.054203][T11920] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 981.234349][T11926] fuse: Bad value for 'fd' [ 981.520907][T11932] fuse: Bad value for 'fd' [ 982.924284][T11939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1606'. [ 983.980927][T11947] fuse: Bad value for 'fd' [ 984.104396][T11951] fuse: Invalid rootmode [ 984.793262][T11961] infiniband syz1: set active [ 985.713496][T11961] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 986.204216][T11971] fuse: Bad value for 'fd' [ 986.359652][T11973] fuse: Invalid rootmode [ 989.366554][T11985] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 989.813073][T11997] fuse: Bad value for 'rootmode' [ 989.878335][T11999] fuse: Bad value for 'fd' [ 991.708386][T12017] fuse: Bad value for 'fd' [ 991.877520][T12019] fuse: Bad value for 'fd' [ 993.534752][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.542165][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.669073][T12030] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 994.342632][T12039] fuse: Bad value for 'rootmode' [ 994.500757][T12043] fuse: Invalid rootmode [ 994.603185][T12048] overlayfs: failed to clone upperpath [ 995.208925][T12062] fuse: Bad value for 'fd' [ 995.255912][T12063] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 995.394560][T12065] fuse: Bad value for 'fd' [ 996.811096][T10285] kernel write not supported for file /bluetooth/6lowpan_control (pid: 10285 comm: kworker/0:1) [ 996.975251][T12080] fuse: Bad value for 'fd' [ 997.199833][T12086] fuse: Invalid rootmode [ 999.135601][T12104] infiniband syz1: set active [ 999.145829][T12104] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 999.413065][T12106] fuse: Bad value for 'fd' [ 999.880435][T12112] fuse: Bad value for 'fd' [ 999.986708][T12114] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1679'. [ 1000.019367][T12114] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1679'. [ 1000.231947][T12120] tipc: Enabling of bearer rejected, already enabled [ 1000.416998][T12125] fuse: Unknown parameter 'user_i00000000000000000000' [ 1000.971469][T12128] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1001.138433][T12134] fuse: Bad value for 'fd' [ 1001.427974][T12142] tipc: Started in network mode [ 1001.453619][T12142] tipc: Node identity ac14140f, cluster identity 4711 [ 1001.471589][T12142] tipc: New replicast peer: 255.255.255.255 [ 1001.491379][T12142] tipc: Enabled bearer , priority 10 [ 1001.648456][T12151] fuse: Bad value for 'fd' [ 1002.267906][T12155] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1003.552768][ T5814] tipc: Node number set to 2886997007 [ 1003.654797][T12162] fuse: Bad value for 'rootmode' [ 1004.118679][T12173] fuse: Unknown parameter 'user_i00000000000000000000' [ 1005.775345][T12183] fuse: Bad value for 'fd' [ 1007.642780][T12191] fuse: Unknown parameter 'user_id00000000000000000000' [ 1010.382936][T12205] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1012.218650][T12217] fuse: Unknown parameter 'user_id00000000000000000000' [ 1014.322124][T12231] 9pnet_fd: Insufficient options for proto=fd [ 1015.969745][T12242] fuse: Unknown parameter 'user_id00000000000000000000' [ 1019.621960][T12270] fuse: Bad value for 'fd' [ 1020.154708][T12271] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1021.985999][T12290] fuse: Bad value for 'fd' [ 1023.848355][T12294] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1024.498443][T12314] fuse: Bad value for 'fd' [ 1024.986515][T12333] netlink: 212 bytes leftover after parsing attributes in process `syz.2.1771'. [ 1025.089921][T12337] fuse: Unknown parameter '0xffffffffffffffff' [ 1025.669326][T12357] fuse: Unknown parameter '0xffffffffffffffff' [ 1026.133033][T12372] fuse: Invalid rootmode [ 1028.568414][T12405] fuse: Unknown parameter '0x0000000000000003' [ 1031.793106][T12427] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1031.950958][T12429] fuse: Unknown parameter '0x0000000000000003' [ 1035.610792][T12454] fuse: Unknown parameter '0x0000000000000003' [ 1037.305810][T12470] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1826'. [ 1039.150719][T12478] fuse: Unknown parameter '0x0000000000000003' [ 1043.269346][T12516] netlink: 'syz.4.1844': attribute type 15 has an invalid length. [ 1046.593254][T12555] infiniband syz1: set active [ 1046.606312][T12555] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1050.416501][T12594] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1873'. [ 1051.130060][T12609] infiniband syz1: set active [ 1051.147805][T12609] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1053.218347][T12630] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1054.984084][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.990663][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.304417][T12661] netlink: 'syz.4.1899': attribute type 10 has an invalid length. [ 1055.354324][T12661] syz_tun: entered promiscuous mode [ 1055.476369][T12661] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1055.687829][T12657] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1057.568348][T12677] fuse: Bad value for 'fd' [ 1058.373651][T12685] infiniband syz1: set active [ 1058.383054][T12685] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1060.161141][T12702] fuse: Unknown parameter '0x0000000000000003' [ 1065.182081][T12726] fuse: Unknown parameter '0xffffffffffffffff' [ 1066.716430][T12736] bridge0: port 3(vlan4) entered blocking state [ 1066.723479][T12736] bridge0: port 3(vlan4) entered disabled state [ 1066.735297][T12736] vlan4: entered allmulticast mode [ 1066.744854][T12736] bond0: entered allmulticast mode [ 1066.764333][T12736] bond_slave_0: entered allmulticast mode [ 1066.784211][T12736] bond_slave_1: entered allmulticast mode [ 1066.803512][T12736] vlan4: entered promiscuous mode [ 1066.817839][T12736] bond0: entered promiscuous mode [ 1066.826601][T12736] bond_slave_0: entered promiscuous mode [ 1066.840819][T12736] bond_slave_1: entered promiscuous mode [ 1069.434165][T12766] fuse: Unknown parameter '0xffffffffffffffff' [ 1071.464453][T12778] fuse: Unknown parameter '0x0000000000000003' [ 1071.794210][T12787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1945'. [ 1072.039007][T12792] fuse: Unknown parameter '0x0000000000000003' [ 1072.506601][T12803] fuse: Unknown parameter '0x0000000000000003' [ 1073.782293][T12808] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1077.476569][T12831] fuse: Unknown parameter '0xffffffffffffffff' [ 1082.475159][T12861] fuse: Unknown parameter '0x0000000000000003' [ 1082.572550][T12862] infiniband syz1: set active [ 1082.627855][T12862] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1084.880162][T12885] fuse: Unknown parameter '0xffffffffffffffff' [ 1086.626092][T12902] fuse: Bad value for 'fd' [ 1087.416811][T12907] infiniband syz1: set active [ 1087.437315][T12907] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1088.874825][T12922] fuse: Unknown parameter 'fd0x0000000000000003' [ 1089.290895][T12934] fuse: Unknown parameter '0xffffffffffffffff' [ 1091.224832][T12944] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1091.689507][T12963] fuse: Unknown parameter '0xffffffffffffffff' [ 1092.186495][T12980] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1092.634558][T12978] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1092.759359][T12987] fuse: Unknown parameter '0x0000000000000003' [ 1093.450484][T13012] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1095.815497][T13041] syz_tun: left promiscuous mode [ 1096.991643][T13041] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1097.240568][T13052] fuse: Unknown parameter '0x0000000000000003' [ 1097.655172][T13069] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 1098.067739][T13072] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1098.485570][T13081] lo speed is unknown, defaulting to 1000 [ 1098.509264][T13083] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 1098.610432][T13085] fuse: Unknown parameter '0x0000000000000003' [ 1099.625886][T13115] fuse: Unknown parameter '0xffffffffffffffff' [ 1099.653626][T13103] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1101.486348][T13141] infiniband syz1: set active [ 1101.497998][T13141] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1102.597725][T13172] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1102.779607][T13176] fuse: Bad value for 'fd' [ 1103.418219][T13198] fuse: Bad value for 'fd' [ 1104.688233][T13204] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1105.031136][T13208] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1106.824302][T13222] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1106.961645][T13224] fuse: Bad value for 'fd' [ 1107.249466][T13226] fuse: Bad value for 'fd' [ 1107.363555][T13228] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1107.960689][T13236] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1107.997165][T13237] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1109.047707][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1111.553036][T13259] fuse: Bad value for 'fd' [ 1112.124385][T13265] infiniband syz1: set active [ 1112.171547][T13265] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1114.575452][T13289] fuse: Bad value for 'fd' [ 1114.752852][T13295] fuse: Bad value for 'fd' [ 1116.090205][T13307] fuse: Bad value for 'fd' [ 1116.361676][T13313] fuse: Bad value for 'fd' [ 1116.418396][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.427349][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.299296][T13317] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1117.860526][T13341] fuse: Bad value for 'fd' [ 1118.200397][T13332] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1119.110475][T13369] fuse: Bad value for 'fd' [ 1119.476123][T13381] fuse: Bad value for 'fd' [ 1119.853094][T13395] infiniband syz1: set active [ 1119.864652][T13395] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1120.109273][T13403] overlayfs: failed to clone upperpath [ 1120.148673][T13403] overlayfs: failed to clone lowerpath [ 1120.227926][T13405] fuse: Bad value for 'fd' [ 1122.085734][T13422] fuse: Bad value for 'fd' [ 1123.739323][T13436] fuse: Bad value for 'fd' [ 1126.740694][T13464] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1130.112843][T13516] infiniband syz1: set active [ 1130.122559][T13516] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1132.019687][T13550] overlayfs: failed to clone upperpath [ 1133.692808][T13575] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1136.453690][T13619] fuse: Bad value for 'fd' [ 1139.655439][T13635] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1146.169022][T13674] infiniband syz1: set active [ 1146.603448][T13674] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1152.504949][T13719] fuse: Bad value for 'fd' [ 1157.552978][T13767] fuse: Bad value for 'fd' [ 1157.773659][T13769] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1158.198643][T13774] overlayfs: failed to clone upperpath [ 1160.208221][T13782] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1174.024969][T13880] fuse: Bad value for 'fd' [ 1176.762453][T13917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2343'. [ 1176.887697][T13922] overlayfs: failed to clone upperpath [ 1176.918380][T13923] fuse: Bad value for 'fd' [ 1177.045628][T13925] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2348'. [ 1177.853091][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.862364][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1179.179521][T13961] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2360'. [ 1179.209337][T13961] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2360'. [ 