last executing test programs: 10.12792659s ago: executing program 0 (id=3066): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x50) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001a40)={0xffffffffffffffff, 0x4, 0x10}, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000001000000080000000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xb, &(0x7f0000000200)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r5}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b40)={0x18, 0x2b, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa6c, 0x0, 0x0, 0x0, 0xaa}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x5e}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3d}}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffa}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x7}, @ldst={0x2, 0x0, 0x3, 0x6, 0x6, 0x30, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000008c0)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000900)=""/4096, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000019c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000001a00)={0x2, 0xf, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000001a80)=[r4, r5, r0], &(0x7f0000001ac0)=[{0x1, 0x2, 0xd, 0xc}, {0x3, 0x3, 0x3, 0x5}, {0x4, 0x4, 0x5, 0x2}, {0x0, 0x4, 0xe}, {0x3, 0x3, 0x1, 0xa}], 0x10, 0x7f83}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) add_key$keyring(&(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) keyctl$clear(0x7, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000000000073113000000000008510000002000000850000007600000095000000000000009500a5050000000048ba034279b92d459280cc10da7ef2aec2030e99fea601ba8a0303580b894b65a8dfacd7e8"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000100)=r1) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) 9.193711714s ago: executing program 0 (id=3068): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800040, 0x0) chdir(&(0x7f0000000240)='./file0\x00') llistxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000700)=""/209, 0xd1) 8.892020848s ago: executing program 0 (id=3072): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./sys\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/net/bridge0/bridge/multicast_startup_query_count\x00', 0x1, 0x0) write(r0, &(0x7f0000000dc0)='0', 0x1) 8.520072536s ago: executing program 0 (id=3076): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x40400, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfc5, 0xb080, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x9, 0x3, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x10, 0x4}}}}}]}}]}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200000505000100070000003d9799e79f49050000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 7.511095604s ago: executing program 0 (id=3081): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x5a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x40, @empty}, 0x1c) accept4$inet6(r0, 0x0, 0x0, 0x800) 7.062126655s ago: executing program 0 (id=3085): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589b"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 5.27474219s ago: executing program 4 (id=3094): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x100040c1}, 0x0) 4.907254827s ago: executing program 4 (id=3096): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0xbb6bd0fb648ea032) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) 4.21680464s ago: executing program 1 (id=3100): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 4.068081117s ago: executing program 4 (id=3101): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)={0x34, r1, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x403b}}}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x200000000009, 0x0, 0xfffffffffffffffe, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000003, 0xc591, 0xfda, 0xfffffffffffffffe, 0xffffffffffffffff, 0x3, 0xb3, 0x48d], 0xeeee8000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.986702158s ago: executing program 2 (id=3105): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) 2.760107589s ago: executing program 4 (id=3107): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl(r0, 0x40186f40, &(0x7f0000000400)="ffffffff") 2.054423313s ago: executing program 1 (id=3111): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 1.907882369s ago: executing program 2 (id=3112): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x4000001) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x0, 0x2, 0x2, 0x100, 0x3, 0x8, {0x6, 0x5, 0x4, 0x80000000000000fc, 0x3, 0x0, 0x7fffffff, 0x58, 0x4, 0x9000, 0x9, 0x0, 0x0, 0x1, 0x1}}, {0x20000000000000, 0x537, 0x2b, 0x8000, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x01\x00'}}]}, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x2) ioctl(r1, 0x40104d05, &(0x7f0000000a00)) 1.801703005s ago: executing program 3 (id=3113): r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000100)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x50, 0x0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0xaf}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000500)={&(0x7f0000000600), 0xc, &(0x7f0000000700)={&(0x7f0000000800)={0x14, 0x0, 0x301}, 0x14}}, 0x0) 1.68570173s ago: executing program 4 (id=3114): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x48, 0x10, 0x401, 0x4, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x18010}, 0x0) 1.685165111s ago: executing program 1 (id=3115): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x50) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001a40)={0xffffffffffffffff, 0x4, 0x10}, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000001000000080000000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xb, &(0x7f0000000200)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r5}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b40)={0x18, 0x2b, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa6c, 0x0, 0x0, 0x0, 0xaa}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x5e}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3d}}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffa}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x7}, @ldst={0x2, 0x0, 0x3, 0x6, 0x6, 0x30, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000008c0)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000900)=""/4096, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000019c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000001a00)={0x2, 0xf, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000001a80)=[r4, r5, r0], &(0x7f0000001ac0)=[{0x1, 0x2, 0xd, 0xc}, {0x3, 0x3, 0x3, 0x5}, {0x4, 0x4, 0x5, 0x2}, {0x0, 0x4, 0xe}, {0x3, 0x3, 0x1, 0xa}], 0x10, 0x7f83}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) add_key$keyring(&(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) keyctl$clear(0x7, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000000000073113000000000008510000002000000850000007600000095000000000000009500a5050000000048ba034279b92d459280cc10da7ef2aec2030e99fea601ba8a0303580b894b65a8dfacd7e8"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000100)=r1) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'sit0\x00', 0x0}) 1.679563931s ago: executing program 3 (id=3116): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/net/bridge0/bridge/multicast_startup_query_count\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 1.667867081s ago: executing program 2 (id=3117): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x40, r1, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xe}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x40}}, 0x20000004) 1.389406724s ago: executing program 3 (id=3118): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'syzkaller0\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) write(r0, &(0x7f0000000800)="ffffffffffff0011223344554305c00f", 0x10) 1.288530339s ago: executing program 2 (id=3119): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x6, 0x2, 0x0, 0x2, 0x7fff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}, @TCA_NETEM_REORDER={0xc, 0x3, {0xd9, 0x8000}}]}}}]}, 0x64}}, 0x20000000) sendmmsg$inet(r0, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000002240)=[{&(0x7f00000000c0)="f1168cfd72e8ff25ae2eb5ecdc41136c49a3c9039a13db0fa92d37c7f1e968bd5b8a91b2ccd751d7003b7e0758bd6de18777282d6966206c58fd3e9f47adbd2ad4ee277425b7da8b9b7edd597f4e92b0560c48974738da5308a6db5a555e9da204834cf283826fa09a4a443f529f446f933b363af8268c7e4edf0c5d0e138568d9eb7859c6b6b4c3d30f0b4dbed18738e72b38d54985b664e5e23d16b38e189a90906624ec212cea2b9b849d0135da8719fc5bce1a010aadd39106302ff8f0255699ba380bba961e94f38347fbe6b899853e68792f26256ac90779ce1dc603b3bbfe0807bd", 0xe5}, {0x0}, {0x0}], 0x3}}], 0x1, 0x0) 565.701233ms ago: executing program 1 (id=3120): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r1, 0x701, 0x70bd2d, 0x25dfdbff, {0x2f, 0x0, 0xffa6}}, 0x14}}, 0x10044880) 470.203568ms ago: executing program 4 (id=3121): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) 438.416089ms ago: executing program 1 (id=3122): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000003c0)={0x0, 0x30b5, 0x0, 0x2, 0x1000158}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 393.158381ms ago: executing program 3 (id=3123): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfffa) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) 299.983236ms ago: executing program 2 (id=3124): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 287.534256ms ago: executing program 1 (id=3125): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x28f41000) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20) mbind(&(0x7f0000000000/0x600000)=nil, 0x600006, 0x8003, &(0x7f0000000000)=0x6, 0x8, 0x0) 182.841351ms ago: executing program 3 (id=3126): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x20023, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x31324d59, 0x1, @discrete={0x10000}}) 97.895655ms ago: executing program 2 (id=3127): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000540)="1100f8ae", 0x4}, {&(0x7f00000002c0)="00020283", 0x4}], 0x3) 0s ago: executing program 3 (id=3128): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x100040c1}, 0x0) kernel console output (not intermixed with test programs): ter parsing attributes in process `syz.0.427'. [ 212.375056][ T6012] netlink: 44 bytes leftover after parsing attributes in process `syz.0.429'. [ 212.667352][ T6019] loop0: detected capacity change from 0 to 256 [ 212.885491][ T6026] loop3: detected capacity change from 0 to 256 [ 212.892747][ T6026] exfat: Unknown parameter '000000000000000000110x00000000000000000xffffffffffffffff00000000000000000010' [ 213.048591][ T4395] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 213.781910][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 213.801457][ T6040] loop3: detected capacity change from 0 to 512 [ 213.853439][ T6040] EXT4-fs: Ignoring removed nomblk_io_submit option [ 213.873848][ T6040] EXT4-fs (loop3): can't mount with both data=journal and delalloc [ 214.182458][ T6044] xt_CONNSECMARK: invalid mode: 66 [ 214.376854][ T6046] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 214.952080][ T4288] Bluetooth: hci4: Malformed Event: 0x2f [ 214.961679][ T6051] netlink: 32 bytes leftover after parsing attributes in process `syz.3.439'. [ 216.403244][ T6065] netlink: 44 bytes leftover after parsing attributes in process `syz.3.442'. [ 217.008308][ T6063] loop0: detected capacity change from 0 to 131072 [ 217.025866][ T6063] F2FS-fs (loop0): Wrong secs_per_zone / total_sections (512, 24) [ 217.034054][ T6063] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 217.043750][ T6063] F2FS-fs (loop0): Test dummy encryption mode enabled [ 217.351379][ T6077] loop2: detected capacity change from 0 to 256 [ 217.352210][ T6077] exfat: Unknown parameter '000000000000000000110x00000000000000000xffffffffffffffff00000000000000000010' [ 217.865682][ T6063] F2FS-fs (loop0): invalid crc value [ 218.958039][ T6063] F2FS-fs (loop0): Found nat_bits in checkpoint [ 218.996466][ T6063] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 219.013405][ T4395] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 219.018912][ T6063] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 219.033334][ T6063] F2FS-fs (loop0): Start checkpoint disabled! [ 219.119365][ T6063] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 219.119647][ T6063] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 220.460186][ T6086] overlayfs: statfs failed on './file0' [ 222.519507][ T6111] netlink: 44 bytes leftover after parsing attributes in process `syz.4.455'. [ 225.268407][ T6126] netlink: 32 bytes leftover after parsing attributes in process `syz.2.452'. [ 225.378277][ T4288] Bluetooth: hci0: Malformed Event: 0x2f [ 225.820189][ T6139] loop2: detected capacity change from 0 to 128 [ 225.979302][ T6139] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 226.277762][ T6139] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 226.704069][ T6148] loop3: detected capacity change from 0 to 512 [ 227.135660][ T6148] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 227.688288][ T6156] netlink: 44 bytes leftover after parsing attributes in process `syz.0.468'. [ 228.251730][ T6169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.473'. [ 228.423625][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 229.009902][ T4288] Bluetooth: hci4: Malformed Event: 0x2f [ 229.257859][ T6190] loop3: detected capacity change from 0 to 256 [ 229.265081][ T6190] exfat: Unknown parameter '000000000000000000110x00000000000000000xffffffffffffffff00000000000000000010' [ 229.709821][ T4354] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 230.313998][ T6201] loop2: detected capacity change from 0 to 1024 [ 230.331888][ T6199] nvmet: failed to open block device (null): (-22) [ 230.560728][ T6206] loop3: detected capacity change from 0 to 64 [ 231.321706][ T6215] netlink: 12 bytes leftover after parsing attributes in process `syz.1.486'. [ 233.274193][ T4288] Bluetooth: hci1: Malformed Event: 0x2f [ 233.673052][ T6239] loop2: detected capacity change from 0 to 128 [ 233.705896][ T6239] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 233.997690][ T6239] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 234.827669][ T6251] netlink: 12 bytes leftover after parsing attributes in process `syz.3.502'. [ 235.421239][ T6256] loop2: detected capacity change from 0 to 64 [ 235.669900][ T4288] Bluetooth: hci3: Malformed Event: 0x2f [ 236.578360][ T6267] sctp: failed to load transform for md5: -2 [ 237.903397][ T6288] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 238.916054][ T6296] tc action pedit 'at' offset 5 out of bounds [ 238.922587][ T6296] tc action pedit 'at' offset 5 out of bounds [ 238.928714][ T6296] tc action pedit 'at' offset 5 out of bounds [ 238.934782][ T6296] tc action pedit 'at' offset 5 out of bounds [ 238.940870][ T6296] tc action pedit 'at' offset 5 out of bounds [ 238.946938][ T6296] tc