1179.227855][T13961] bridge_slave_1: default FDB implementation only supports local addresses [ 1179.283168][T13964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2361'. [ 1179.293735][T13965] fuse: Bad value for 'fd' [ 1179.515891][T13971] fuse: Bad value for 'fd' [ 1180.388639][T13987] fuse: Bad value for 'fd' [ 1188.633254][T14033] syz_tun: entered allmulticast mode [ 1188.741708][T14032] syz_tun: left allmulticast mode [ 1201.480777][T14128] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1203.613636][T14142] fuse: Bad value for 'fd' [ 1207.115115][T14209] overlayfs: failed to clone lowerpath [ 1207.115961][T14207] fuse: Bad value for 'fd' [ 1207.141263][T14209] overlayfs: failed to clone lowerpath [ 1207.601213][T14216] tipc: Enabling of bearer rejected, failed to enable media [ 1209.723163][T14239] fuse: Bad value for 'fd' [ 1210.041777][ T59] tipc: Subscription rejected, illegal request [ 1212.049724][T14264] fuse: Bad value for 'fd' [ 1212.233028][T14267] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1213.287682][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1215.784020][T14304] fuse: Bad value for 'fd' [ 1216.119384][T14312] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1216.906096][T14327] lo speed is unknown, defaulting to 1000 [ 1218.737769][T14328] lo: entered promiscuous mode [ 1218.742898][T14328] lo: entered allmulticast mode [ 1221.280801][T14372] ip6gre1: entered promiscuous mode [ 1221.307748][T14372] ip6gre1: entered allmulticast mode [ 1224.011118][T14405] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2512'. [ 1226.145386][T14420] overlayfs: failed to clone lowerpath [ 1226.175019][T14420] overlayfs: failed to clone lowerpath [ 1227.002650][T14433] bond3: entered promiscuous mode [ 1230.271080][T14462] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1231.367700][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1237.323619][T14507] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1238.223294][T14524] lo: left promiscuous mode [ 1238.237888][T14524] lo: left allmulticast mode [ 1239.303130][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.309877][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.487715][T14524] bridge0: port 2(bridge_slave_1) entered disabled state [ 1239.495635][T14524] bridge0: port 1(bridge_slave_0) entered disabled state [ 1244.308114][T14524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1244.641407][T14524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1248.732054][T14524] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.804343][T14524] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.837597][T14524] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.890271][T14524] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1250.158376][T14524] ip6gre1: left promiscuous mode [ 1250.163528][T14524] ip6gre1: left allmulticast mode [ 1250.957893][T14617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2579'. [ 1251.326454][T14625] tipc: Enabling of bearer rejected, failed to enable media [ 1251.838283][T14628] 9p: Unknown access argument 18446744073709551615: -34 [ 1251.899764][T14630] overlayfs: failed to clone upperpath [ 1254.003466][T14666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2592'. [ 1255.764971][T14698] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2602'. [ 1261.885760][T14769] netlink: 'syz.2.2623': attribute type 39 has an invalid length. [ 1262.198442][T14769] infiniband syz1: set down [ 1262.417123][ T23] syz1: rxe_query_port: returned err = -19 [ 1262.599868][ T23] infiniband syz1: ib_query_port failed (-19) [ 1262.961016][T14769] syz_tun (unregistering): left allmulticast mode [ 1263.090695][ T59] smc: removing ib device syz1 [ 1276.015161][T14851] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2649'. [ 1276.325477][T14854] bond4: (slave gretap0): Enslaving as an active interface with an up link [ 1276.928859][T14863] netlink: 'syz.1.2653': attribute type 39 has an invalid length. [ 1290.121397][T14944] syz_tun: entered allmulticast mode [ 1292.706878][ T28] audit: type=1326 audit(1773941544.475:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14955 comm="syz.1.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbca999c799 code=0x7fc00000 [ 1292.772790][ T28] audit: type=1326 audit(1773941544.475:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14955 comm="syz.1.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fbca999c799 code=0x7fc00000 [ 1295.087865][T14976] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1298.298175][T15001] virtio-fs: tag not found [ 1299.225718][T15011] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1301.731652][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1301.738315][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1303.440868][T15033] netlink: 'syz.2.2701': attribute type 10 has an invalid length. [ 1303.569114][T15033] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 1303.630758][T15033] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1305.802794][T15058] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2706'. [ 1305.850304][T15059] netlink: 'syz.0.2705': attribute type 1 has an invalid length. [ 1305.970551][T15059] bond2: entered promiscuous mode [ 1305.981733][T15059] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1306.088341][T15059] bond2: (slave bridge2): making interface the new active one [ 1306.104290][T15059] bridge2: entered promiscuous mode [ 1306.117116][T15059] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 1307.653538][T15076] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2712'. [ 1307.679681][T15076] netlink: 'syz.2.2712': attribute type 10 has an invalid length. [ 1308.929449][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88802df15800: rx timeout, send abort [ 1308.965811][T15076] team0: Device vxcan1 is of different type [ 1309.078861][T15084] veth1_to_team: entered allmulticast mode [ 1309.113795][T15083] syz_tun: entered allmulticast mode [ 1309.159798][T15081] syz_tun: left allmulticast mode [ 1318.000054][T15179] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2726'. [ 1345.581513][T15433] tipc: Enabling of bearer rejected, failed to enable media [ 1350.307622][T15464] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1352.748001][T15490] tipc: Enabling of bearer rejected, failed to enable media [ 1356.121315][ T28] audit: type=1326 audit(1773941607.885:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15505 comm="syz.1.2827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbca999c799 code=0x7ffc0000 [ 1356.650564][ T28] audit: type=1326 audit(1773941607.895:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15505 comm="syz.1.2827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7fbca999c799 code=0x7ffc0000 [ 1356.824733][ T28] audit: type=1326 audit(1773941607.895:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15505 comm="syz.1.2827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbca999c799 code=0x7ffc0000 [ 1356.967530][ T28] audit: type=1326 audit(1773941607.895:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15505 comm="syz.1.2827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbca999c799 code=0x7ffc0000 [ 1359.555857][T15538] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1362.201719][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.211286][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1366.343254][T15581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1366.351877][T15581] 8021q: adding VLAN 0 to HW filter on device team0 [ 1366.678004][T15581] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1384.545478][T15672] tipc: Enabling of bearer rejected, failed to enable media [ 1386.193395][T15687] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1387.738908][T15717] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 1395.994574][T15762] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1404.125102][T15805] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1408.473857][T15825] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2911'. [ 1409.740412][ T9856] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1409.754359][ T9856] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1409.763858][ T9856] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1409.772652][ T9856] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1409.788178][ T9856] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1409.797198][ T9856] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1411.036945][T15830] lo speed is unknown, defaulting to 1000 [ 1411.848981][ T5782] Bluetooth: hci4: command tx timeout [ 1412.845597][T15830] chnl_net:caif_netlink_parms(): no params data found [ 1413.572428][T15830] bridge0: port 1(bridge_slave_0) entered blocking state [ 1413.621382][T15830] bridge0: port 1(bridge_slave_0) entered disabled state [ 1413.651340][T15830] bridge_slave_0: entered allmulticast mode [ 1413.689205][T15830] bridge_slave_0: entered promiscuous mode [ 1413.729789][T15830] bridge0: port 2(bridge_slave_1) entered blocking state [ 1413.767649][T15830] bridge0: port 2(bridge_slave_1) entered disabled state [ 1413.814628][T15830] bridge_slave_1: entered allmulticast mode [ 1413.839620][T15830] bridge_slave_1: entered promiscuous mode [ 1414.976489][ T5782] Bluetooth: hci4: command tx timeout [ 1415.233567][T15830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1415.337556][T15883] veth0: entered promiscuous mode [ 1415.345264][T15830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1415.584294][T15830] team0: Port device team_slave_0 added [ 1415.662647][T15830] team0: Port device team_slave_1 added [ 1415.756190][T15886] veth0: left promiscuous mode [ 1415.824158][T15830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1415.837434][T15830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1415.943147][T15830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1416.046005][T15830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1416.055766][T15830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1416.228820][T15830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1417.198641][ T5782] Bluetooth: hci4: command tx timeout [ 1419.239640][ T5782] Bluetooth: hci4: command tx timeout [ 1420.208890][T15830] hsr_slave_0: entered promiscuous mode [ 1420.271994][T15830] hsr_slave_1: entered promiscuous mode [ 1420.306583][T15830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1420.347476][T15830] Cannot create hsr debugfs directory [ 1422.651529][T15915] netlink: set zone limit has 8 unknown bytes [ 1422.854521][T15797] bond0: (slave syz_tun): Releasing backup interface [ 1423.738842][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.745879][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1425.484549][T15830] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1425.575575][T15830] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1426.971220][T15937] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1427.028634][T15830] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1427.137051][T15830] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1427.184917][T15943] overlayfs: failed to clone upperpath [ 1429.896570][T15830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1430.130743][T15830] 8021q: adding VLAN 0 to HW filter on device team0 [ 1430.185827][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 1430.193619][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1430.345552][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 1430.353122][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1430.500801][ T3464] tipc: Disabling bearer [ 1430.538579][ T3464] tipc: Left network mode [ 1434.720326][T15989] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1435.341919][T15830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1435.894873][ T3464] hsr_slave_0: left promiscuous mode [ 1435.937667][ T3464] hsr_slave_1: left promiscuous mode [ 1436.016994][ T3464] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1436.041209][ T3464] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1436.108384][ T3464] bridge_slave_1: left allmulticast mode [ 1436.172138][ T3464] bridge_slave_1: left promiscuous mode [ 1436.187647][ T3464] bridge0: port 2(bridge_slave_1) entered disabled state [ 1436.208997][ T3464] bridge_slave_0: left allmulticast mode [ 1436.717959][ T3464] bridge_slave_0: left promiscuous mode [ 1437.389766][ T3464] bridge0: port 1(bridge_slave_0) entered disabled state [ 1437.408172][T16033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2953'. [ 1439.331062][T16043] fuse: Bad value for 'fd' [ 1440.335597][ T3464] team0 (unregistering): Port device team_slave_1 removed [ 1440.378566][ T3464] veth1_to_team (unregistering): left allmulticast mode [ 1440.422754][ T3464] team0 (unregistering): Port device team_slave_0 removed [ 1440.504316][ T3464] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1440.582132][ T3464] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1441.189397][ T3464] bond0 (unregistering): Released all slaves [ 1441.313305][T16039] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1441.852677][T15830] veth0_vlan: entered promiscuous mode [ 1441.915681][T15830] veth1_vlan: entered promiscuous mode [ 1442.044705][T15830] veth0_macvtap: entered promiscuous mode [ 1442.081140][T15830] veth1_macvtap: entered promiscuous mode [ 1442.171760][T15830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1442.199160][T15830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1442.219960][T15830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1442.245647][T15830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1442.274941][T15830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1442.303900][T15830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1442.336551][T15830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1442.391080][T15830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1442.418347][T15830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1442.447417][T15830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1442.487298][T15830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1442.538903][T15830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1442.573032][T15830] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1442.622076][T15830] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1442.651952][T15830] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1442.670181][T15830] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1442.734198][T16091] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1443.927732][T14659] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1443.962614][T14659] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1443.996265][T16104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2964'. [ 1444.202203][ T2898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1444.260310][ T2898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1445.668762][T16141] loop5: detected capacity change from 0 to 256 [ 1445.938107][T16141] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 1445.947250][T16141] FAT-fs (loop5): Filesystem has been set read-only [ 1448.818679][T16161] loop5: detected capacity change from 0 to 512 [ 1448.848520][T16161] EXT4-fs: Ignoring removed mblk_io_submit option [ 1449.070570][T16161] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1449.910874][T16161] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1450.023655][T16161] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1451.229472][T15830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1454.944671][T16202] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2984'. [ 1454.975029][T16202] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2984'. [ 1457.601812][T16229] veth0: entered promiscuous mode [ 1457.677023][T16236] tipc: Enabling of bearer rejected, failed to enable media [ 1457.814690][T16243] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2988'. [ 1457.902473][T16234] veth0: left promiscuous mode [ 1460.402909][T16273] overlayfs: failed to clone lowerpath [ 1460.457888][T16274] overlayfs: failed to clone lowerpath [ 1461.817626][T16292] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1470.336283][ T5810] libceph: connect (1)[c::]:6789 error -101 [ 1470.392763][ T5810] libceph: mon0 (1)[c::]:6789 connect error [ 1470.414048][T16366] ceph: No mds server is up or the cluster is laggy [ 1471.074572][T16378] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1472.998015][T16397] ceph: No mds server is up or the cluster is laggy [ 1473.357861][ T5810] libceph: connect (1)[c::]:6789 error -101 [ 1473.364251][ T5810] libceph: mon0 (1)[c::]:6789 connect error [ 1474.059515][T16415] netlink: set zone limit has 8 unknown bytes [ 1474.142659][T16419] overlayfs: failed to clone upperpath [ 1477.018021][T16430] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1477.814113][T16448] block device autoloading is deprecated and will be removed. [ 1477.841854][T16448] syz.2.3027: attempt to access beyond end of device [ 1477.841854][T16448] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1478.194790][T16450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3030'. [ 1479.691658][T16470] fuse: Bad value for 'fd' [ 1484.050629][T16492] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1485.091019][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.139645][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1487.078611][T16526] syz.0.3045: attempt to access beyond end of device [ 1487.078611][T16526] loop1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1488.298525][T16526] SQUASHFS error: Failed to read block 0x0: -5 [ 1489.456770][T16551] syz.5.3039: attempt to access beyond end of device [ 1489.456770][T16551] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1490.636636][T16550] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1498.627450][T16603] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1502.960257][T16639] loop5: detected capacity change from 0 to 2048 [ 1503.119350][T16639] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1506.485392][T16661] batadv0: entered promiscuous mode [ 1506.517312][T16661] vlan2: entered promiscuous mode [ 1509.549205][T16684] sctp: [Deprecated]: syz.5.3075 (pid 16684) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1509.549205][T16684] Use struct sctp_sack_info instead [ 1510.545565][T16687] loop5: detected capacity change from 0 to 2048 [ 1510.706418][T16687] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1515.615652][T16710] fuse: Bad value for 'fd' [ 1516.875765][T16721] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1518.335009][ T5782] Bluetooth: hci4: link tx timeout [ 1518.343849][ T5782] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1519.801857][ T5782] Bluetooth: hci4: link tx timeout [ 1519.807159][ T5782] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1520.349019][T16749] loop5: detected capacity change from 0 to 64 [ 1520.717588][ T5782] Bluetooth: hci4: command 0x0406 tx timeout [ 1521.859099][T16751] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1521.959324][T16749] hfs: get root inode failed [ 1527.472822][T16790] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1527.479699][T16790] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1529.546032][ T9856] Bluetooth: hci4: command 0x0406 tx timeout [ 1531.656936][ T9856] Bluetooth: hci4: command 0x0406 tx timeout [ 1534.167770][T16830] netlink: 'syz.2.3097': attribute type 1 has an invalid length. [ 1536.484999][T16835] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3098'. [ 1536.494771][T16835] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3098'. [ 1546.748766][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.755520][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1550.733928][T16933] batadv0: entered promiscuous mode [ 1550.785613][T16933] vlan2: entered promiscuous mode [ 1561.617776][T17006] autofs4:pid:17006:autofs_fill_super: called with bogus options [ 1564.480011][T17018] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1571.815308][T17055] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1573.463422][T17070] overlayfs: failed to clone upperpath [ 1575.369792][T17082] loop5: detected capacity change from 0 to 512 [ 1575.404461][T17082] EXT4-fs: Ignoring removed mblk_io_submit option [ 1575.434545][T17082] EXT4-fs: journaled quota format not specified [ 1577.923448][T17098] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1579.567868][ T9856] Bluetooth: hci4: Unable to find connection with handle 0x0000 [ 1579.995150][T17113] loop5: detected capacity change from 0 to 2048 [ 1580.232850][T17113] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1584.379047][T17131] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.3150'. [ 1584.437561][T17131] netlink: 6332 bytes leftover after parsing attributes in process `syz.0.3150'. [ 1586.327563][T17143] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1586.708851][T17146] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1592.502678][T17163] hub 8-0:1.0: USB hub found [ 1592.516872][T17163] hub 8-0:1.0: 1 port detected [ 1592.789746][T17163] workqueue: Failed to create a rescuer kthread for wq "all": -EINTR [ 1595.357931][T10285] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 1595.611202][T10285] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1595.620756][T10285] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1595.637537][T10285] usb 6-1: Product: syz [ 1595.641878][T10285] usb 6-1: Manufacturer: syz [ 1595.646686][T10285] usb 6-1: SerialNumber: syz [ 1595.688968][T10285] usb 6-1: config 0 descriptor?? [ 1595.927838][T10285] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1596.030248][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1596.060389][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1598.971285][T10285] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71 [ 1599.036197][T10285] usb 6-1: USB disconnect, device number 2 [ 1606.378345][T17255] autofs4:pid:17255:autofs_fill_super: called with bogus options [ 1608.668531][T17261] overlayfs: failed to clone upperpath [ 1608.850521][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1608.858171][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1609.117532][ T786] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1609.308586][ T786] usb 6-1: device descriptor read/all, error -71 [ 1609.733718][T17273] overlayfs: failed to clone upperpath [ 1611.154804][T17290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3195'. [ 1611.165388][T17290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1611.472639][T17290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1618.029148][T17322] tmpfs: Bad value for 'nr_blocks' [ 1623.564708][T17344] overlayfs: failed to resolve './file0/file0': -2 [ 1625.061063][T17353] loop5: detected capacity change from 0 to 512 [ 1625.069703][T17353] EXT4-fs: Ignoring removed bh option [ 1626.317795][T17353] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1626.329394][T17353] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1626.368956][T17353] EXT4-fs (loop5): 1 truncate cleaned up [ 1626.377124][T17353] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1626.778392][T15830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1630.646297][T17373] overlayfs: overlapping lowerdir path [ 1635.575687][T17395] sch_tbf: peakrate 3 is lower than or equals to rate 183 ! [ 1641.758497][T17417] overlayfs: failed to clone upperpath [ 1641.824092][T17418] overlayfs: failed to clone upperpath [ 1646.682828][T17444] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3232'. [ 1647.445461][T14659] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1647.461962][T14659] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1647.704618][ T28] audit: type=1326 audit(1773941899.475:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17438 comm="syz.0.3233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981239c799 code=0x7ffc0000 [ 1647.727634][ C0] vkms_vblank_simulate: vblank timer overrun [ 1647.757233][ T28] audit: type=1326 audit(1773941899.475:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17438 comm="syz.0.3233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981239c799 code=0x7ffc0000 [ 1647.822039][ T28] audit: type=1326 audit(1773941899.505:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17438 comm="syz.0.3233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f981239c799 code=0x7ffc0000 [ 1647.834251][T17448] lo speed is unknown, defaulting to 1000 [ 1647.882917][ T28] audit: type=1326 audit(1773941899.505:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17438 comm="syz.0.3233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981239c799 code=0x7ffc0000 [ 1647.947521][ T28] audit: type=1326 audit(1773941899.505:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17438 comm="syz.0.3233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981239c799 code=0x7ffc0000 [ 1648.004741][ T28] audit: type=1326 audit(1773941899.515:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17438 comm="syz.0.3233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f981239c799 code=0x7ffc0000 [ 1648.043350][ T28] audit: type=1326 audit(1773941899.515:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17438 comm="syz.0.3233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981239c799 code=0x7ffc0000 [ 1648.156752][ T28] audit: type=1326 audit(1773941899.515:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17438 comm="syz.0.3233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981239c799 code=0x7ffc0000 [ 1648.242372][ T28] audit: type=1326 audit(1773941899.525:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17438 comm="syz.0.3233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f981239c799 code=0x7ffc0000 [ 1648.427602][ T28] audit: type=1326 audit(1773941899.525:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17438 comm="syz.0.3233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981239c799 code=0x7ffc0000 [ 1656.201357][T17479] all (unregistering): Released all slaves [ 1660.397487][T17499] capability: warning: `syz.2.3245' uses 32-bit capabilities (legacy support in use) [ 1660.908692][ T9856] Bluetooth: hci4: command 0x0406 tx timeout [ 1663.506167][T17520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3249'. [ 1663.515669][T17520] vlan4: left allmulticast mode [ 1663.520713][T17520] bond0: left allmulticast mode [ 1663.525583][T17520] bond_slave_0: left allmulticast mode [ 1663.531905][T17520] bond_slave_1: left allmulticast mode [ 1663.537645][T17520] vlan4: left promiscuous mode [ 1663.542611][T17520] bond0: left promiscuous mode [ 1663.547746][T17520] bond_slave_0: left promiscuous mode [ 1663.553422][T17520] bond_slave_1: left promiscuous mode [ 1663.561387][T17520] bridge0: port 3(vlan4) entered disabled state [ 1663.578404][T17520] bridge_slave_1: left allmulticast mode [ 1663.584228][T17520] bridge_slave_1: left promiscuous mode [ 1663.590629][T17520] bridge0: port 2(bridge_slave_1) entered disabled state [ 1663.600345][T17520] bridge_slave_0: left allmulticast mode [ 1663.606462][T17520] bridge_slave_0: left promiscuous mode [ 1663.613031][T17520] bridge0: port 1(bridge_slave_0) entered disabled state [ 1663.700119][T17520] team0: Port device bridge0 removed [ 1663.976708][T17525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1663.990260][T17525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1668.481588][T17550] binfmt_misc: Unknown parameter 'trans' [ 1670.003270][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1670.010919][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1677.904997][T17592] bridge0: port 3(syz_tun) entered blocking state [ 1677.912226][T17592] bridge0: port 3(syz_tun) entered disabled state [ 1677.921427][T17592] syz_tun: entered promiscuous mode [ 1677.928282][T17592] bridge0: port 3(syz_tun) entered blocking state [ 1677.935613][T17592] bridge0: port 3(syz_tun) entered forwarding state [ 1685.922166][T17619] fuse: Bad value for 'fd' [ 1687.044515][T17624] overlayfs: failed to resolve './file0/file0': -2 [ 1687.842998][T17635] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1695.889179][T17668] siw: device registration error -23 [ 1697.449606][T17688] tmpfs: Unknown parameter 'ÿÿ' [ 1697.933831][T17687] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1700.732613][T17713] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3293'. [ 1700.760506][T17713] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3293'. [ 1701.638181][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 1701.638199][ T28] audit: type=1326 audit(1773941953.405:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17706 comm="syz.1.3292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbca999c799 code=0x7ffc0000 [ 1701.747341][ T28] audit: type=1326 audit(1773941953.405:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17706 comm="syz.1.3292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbca999c799 code=0x7ffc0000 [ 1701.807785][T17716] lo speed is unknown, defaulting to 1000 [ 1701.817440][ T28] audit: type=1326 audit(1773941953.405:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17706 comm="syz.1.3292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fbca999c799 code=0x7ffc0000 [ 1701.885936][ T28] audit: type=1326 audit(1773941953.415:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17706 comm="syz.1.3292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbca999c799 code=0x7ffc0000 [ 1701.933499][ T28] audit: type=1326 audit(1773941953.415:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17706 comm="syz.1.3292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbca999c799 code=0x7ffc0000 [ 1701.982276][ T28] audit: type=1326 audit(1773941953.465:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17706 comm="syz.1.3292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fbca999c799 code=0x7ffc0000 [ 1702.024008][ T28] audit: type=1326 audit(1773941953.465:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17706 comm="syz.1.3292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbca999c799 code=0x7ffc0000 [ 1702.064783][ T28] audit: type=1326 audit(1773941953.465:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17706 comm="syz.1.3292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbca999c799 code=0x7ffc0000 [ 1702.110763][ T28] audit: type=1326 audit(1773941953.465:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17706 comm="syz.1.3292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbca999c799 code=0x7ffc0000 [ 1703.308260][ T28] audit: type=1326 audit(1773941953.465:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17706 comm="syz.1.3292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbca999c799 code=0x7ffc0000 [ 1703.409471][T17729] relay: one or more items not logged [item size (56) > sub-buffer size (3)] [ 1705.281342][T17743] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3302'. [ 1705.329871][T17743] netlink: 'syz.1.3302': attribute type 6 has an invalid length. [ 1708.389080][T17757] netem: incorrect ge model size [ 1708.395184][T17757] netem: change failed [ 1709.285373][T17760] overlayfs: missing 'lowerdir' [ 1709.425253][T17760] netlink: 'syz.2.3296': attribute type 4 has an invalid length. [ 1709.434254][T17760] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3296'. [ 1709.446046][T17760] wlan1: mtu less than device minimum [ 1709.472298][T17760] overlayfs: empty lowerdir [ 1709.834911][T17766] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1710.330224][T17773] hub 8-0:1.0: USB hub found [ 1710.340629][T17773] hub 8-0:1.0: 1 port detected [ 1711.398007][T17773] all (unregistering): Released all slaves [ 1711.648981][T17779] loop5: detected capacity change from 0 to 128 [ 1711.695005][T17779] hpfs: bad mount options. [ 1716.498694][T17808] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1717.388768][T17816] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1718.278610][ T9856] Bluetooth: hci4: unexpected event for opcode 0x0403 [ 1720.515669][T17834] all (unregistering): Released all slaves [ 1723.118099][T17847] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1723.704648][T17865] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1726.677480][ T786] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 1727.519057][ T786] usb 6-1: config 5 has an invalid interface number: 138 but max is 0 [ 1727.527916][ T786] usb 6-1: config 5 has no interface number 0 [ 1727.534262][ T786] usb 6-1: config 5 interface 138 has no altsetting 0 [ 1727.546381][ T786] usb 6-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b7.6f [ 1727.630696][T17893] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3347'. [ 1727.899607][ T786] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1727.907772][ T786] usb 6-1: Product: syz [ 1727.912004][ T786] usb 6-1: Manufacturer: syz [ 1727.916766][ T786] usb 6-1: SerialNumber: syz [ 1728.346580][T17899] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1728.433288][ T786] usb 6-1: USB disconnect, device number 5 [ 1728.522727][T17872] udevd[17872]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:5.138/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1728.674454][T17906] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1728.761016][T17906] loop5: detected capacity change from 0 to 512 [ 1728.773598][T17906] EXT4-fs: Ignoring removed mblk_io_submit option [ 1728.982775][T17906] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 1729.122979][T17906] block device autoloading is deprecated and will be removed. [ 1729.132017][T17906] EXT4-fs (loop5): external journal has bad superblock [ 1730.285711][T17916] siw: device registration error -23 [ 1730.828932][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.836806][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.341416][ T9856] Bluetooth: hci4: unexpected event for opcode 0x1405 [ 1731.593570][T17930] loop5: detected capacity change from 0 to 4096 [ 1731.697395][T17930] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 1731.735539][T17930] UDF-fs: Scanning with blocksize 512 failed [ 1731.824646][T17930] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1733.224703][T17938] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1733.387828][ T5811] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 1733.592579][ T5811] usb 6-1: config 0 has an invalid interface number: 96 but max is 0 [ 1733.627454][ T5811] usb 6-1: config 0 has no interface number 0 [ 1733.634754][ T5811] usb 6-1: config 0 interface 96 altsetting 3 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 1733.650828][T17945] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1734.541306][ T5811] usb 6-1: config 0 interface 96 altsetting 3 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1734.587874][ T5811] usb 6-1: config 0 interface 96 has no altsetting 0 [ 1734.626231][ T5811] usb 6-1: New USB device found, idVendor=0b57, idProduct=6a8d, bcdDevice=33.74 [ 1734.657361][ T5811] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1734.672907][ T5811] usb 6-1: Product: syz [ 1734.682428][ T5811] usb 6-1: Manufacturer: syz [ 1734.687630][ T5811] usb 6-1: SerialNumber: syz [ 1734.703242][ T5811] usb 6-1: config 0 descriptor?? [ 1734.995541][ T5811] usb 6-1: USB disconnect, device number 6 [ 1736.817547][T17965] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1737.143158][T17972] overlayfs: missing 'lowerdir' [ 1737.170754][T17972] netlink: 'syz.1.3377': attribute type 4 has an invalid length. [ 1737.178642][T17972] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3377'. [ 1737.193897][T17972] .`: renamed from bond0 (while UP) [ 1737.259374][T17972] overlayfs: empty lowerdir [ 1737.267774][ T27] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1737.392114][T17974] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1737.457442][ T27] usb 6-1: Using ep0 maxpacket: 16 [ 1737.474220][ T27] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1737.506405][ T27] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1737.541640][ T27] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1737.553535][ T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1737.569657][ T27] usb 6-1: Product: syz [ 1737.574297][ T27] usb 6-1: Manufacturer: syz [ 1737.581180][ T27] usb 6-1: SerialNumber: syz [ 1737.831573][ T27] usb 6-1: 0:2 : does not exist [ 1737.855463][ T27] usb 6-1: unit 9 not found! [ 1737.866965][ T27] usb 6-1: 4:0: cannot get min/max values for control 1 (id 4) [ 1737.895985][ T27] usb 6-1: 4:0: cannot get min/max values for control 2 (id 4) [ 1737.933738][ T27] usb 6-1: 4:0: cannot get min/max values for control 3 (id 4) [ 1737.952574][ T27] usb 6-1: 4:0: cannot get min/max values for control 4 (id 4) [ 1737.976363][ T27] usb 6-1: 4:0: cannot get min/max values for control 5 (id 4) [ 1737.994817][ T27] usb 6-1: 4:0: cannot get min/max values for control 6 (id 4) [ 1738.088745][ T27] usb 6-1: USB disconnect, device number 7 [ 1738.656573][T17986] loop5: detected capacity change from 0 to 16 [ 1738.708800][T17986] erofs: (device loop5): mounted with root inode @ nid 36. [ 1739.017177][T17993] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1739.057406][ T5811] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1739.282416][ T5811] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1739.295340][ T5811] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1739.337004][ T5811] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1739.367118][ T5811] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1739.376356][ T5811] usb 6-1: Product: syz [ 1739.381109][ T5811] usb 6-1: Manufacturer: syz [ 1739.386039][ T5811] usb 6-1: SerialNumber: syz [ 1739.402404][ T5811] rtl8150 6-1:1.0: couldn't find required endpoints [ 1739.417782][ T5811] rtl8150: probe of 6-1:1.0 failed with error -5 [ 1739.604031][ T5811] usb 6-1: USB disconnect, device number 8 [ 1740.746892][T18026] loop5: detected capacity change from 0 to 1024 [ 1740.863448][T18026] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1741.101505][T15830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1742.712044][T18055] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 1743.340865][T18059] loop5: detected capacity change from 0 to 32768 [ 1743.632523][T18059] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1744.717777][T18076] tmpfs: Unknown parameter 'ÿÿ' [ 1745.617353][T18070] sch_tbf: burst 32855 is lower than device lo mtu (117440530) ! [ 1746.636704][T18059] XFS (loop5): Ending clean mount [ 1746.656202][T18059] XFS (loop5): Quotacheck needed: Please wait. [ 1746.762059][T18059] XFS (loop5): Quotacheck: Done. [ 1746.922485][T15830] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1748.067952][T18090] loop5: detected capacity change from 0 to 512 [ 1748.075958][T18090] EXT4-fs: Ignoring removed mblk_io_submit option [ 1748.103081][T18090] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 1748.184538][T18090] EXT4-fs (loop5): external journal has bad superblock [ 1749.428876][T18136] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 1751.042359][T18149] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1751.184422][T18154] loop5: detected capacity change from 0 to 1024 [ 1751.385883][T18154] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1751.443983][T18154] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1751.944667][T18164] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1752.821588][T15830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1754.798052][T18183] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1754.917894][T18185] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1755.287491][T18197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1755.304144][T18200] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3469'. [ 1755.482858][T18206] loop5: detected capacity change from 0 to 512 [ 1755.495782][T18206] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1755.584397][T18206] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1755.627733][T18206] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1755.742740][T18206] EXT4-fs error (device loop5): ext4_ext_remove_space:2929: inode #15: comm syz.5.3473: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 1755.793725][T18206] EXT4-fs (loop5): Remounting filesystem read-only [ 1755.936215][T15830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1758.475522][T18288] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 1758.511522][T18256] loop5: detected capacity change from 0 to 40427 [ 1758.550999][T18256] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 1758.559392][T18256] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 1758.638609][T18290] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1759.500785][T18256] F2FS-fs (loop5): invalid crc value [ 1761.151182][T18308] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1763.203003][T18326] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1765.766809][T18336] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1767.009057][T18342] syzkaller0: entered promiscuous mode [ 1767.014733][T18342] syzkaller0: entered allmulticast mode [ 1773.183807][T18389] loop5: detected capacity change from 0 to 512 [ 1773.232161][T18389] EXT4-fs error (device loop5): ext4_orphan_get:1398: inode #15: comm syz.5.3547: inode has both inline data and extents flags [ 1773.409001][T18389] EXT4-fs error (device loop5): ext4_orphan_get:1403: comm syz.5.3547: couldn't read orphan inode 15 (err -117) [ 1773.443438][T18389] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1773.655530][T15830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1774.305100][T18408] syzkaller0: entered promiscuous mode [ 1774.321932][T18408] syzkaller0: entered allmulticast mode [ 1777.669716][T18459] overlayfs: failed to clone upperpath [ 1781.768206][T18447] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1781.959306][T14659] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1782.150007][T14659] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1782.255918][T18508] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1782.848526][T14659] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1783.280847][T14659] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1783.540196][T18522] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1783.557582][T18522] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1783.566993][T18522] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1783.588152][T18522] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1783.596083][T18522] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1783.607616][T18522] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1783.796136][T18519] lo speed is unknown, defaulting to 1000 [ 1783.899475][T14659] tipc: Disabling bearer [ 1783.910620][T14659] tipc: Disabling bearer [ 1783.933300][T14659] tipc: Left network mode [ 1785.091476][T18519] chnl_net:caif_netlink_parms(): no params data found [ 1785.129026][T18510] loop5: detected capacity change from 0 to 32768 [ 1785.255436][T18510] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1785.335385][T18510] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop5": -EINTR [ 1785.383414][T18510] XFS (loop5): log mount failed [ 1785.702809][ T9856] Bluetooth: hci1: command tx timeout [ 1786.197850][T18519] bridge0: port 1(bridge_slave_0) entered blocking state [ 1786.223781][T18519] bridge0: port 1(bridge_slave_0) entered disabled state [ 1786.237540][T18519] bridge_slave_0: entered allmulticast mode [ 1786.254438][T18519] bridge_slave_0: entered promiscuous mode [ 1786.315301][T18519] bridge0: port 2(bridge_slave_1) entered blocking state [ 1786.335388][T18519] bridge0: port 2(bridge_slave_1) entered disabled state [ 1786.356511][T18519] bridge_slave_1: entered allmulticast mode [ 1786.368984][T18519] bridge_slave_1: entered promiscuous mode [ 1786.504907][T14659] bond0: (slave wlan1): Releasing backup interface [ 1786.542606][T14659] mac80211_hwsim hwsim3 wlan1 (unregistering): left promiscuous mode [ 1786.775380][T18519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1786.928215][T18519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1787.127652][T14659] hsr_slave_0: left promiscuous mode [ 1787.147657][T14659] hsr_slave_1: left promiscuous mode [ 1787.181315][T14659] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1787.201406][T14659] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1787.307574][T14659] bridge_slave_1: left allmulticast mode [ 1787.458588][T14659] bridge_slave_1: left promiscuous mode [ 1787.543264][T14659] bridge0: port 2(bridge_slave_1) entered disabled state [ 1787.769991][ T9856] Bluetooth: hci1: command tx timeout [ 1788.099262][T14659] bridge_slave_0: left allmulticast mode [ 1788.104994][T14659] bridge_slave_0: left promiscuous mode [ 1788.129181][T14659] bridge0: port 1(bridge_slave_0) entered disabled state [ 1788.248271][T14659] veth1_macvtap: left promiscuous mode [ 1788.256557][T14659] veth0_macvtap: left promiscuous mode [ 1788.264292][T14659] veth1_vlan: left promiscuous mode [ 1788.277783][T14659] veth0_vlan: left promiscuous mode [ 1789.847526][ T9856] Bluetooth: hci1: command tx timeout [ 1790.425405][T14659] team0 (unregistering): Port device 26±ÿ removed [ 1790.645397][T14659] team0 (unregistering): Port device team_slave_0 removed [ 1790.818647][T14659] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1790.827864][T14659] bond_slave_1 (unregistering): left promiscuous mode [ 1791.030428][T14659] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1791.061707][T14659] bond_slave_0 (unregistering): left promiscuous mode [ 1791.069325][ T5810] infiniband syz1: ib_query_port failed (-19) [ 1791.927664][ T9856] Bluetooth: hci1: command tx timeout [ 1792.183796][T14659] team0 (unregistering): Port device bridge0 removed [ 1792.261835][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.271697][T14659] bond0 (unregistering): Released all slaves [ 1792.284054][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.530134][T18613] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1792.672971][T18519] team0: Port device team_slave_0 added [ 1792.722110][T18519] team0: Port device team_slave_1 added [ 1792.831639][T18519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1792.838882][T18519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1792.865747][T18519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1792.943898][T18519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1792.962493][T18519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1793.017418][T18519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1793.214174][T18519] hsr_slave_0: entered promiscuous mode [ 1793.242131][T18519] hsr_slave_1: entered promiscuous mode [ 1793.282798][T18519] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1793.297250][T18519] Cannot create hsr debugfs directory [ 1793.454444][T14659] IPVS: stop unused estimator thread 0... [ 1793.530066][T18673] loop5: detected capacity change from 0 to 40427 [ 1793.628611][T18673] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 1793.697822][T18673] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1793.807979][T18673] F2FS-fs (loop5): invalid crc value [ 1793.922404][T18673] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1794.199136][T18673] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1794.206398][T18673] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1794.957576][T18722] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1795.585201][T18519] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1795.604115][T18519] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1795.622632][T18519] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1795.646062][T18519] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1795.904519][T18519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1795.961557][T18519] 8021q: adding VLAN 0 to HW filter on device team0 [ 1796.220341][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 1796.227840][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1796.535825][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 1796.543519][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1797.397175][T18519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1797.500149][T18519] veth0_vlan: entered promiscuous mode [ 1797.524407][T18519] veth1_vlan: entered promiscuous mode [ 1797.570829][T18519] veth0_macvtap: entered promiscuous mode [ 1797.582273][T18519] veth1_macvtap: entered promiscuous mode [ 1797.612432][T18519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1797.647278][T18519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1797.667348][T18519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1797.688232][T18519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1797.704093][T18519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1797.727013][T18519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1797.753110][T18519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1797.777423][T18519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1797.797622][T18519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1797.809077][T18519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1797.827594][T18519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1797.852353][T18519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1797.881361][T18519] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1797.890913][T18519] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1797.907317][T18519] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1797.916286][T18519] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1798.178777][T16845] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1798.207039][T16845] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1798.271422][T16845] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1798.288160][T16845] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1800.687301][T17293] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1800.899284][T17293] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1800.934813][T17293] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1800.966165][T17293] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1800.997475][T17293] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1801.006277][T17293] usb 6-1: SerialNumber: syz [ 1801.322031][T17293] usb 6-1: 0:2 : does not exist [ 1801.374078][T17293] usb 6-1: USB disconnect, device number 9 [ 1801.460253][T18528] udevd[18528]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1801.633978][T18807] loop2: detected capacity change from 0 to 32768 [ 1802.471793][T18807] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1802.514890][T18807] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1802.707693][T18807] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 1802.844569][T18807] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 1803.907384][ T786] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1804.104519][ T786] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1804.117050][ T786] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1804.139127][ T786] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1804.155131][ T786] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1804.163773][ T786] usb 3-1: Manufacturer: syz [ 1804.188233][ T786] usb 3-1: config 0 descriptor?? [ 1804.317940][ T786] rc_core: IR keymap rc-hauppauge not found [ 1804.333413][ T786] Registered IR keymap rc-empty [ 1804.353944][ T786] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1804.372931][ T786] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input11 [ 1804.432127][ T786] usb 3-1: USB disconnect, device number 7 [ 1804.580125][T18862] loop5: detected capacity change from 0 to 32768 [ 1804.629254][T18862] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1804.886431][T15830] ocfs2: Unmounting device (7,5) on (node local) [ 1805.337391][T17292] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1805.556433][T17292] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1805.566640][T17292] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1805.587918][T17292] usb 3-1: config 0 descriptor?? [ 1805.596325][T17292] cp210x 3-1:0.0: cp210x converter detected [ 1805.926359][T18903] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1805.935054][T12207] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1806.259395][T12207] usb 6-1: Using ep0 maxpacket: 8 [ 1806.390809][T12207] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1806.483989][T12207] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1806.743172][T12207] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1806.771592][T17292] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1806.783284][T12207] pvrusb2: ********** [ 1806.795832][T12207] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1806.837337][T12207] pvrusb2: Important functionality might not be entirely working. [ 1806.855465][T12207] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1806.877323][T12207] pvrusb2: ********** [ 1806.961210][ T2318] pvrusb2: Invalid write control endpoint [ 1806.997422][T17292] cp210x 3-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 1807.013769][T17292] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 1807.027954][T17292] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1807.059932][T17292] usb 3-1: USB disconnect, device number 8 [ 1807.091423][T17292] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1807.105034][T17292] cp210x 3-1:0.0: device disconnected [ 1807.153274][ T2318] pvrusb2: Invalid write control endpoint [ 1807.171995][ T2318] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1807.195724][ T2318] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1807.204494][ T2318] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1807.223343][ T2318] pvrusb2: Device being rendered inoperable [ 1807.241921][T14584] usb 6-1: USB disconnect, device number 10 [ 1807.251840][ T2318] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1807.262764][ T2318] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1807.292471][ T2318] pvrusb2: Attached sub-driver cx25840 [ 1807.317573][ T2318] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1807.330190][ T2318] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1809.102750][T18942] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3716'. [ 1809.297776][T18950] fuse: Bad value for 'fd' [ 1810.250726][T18954] loop2: detected capacity change from 0 to 1024 [ 1810.304309][T18954] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1810.325715][T18954] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1810.380937][T18954] EXT4-fs error (device loop2): ext4_map_blocks:718: inode #15: block 3: comm syz.2.3721: lblock 3 mapped to illegal pblock 3 (length 2) [ 1810.478543][ T59] EXT4-fs error (device loop2): ext4_map_blocks:718: inode #15: comm kworker/u4:4: lblock 0 mapped to illegal pblock 0 (length 1) [ 1810.541371][ T59] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 1810.556905][ T59] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1810.556905][ T59] [ 1810.574873][T18519] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1810.774067][T18966] loop2: detected capacity change from 0 to 4096 [ 1810.791570][T18966] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 1810.918961][ T786] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1811.108426][ T786] usb 6-1: Using ep0 maxpacket: 16 [ 1811.116972][ T786] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1811.137737][ T786] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1811.160007][ T786] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1811.187393][ T786] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1811.206385][ T786] usb 6-1: Product: syz [ 1811.226654][ T786] usb 6-1: Manufacturer: syz [ 1811.251467][ T786] usb 6-1: SerialNumber: syz [ 1811.459920][T18975] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1812.113051][ T786] usb 6-1: 0:2 : does not exist [ 1812.234290][ T786] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1812.294647][ T786] usb 6-1: USB disconnect, device number 11 [ 1812.373832][T18528] udevd[18528]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1812.455058][T18981] fuse: Bad value for 'fd' [ 1813.504180][T18969] loop2: detected capacity change from 0 to 40427 [ 1813.518930][T18969] F2FS-fs (loop2): invalid crc value [ 1813.536471][T18969] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1813.648505][T18969] F2FS-fs (loop2): Start checkpoint disabled! [ 1813.671934][T18969] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1813.815919][T18969] syz.2.3725: attempt to access beyond end of device [ 1813.815919][T18969] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1814.009727][T19004] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1814.076564][T19004] loop5: detected capacity change from 0 to 512 [ 1814.089792][T19004] EXT4-fs: Ignoring removed mblk_io_submit option [ 1814.216305][T19004] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 1814.226790][T19004] EXT4-fs (loop5): external journal has bad superblock [ 1815.000487][T16845] kworker/u4:2: attempt to access beyond end of device [ 1815.000487][T16845] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 1815.087696][T19008] fuse: Bad value for 'fd' [ 1815.184972][T16845] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1815.196533][T16845] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1815.233362][T16845] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1816.817989][T19032] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1817.517380][T19036] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1819.205291][T14022] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1820.379032][T14022] usb 6-1: device descriptor read/all, error -71 [ 1820.973446][T19071] 8021q: adding VLAN 0 to HW filter on device .