action pedit 'at' offset 5 out of bounds [ 238.953024][ T6296] tc action pedit 'at' offset 5 out of bounds [ 238.959108][ T6296] tc action pedit 'at' offset 5 out of bounds [ 238.965165][ T6296] tc action pedit 'at' offset 5 out of bounds [ 238.971261][ T6296] tc action pedit 'at' offset 5 out of bounds [ 238.977375][ T6296] 0: reclassify loop, rule prio 0, protocol 800 [ 239.179561][ T6302] loop0: detected capacity change from 0 to 2048 [ 239.797869][ T4318] wiimote 0005:057E:0306.0001: unknown main item tag 0x0 [ 239.813677][ T4318] wiimote 0005:057E:0306.0001: unknown main item tag 0x0 [ 239.827316][ T4318] wiimote 0005:057E:0306.0001: unknown main item tag 0x0 [ 239.840806][ T4318] wiimote 0005:057E:0306.0001: unknown main item tag 0x0 [ 239.854341][ T4318] wiimote 0005:057E:0306.0001: unknown main item tag 0x0 [ 239.867859][ T4318] wiimote 0005:057E:0306.0001: unknown main item tag 0x0 [ 239.882040][ T4318] wiimote 0005:057E:0306.0001: unknown main item tag 0x0 [ 240.007549][ T4318] wiimote 0005:057E:0306.0001: unknown main item tag 0x0 [ 240.014657][ T4318] wiimote 0005:057E:0306.0001: unknown main item tag 0x0 [ 240.382575][ T6317] loop3: detected capacity change from 0 to 512 [ 240.538766][ T6317] EXT4-fs: Ignoring removed nomblk_io_submit option [ 240.787448][ T4318] wiimote 0005:057E:0306.0001: unknown main item tag 0x0 [ 240.796366][ T4318] wiimote 0005:057E:0306.0001: unknown main item tag 0x0 [ 240.819955][ T4318] wiimote 0005:057E:0306.0001: unknown main item tag 0x0 [ 240.830245][ T6317] EXT4-fs (loop3): can't mount with both data=journal and delalloc [ 240.849393][ T4318] wiimote 0005:057E:0306.0001: unknown main item tag 0x0 [ 240.857029][ T4318] wiimote 0005:057E:0306.0001: unknown main item tag 0x0 [ 240.864517][ T4318] wiimote 0005:057E:0306.0001: unknown main item tag 0x0 [ 240.872084][ T4318] wiimote 0005:057E:0306.0001: unknown main item tag 0x0 [ 240.879514][ T4318] wiimote 0005:057E:0306.0001: unknown main item tag 0x0 [ 240.888131][ T4318] wiimote 0005:057E:0306.0001: unknown main item tag 0x0 [ 240.897030][ T4318] wiimote 0005:057E:0306.0001: unknown main item tag 0x0 [ 240.955463][ T4318] wiimote 0005:057E:0306.0001: unknown main item tag 0x0 [ 240.969379][ T4318] wiimote 0005:057E:0306.0001: unknown main item tag 0x0 [ 240.976660][ T4318] wiimote 0005:057E:0306.0001: unknown main item tag 0x0 [ 240.984197][ T4318] wiimote 0005:057E:0306.0001: unknown main item tag 0x0 [ 240.991784][ T4318] wiimote 0005:057E:0306.0001: unknown main item tag 0x0 [ 240.999920][ T4318] wiimote 0005:057E:0306.0001: unknown main item tag 0x0 [ 241.015725][ T4318] wiimote 0005:057E:0306.0001: unknown main item tag 0x0 [ 241.122887][ T4318] wiimote 0005:057E:0306.0001: unknown main item tag 0x0 [ 241.136918][ T4318] wiimote 0005:057E:0306.0001: unknown main item tag 0x0 [ 241.154365][ T4318] wiimote 0005:057E:0306.0001: unknown main item tag 0x0 [ 241.174381][ T4318] wiimote 0005:057E:0306.0001: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 241.185458][ T4318] wiimote 0005:057E:0306.0001: New device registered [ 241.449145][ T4288] Bluetooth: hci1: Malformed Event: 0x2f [ 241.625629][ T6340] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 242.017403][ T4318] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 242.267665][ T26] wiimote 0005:057E:0306.0001: detected device: Nintendo Wii Remote (Gen 1) [ 242.317079][ T26] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input6 [ 242.331234][ T4318] usb 3-1: Using ep0 maxpacket: 8 [ 242.341411][ T4318] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.357547][ T26] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input7 [ 242.374138][ T4318] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 242.385544][ T26] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input5 [ 242.402716][ T4318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.412368][ T4318] usb 3-1: Product: syz [ 242.431501][ T4318] usb 3-1: Manufacturer: syz [ 242.448213][ T4318] usb 3-1: SerialNumber: syz [ 242.684880][ T6312] wiimote 0005:057E:0306.0001: Device removed [ 242.692560][ T4318] usb 3-1: USB disconnect, device number 2 [ 244.024837][ T6369] loop0: detected capacity change from 0 to 512 [ 244.077579][ T6369] EXT4-fs: Ignoring removed nomblk_io_submit option [ 244.318137][ T6369] EXT4-fs (loop0): can't mount with both data=journal and delalloc [ 244.327388][ T4288] Bluetooth: hci2: Malformed Event: 0x2f [ 244.712055][ T6387] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 246.604008][ T6422] loop0: detected capacity change from 0 to 64 [ 246.725336][ T4288] Bluetooth: hci1: Malformed Event: 0x2f [ 246.850169][ T6428] loop3: detected capacity change from 0 to 512 [ 246.874403][ T6428] EXT4-fs: Ignoring removed nomblk_io_submit option [ 246.884298][ T6427] loop0: detected capacity change from 0 to 1024 [ 246.922962][ T6428] EXT4-fs (loop3): can't mount with both data=journal and delalloc [ 248.179855][ T4354] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 249.067922][ T6446] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 250.896095][ T4288] Bluetooth: hci0: Malformed Event: 0x2f [ 251.372772][ T6475] loop3: detected capacity change from 0 to 1024 [ 252.556222][ T6479] hfsplus: unable to mark blocks free: error -4 [ 252.562564][ T6479] hfsplus: can't free extent [ 253.808716][ T6495] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 254.308336][ T6505] xt_CONNSECMARK: invalid mode: 66 [ 255.557750][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.564137][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.180924][ T6500] loop0: detected capacity change from 0 to 32768 [ 256.644231][ T27] audit: type=1800 audit(1789199157.012:3): pid=6531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.577" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 258.087890][ T6545] loop0: detected capacity change from 0 to 256 [ 258.088770][ T6545] exfat: Unknown parameter '000000000000000000110x00000000000000000xffffffffffffffff00000000000000000010' [ 259.981610][ T6561] nvmet: failed to open block device (null): (-22) [ 261.792499][ T4315] wiimote 0005:057E:0306.0002: unknown main item tag 0x0 [ 261.805057][ T4315] wiimote 0005:057E:0306.0002: unknown main item tag 0x0 [ 261.812425][ T4315] wiimote 0005:057E:0306.0002: unknown main item tag 0x0 [ 261.819652][ T4315] wiimote 0005:057E:0306.0002: unknown main item tag 0x0 [ 261.829315][ T4315] wiimote 0005:057E:0306.0002: unknown main item tag 0x0 [ 261.837341][ T4315] wiimote 0005:057E:0306.0002: unknown main item tag 0x0 [ 261.845437][ T4315] wiimote 0005:057E:0306.0002: unknown main item tag 0x0 [ 261.854574][ T4315] wiimote 0005:057E:0306.0002: unknown main item tag 0x0 [ 261.864417][ T4315] wiimote 0005:057E:0306.0002: unknown main item tag 0x0 [ 261.872155][ T4315] wiimote 0005:057E:0306.0002: unknown main item tag 0x0 [ 261.879358][ T4315] wiimote 0005:057E:0306.0002: unknown main item tag 0x0 [ 261.886953][ T4315] wiimote 0005:057E:0306.0002: unknown main item tag 0x0 [ 261.894739][ T4315] wiimote 0005:057E:0306.0002: unknown main item tag 0x0 [ 261.902002][ T4315] wiimote 0005:057E:0306.0002: unknown main item tag 0x0 [ 261.914460][ T4315] wiimote 0005:057E:0306.0002: unknown main item tag 0x0 [ 261.921796][ T4315] wiimote 0005:057E:0306.0002: unknown main item tag 0x0 [ 261.933590][ T4315] wiimote 0005:057E:0306.0002: unknown main item tag 0x0 [ 261.940959][ T4315] wiimote 0005:057E:0306.0002: unknown main item tag 0x0 [ 261.950275][ T4315] wiimote 0005:057E:0306.0002: unknown main item tag 0x0 [ 261.965740][ T4315] wiimote 0005:057E:0306.0002: unknown main item tag 0x0 [ 262.117413][ T4315] wiimote 0005:057E:0306.0002: unknown main item tag 0x0 [ 262.127441][ T4315] wiimote 0005:057E:0306.0002: unknown main item tag 0x0 [ 262.134703][ T4315] wiimote 0005:057E:0306.0002: unknown main item tag 0x0 [ 262.143960][ T4315] wiimote 0005:057E:0306.0002: unknown main item tag 0x0 [ 262.152308][ T4315] wiimote 0005:057E:0306.0002: unknown main item tag 0x0 [ 262.161215][ T4315] wiimote 0005:057E:0306.0002: unknown main item tag 0x0 [ 262.169528][ T4315] wiimote 0005:057E:0306.0002: unknown main item tag 0x0 [ 262.177542][ T4315] wiimote 0005:057E:0306.0002: unknown main item tag 0x0 [ 262.211285][ T4315] wiimote 0005:057E:0306.0002: unknown main item tag 0x0 [ 262.332574][ T4315] wiimote 0005:057E:0306.0002: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 262.350309][ T4315] wiimote 0005:057E:0306.0002: New device registered [ 262.997353][ T4315] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 263.837449][ T4315] usb 1-1: Using ep0 maxpacket: 8 [ 263.846648][ T4315] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 263.867226][ T4783] wiimote 0005:057E:0306.0002: detected device: Nintendo Wii Remote (Gen 1) [ 263.891491][ T4783] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0002/input/input9 [ 263.926391][ T4315] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 263.949508][ T4315] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.961373][ T4783] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0002/input/input10 [ 263.987259][ T4315] usb 1-1: Product: syz [ 263.991517][ T4315] usb 1-1: Manufacturer: syz [ 263.996139][ T4315] usb 1-1: SerialNumber: syz [ 264.001523][ T6599] loop2: detected capacity change from 0 to 512 [ 264.017096][ T4783] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0002/input/input8 [ 264.027049][ T6599] EXT4-fs: Ignoring removed nomblk_io_submit option [ 264.054928][ T6599] EXT4-fs (loop2): can't mount with both data=journal and delalloc [ 264.285213][ T6574] wiimote 0005:057E:0306.0002: Device removed [ 264.294968][ T4315] usb 1-1: USB disconnect, device number 2 [ 264.345928][ T6611] xt_CONNSECMARK: invalid mode: 66 [ 264.425072][ T6615] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 268.202326][ T126] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 268.414195][ T126] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 268.425767][ T126] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 268.452826][ T126] usb 4-1: config 0 interface 0 has no altsetting 0 [ 268.473980][ T126] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 268.502725][ T126] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 268.522173][ T6644] loop2: detected capacity change from 0 to 32768 [ 268.528837][ T126] usb 4-1: Product: syz [ 268.533142][ T126] usb 4-1: Manufacturer: syz [ 268.550944][ T126] usb 4-1: SerialNumber: syz [ 268.567429][ T126] usb 4-1: config 0 descriptor?? [ 268.580947][ T126] hub 4-1:0.0: bad descriptor, ignoring hub [ 268.593574][ T126] hub: probe of 4-1:0.0 failed with error -5 [ 268.620500][ T126] usb 4-1: selecting invalid altsetting 0 [ 269.257371][ T6641] usb 4-1: reset high-speed USB device number 6 using dummy_hcd [ 269.828593][ T6663] xt_CONNSECMARK: invalid mode: 66 [ 269.897383][ T6669] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 271.877244][ T4288] Bluetooth: hci4: command 0x0405 tx timeout [ 274.425768][ T126] usb 4-1: USB disconnect, device number 6 [ 274.579207][ T6701] loop2: detected capacity change from 0 to 128 [ 274.674802][ T6701] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 274.862276][ T6701] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 276.026936][ T6713] xt_CONNSECMARK: invalid mode: 66 [ 276.105114][ T6715] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 277.696916][ T6727] loop2: detected capacity change from 0 to 256 [ 277.704144][ T6727] exfat: Unknown parameter '000000000000000000110x00000000000000000xffffffffffffffff00000000000000000010' [ 278.281170][ T4354] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 279.398530][ T4280] Bluetooth: hci4: Malformed Event: 0x2f [ 281.781590][ T6757] syz.2.639: attempt to access beyond end of device [ 281.781590][ T6757] nbd2: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 281.794807][ T6757] gfs2: error 10 reading superblock [ 281.943270][ T6761] netlink: 'syz.4.640': attribute type 10 has an invalid length. [ 281.993141][ T6765] loop3: detected capacity change from 0 to 512 [ 282.143927][ T6765] EXT4-fs: Ignoring removed nomblk_io_submit option [ 282.948935][ T6765] EXT4-fs (loop3): can't mount with both data=journal and delalloc [ 283.320148][ T6776] xt_CONNSECMARK: invalid mode: 66 [ 283.399417][ T6778] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 284.820243][ T4280] Bluetooth: hci1: Malformed Event: 0x2f [ 287.064969][ T4275] wiimote 0005:057E:0306.0003: unknown main item tag 0x0 [ 287.097579][ T4275] wiimote 0005:057E:0306.0003: unknown main item tag 0x0 [ 287.138177][ T4275] wiimote 0005:057E:0306.0003: unknown main item tag 0x0 [ 287.176469][ T4275] wiimote 0005:057E:0306.0003: unknown main item tag 0x0 [ 287.360803][ T4275] wiimote 0005:057E:0306.0003: unknown main item tag 0x0 [ 287.368166][ T4275] wiimote 0005:057E:0306.0003: unknown main item tag 0x0 [ 287.375325][ T4275] wiimote 0005:057E:0306.0003: unknown main item tag 0x0 [ 287.382739][ T4275] wiimote 0005:057E:0306.0003: unknown main item tag 0x0 [ 287.391263][ T4275] wiimote 0005:057E:0306.0003: unknown main item tag 0x0 [ 287.398634][ T4275] wiimote 0005:057E:0306.0003: unbalanced collection at end of report description [ 287.408614][ T4275] wiimote 0005:057E:0306.0003: HID parse failed [ 287.801349][ T6832] loop2: detected capacity change from 0 to 256 [ 287.802855][ T6832] exfat: Unknown parameter '000000000000000000110x00000000000000000xffffffffffffffff00000000000000000010' [ 287.861284][ T4275] wiimote: probe of 0005:057E:0306.0003 failed with error -22 [ 288.918899][ T4275] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 288.927416][ T4280] Bluetooth: hci1: Malformed Event: 0x2f [ 289.709351][ T4275] usb 4-1: Using ep0 maxpacket: 8 [ 289.769033][ T4275] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 289.872799][ T6853] loop2: detected capacity change from 0 to 512 [ 289.899098][ T4275] usb 4-1: string descriptor 0 read error: -71 [ 289.905373][ T4275] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 289.938780][ T4275] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.958194][ T6853] EXT4-fs: Ignoring removed nomblk_io_submit option [ 290.003473][ T4275] usb 4-1: can't set config #1, error -71 [ 290.032682][ T6853] EXT4-fs (loop2): can't mount with both data=journal and delalloc [ 290.055937][ T4275] usb 4-1: USB disconnect, device number 7 [ 291.452528][ T6869] xt_CONNSECMARK: invalid mode: 66 [ 291.521934][ T6877] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 292.230633][ T6880] loop3: detected capacity change from 0 to 256 [ 292.237871][ T6880] exfat: Unknown parameter '000000000000000000110x00000000000000000xffffffffffffffff00000000000000000010' [ 292.250792][ T4275] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 293.108396][ T4275] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 293.132819][ T4275] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 293.172947][ T4275] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 293.257317][ T4280] Bluetooth: hci3: Malformed Event: 0x2f [ 293.347635][ T4275] usb 1-1: config 0 interface 0 has no altsetting 0 [ 294.390194][ T4275] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 294.399203][ T4275] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 294.410415][ T4275] usb 1-1: config 0 interface 0 has no altsetting 0 [ 294.424637][ T4275] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 294.458678][ T4275] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 294.472305][ T4275] usb 1-1: config 0 interface 0 has no altsetting 0 [ 294.651635][ T6912] xt_CONNSECMARK: invalid mode: 66 [ 294.697322][ T4275] usb 1-1: unable to read config index 3 descriptor/start: -71 [ 294.710411][ T4275] usb 1-1: can't read configurations, error -71 [ 294.737103][ T6918] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 296.497770][ T6940] loop0: detected capacity change from 0 to 128 [ 296.519705][ T6940] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 297.085704][ T6949] loop2: detected capacity change from 0 to 256 [ 297.092558][ T6949] exfat: Unknown parameter '000000000000000000110x00000000000000000xffffffffffffffff00000000000000000010' [ 297.636743][ T6940] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 298.731941][ T6604] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 298.843513][ T4280] Bluetooth: hci1: Malformed Event: 0x2f [ 299.096908][ T6966] loop2: detected capacity change from 0 to 2048 [ 299.426742][ T4354] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 302.561322][ T4280] Bluetooth: hci3: Malformed Event: 0x2f [ 303.614878][ T7023] netlink: 88 bytes leftover after parsing attributes in process `syz.1.712'. [ 303.689580][ T7024] xt_CONNSECMARK: invalid mode: 66 [ 303.960277][ T7029] loop3: detected capacity change from 0 to 32768 [ 304.132585][ T7029] XFS (loop3): Mounting V5 Filesystem [ 304.218215][ T7029] XFS (loop3): Ending clean mount [ 304.227993][ T7029] XFS (loop3): Quotacheck needed: Please wait. [ 305.011648][ T7029] XFS (loop3): Quotacheck: Done. [ 305.793449][ T4282] XFS (loop3): Unmounting Filesystem [ 307.596717][ T4783] wiimote 0005:057E:0306.0004: unknown main item tag 0x0 [ 307.615839][ T4783] wiimote 0005:057E:0306.0004: unknown main item tag 0x0 [ 307.623203][ T4783] wiimote 0005:057E:0306.0004: unknown main item tag 0x0 [ 307.647199][ T4783] wiimote 0005:057E:0306.0004: unbalanced collection at end of report description [ 307.682894][ T4783] wiimote 0005:057E:0306.0004: HID parse failed [ 307.710011][ T4783] wiimote: probe of 0005:057E:0306.0004 failed with error -22 [ 307.825749][ T7079] loop3: detected capacity change from 0 to 2048 [ 307.834223][ T7081] netlink: 88 bytes leftover after parsing attributes in process `syz.0.726'. [ 308.011340][ T4783] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 308.207278][ T4783] usb 3-1: Using ep0 maxpacket: 8 [ 308.215431][ T4783] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 308.231752][ T4783] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 308.248338][ T4783] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.261713][ T4783] usb 3-1: Product: syz [ 308.268069][ T4783] usb 3-1: Manufacturer: syz [ 308.275903][ T4783] usb 3-1: SerialNumber: syz [ 308.461673][ T7089] xt_CONNSECMARK: invalid mode: 66 [ 308.546441][ T4783] usb 3-1: USB disconnect, device number 3 [ 312.823845][ T7137] xt_CONNSECMARK: invalid mode: 66 [ 312.866746][ T7136] loop3: detected capacity change from 0 to 2048 [ 313.196359][ T126] wiimote 0005:057E:0306.0005: unknown main item tag 0x0 [ 313.215599][ T126] wiimote 0005:057E:0306.0005: unknown main item tag 0x0 [ 313.240824][ T126] wiimote 0005:057E:0306.0005: unknown main item tag 0x0 [ 313.260539][ T126] wiimote 0005:057E:0306.0005: unbalanced collection at end of report description [ 313.282798][ T126] wiimote 0005:057E:0306.0005: HID parse failed [ 313.303575][ T126] wiimote: probe of 0005:057E:0306.0005 failed with error -22 [ 313.667416][ T126] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 313.857192][ T126] usb 3-1: Using ep0 maxpacket: 8 [ 314.058742][ T126] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 314.128415][ T126] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 314.174384][ T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.186738][ T126] usb 3-1: Product: syz [ 314.196310][ T126] usb 3-1: Manufacturer: syz [ 314.210406][ T126] usb 3-1: SerialNumber: syz [ 314.448133][ T126] usb 3-1: USB disconnect, device number 4 [ 314.852462][ T7156] loop3: detected capacity change from 0 to 32768 [ 315.446029][ T7156] XFS (loop3): Mounting V5 Filesystem [ 315.580598][ T7156] XFS (loop3): Ending clean mount [ 315.587909][ T7156] XFS (loop3): Quotacheck needed: Please wait. [ 315.794593][ T7156] XFS (loop3): Quotacheck: Done. [ 316.510437][ T4282] XFS (loop3): Unmounting Filesystem [ 316.915652][ T7194] loop0: detected capacity change from 0 to 2048 [ 316.993725][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.000104][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.232753][ T7211] xt_CONNSECMARK: invalid mode: 66 [ 320.052528][ T7234] xt_CONNSECMARK: invalid mode: 66 [ 320.126169][ T7242] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 321.199001][ T7254] loop2: detected capacity change from 0 to 2048 [ 321.558628][ T126] wiimote 0005:057E:0306.0006: unknown main item tag 0x0 [ 321.578804][ T126] wiimote 0005:057E:0306.0006: unbalanced collection at end of report description [ 321.609723][ T126] wiimote 0005:057E:0306.0006: HID parse failed [ 321.619472][ T126] wiimote: probe of 0005:057E:0306.0006 failed with error -22 [ 321.917259][ T126] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 322.117805][ T126] usb 4-1: Using ep0 maxpacket: 8 [ 322.139512][ T126] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 322.209947][ T126] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 322.269835][ T126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.310296][ T126] usb 4-1: Product: syz [ 322.340660][ T126] usb 4-1: Manufacturer: syz [ 322.345394][ T126] usb 4-1: SerialNumber: syz [ 322.606221][ T126] usb 4-1: USB disconnect, device number 8 [ 324.471706][ T7285] xt_CONNSECMARK: invalid mode: 66 [ 324.596516][ T7282] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 324.908699][ T7288] loop2: detected capacity change from 0 to 32768 [ 325.066261][ T7288] XFS (loop2): Mounting V5 Filesystem [ 325.196644][ T7288] XFS (loop2): Ending clean mount [ 325.206543][ T7288] XFS (loop2): Quotacheck needed: Please wait. [ 325.283428][ T7288] XFS (loop2): Quotacheck: Done. [ 325.839770][ T4286] XFS (loop2): Unmounting Filesystem [ 326.453017][ T7316] xt_CONNSECMARK: invalid mode: 66 [ 328.286923][ T7341] loop3: detected capacity change from 0 to 32768 [ 328.483468][ T7343] loop0: detected capacity change from 0 to 512 [ 328.805524][ T7341] XFS (loop3): Mounting V5 Filesystem [ 328.812894][ T7343] EXT4-fs: Ignoring removed nomblk_io_submit option [ 328.837693][ T7343] EXT4-fs (loop0): can't mount with both data=journal and delalloc [ 329.200983][ T7341] XFS (loop3): Ending clean mount [ 329.218839][ T7341] XFS (loop3): Quotacheck needed: Please wait. [ 329.251538][ T7360] xt_CONNSECMARK: invalid mode: 66 [ 329.333872][ T7362] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 329.365397][ T7341] XFS (loop3): Quotacheck: Done. [ 330.124295][ T4282] XFS (loop3): Unmounting Filesystem [ 333.293699][ T7407] loop3: detected capacity change from 0 to 2048 [ 335.495025][ T7426] xt_CONNSECMARK: invalid mode: 66 [ 337.302251][ T7455] syz.2.827: attempt to access beyond end of device [ 337.302251][ T7455] nbd2: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 337.315595][ T7455] gfs2: error 10 reading superblock [ 338.532494][ T7470] xt_CONNSECMARK: invalid mode: 66 [ 338.611037][ T7473] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 342.545948][ T7513] xt_CONNSECMARK: invalid mode: 66 [ 342.616432][ T7515] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 345.350348][ T26] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 345.578034][ T26] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 345.591449][ T26] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 345.618069][ T26] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 345.658854][ T26] usb 4-1: config 0 interface 0 has no altsetting 0 [ 345.685473][ T26] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 345.710262][ T26] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 345.750726][ T26] usb 4-1: config 0 interface 0 has no altsetting 0 [ 345.885780][ T26] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 345.924387][ T26] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 346.009060][ T26] usb 4-1: config 0 interface 0 has no altsetting 0 [ 346.081566][ T26] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 346.148390][ T26] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 346.293068][ T26] usb 4-1: config 0 interface 0 has no altsetting 0 [ 346.398063][ T26] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 346.471706][ T26] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 346.543618][ T26] usb 4-1: config 0 interface 0 has no altsetting 0 [ 346.593506][ T26] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 346.632993][ T26] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 346.727176][ T26] usb 4-1: config 0 interface 0 has no altsetting 0 [ 346.753153][ T26] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 346.785050][ T26] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 346.825450][ T26] usb 4-1: config 0 interface 0 has no altsetting 0 [ 346.854203][ T26] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 346.873547][ T26] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 346.917202][ T26] usb 4-1: config 0 interface 0 has no altsetting 0 [ 346.936528][ T26] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 346.953588][ T26] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 346.963624][ T26] usb 4-1: Product: syz [ 346.972860][ T26] usb 4-1: Manufacturer: syz [ 346.983084][ T26] usb 4-1: SerialNumber: syz [ 347.048538][ T26] usb 4-1: config 0 descriptor?? [ 347.124733][ T26] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 347.332955][ T4318] usb 4-1: USB disconnect, device number 9 [ 347.349696][ T4318] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 350.889499][ T7580] syz.2.864: attempt to access beyond end of device [ 350.889499][ T7580] nbd2: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 350.903596][ T7580] gfs2: error 10 reading superblock [ 352.251674][ T7592] loop0: detected capacity change from 0 to 32768 [ 352.455745][ T7592] XFS (loop0): Mounting V5 Filesystem [ 352.654462][ T7592] XFS (loop0): Ending clean mount [ 352.662505][ T7592] XFS (loop0): Quotacheck needed: Please wait. [ 352.832493][ T7592] XFS (loop0): Quotacheck: Done. [ 353.418606][ T4272] XFS (loop0): Unmounting Filesystem [ 355.531412][ T7622] syz.2.877: attempt to access beyond end of device [ 355.531412][ T7622] nbd2: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 355.545330][ T7622] gfs2: error 10 reading superblock [ 355.569346][ T7624] loop3: detected capacity change from 0 to 1024 [ 357.647528][ T7643] xt_CONNSECMARK: invalid mode: 66 [ 361.101129][ T7672] nvmet: failed to open block device (null): (-22) [ 361.149239][ T7670] syz.0.889: attempt to access beyond end of device [ 361.149239][ T7670] nbd0: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 361.162373][ T7670] gfs2: error 10 reading superblock [ 367.265253][ T7739] xt_CONNSECMARK: invalid mode: 66 [ 367.343924][ T7743] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 372.190655][ T7794] loop3: detected capacity change from 0 to 2048 [ 373.844015][ T7807] xt_CONNSECMARK: invalid mode: 66 [ 378.441318][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.447734][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.603035][ T7847] loop2: detected capacity change from 0 to 2048 [ 378.658792][ T7666] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 378.768706][ T7845] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 383.821190][ T4315] nvmet: connect request for invalid subsystem testsubsys! [ 383.832128][ T7891] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 387.442330][ T7926] loop0: detected capacity change from 0 to 512 [ 387.542742][ T7926] EXT4-fs: Ignoring removed nomblk_io_submit option [ 387.659044][ T7926] EXT4-fs (loop0): can't mount with both data=journal and delalloc [ 387.710207][ T7918] loop2: detected capacity change from 0 to 32768 [ 387.798358][ T7918] XFS: noikeep mount option is deprecated. [ 387.999006][ T7935] xt_CONNSECMARK: invalid mode: 66 [ 388.084337][ T7937] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 388.349535][ T7918] XFS (loop2): Mounting V5 Filesystem [ 388.464596][ T7918] XFS (loop2): Ending clean mount [ 388.484099][ T7918] XFS (loop2): Quotacheck needed: Please wait. [ 388.868536][ T7918] XFS (loop2): Quotacheck: Done. [ 389.341889][ T7918] XFS (loop2): Unmounting Filesystem [ 391.982755][ T4318] nvmet: connect request for invalid subsystem testsubsys! [ 392.012628][ T7970] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 395.745006][ T8000] loop0: detected capacity change from 0 to 32768 [ 396.777479][ T8015] loop0: detected capacity change from 0 to 1024 [ 399.770048][ T8040] xt_CONNSECMARK: invalid mode: 66 [ 400.999873][ T4280] Bluetooth: hci2: Malformed Event: 0x2f [ 402.458378][ T126] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 402.628416][ T126] usb 1-1: device descriptor read/64, error -71 [ 402.903884][ T8061] loop3: detected capacity change from 0 to 32768 [ 402.907208][ T126] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 402.982566][ T8061] XFS (loop3): Mounting V5 Filesystem [ 403.077230][ T126] usb 1-1: device descriptor read/64, error -71 [ 403.091494][ T8061] XFS (loop3): Ending clean mount [ 403.153359][ T8061] XFS (loop3): Quotacheck needed: Please wait. [ 403.197563][ T126] usb usb1-port1: attempt power cycle [ 403.247557][ T8061] XFS (loop3): Quotacheck: Done. [ 403.607266][ T126] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 403.647904][ T126] usb 1-1: device descriptor read/8, error -71 [ 403.927268][ T126] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 403.968043][ T126] usb 1-1: device descriptor read/8, error -71 [ 404.087476][ T126] usb usb1-port1: unable to enumerate USB device [ 404.826976][ T4280] Bluetooth: hci1: Malformed Event: 0x2f [ 405.186598][ T4282] XFS (loop3): Unmounting Filesystem [ 405.316302][ T8099] loop0: detected capacity change from 0 to 512 [ 405.336729][ T8099] EXT4-fs: Ignoring removed nomblk_io_submit option [ 405.417591][ T8099] EXT4-fs (loop0): can't mount with both data=journal and delalloc [ 405.773738][ T8104] xt_CONNSECMARK: invalid mode: 66 [ 405.966392][ T8106] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 407.051968][ T8115] xt_CONNSECMARK: invalid mode: 66 [ 408.211435][ T8119] loop3: detected capacity change from 0 to 32768 [ 408.249977][ T8119] XFS: noikeep mount option is deprecated. [ 408.365080][ T8119] XFS (loop3): Mounting V5 Filesystem [ 408.447482][ T8119] XFS (loop3): Ending clean mount [ 408.460507][ T8119] XFS (loop3): Quotacheck needed: Please wait. [ 408.552939][ T8119] XFS (loop3): Quotacheck: Done. [ 408.572626][ T8118] XFS (loop3): Unmounting Filesystem [ 409.224945][ T8156] loop0: detected capacity change from 0 to 64 [ 411.512360][ T8181] xt_CONNSECMARK: invalid mode: 66 [ 424.846904][ T8327] fuse: Bad value for 'fd' [ 429.351055][ T8376] fuse: Bad value for 'fd' [ 432.547685][ T8406] xt_CONNSECMARK: invalid mode: 66 [ 432.746206][ T8410] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 434.245912][ T8425] overlayfs: missing 'lowerdir' [ 439.869260][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.876521][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.535323][ T8487] loop0: detected capacity change from 0 to 2048 [ 441.805863][ T8488] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 443.477151][ T4316] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 443.798988][ T4316] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 443.807968][ T4316] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 443.822716][ T4316] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 444.577514][ T4316] usb 1-1: config 0 interface 0 has no altsetting 0 [ 444.605017][ T4316] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.615387][ T4316] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 444.655799][ T4316] usb 1-1: config 0 interface 0 has no altsetting 0 [ 444.679907][ T4316] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.709695][ T4316] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 444.721181][ T4316] usb 1-1: config 0 interface 0 has no altsetting 0 [ 445.684173][ T4316] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.728292][ T4316] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 445.743771][ T4316] usb 1-1: config 0 interface 0 has no altsetting 0 [ 445.773092][ T4316] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.797904][ T4316] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 445.833345][ T4316] usb 1-1: config 0 interface 0 has no altsetting 0 [ 445.855744][ T4316] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.866201][ T4316] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 445.875369][ T4316] usb 1-1: config 0 interface 0 has no altsetting 0 [ 445.883542][ T4316] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.894232][ T4316] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 445.914948][ T4316] usb 1-1: config 0 interface 0 has no altsetting 0 [ 445.936251][ T4316] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.961046][ T4316] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 445.992627][ T4316] usb 1-1: config 0 interface 0 has no altsetting 0 [ 446.008504][ T4316] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 446.020930][ T4316] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 446.029506][ T4316] usb 1-1: Product: syz [ 446.033986][ T4316] usb 1-1: Manufacturer: syz [ 446.045726][ T4316] usb 1-1: SerialNumber: syz [ 446.077997][ T4316] usb 1-1: config 0 descriptor?? [ 446.120288][ T4316] yurex 1-1:0.0: Could not find endpoints [ 446.271956][ T4319] usb 1-1: USB disconnect, device number 9 [ 454.174195][ T8649] loop0: detected capacity change from 0 to 512 [ 454.222663][ T8649] EXT4-fs: Ignoring removed nomblk_io_submit option [ 454.256967][ T8649] EXT4-fs (loop0): can't mount with both data=journal and delalloc [ 454.860721][ T8668] xt_CONNSECMARK: invalid mode: 66 [ 455.868307][ T8670] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 457.842870][ T8696] loop0: detected capacity change from 0 to 2048 [ 459.631615][ T8707] loop0: detected capacity change from 0 to 32768 [ 459.935880][ T8707] XFS (loop0): Mounting V5 Filesystem [ 460.669578][ T8707] XFS (loop0): Ending clean mount [ 460.676412][ T8707] XFS (loop0): Quotacheck needed: Please wait. [ 460.748868][ T8707] XFS (loop0): Quotacheck: Done. [ 460.922092][ T4272] XFS (loop0): Unmounting Filesystem [ 463.197660][ T8747] loop0: detected capacity change from 0 to 32768 [ 463.205018][ T8747] XFS: noikeep mount option is deprecated. [ 463.455034][ T8747] XFS (loop0): Mounting V5 Filesystem [ 463.771945][ T8747] XFS (loop0): Ending clean mount [ 463.808584][ T8747] XFS (loop0): Quotacheck needed: Please wait. [ 463.917425][ T8747] XFS (loop0): Quotacheck: Done. [ 464.029352][ T8746] XFS (loop0): Unmounting Filesystem [ 467.772015][ T8836] xt_CONNSECMARK: invalid mode: 66 [ 467.861320][ T8838] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 472.446106][ T8894] xt_CONNSECMARK: invalid mode: 66 [ 472.535188][ T8897] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 473.467282][ T8904] xt_CONNSECMARK: invalid mode: 66 [ 477.307828][ T8950] xt_CONNSECMARK: invalid mode: 66 [ 491.619160][ T9121] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1296'. [ 492.045893][ T9120] sctp: failed to load transform for md5: -2 [ 492.197755][ T9121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 492.214988][ T9121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 492.226224][ T9121] bond0 (unregistering): Released all slaves [ 492.596947][ T9132] xt_CONNSECMARK: invalid mode: 66 [ 493.658572][ T9136] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 501.248825][ T9227] netlink: 3568 bytes leftover after parsing attributes in process `syz.3.1323'. [ 501.310085][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.316457][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.383564][ T9232] xt_CONNSECMARK: invalid mode: 66 [ 501.892228][ T9247] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 505.345787][ T9289] xt_CONNSECMARK: invalid mode: 66 [ 505.557541][ T9277] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 511.457864][ T9366] xt_CONNSECMARK: invalid mode: 66 [ 511.844812][ T9366] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 512.026725][ T9370] IPVS: sh: FWM 3 0x00000003 - no destination available [ 512.342854][ T9382] xt_CONNSECMARK: invalid mode: 66 [ 518.764110][ T9449] xt_CONNSECMARK: invalid mode: 66 [ 519.012096][ T9449] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 519.405046][ T9463] 9pnet_virtio: no channels available for device syz [ 521.199570][ T9481] xt_CONNSECMARK: invalid mode: 66 [ 521.455805][ T9483] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 525.629123][ T9533] xt_CONNSECMARK: invalid mode: 66 [ 525.718151][ T9535] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 530.778786][ T9573] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 530.786847][ T9573] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 530.794307][ T9573] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 535.364819][ T9633] xt_CONNSECMARK: invalid mode: 66 [ 538.755217][ T9655] netlink: 'syz.3.1450': attribute type 2 has an invalid length. [ 543.566811][ T4997] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 546.431743][ T9743] xt_CONNSECMARK: invalid mode: 66 [ 551.095072][ T9748] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 551.103650][ T9748] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 551.111099][ T9748] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 551.172234][ T9756] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1476'. [ 552.253454][ T9785] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1486'. [ 552.839488][ T9799] xt_CONNSECMARK: invalid mode: 66 [ 555.982650][ T9831] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 556.064632][ T9831] infiniband syz5: RDMA CMA: cma_listen_on_dev, error -98 [ 556.331312][ T9850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1503'. [ 560.461123][ T9904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1519'. [ 563.395662][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.403417][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.402086][ T9955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1537'. [ 572.390321][T10060] xt_CONNSECMARK: invalid mode: 66 [ 572.479150][T10063] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 576.201156][T10112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1583'. [ 576.444917][T10119] xt_CONNSECMARK: invalid mode: 66 [ 576.533292][T10121] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 578.274144][T10148] sctp: [Deprecated]: syz.2.1592 (pid 10148) Use of struct sctp_assoc_value in delayed_ack socket option. [ 578.274144][T10148] Use struct sctp_sack_info instead [ 578.432773][T10150] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 578.445638][T10150] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 578.466015][T10150] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 578.492492][T10150] device bridge_slave_0 left promiscuous mode [ 579.090605][T10150] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.175209][T10150] device bridge_slave_1 left promiscuous mode [ 579.262441][T10150] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.261834][T10150] bond0: (slave bond_slave_0): Releasing backup interface [ 580.556574][T10150] bond0: (slave bond_slave_1): Releasing backup interface [ 581.039329][T10150] team0: Port device team_slave_0 removed [ 581.120474][T10150] team0: Port device team_slave_1 removed [ 581.145146][T10150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 581.160308][T10150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 581.199800][T10150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 581.218567][T10150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 582.481065][T10197] xt_CONNSECMARK: invalid mode: 66 [ 583.329736][T10209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1611'. [ 584.730508][T10245] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1620'. [ 585.241778][T10244] sctp: failed to load transform for md5: -2 [ 585.421202][T10245] bond0 (unregistering): Released all slaves [ 585.928036][T10257] xt_CONNSECMARK: invalid mode: 66 [ 591.672959][T10312] xt_CONNSECMARK: invalid mode: 66 [ 592.805925][T10315] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 593.875768][T10333] xt_CONNSECMARK: invalid mode: 66 [ 599.051300][T10410] xt_CONNSECMARK: invalid mode: 66 [ 599.505700][T10412] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 604.388738][T10478] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1694'. [ 604.397788][T10478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1694'. [ 604.780361][T10489] xt_CONNSECMARK: invalid mode: 66 [ 604.849284][T10493] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 607.541415][T10522] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 607.799102][T10522] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 609.092865][T10522] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 612.309213][T10575] jffs2: notice: (10575) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 613.267255][T10583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1731'. [ 613.276275][T10583] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1731'. [ 613.344452][T10583] device geneve2 entered promiscuous mode [ 614.495014][T10602] Cannot find set identified by id 1 to match [ 618.719575][T10653] xt_CONNSECMARK: invalid mode: 66 [ 618.799479][T10657] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 619.582145][T10682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1762'. [ 622.972928][T10721] sctp: failed to load transform for md5: -2 [ 623.198928][T10729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1774'. [ 623.897555][T10740] xt_CONNSECMARK: invalid mode: 66 [ 624.200718][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.210120][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.988300][T10756] syz.3.1784 uses obsolete (PF_INET,SOCK_PACKET) [ 625.451689][T10773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1787'. [ 627.874008][ T4280] Bluetooth: hci1: Malformed Event: 0x2f [ 627.906884][T10795] overlayfs: failed to clone upperpath [ 628.077652][T10799] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1797'. [ 628.173611][T10802] overlayfs: failed to clone upperpath [ 629.195567][T10817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1802'. [ 629.475474][ T4280] Bluetooth: hci3: Malformed Event: 0x2f [ 631.063830][T10837] xt_CONNSECMARK: invalid mode: 66 [ 631.142322][T10846] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 631.322568][T10855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1815'. [ 631.333483][T10856] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1804'. [ 631.497728][T10861] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1817'. [ 631.541558][T10861] x_tables: duplicate underflow at hook 2 [ 633.275170][T10888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1828'. [ 633.523044][T10897] xt_CONNSECMARK: invalid mode: 66 [ 633.613161][T10899] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 636.171342][T10921] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1836'. [ 636.540152][T10933] jffs2: notice: (10933) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 636.759384][T10942] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1841'. [ 637.306573][T10939] sctp: failed to load transform for md5: -2 [ 638.835976][T10960] xt_CONNSECMARK: invalid mode: 66 [ 638.918786][T10962] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 639.218052][T10968] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1847'. [ 639.556399][T10985] netlink: 'syz.0.1856': attribute type 9 has an invalid length. [ 639.565464][T10985] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1856'. [ 639.840098][T10991] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1853'. [ 639.877427][ T4315] infiniband syz5: ib_query_port failed (-19) [ 640.279150][T10989] sctp: failed to load transform for md5: -2 [ 640.386628][T10991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 640.481541][T10991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 640.544651][T10991] bond0 (unregistering): Released all slaves [ 640.576262][T11001] xt_CONNSECMARK: invalid mode: 66 [ 640.658857][T11005] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 641.693104][T11032] jffs2: notice: (11032) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 644.413317][T11103] bridge0: port 3(syz_tun) entered blocking state [ 644.430235][T11103] bridge0: port 3(syz_tun) entered disabled state [ 644.452566][T11103] device syz_tun entered promiscuous mode [ 644.477244][T11103] bridge0: port 3(syz_tun) entered blocking state [ 644.483908][T11103] bridge0: port 3(syz_tun) entered forwarding state [ 644.919534][T11124] 9pnet_virtio: no channels available for device syz [ 645.251793][T11140] overlayfs: failed to clone upperpath [ 645.746842][T11163] tmpfs: Unknown parameter 'quota' [ 646.475288][T11183] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1924'. [ 646.910326][T11181] sctp: failed to load transform for md5: -2 [ 647.117464][T11189] netlink: 'syz.2.1926': attribute type 10 has an invalid length. [ 