` [ 1821.113391][T19071] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1825.966308][T19122] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1827.129879][ C1] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 1827.502858][T19143] loop5: detected capacity change from 0 to 8192 [ 1827.679395][T19148] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1828.640945][T19140] loop2: detected capacity change from 0 to 32768 [ 1828.705748][T19140] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1828.878701][T19140] XFS (loop2): Ending clean mount [ 1828.911563][T19140] XFS (loop2): Quotacheck needed: Please wait. [ 1829.738646][T19140] XFS (loop2): Quotacheck: Done. [ 1829.949043][T18519] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1830.476426][T19174] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1830.535736][T19174] loop5: detected capacity change from 0 to 512 [ 1830.550140][T19174] EXT4-fs: Ignoring removed mblk_io_submit option [ 1830.595992][T19174] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 1830.606492][T19174] EXT4-fs (loop5): external journal has bad superblock [ 1832.036316][T19189] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1833.448884][T19194] loop5: detected capacity change from 0 to 32768 [ 1833.560619][T19194] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1833.827379][T19194] XFS (loop5): Ending clean mount [ 1833.908589][T19194] XFS (loop5): Quotacheck needed: Please wait. [ 1834.079937][T19194] XFS (loop5): Quotacheck: Done. [ 1834.123022][T19236] loop2: detected capacity change from 0 to 40427 [ 1834.148809][T19236] F2FS-fs (loop2): invalid crc value [ 1834.195315][T19236] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1834.366683][T19236] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1834.644875][T18519] syz-executor: attempt to access beyond end of device [ 1834.644875][T18519] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1834.676894][T18519] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1835.069950][T15830] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1837.287435][ T786] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1837.517306][ T786] usb 3-1: Using ep0 maxpacket: 8 [ 1837.525195][ T786] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 1837.537347][ T786] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1837.553285][ T786] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1837.564643][ T786] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1837.586442][ T786] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1837.607447][ T786] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1837.623359][ T786] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1837.635233][ T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1837.754355][T19332] overlayfs: failed to clone upperpath [ 1837.869841][ T786] usb 3-1: GET_CAPABILITIES returned 0 [ 1837.879773][ T786] usbtmc 3-1:16.0: can't read capabilities [ 1839.335505][ T786] usb 3-1: USB disconnect, device number 9 [ 1840.272589][ T786] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1840.473315][ T786] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1840.490067][ T786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1840.507430][ T786] usb 3-1: Product: syz [ 1840.511864][ T786] usb 3-1: Manufacturer: syz [ 1840.523242][ T786] usb 3-1: SerialNumber: syz [ 1840.531808][ T786] usb 3-1: config 0 descriptor?? [ 1840.542555][ T786] hub 3-1:0.0: bad descriptor, ignoring hub [ 1840.557560][ T786] hub: probe of 3-1:0.0 failed with error -5 [ 1840.878105][ T786] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1840.904334][ T786] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1840.917743][ T786] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1840.927532][ T786] usb 3-1: media controller created [ 1841.085529][ T786] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1841.792059][ T786] DVB: Unable to find symbol dib7000p_attach() [ 1841.812009][ T786] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1841.906395][T19379] overlayfs: failed to clone upperpath [ 1841.916378][ T786] rc_core: IR keymap rc-dib0700-rc5 not found [ 1841.935499][ T786] Registered IR keymap rc-empty [ 1841.943028][ T786] dvb-usb: could not initialize remote control. [ 1841.954635][ T786] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1842.120914][T19384] tmpfs: Too small a size for current use [ 1842.263778][T17293] usb 3-1: USB disconnect, device number 10 [ 1842.380773][T17293] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1842.465698][T19395] loop5: detected capacity change from 0 to 64 [ 1844.247340][ T786] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1844.437821][ T786] usb 3-1: Using ep0 maxpacket: 16 [ 1844.453121][ T786] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1844.473680][ T786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1844.483289][ T786] usb 3-1: Product: syz [ 1844.493738][ T786] usb 3-1: Manufacturer: syz [ 1844.515086][ T786] usb 3-1: SerialNumber: syz [ 1844.553878][ T786] usb 3-1: config 0 descriptor?? [ 1844.590453][ T786] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1845.650805][T19447] overlayfs: failed to clone upperpath [ 1845.825421][ T786] usb 3-1: Quatech SSU-100 USB to Serial Driver converter now attached to ttyUSB0 [ 1846.034964][T17293] usb 3-1: USB disconnect, device number 11 [ 1846.066939][T17293] ssu100 ttyUSB0: Quatech SSU-100 USB to Serial Driver converter now disconnected from ttyUSB0 [ 1846.104844][T17293] ssu100 3-1:0.0: device disconnected [ 1847.017423][ T23] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1847.230465][ T23] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1847.256731][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1847.287140][ T23] usb 3-1: config 0 descriptor?? [ 1847.959092][ T23] usb 3-1: Cannot set autoneg [ 1847.964537][ T23] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71 [ 1847.998748][ T23] usb 3-1: USB disconnect, device number 12 [ 1849.097890][T19502] loop2: detected capacity change from 0 to 40427 [ 1849.128529][T19502] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x7ffff [ 1849.153597][T19502] F2FS-fs (loop2): invalid crc value [ 1849.182038][T19502] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1849.318134][T19502] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1849.460209][T19502] F2FS-fs (loop2): Unexpected flush for atomic writes: ino=10, npages=2 [ 1849.480331][T19502] syz.2.3891: attempt to access beyond end of device [ 1849.480331][T19502] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 1849.544348][T18519] syz-executor: attempt to access beyond end of device [ 1849.544348][T18519] loop2: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 1849.561217][T18519] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1849.574825][T19519] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3898'. [ 1849.977354][T14022] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1850.596644][T14022] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1850.626432][T14022] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1850.646795][T14022] usb 6-1: Product: syz [ 1850.657347][T14022] usb 6-1: Manufacturer: syz [ 1850.662314][T14022] usb 6-1: SerialNumber: syz [ 1850.681541][T14022] usb 6-1: config 0 descriptor?? [ 1850.844519][T19543] fuse: root generation should be zero [ 1851.040160][T19554] block nbd2: NBD_DISCONNECT [ 1851.058212][T19554] block nbd2: Disconnected due to user request. [ 1851.079382][T19554] block nbd2: shutting down sockets [ 1851.792207][T14022] usb 6-1: ATUSB: AT86RF230 version 226 [ 1852.247964][T14022] usb 6-1: Firmware version (0.0) predates our first public release. [ 1852.256406][T14022] usb 6-1: Please update to version 0.2 or newer [ 1852.389701][T14022] usb 6-1: USB disconnect, device number 14 [ 1853.037032][T19596] loop2: detected capacity change from 0 to 2048 [ 1853.088654][T19596] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1853.690897][T19611] netlink: 'syz.0.3933': attribute type 10 has an invalid length. [ 1853.708440][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.716306][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.745092][T19611] syz_tun: entered promiscuous mode [ 1853.871834][T19611] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1854.623991][T19620] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1855.117399][T19629] loop5: detected capacity change from 0 to 2048 [ 1855.907444][ T5810] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1856.106090][T19653] overlayfs: failed to clone upperpath [ 1856.131386][ T5810] usb 3-1: Using ep0 maxpacket: 32 [ 1856.150330][ T5810] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 1856.159201][ T5810] usb 3-1: config 0 has no interface number 0 [ 1856.167584][ T5810] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1856.213301][ T5810] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1856.237878][ T5810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1856.278095][ T5810] usb 3-1: Product: syz [ 1856.282391][ T5810] usb 3-1: Manufacturer: syz [ 1856.287125][ T5810] usb 3-1: SerialNumber: syz [ 1856.310720][ T5810] usb 3-1: config 0 descriptor?? [ 1856.333940][ T5810] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1856.356388][ T5810] em28xx 3-1:0.132: Video interface 132 found: [ 1856.802983][T19672] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1857.022490][ T5810] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 1857.639948][ T5810] em28xx 3-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1857.676673][ T5810] em28xx 3-1:0.132: board has no eeprom [ 1857.777392][ T5810] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1857.786785][ T5810] em28xx 3-1:0.132: analog set to bulk mode. [ 1857.797878][T12207] em28xx 3-1:0.132: Registering V4L2 extension [ 1857.998016][ T5810] usb 3-1: USB disconnect, device number 13 [ 1858.009781][T12207] em28xx 3-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 1858.029096][ T5810] em28xx 3-1:0.132: Disconnecting em28xx [ 1858.245593][T12207] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 1858.272365][T12207] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 1858.296487][T12207] em28xx 3-1:0.132: No AC97 audio processor [ 1858.379218][T12207] usb 3-1: Decoder not found [ 1858.389758][T12207] em28xx 3-1:0.132: failed to create media graph [ 1858.416715][T12207] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 1858.460754][T12207] em28xx 3-1:0.132: Remote control support is not available for this card. [ 1858.462461][T19694] ================================================================== [ 1858.477811][T19694] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xca/0x430 [ 1858.485323][T19694] Read of size 8 at addr ffff888067554738 by task v4l_id/19694 [ 1858.493438][T19694] [ 1858.495941][T19694] CPU: 0 PID: 19694 Comm: v4l_id Not tainted syzkaller #0 [ 1858.503091][T19694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1858.513474][T19694] Call Trace: [ 1858.516780][T19694] [ 1858.519768][T19694] dump_stack_lvl+0x18c/0x250 [ 1858.524484][T19694] ? __lock_acquire+0x7d40/0x7d40 [ 1858.529636][T19694] ? show_regs_print_info+0x20/0x20 [ 1858.534878][T19694] ? load_image+0x400/0x400 [ 1858.539500][T19694] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 1858.545282][T19694] ? __virt_addr_valid+0x18c/0x540 [ 1858.550541][T19694] ? __virt_addr_valid+0x469/0x540 [ 1858.555856][T19694] print_report+0xa8/0x210 [ 1858.560311][T19694] ? v4l2_fh_open+0xca/0x430 [ 1858.564934][T19694] kasan_report+0x117/0x150 [ 1858.569658][T19694] ? v4l2_fh_open+0xca/0x430 [ 1858.574652][T19694] v4l2_fh_open+0xca/0x430 [ 1858.579635][T19694] em28xx_v4l2_open+0x157/0x980 [ 1858.584871][T19694] v4l2_open+0x212/0x360 [ 1858.589759][T19694] chrdev_open+0x5cc/0x6a0 [ 1858.594300][T19694] ? cd_forget+0x160/0x160 [ 1858.598833][T19694] ? fsnotify_perm+0x3ed/0x5e0 [ 1858.603720][T19694] ? cd_forget+0x160/0x160 [ 1858.608543][T19694] do_dentry_open+0x8c6/0x1500 [ 1858.613779][T19694] path_openat+0x27f1/0x3230 [ 1858.618756][T19694] ? do_sys_openat2+0xda/0x1d0 [ 1858.623641][T19694] ? verify_lock_unused+0x140/0x140 [ 1858.629045][T19694] ? do_filp_open+0x430/0x430 [ 1858.633856][T19694] ? __virt_addr_valid+0x18c/0x540 [ 1858.639100][T19694] do_filp_open+0x1f5/0x430 [ 1858.643889][T19694] ? vfs_tmpfile+0x490/0x490 [ 1858.648616][T19694] ? _raw_spin_unlock+0x28/0x40 [ 1858.653793][T19694] ? alloc_fd+0x58f/0x630 [ 1858.658169][T19694] do_sys_openat2+0x134/0x1d0 [ 1858.663137][T19694] ? do_sys_open+0xe0/0xe0 [ 1858.667676][T19694] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1858.674179][T19694] ? lock_chain_count+0x20/0x20 [ 1858.679227][T19694] ? lock_chain_count+0x20/0x20 [ 1858.684338][T19694] __x64_sys_openat+0x139/0x160 [ 1858.689948][T19694] do_syscall_64+0x55/0xa0 [ 1858.694492][T19694] ? clear_bhb_loop+0x40/0x90 [ 1858.699322][T19694] ? clear_bhb_loop+0x40/0x90 [ 1858.704587][T19694] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1858.710810][T19694] RIP: 0033:0x7fd0e84a7407 [ 1858.715362][T19694] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1858.735519][T19694] RSP: 002b:00007ffcc7ea5810 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1858.744758][T19694] RAX: ffffffffffffffda RBX: 00007fd0e8b64880 RCX: 00007fd0e84a7407 [ 1858.753121][T19694] RDX: 0000000000000000 RSI: 00007ffcc7ea5f1a RDI: ffffffffffffff9c [ 1858.761830][T19694] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1858.770593][T19694] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1858.779822][T19694] R13: 00007ffcc7ea5a60 R14: 00007fd0e8c61000 R15: 0000563eca6a34d8 [ 1858.788209][T19694] [ 1858.791561][T19694] [ 1858.794168][T19694] Allocated by task 12207: [ 1858.798975][T19694] kasan_set_track+0x4e/0x70 [ 1858.803596][T19694] __kasan_kmalloc+0x8f/0xa0 [ 1858.808214][T19694] em28xx_v4l2_init+0x10b/0x2e70 [ 1858.813215][T19694] em28xx_init_extension+0x11c/0x1b0 [ 1858.818735][T19694] process_scheduled_works+0xa5d/0x15d0 [ 1858.824353][T19694] worker_thread+0xa55/0xfc0 [ 1858.829080][T19694] kthread+0x2fa/0x390 [ 1858.833182][T19694] ret_from_fork+0x48/0x80 [ 1858.838025][T19694] ret_from_fork_asm+0x11/0x20 [ 1858.842910][T19694] [ 1858.845374][T19694] Freed by task 12207: [ 1858.849704][T19694] kasan_set_track+0x4e/0x70 [ 1858.854520][T19694] kasan_save_free_info+0x2e/0x50 [ 1858.859847][T19694] ____kasan_slab_free+0x126/0x1e0 [ 1858.864992][T19694] slab_free_freelist_hook+0x130/0x1a0 [ 1858.870484][T19694] __kmem_cache_free+0xba/0x1e0 [ 1858.875722][T19694] em28xx_v4l2_init+0x1670/0x2e70 [ 1858.881124][T19694] em28xx_init_extension+0x11c/0x1b0 [ 1858.886617][T19694] process_scheduled_works+0xa5d/0x15d0 [ 1858.892277][T19694] worker_thread+0xa55/0xfc0 [ 1858.896980][T19694] kthread+0x2fa/0x390 [ 1858.901077][T19694] ret_from_fork+0x48/0x80 [ 1858.905518][T19694] ret_from_fork_asm+0x11/0x20 [ 1858.910419][T19694] [ 1858.912822][T19694] Last potentially related work creation: [ 1858.918659][T19694] kasan_save_stack+0x3e/0x60 [ 1858.923726][T19694] __kasan_record_aux_stack+0xaf/0xc0 [ 1858.929954][T19694] insert_work+0x3d/0x310 [ 1858.934497][T19694] __queue_work+0xc39/0x1020 [ 1858.939477][T19694] queue_work_on+0x128/0x1f0 [ 1858.944264][T19694] macvlan_handle_frame+0xf89/0x1350 [ 1858.949776][T19694] __netif_receive_skb_core+0xfab/0x3af0 [ 1858.955880][T19694] __netif_receive_skb+0x74/0x290 [ 1858.961115][T19694] process_backlog+0x391/0x6f0 [ 1858.965946][T19694] __napi_poll+0xc0/0x460 [ 1858.970315][T19694] net_rx_action+0x616/0xc40 [ 1858.975312][T19694] handle_softirqs+0x280/0x820 [ 1858.980277][T19694] __irq_exit_rcu+0xd3/0x190 [ 1858.985097][T19694] irq_exit_rcu+0x9/0x20 [ 1858.989400][T19694] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1858.995168][T19694] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1859.001279][T19694] [ 1859.003633][T19694] Second to last potentially related work creation: [ 1859.010242][T19694] kasan_save_stack+0x3e/0x60 [ 1859.015051][T19694] __kasan_record_aux_stack+0xaf/0xc0 [ 1859.020452][T19694] insert_work+0x3d/0x310 [ 1859.024892][T19694] __queue_work+0xc39/0x1020 [ 1859.029506][T19694] queue_work_on+0x128/0x1f0 [ 1859.034681][T19694] macvlan_handle_frame+0xf89/0x1350 [ 1859.040092][T19694] __netif_receive_skb_core+0xfab/0x3af0 [ 1859.045844][T19694] __netif_receive_skb+0x74/0x290 [ 1859.050984][T19694] process_backlog+0x391/0x6f0 [ 1859.055893][T19694] __napi_poll+0xc0/0x460 [ 1859.060697][T19694] net_rx_action+0x616/0xc40 [ 1859.065396][T19694] handle_softirqs+0x280/0x820 [ 1859.070545][T19694] __irq_exit_rcu+0xd3/0x190 [ 1859.075180][T19694] irq_exit_rcu+0x9/0x20 [ 1859.079627][T19694] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1859.085523][T19694] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1859.091710][T19694] [ 1859.094075][T19694] The buggy address belongs to the object at ffff888067554000 [ 1859.094075][T19694] which belongs to the cache kmalloc-8k of size 8192 [ 1859.108404][T19694] The buggy address is located 1848 bytes inside of [ 1859.108404][T19694] freed 8192-byte region [ffff888067554000, ffff888067556000) [ 1859.122407][T19694] [ 1859.124887][T19694] The buggy address belongs to the physical page: [ 1859.131510][T19694] page:ffffea00019d5400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x67550 [ 1859.142355][T19694] head:ffffea00019d5400 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1859.151946][T19694] anon flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1859.161468][T19694] page_type: 0xffffffff() [ 1859.165919][T19694] raw: 00fff00000000840 ffff888017c42280 ffffea00019d9e00 dead000000000005 [ 1859.175158][T19694] raw: 0000000000000000 0000000080020002 00000001ffffffff 0000000000000000 [ 1859.184120][T19694] page dumped because: kasan: bad access detected [ 1859.190693][T19694] page_owner tracks the page as allocated [ 1859.196607][T19694] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5773, tgid 5773 (syz-executor), ts 87456885900, free_ts 87416553484 [ 1859.218617][T19694] post_alloc_hook+0x1c1/0x200 [ 1859.223613][T19694] get_page_from_freelist+0x1951/0x19e0 [ 1859.229360][T19694] __alloc_pages+0x1f0/0x460 [ 1859.234068][T19694] alloc_slab_page+0x5d/0x160 [ 1859.239139][T19694] new_slab+0x87/0x2d0 [ 1859.243512][T19694] ___slab_alloc+0xc5d/0x12f0 [ 1859.248494][T19694] __kmem_cache_alloc_node+0x19e/0x250 [ 1859.254270][T19694] kmalloc_trace+0x2a/0xe0 [ 1859.258725][T19694] macvlan_common_newlink+0x523/0x19d0 [ 1859.264682][T19694] rtnl_newlink+0x1542/0x20a0 [ 1859.269866][T19694] rtnetlink_rcv_msg+0x869/0xfa0 [ 1859.274934][T19694] netlink_rcv_skb+0x241/0x4d0 [ 1859.279828][T19694] netlink_unicast+0x751/0x8d0 [ 1859.284900][T19694] netlink_sendmsg+0x8d0/0xbf0 [ 1859.289702][T19694] __sys_sendto+0x4a9/0x6b0 [ 1859.294322][T19694] __x64_sys_sendto+0xde/0xf0 [ 1859.299121][T19694] page last free stack trace: [ 1859.303850][T19694] free_unref_page_prepare+0x7b2/0x8c0 [ 1859.309440][T19694] free_unref_page+0x32/0x2e0 [ 1859.314228][T19694] __unfreeze_partials+0x1cf/0x210 [ 1859.319448][T19694] put_cpu_partial+0x17c/0x250 [ 1859.324229][T19694] __slab_free+0x319/0x400 [ 1859.329104][T19694] qlist_free_all+0x75/0xd0 [ 1859.333741][T19694] kasan_quarantine_reduce+0x143/0x160 [ 1859.339319][T19694] __kasan_slab_alloc+0x22/0x80 [ 1859.344458][T19694] slab_post_alloc_hook+0x6e/0x4b0 [ 1859.349700][T19694] kmem_cache_alloc_node+0x14c/0x320 [ 1859.355033][T19694] __alloc_skb+0x103/0x2c0 [ 1859.359630][T19694] netlink_ack+0x376/0x1180 [ 1859.364273][T19694] netlink_rcv_skb+0x2c5/0x4d0 [ 1859.369152][T19694] netlink_unicast+0x751/0x8d0 [ 1859.373971][T19694] netlink_sendmsg+0x8d0/0xbf0 [ 1859.378951][T19694] __sys_sendto+0x4a9/0x6b0 [ 1859.383667][T19694] [ 1859.386099][T19694] Memory state around the buggy address: [ 1859.392108][T19694] ffff888067554600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1859.400379][T19694] ffff888067554680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1859.408556][T19694] >ffff888067554700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1859.417077][T19694] ^ [ 1859.423100][T19694] ffff888067554780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1859.431283][T19694] ffff888067554800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1859.440317][T19694] ================================================================== [ 1859.452681][ C1] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 1859.464801][ T5810] em28xx 3-1:0.132: Closing input extension [ 1859.489548][T19694] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1859.497176][T19694] CPU: 1 PID: 19694 Comm: v4l_id Not tainted syzkaller #0 [ 1859.504411][T19694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1859.514946][T19694] Call Trace: [ 1859.518356][T19694] [ 1859.521436][T19694] dump_stack_lvl+0x18c/0x250 [ 1859.526434][T19694] ? show_regs_print_info+0x20/0x20 [ 1859.531780][T19694] ? load_image+0x400/0x400 [ 1859.536426][T19694] panic+0x2dc/0x730 [ 1859.540378][T19694] ? bpf_jit_dump+0xd0/0xd0 [ 1859.545028][T19694] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 1859.551644][T19694] ? _raw_spin_unlock+0x40/0x40 [ 1859.556833][T19694] ? print_memory_metadata+0x314/0x400 [ 1859.562526][T19694] ? v4l2_fh_open+0xca/0x430 [ 1859.567430][T19694] check_panic_on_warn+0x84/0xa0 [ 1859.572521][T19694] ? v4l2_fh_open+0xca/0x430 [ 1859.577345][T19694] end_report+0x6f/0x130 [ 1859.582255][T19694] kasan_report+0x128/0x150 [ 1859.586999][T19694] ? v4l2_fh_open+0xca/0x430 [ 1859.591934][T19694] v4l2_fh_open+0xca/0x430 [ 1859.596533][T19694] em28xx_v4l2_open+0x157/0x980 [ 1859.601935][T19694] v4l2_open+0x212/0x360 [ 1859.606436][T19694] chrdev_open+0x5cc/0x6a0 [ 1859.611077][T19694] ? cd_forget+0x160/0x160 [ 1859.615709][T19694] ? fsnotify_perm+0x3ed/0x5e0 [ 1859.620849][T19694] ? cd_forget+0x160/0x160 [ 1859.625490][T19694] do_dentry_open+0x8c6/0x1500 [ 1859.630538][T19694] path_openat+0x27f1/0x3230 [ 1859.635399][T19694] ? do_sys_openat2+0xda/0x1d0 [ 1859.640217][T19694] ? verify_lock_unused+0x140/0x140 [ 1859.645901][T19694] ? do_filp_open+0x430/0x430 [ 1859.650980][T19694] ? __virt_addr_valid+0x18c/0x540 [ 1859.656331][T19694] do_filp_open+0x1f5/0x430 [ 1859.661074][T19694] ? vfs_tmpfile+0x490/0x490 [ 1859.665916][T19694] ? _raw_spin_unlock+0x28/0x40 [ 1859.671158][T19694] ? alloc_fd+0x58f/0x630 [ 1859.675908][T19694] do_sys_openat2+0x134/0x1d0 [ 1859.681004][T19694] ? do_sys_open+0xe0/0xe0 [ 1859.685571][T19694] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1859.691894][T19694] ? lock_chain_count+0x20/0x20 [ 1859.696991][T19694] ? lock_chain_count+0x20/0x20 [ 1859.702154][T19694] __x64_sys_openat+0x139/0x160 [ 1859.707140][T19694] do_syscall_64+0x55/0xa0 [ 1859.711961][T19694] ? clear_bhb_loop+0x40/0x90 [ 1859.717297][T19694] ? clear_bhb_loop+0x40/0x90 [ 1859.722030][T19694] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1859.728234][T19694] RIP: 0033:0x7fd0e84a7407 [ 1859.732869][T19694] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1859.752957][T19694] RSP: 002b:00007ffcc7ea5810 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1859.761944][T19694] RAX: ffffffffffffffda RBX: 00007fd0e8b64880 RCX: 00007fd0e84a7407 [ 1859.770308][T19694] RDX: 0000000000000000 RSI: 00007ffcc7ea5f1a RDI: ffffffffffffff9c [ 1859.779302][T19694] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1859.788361][T19694] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1859.796555][T19694] R13: 00007ffcc7ea5a60 R14: 00007fd0e8c61000 R15: 0000563eca6a34d8 [ 1859.804691][T19694] [ 1859.808306][T19694] Kernel Offset: disabled [ 1859.812907][T19694] Rebooting in 86400 seconds..