647.183331][T11189] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.190938][T11189] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.560974][T11189] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.568234][T11189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 647.575707][T11189] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.582834][T11189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 647.613857][T11189] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 648.174869][T11221] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1937'. [ 648.704630][T11220] sctp: failed to load transform for md5: -2 [ 649.676984][T11255] xt_CONNSECMARK: invalid mode: 66 [ 649.759152][T11261] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 652.426137][T11294] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1958'. [ 652.925570][T11292] sctp: failed to load transform for md5: -2 [ 653.556595][T11314] xt_CONNSECMARK: invalid mode: 66 [ 653.637918][T11316] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 656.512616][T11355] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1970'. [ 656.867700][T11353] sctp: failed to load transform for md5: -2 [ 658.094070][T11386] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 660.717315][T11406] autofs4:pid:11406:autofs_fill_super: called with bogus options [ 660.761601][T11415] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1986'. [ 661.253722][T11412] sctp: failed to load transform for md5: -2 [ 664.044087][T11449] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 664.693557][T11453] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 668.394151][T11523] CIFS: bad ip= option (127.0.0.1,ort=20000) [ 670.957134][T11571] overlayfs: failed to clone upperpath [ 671.762820][T11592] ip_tables: iptables: counters copy to user failed while replacing table [ 676.750677][T11693] xt_CONNSECMARK: invalid mode: 66 [ 677.800820][T11702] 9pnet_virtio: no channels available for device syz [ 679.616245][T11742] xt_CONNSECMARK: invalid mode: 66 [ 681.805564][T11780] jffs2: notice: (11780) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 682.136822][T11794] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 682.156883][T11791] IPVS: stopping master sync thread 11794 ... [ 685.653010][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.668586][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.197778][T11895] sctp: failed to load transform for md5: -2 [ 689.268420][T11978] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 692.195253][T12032] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2208'. [ 692.669817][T12031] sctp: failed to load transform for md5: -2 [ 693.726224][T12032] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 693.763518][T12032] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 693.803454][T12032] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 693.814137][T12032] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.821611][T12032] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.064428][T12032] bond0 (unregistering): Released all slaves [ 696.346720][T12091] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2223'. [ 697.445289][T12108] kAFS: No cell specified [ 697.536377][T12111] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2234'. [ 699.247973][T12152] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2238'. [ 702.224766][T12205] xt_CONNSECMARK: invalid mode: 66 [ 703.215133][T12209] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 704.199133][T12233] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2271'. [ 705.341799][T12250] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2278'. [ 706.395324][T12267] netlink: 'syz.4.2286': attribute type 4 has an invalid length. [ 706.427197][T12267] netlink: 'syz.4.2286': attribute type 4 has an invalid length. [ 706.664076][T12272] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2283'. [ 707.231029][T12271] sctp: failed to load transform for md5: -2 [ 707.311185][T12279] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2287'. [ 707.385548][T12272] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 707.396147][T12272] bond0 (unregistering): Released all slaves [ 707.750221][T12289] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2292'. [ 709.758846][T12311] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2301'. [ 709.876021][T12313] sctp: failed to load transform for md5: -2 [ 710.255551][T12338] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2308'. [ 710.650717][T12351] xt_CONNSECMARK: invalid mode: 66 [ 710.739272][T12353] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 711.921235][T12373] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2316'. [ 712.432188][T12371] sctp: failed to load transform for md5: -2 [ 712.692042][T12386] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2321'. [ 713.196975][T12411] jffs2: notice: (12411) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 714.359034][T12429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2337'. [ 715.327664][T12458] jffs2: notice: (12458) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 715.410743][T12462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2352'. [ 716.269837][T12491] xt_CONNSECMARK: invalid mode: 66 [ 717.074231][T12498] jffs2: notice: (12498) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 717.091211][T12496] tipc: Started in network mode [ 717.143206][T12496] tipc: Node identity 080211, cluster identity 4711 [ 717.193513][T12496] tipc: Enabled bearer , priority 11 [ 718.055125][T12537] jffs2: notice: (12537) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 718.123784][T12539] xt_CONNSECMARK: invalid mode: 66 [ 718.794695][ T14] tipc: Node number set to 134353152 [ 718.928908][T12551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2381'. [ 719.804161][T12585] jffs2: notice: (12585) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 720.356701][T12595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2399'. [ 720.432401][T12598] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2397'. [ 720.856324][T12597] sctp: failed to load transform for md5: -2 [ 721.039784][T12605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2400'. [ 721.472322][T12620] jffs2: notice: (12620) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 722.026132][T12641] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2411'. [ 722.448171][T12639] sctp: failed to load transform for md5: -2 [ 722.773007][T12649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2413'. [ 722.962495][T12661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2428'. [ 723.926459][T12682] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2424'. [ 724.124854][T12680] sctp: failed to load transform for md5: -2 [ 724.417735][T12692] jffs2: notice: (12692) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 724.436971][T12693] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 724.627692][T12693] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 724.780417][T12708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2433'. [ 725.508982][T12720] xt_CONNSECMARK: invalid mode: 66 [ 726.298170][T12731] jffs2: notice: (12731) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 726.556017][T12737] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2439'. [ 726.895612][T12735] sctp: failed to load transform for md5: -2 [ 727.317997][T12761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2449'. [ 727.833456][T12779] jffs2: notice: (12779) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 728.090345][T12787] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2456'. [ 728.532432][T12785] sctp: failed to load transform for md5: -2 [ 729.674446][T12835] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2473'. [ 730.397937][T12839] xt_CONNSECMARK: invalid mode: 66 [ 732.541989][T12902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2501'. [ 736.240125][T12995] ip_tables: iptables: counters copy to user failed while replacing table [ 737.360127][T13004] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2540'. [ 737.487171][T13006] sctp: failed to load transform for md5: -2 [ 738.561831][T13046] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2552'. [ 739.159883][T13045] sctp: failed to load transform for md5: -2 [ 740.568742][T13101] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2565'. [ 741.122713][T13097] sctp: failed to load transform for md5: -2 [ 742.069992][T13143] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2582'. [ 742.536281][T13141] sctp: failed to load transform for md5: -2 [ 743.079447][T13171] xt_CONNSECMARK: invalid mode: 66 [ 744.429787][T13195] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2597'. [ 744.867916][T13194] sctp: failed to load transform for md5: -2 [ 745.581315][T13223] xt_CONNSECMARK: invalid mode: 66 [ 746.799956][T13246] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2611'. [ 747.064977][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.073174][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.221162][T13244] sctp: failed to load transform for md5: -2 [ 747.455146][T13259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2615'. [ 748.277247][T13281] xt_CONNSECMARK: invalid mode: 66 [ 749.545853][T13307] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2627'. [ 750.264747][T13324] xt_CONNSECMARK: invalid mode: 66 [ 750.480628][T13327] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 751.548002][T13363] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2648'. [ 751.622108][T13366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2651'. [ 752.104807][T13376] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2656'. [ 753.040053][T13418] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2673'. [ 753.819413][T13444] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2686'. [ 754.858562][T13475] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2695'. [ 754.872501][ T4288] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 754.886665][ T4288] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 754.896894][ T4288] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 754.908026][ T4288] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 754.917076][ T4288] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 754.926676][ T4288] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 755.684531][ T4992] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.685712][T13482] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2699'. [ 755.803593][ T4992] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.998260][ T4992] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.129610][ T4992] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.346126][T13509] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2708'. [ 756.393335][T13468] chnl_net:caif_netlink_parms(): no params data found [ 756.637809][ T4992] tipc: Disabling bearer [ 756.650616][ T4992] tipc: Left network mode [ 756.652240][T13468] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.712416][T13468] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.723378][T13522] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2712'. [ 756.746921][T13468] device bridge_slave_0 entered promiscuous mode [ 756.957965][T13468] bridge0: port 2(bridge_slave_1) entered blocking state [ 757.021757][T13468] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.030284][T13468] device bridge_slave_1 entered promiscuous mode [ 757.142009][ T4288] Bluetooth: hci1: command 0x0409 tx timeout [ 757.193802][T13468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 757.205474][T13468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 757.410377][T13468] team0: Port device team_slave_0 added [ 757.603160][T13468] team0: Port device team_slave_1 added [ 757.981846][T13545] device macvtap1 entered promiscuous mode [ 757.992215][T13545] device vlan1 entered promiscuous mode [ 758.022260][T13545] team0: Device macvtap1 failed to register rx_handler [ 758.060969][T13545] device vlan1 left promiscuous mode [ 758.217115][T13468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 758.226897][T13468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 758.301798][T13468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 758.709818][T13561] xt_CONNSECMARK: invalid mode: 66 [ 758.832124][T13564] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 759.555913][ T4288] Bluetooth: hci1: command 0x041b tx timeout [ 759.565558][T13468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 759.595762][T13468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 759.667998][T13468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 759.680829][T13566] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2723'. [ 759.770519][T13576] No source specified [ 760.054135][T13468] device hsr_slave_0 entered promiscuous mode [ 760.067341][T13468] device hsr_slave_1 entered promiscuous mode [ 760.089472][T13468] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 760.104333][T13468] Cannot create hsr debugfs directory [ 761.393354][T13610] xt_CONNSECMARK: invalid mode: 66 [ 761.482431][T13612] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 761.812116][ T4288] Bluetooth: hci1: command 0x040f tx timeout [ 762.069110][T13619] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2737'. [ 762.358303][T13625] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2738'. [ 762.943709][ T4992] device hsr_slave_0 left promiscuous mode [ 762.958135][ T4992] device hsr_slave_1 left promiscuous mode [ 763.000531][ T4992] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 763.056960][ T4992] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 763.116099][ T4992] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 763.144118][ T4992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 763.161505][ T4992] device bridge_slave_1 left promiscuous mode [ 763.177847][ T4992] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.207607][ T4992] device bridge_slave_0 left promiscuous mode [ 763.220693][ T4992] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.305551][ T4992] device veth1_macvtap left promiscuous mode [ 763.319723][ T4992] device veth0_macvtap left promiscuous mode [ 763.338175][ T4992] device veth1_vlan left promiscuous mode [ 763.359948][ T4992] device veth0_vlan left promiscuous mode [ 763.991338][ T4288] Bluetooth: hci1: command 0x0419 tx timeout [ 764.918255][ T4992] team0 (unregistering): Port device team_slave_1 removed [ 764.979800][ T4992] team0 (unregistering): Port device team_slave_0 removed [ 766.173645][T13663] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2750'. [ 766.946157][T13701] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2762'. [ 767.204533][T13707] xt_CONNSECMARK: invalid mode: 66 [ 767.293805][T13709] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 767.944485][T13468] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 767.973305][T13468] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 768.012485][T13468] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 768.040751][T13468] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 768.328496][T13725] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 768.380327][T13726] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2766'. [ 768.403135][T13468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 768.444494][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 768.474230][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 768.500228][T13468] 8021q: adding VLAN 0 to HW filter on device team0 [ 768.542422][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 768.568255][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 768.604709][ T4992] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.611965][ T4992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 768.648598][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 768.680265][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 768.698527][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 768.726439][ T4992] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.733661][ T4992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 768.766683][ T5009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 768.790831][ T5009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 768.821333][ T5009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 768.852964][ T5009] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 768.878204][ T5009] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 768.919005][ T5009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 768.949430][ T5009] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 768.984793][ T5009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 769.022474][ T5009] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 769.098414][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 769.140254][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 769.172036][T13468] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 769.965089][T13779] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2786'. [ 769.996360][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 770.008260][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 770.055371][T13468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 770.121745][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 770.137328][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 770.183622][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 770.215994][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 770.246109][T13468] device veth0_vlan entered promiscuous mode [ 770.288111][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 770.312141][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 770.356968][T13468] device veth1_vlan entered promiscuous mode [ 770.419733][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 770.438104][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 770.456732][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 770.488254][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 770.532482][T13468] device veth0_macvtap entered promiscuous mode [ 770.553635][T13468] device veth1_macvtap entered promiscuous mode [ 770.578048][T13468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 770.691682][T13468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 770.704547][T13468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 770.716094][T13468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 770.726260][T13468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 770.736810][T13468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 770.748351][T13468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 770.759648][ T5009] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 770.784739][ T5009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 770.797819][T13468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 770.816179][T13468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 770.826835][T13468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 770.837529][T13468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 770.847458][T13468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 770.857995][T13468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 770.875895][T13468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 770.887690][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 770.922568][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 770.972001][T13468] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.998024][T13468] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.031988][T13468] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.046047][T13468] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.215464][ T4990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 771.235104][ T4990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 771.277737][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 771.353250][ T5009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 771.386231][ T5009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 771.415920][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 771.582942][ T4288] Bluetooth: hci1: hardware error 0x07 [ 771.887137][T13841] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2804'. [ 772.745426][T13886] device syz_tun left promiscuous mode [ 772.761413][T13886] bridge0: port 3(syz_tun) entered disabled state [ 772.783984][T13886] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 772.819026][T13886] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 772.851032][T13886] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 772.860704][T13886] device bridge_slave_0 left promiscuous mode [ 772.867258][T13886] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.938607][T13886] device bridge_slave_1 left promiscuous mode [ 772.948350][T13886] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.040124][T13896] xt_CONNSECMARK: invalid mode: 66 [ 773.248533][T13898] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 773.627914][ T4288] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 773.699865][T13886] team0: Port device team_slave_0 removed [ 773.792100][T13886] team0: Port device team_slave_1 removed [ 773.807582][T13886] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 773.821760][T13886] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 773.836920][T13886] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 773.844910][T13886] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 773.888037][T13893] device vlan0 entered promiscuous mode [ 773.952296][T13893] team0: Port device vlan0 added [ 774.071908][T13891] tipc: Started in network mode [ 774.080313][T13891] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 774.129444][T13891] tipc: Enabled bearer , priority 0 [ 774.364717][T13913] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2830'. [ 774.716642][T13932] No source specified [ 775.175056][T13950] xt_CONNSECMARK: invalid mode: 66 [ 775.383153][T13952] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 775.794813][T13953] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 775.881352][T13953] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 775.904825][T13953] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 775.930111][T13953] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 776.075354][ T14] tipc: Node number set to 11578026 [ 776.271372][T13977] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2850'. [ 776.434295][T13980] No source specified [ 776.989572][T14003] xt_CONNSECMARK: invalid mode: 66 [ 777.394791][T14005] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 779.043866][T14028] No source specified [ 779.174631][T14036] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2869'. [ 780.106674][ T4288] Bluetooth: hci3: unexpected cc 0x042d length: 1 < 7 [ 780.362250][ T4781] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.504897][ T4781] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.633276][ T4781] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.646026][T13473] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 780.658241][T13473] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 780.667446][T13473] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 780.676997][T13473] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 780.691794][T13473] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 780.699157][T13473] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 781.055415][ T4781] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.241985][T14080] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2881'. [ 781.855032][T14057] chnl_net:caif_netlink_parms(): no params data found [ 782.063454][T14057] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.080729][T14057] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.140159][T14057] device bridge_slave_0 entered promiscuous mode [ 782.299147][T14057] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.331971][T14057] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.340152][T14057] device bridge_slave_1 entered promiscuous mode [ 782.508739][T14057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 782.543668][T14057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 782.708062][T14057] team0: Port device team_slave_0 added [ 782.717949][T14123] 9pnet_virtio: no channels available for device syz [ 782.741880][T13473] Bluetooth: hci2: command 0x0409 tx timeout [ 782.822488][T14057] team0: Port device team_slave_1 added [ 782.943489][T14057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 782.979012][T14057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 783.078127][T14130] nvmet: adding nsid 1 to subsystem test_subsys [ 783.087186][T14057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 783.165642][T14057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 783.191917][T14057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 783.289543][T14057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 784.153320][T14057] device hsr_slave_0 entered promiscuous mode [ 784.183174][ T4315] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 784.388190][ T4315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 784.493706][ T4315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 784.512254][T14057] device hsr_slave_1 entered promiscuous mode [ 784.556672][ T4315] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 784.581047][ T4315] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 784.600762][ T4315] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.620616][ T4315] usb 2-1: config 0 descriptor?? [ 784.640870][T14057] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 784.688378][T14057] Cannot create hsr debugfs directory [ 784.717066][ T4781] device hsr_slave_0 left promiscuous mode [ 784.726759][ T4781] device hsr_slave_1 left promiscuous mode [ 784.822298][T13473] Bluetooth: hci2: command 0x041b tx timeout [ 784.835369][ T4781] device veth1_macvtap left promiscuous mode [ 784.844554][ T4781] device veth0_macvtap left promiscuous mode [ 784.850916][ T4781] device veth1_vlan left promiscuous mode [ 784.856963][ T4781] device veth0_vlan left promiscuous mode [ 785.071005][ T4315] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 785.084151][ T4315] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 785.094193][ T4315] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 785.108219][ T4315] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 785.118902][ T4315] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 785.129870][ T4315] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 785.139964][ T4315] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 785.155779][ T4315] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 785.165992][ T4315] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 785.177892][ T4315] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 785.196625][ T4315] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 785.206673][ T4315] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 785.220308][ T4315] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 785.230389][ T4315] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 785.241386][ T4315] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 785.265521][ T4315] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 785.366498][ T4315] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 786.074565][T14163] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2907'. [ 786.689359][T14187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2915'. [ 786.950630][ T14] usb 2-1: USB disconnect, device number 4 [ 786.994720][T13473] Bluetooth: hci2: command 0x040f tx timeout [ 787.960760][T14057] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 788.139425][T14057] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 788.204232][T14057] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 788.274822][T14057] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 788.320449][T14228] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2923'. [ 788.570453][T14057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 788.640727][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 788.656436][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 788.693031][T14057] 8021q: adding VLAN 0 to HW filter on device team0 [ 788.781245][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 788.807969][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 788.878705][ T4990] bridge0: port 1(bridge_slave_0) entered blocking state [ 788.885917][ T4990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 789.061869][ T4288] Bluetooth: hci2: command 0x0419 tx timeout [ 789.234403][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 789.381208][T14246] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2931'. [ 789.404763][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 789.456659][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 789.483633][ T4990] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.490842][ T4990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 789.615816][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 789.641193][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 789.715872][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 789.754354][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 789.785658][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 789.807440][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 789.840628][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 789.880234][T14057] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 790.094560][T14057] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 790.624693][T14267] xt_CONNSECMARK: invalid mode: 66 [ 791.688718][T14269] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 791.815290][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 791.827462][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 792.133684][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 792.216912][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 792.239719][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 792.281396][T14273] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2937'. [ 792.752107][T14293] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 792.880378][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 792.913228][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 792.962921][T14057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 795.245432][ T5007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 795.269704][ T5007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 795.389930][ T5007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 795.410791][ T5007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 795.445599][T14351] syz.2.2956 sent an empty control message without MSG_MORE. [ 795.489224][ T5007] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 795.523780][ T5007] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 795.554864][T14347] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2954'. [ 795.784093][T14347] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 795.887052][T14347] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 795.900373][T14361] fuse: Bad value for 'fd' [ 795.927520][T14347] bond0 (unregistering): Released all slaves [ 795.939845][T14057] device veth0_vlan entered promiscuous mode [ 795.977898][T14057] device veth1_vlan entered promiscuous mode [ 796.081342][ T5007] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 796.091158][ T5007] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 796.110319][ T5007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 796.164946][ T5007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 796.200638][T14057] device veth0_macvtap entered promiscuous mode [ 796.237519][T14057] device veth1_macvtap entered promiscuous mode [ 796.268025][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 796.287169][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 796.349147][T14057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 796.391516][T14057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.425208][T14057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 796.475457][T14057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.540219][T14057] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 796.590430][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 796.616357][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 796.651732][T14057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 796.684239][T14057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.707834][T14057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 796.740681][T14057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.767923][T14057] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 796.787092][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 796.802936][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 796.829364][T14057] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.873866][T14057] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.899616][T14057] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.935483][T14057] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.197709][ T5007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.211331][ T5007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 797.255173][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 797.281121][ T5007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.324811][ T5007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 797.422598][ T5007] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 797.751648][ T4315] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 797.941801][ T4315] usb 2-1: Using ep0 maxpacket: 32 [ 797.952924][ T4315] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 797.991471][ T4315] usb 2-1: config 0 has no interface number 0 [ 798.027753][ T4315] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 798.053665][ T4315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.137104][ T4315] usb 2-1: Product: syz [ 798.141324][ T4315] usb 2-1: Manufacturer: syz [ 798.187707][ T4315] usb 2-1: SerialNumber: syz [ 798.225387][ T4315] usb 2-1: config 0 descriptor?? [ 798.279626][ T4315] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 798.360666][ T4315] usb 2-1: selecting invalid altsetting 1 [ 798.390060][ T4315] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 798.488346][ T4288] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 798.499678][ T4288] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 798.508432][ T4288] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 798.521392][ T4315] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 798.535040][ T4288] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 798.543265][ T4288] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 798.550777][ T4288] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 798.558256][ T4315] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 798.567600][ T4315] usb 2-1: media controller created [ 798.591678][ T4315] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 798.643471][ T4315] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 798.652303][ T4315] zl10353_read_register: readreg error (reg=127, ret==-71) [ 798.661061][ T4315] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 798.737785][ T4315] usb 2-1: USB disconnect, device number 5 [ 798.767618][ T5007] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.917397][ T5007] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.118145][ T5007] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.234799][T14431] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2980'. [ 799.306989][ T5007] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.618706][T14413] chnl_net:caif_netlink_parms(): no params data found [ 800.581803][T13473] Bluetooth: hci4: command 0x0409 tx timeout [ 800.655750][T14467] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0, syncid = 1, id = 0 [ 800.669379][T14413] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.742001][T14413] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.870383][T14413] device bridge_slave_0 entered promiscuous mode [ 801.089136][T14473] nvme_fabrics: missing parameter 'transport=%s' [ 801.120581][T14473] nvme_fabrics: missing parameter 'nqn=%s' [ 801.152240][T14413] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.171217][T14413] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.194802][T14413] device bridge_slave_1 entered promiscuous mode [ 801.403887][T14413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 801.506753][T14413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 801.653675][T14413] team0: Port device team_slave_0 added [ 801.809817][T14413] team0: Port device team_slave_1 added [ 801.963874][T14413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 801.964361][T14497] FAULT_INJECTION: forcing a failure. [ 801.964361][T14497] name failslab, interval 1, probability 0, space 0, times 0 [ 801.976668][T14413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 802.071783][T14497] CPU: 1 PID: 14497 Comm: syz.4.2998 Not tainted syzkaller #0 [ 802.079312][T14497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 802.089410][T14497] Call Trace: [ 802.092780][T14497] [ 802.093581][T14413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 802.095771][T14497] dump_stack_lvl+0x188/0x24e [ 802.111022][T14497] ? show_regs_print_info+0x12/0x12 [ 802.116326][T14497] ? load_image+0x410/0x410 [ 802.120886][T14497] ? __might_sleep+0xd0/0xd0 [ 802.125583][T14497] ? __lock_acquire+0x7c40/0x7c40 [ 802.130663][T14497] should_fail_ex+0x390/0x4c0 [ 802.135424][T14497] should_failslab+0x5/0x20 [ 802.139993][T14497] slab_pre_alloc_hook+0x59/0x300 [ 802.145086][T14497] ? __kernfs_new_node+0xa6/0x7f0 [ 802.150143][T14497] ? rcu_is_watching+0x11/0xa0 [ 802.155012][T14497] kmem_cache_alloc+0x56/0x2f0 [ 802.159809][T14497] ? __kernfs_new_node+0xe1/0x7f0 [ 802.164869][T14497] __kernfs_new_node+0xe1/0x7f0 [ 802.169754][T14497] ? __lock_acquire+0x7c40/0x7c40 [ 802.174817][T14497] ? kernfs_new_node+0x250/0x250 [ 802.179799][T14497] ? sysfs_do_create_link_sd+0x75/0x110 [ 802.185450][T14497] ? up_write+0x1b6/0x410 [ 802.189807][T14497] ? __lock_acquire+0x7c40/0x7c40 [ 802.194868][T14497] kernfs_new_node+0x148/0x250 [ 802.199666][T14497] kernfs_create_link+0xa3/0x200 [ 802.204639][T14497] sysfs_do_create_link_sd+0x83/0x110 [ 802.210044][T14497] device_add+0x83b/0x1050 [ 802.214567][T14497] device_create+0x266/0x300 [ 802.219190][T14497] ? format_decode+0xb67/0x1330 [ 802.224076][T14497] ? root_device_unregister+0xf0/0xf0 [ 802.229497][T14497] bdi_register_va+0xa0/0x750 [ 802.234229][T14497] super_setup_bdi_name+0xf5/0x200 [ 802.239474][T14497] ? __rwlock_init+0x140/0x140 [ 802.244279][T14497] ? vfs_get_tree+0x270/0x270 [ 802.248983][T14497] ? up_write+0x1b6/0x410 [ 802.253363][T14497] afs_get_tree+0x9d1/0x1170 [ 802.258061][T14497] ? bpf_lsm_capable+0x5/0x10 [ 802.262827][T14497] vfs_get_tree+0x88/0x270 [ 802.267265][T14497] do_new_mount+0x247/0xa40 [ 802.271861][T14497] __se_sys_mount+0x2e3/0x3d0 [ 802.276566][T14497] ? __x64_sys_mount+0xc0/0xc0 [ 802.281400][T14497] ? lockdep_hardirqs_on+0x94/0x140 [ 802.286683][T14497] ? __x64_sys_mount+0x1c/0xc0 [ 802.291474][T14497] do_syscall_64+0x4c/0xa0 [ 802.295922][T14497] ? clear_bhb_loop+0x60/0xb0 [ 802.300713][T14497] ? clear_bhb_loop+0x60/0xb0 [ 802.305423][T14497] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 802.311344][T14497] RIP: 0033:0x7f6f5999e159 [ 802.315837][T14497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 802.335527][T14497] RSP: 002b:00007f6f5a8e4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 802.343990][T14497] RAX: ffffffffffffffda RBX: 00007f6f59c25fa0 RCX: 00007f6f5999e159 [ 802.351992][T14497] RDX: 00002000000001c0 RSI: 0000200000000180 RDI: 0000000000000000 [ 802.359988][T14497] RBP: 00007f6f59a3503b R08: 0000200000000380 R09: 0000000000000000 [ 802.367984][T14497] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 802.375987][T14497] R13: 00007f6f59c26038 R14: 00007f6f59c25fa0 R15: 00007ffd5a426ff8 [ 802.383996][T14497] [ 802.463174][T14413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 802.475178][T14413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 802.592322][T14413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 802.662061][T13473] Bluetooth: hci4: command 0x041b tx timeout [ 802.830006][T14413] device hsr_slave_0 entered promiscuous mode [ 802.863472][T14413] device hsr_slave_1 entered promiscuous mode [ 802.928582][T14413] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 802.958917][T14413] Cannot create hsr debugfs directory [ 803.899912][ T5007] IPVS: stopping master sync thread 13725 ... [ 804.027843][T13473] Bluetooth: Wrong link type (-22) [ 804.455125][ T5007] device hsr_slave_0 left promiscuous mode [ 804.482744][ T5007] device hsr_slave_1 left promiscuous mode [ 804.497470][ T5007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 804.523598][ T5007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 804.558056][ T5007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 804.586620][ T5007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 804.597967][T14553] overlayfs: metacopy with no lower data found - abort lookup (/file1) [ 804.610149][ T5007] device bridge_slave_1 left promiscuous mode [ 804.634190][ T5007] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.741765][T13473] Bluetooth: hci4: command 0x040f tx timeout [ 804.820673][ T5007] device bridge_slave_0 left promiscuous mode [ 804.888538][ T5007] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.998989][T14575] loop4: detected capacity change from 0 to 1024 [ 805.983817][T14563] nvme_fabrics: missing parameter 'transport=%s' [ 805.990190][T14563] nvme_fabrics: missing parameter 'nqn=%s' [ 806.633723][ T5007] device veth1_macvtap left promiscuous mode [ 806.640250][ T5007] device veth0_macvtap left promiscuous mode [ 806.650513][ T5007] device veth1_vlan left promiscuous mode [ 806.656688][ T5007] device veth0_vlan left promiscuous mode [ 806.821629][ T4288] Bluetooth: hci4: command 0x0419 tx timeout [ 807.609127][ T5007] team0 (unregistering): Port device team_slave_1 removed [ 807.650760][ T5007] team0 (unregistering): Port device team_slave_0 removed [ 808.518318][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.524722][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.811667][ T8309] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 809.013740][ T8309] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 809.040947][ T8309] usb 2-1: config 0 has no interfaces? [ 809.820920][ T8309] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 809.855974][ T8309] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 809.875996][ T8309] usb 2-1: Product: syz [ 809.884555][ T8309] usb 2-1: Manufacturer: syz [ 809.927311][ T8309] usb 2-1: config 0 descriptor?? [ 810.156218][ T14] usb 2-1: USB disconnect, device number 6 [ 810.219979][T14413] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 810.242811][T14413] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 810.257244][T14413] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 810.283140][T14413] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 810.775994][T14413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 810.896081][T14413] 8021q: adding VLAN 0 to HW filter on device team0 [ 810.953454][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 810.974902][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 810.996263][T14674] netlink: 'syz.3.3056': attribute type 7 has an invalid length. [ 811.011848][T14674] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3056'. [ 811.022122][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 811.051576][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 811.080724][ T4990] bridge0: port 1(bridge_slave_0) entered blocking state [ 811.087920][ T4990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 811.136259][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 811.175507][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 811.204135][ T4990] bridge0: port 2(bridge_slave_1) entered blocking state [ 811.211319][ T4990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 811.231702][ T4320] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 811.235255][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 811.292334][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 811.471788][ T4320] usb 2-1: Using ep0 maxpacket: 16 [ 811.485130][ T4320] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 811.791214][ T4320] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 811.872335][ T4320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.928463][ T4320] usb 2-1: config 0 descriptor?? [ 812.026694][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 812.045284][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 812.065347][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 812.127484][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 812.142365][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 812.158752][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 812.173726][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 812.186443][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 812.200823][ T4320] usbhid 2-1:0.0: can't add hid device: -71 [ 812.217966][T14413] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 812.228633][ T4320] usbhid: probe of 2-1:0.0 failed with error -71 [ 812.250461][T14413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 812.258311][ T4320] usb 2-1: USB disconnect, device number 7 [ 812.282183][ T8309] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 812.282315][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 812.311387][T14701] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3064'. [ 812.315010][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 812.613181][ T8309] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 812.631915][ T8309] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 813.238021][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 813.295711][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 813.343273][T14413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 813.370968][ T8309] usb 5-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 813.380191][ T8309] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.401075][ T8309] idmouse 5-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 813.471827][ T5009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 813.493785][ T5009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 813.511800][T14718] jffs2: notice: (14718) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 813.544885][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 813.566226][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 813.598549][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 813.615960][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 813.668380][T14413] device veth0_vlan entered promiscuous mode [ 813.707076][T14413] device veth1_vlan entered promiscuous mode [ 813.807984][T14413] device veth0_macvtap entered promiscuous mode [ 813.827021][ T5009] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 813.850805][ T5009] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 813.888807][ T5009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 813.913313][ T5009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 813.959095][ T5009] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 813.979727][T14740] program syz.1.3075 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 813.994000][T14413] device veth1_macvtap entered promiscuous mode [ 814.022958][T14744] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3074'. [ 814.033868][T14744] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3074'. [ 814.072248][T14413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 814.090015][T14413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.131630][T14413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 814.142377][T14413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.172107][T14413] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 814.180750][ T5009] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 814.213901][ T5009] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 814.233596][ T5009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 814.259013][T14413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 814.293699][T14413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.309266][T14413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 814.342003][ T4288] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 814.351855][ T4288] CPU: 0 PID: 4288 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 814.358901][T14413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.359406][ T4288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 814.379345][ T4288] Workqueue: hci3 hci_rx_work [ 814.384257][ T4288] Call Trace: [ 814.387571][ T4288] [ 814.390528][ T4288] dump_stack_lvl+0x188/0x24e [ 814.391106][T14413] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 814.395227][ T4288] ? show_regs_print_info+0x12/0x12 [ 814.395263][ T4288] ? load_image+0x410/0x410 [ 814.395298][ T4288] sysfs_create_dir_ns+0x26a/0x290 [ 814.395325][ T4288] ? __lock_acquire+0x7c40/0x7c40 [ 814.395352][ T4288] ? sysfs_warn_dup+0xa0/0xa0 [ 814.395379][ T4288] ? do_raw_spin_unlock+0x11d/0x230 [ 814.425866][T14413] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.427078][ T4288] kobject_add_internal+0x617/0xca0 [ 814.446170][ T4288] kobject_add+0x160/0x230 [ 814.450732][ T4288] ? kobject_init+0x1c0/0x1c0 [ 814.455429][ T4288] ? __raw_spin_lock_init+0x41/0x100 [ 814.460721][ T4288] ? klist_children_get+0x50/0x50 [ 814.465759][ T4288] ? get_device_parent+0x121/0x3e0 [ 814.470885][ T4288] device_add+0x470/0x1050 [ 814.475321][ T4288] hci_conn_add_sysfs+0xd1/0x1e0 [ 814.480364][ T4288] le_conn_complete_evt+0xfac/0x15c0 [ 814.485734][ T4288] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 814.492001][ T4288] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 814.497650][ T4288] ? mutex_unlock+0x10/0x10 [ 814.502169][ T4288] ? skb_pull_data+0xec/0x1f0 [ 814.506881][ T4288] hci_le_enh_conn_complete_evt+0x185/0x460 [ 814.512786][ T4288] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 814.519207][ T4288] ? hci_remote_host_features_evt+0x230/0x230 [ 814.525280][ T4288] hci_event_packet+0x7b3/0x1290 [ 814.530229][ T4288] ? lock_chain_count+0x20/0x20 [ 814.535088][ T4288] ? hci_conn_valid+0x220/0x220 [ 814.539935][ T4288] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 814.545836][ T4288] ? kcov_remote_start+0x50f/0x810 [ 814.551036][ T4288] ? lockdep_hardirqs_on+0x94/0x140 [ 814.556246][ T4288] ? hci_send_to_monitor+0x9c/0x4a0 [ 814.561450][ T4288] hci_rx_work+0x3eb/0xd40 [ 814.565872][ T4288] ? _raw_spin_unlock+0x40/0x40 [ 814.570730][ T4288] ? process_one_work+0x7b4/0x1160 [ 814.575917][ T4288] process_one_work+0x8ab/0x1160 [ 814.580867][ T4288] ? worker_detach_from_pool+0x240/0x240 [ 814.586501][ T4288] ? _raw_spin_lock_irq+0xb7/0xf0 [ 814.591524][ T4288] ? _raw_spin_lock_irqsave+0x100/0x100 [ 814.597077][ T4288] ? wq_worker_running+0x97/0x190 [ 814.602183][ T4288] worker_thread+0xaf5/0x12a0 [ 814.606892][ T4288] kthread+0x29d/0x330 [ 814.611035][ T4288] ? worker_clr_flags+0x1a0/0x1a0 [ 814.616076][ T4288] ? kthread_blkcg+0xd0/0xd0 [ 814.620671][ T4288] ret_from_fork+0x1f/0x30 [ 814.625119][ T4288] [ 814.645495][ T4288] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 814.658798][ T4288] Bluetooth: hci3: failed to register connection device [ 814.666958][T14413] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.712563][T14413] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.722981][T14413] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.737028][ T5009] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 814.775284][ T5009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 815.429946][ T5009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 815.471005][ T5009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 815.512496][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 815.546010][ T4986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 815.557884][ T4986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 815.578615][ T5009] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 815.630452][ T4327] kernel write not supported for file /vbi5 (pid: 4327 comm: kworker/1:7) [ 815.684757][ T4315] usb 5-1: USB disconnect, device number 3 [ 815.712283][ T4315] idmouse 5-1:1.0: disconnected [ 816.221850][ T4327] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 816.486437][ T4288] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 816.501249][ T4288] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 816.511505][ T4288] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 816.521573][ T4288] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 816.553844][ T4288] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 816.561180][ T4288] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 816.561615][ T4327] usb 2-1: Using ep0 maxpacket: 16 [ 816.578974][ T4327] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 817.295100][ T4327] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 817.322468][ T4327] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.335749][ T4327] usb 2-1: config 0 descriptor?? [ 817.453806][T14822] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3094'. [ 817.467032][ T4990] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.552303][ T4327] usbhid 2-1:0.0: can't add hid device: -71 [ 817.558333][ T4327] usbhid: probe of 2-1:0.0 failed with error -71 [ 817.606291][ T4327] usb 2-1: USB disconnect, device number 8 [ 817.715972][ T4990] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.836038][T14834] FAULT_INJECTION: forcing a failure. [ 817.836038][T14834] name failslab, interval 1, probability 0, space 0, times 0 [ 817.873784][ T4990] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.900486][T14834] CPU: 0 PID: 14834 Comm: syz.4.3096 Not tainted syzkaller #0 [ 817.908005][T14834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 817.918080][T14834] Call Trace: [ 817.921358][T14834] [ 817.924288][T14834] dump_stack_lvl+0x188/0x24e [ 817.928980][T14834] ? show_regs_print_info+0x12/0x12 [ 817.934179][T14834] ? load_image+0x410/0x410 [ 817.938681][T14834] ? __might_sleep+0xd0/0xd0 [ 817.943269][T14834] ? __lock_acquire+0x7c40/0x7c40 [ 817.948302][T14834] should_fail_ex+0x390/0x4c0 [ 817.952986][T14834] should_failslab+0x5/0x20 [ 817.957484][T14834] slab_pre_alloc_hook+0x59/0x300 [ 817.962509][T14834] kmem_cache_alloc_lru+0x49/0x2e0 [ 817.967617][T14834] ? __d_alloc+0x2e/0x6e0 [ 817.971976][T14834] __d_alloc+0x2e/0x6e0 [ 817.976127][T14834] d_alloc_parallel+0xdc/0x1590 [ 817.980972][T14834] ? __d_lookup+0x8b/0x7c0 [ 817.985387][T14834] ? __lock_acquire+0x7c40/0x7c40 [ 817.990425][T14834] ? __d_lookup+0x8b/0x7c0 [ 817.994858][T14834] ? d_hash_and_lookup+0x1b0/0x1b0 [ 817.999964][T14834] ? rwsem_write_trylock+0x135/0x1c0 [ 818.005259][T14834] ? clear_nonspinnable+0x60/0x60 [ 818.010294][T14834] path_openat+0x949/0x2f10 [ 818.014820][T14834] ? verify_lock_unused+0x140/0x140 [ 818.020036][T14834] ? do_filp_open+0x420/0x420 [ 818.024726][T14834] do_filp_open+0x1ee/0x420 [ 818.029230][T14834] ? vfs_tmpfile+0x470/0x470 [ 818.033838][T14834] ? _raw_spin_unlock+0x24/0x40 [ 818.038686][T14834] ? alloc_fd+0x590/0x640 [ 818.043026][T14834] do_sys_openat2+0x14b/0x4f0 [ 818.047714][T14834] ? do_sys_open+0xe0/0xe0 [ 818.052138][T14834] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 818.058119][T14834] ? lock_chain_count+0x20/0x20 [ 818.062981][T14834] __x64_sys_openat+0x135/0x160 [ 818.067868][T14834] do_syscall_64+0x4c/0xa0 [ 818.072284][T14834] ? clear_bhb_loop+0x60/0xb0 [ 818.076964][T14834] ? clear_bhb_loop+0x60/0xb0 [ 818.081645][T14834] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 818.087539][T14834] RIP: 0033:0x7f6f5999e159 [ 818.091954][T14834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 818.111569][T14834] RSP: 002b:00007f6f5a8e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 818.120071][T14834] RAX: ffffffffffffffda RBX: 00007f6f59c25fa0 RCX: 00007f6f5999e159 [ 818.128039][T14834] RDX: 0000000000002c41 RSI: 0000200000000580 RDI: ffffffffffffff9c [ 818.136011][T14834] RBP: 00007f6f59a3503b R08: 0000000000000000 R09: 0000000000000000 [ 818.143983][T14834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 818.151953][T14834] R13: 00007f6f59c26038 R14: 00007f6f59c25fa0 R15: 00007ffd5a426ff8 [ 818.159948][T14834] [ 818.334308][T14805] chnl_net:caif_netlink_parms(): no params data found [ 818.581963][ T4280] Bluetooth: hci0: command 0x0409 tx timeout [ 819.647175][ T4990] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.682890][T14805] bridge0: port 1(bridge_slave_0) entered blocking state [ 819.707745][T14805] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.740519][T14805] device bridge_slave_0 entered promiscuous mode [ 819.799672][T14805] bridge0: port 2(bridge_slave_1) entered blocking state [ 819.830464][T14805] bridge0: port 2(bridge_slave_1) entered disabled state [ 819.869493][T14805] device bridge_slave_1 entered promiscuous mode [ 819.909860][T14884] ubi0: attaching mtd0 [ 819.925058][T14884] ubi0: scanning is finished [ 819.946865][T14884] ubi0: empty MTD device detected [ 820.004455][T14805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 820.073608][T14805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 820.238223][T14884] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 820.253503][T14805] team0: Port device team_slave_0 added [ 820.277167][T14884] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 820.290623][T14805] team0: Port device team_slave_1 added [ 820.327126][T14884] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 820.354697][T14884] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 820.387455][T14805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 820.387470][T14884] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 820.419045][T14805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 820.452237][T14884] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 820.483640][T14884] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2384111043 [ 820.524229][T14884] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 820.581693][T14805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 820.592688][T14891] ubi0: background thread "ubi_bgt0d" started, PID 14891 [ 820.670367][ T4280] Bluetooth: hci0: command 0x041b tx timeout [ 821.015629][T14805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 821.028329][T14805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 821.079372][T14805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 821.123408][T14910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 821.174216][T14910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 821.217164][T14910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 821.232967][T14910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 821.243237][T14910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 821.875577][T14910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 821.889964][T14910] device batadv_slave_0 entered promiscuous mode [ 821.956727][T14910] device batadv_slave_0 left promiscuous mode [ 822.337352][T14805] device hsr_slave_0 entered promiscuous mode [ 822.368150][T14805] device hsr_slave_1 entered promiscuous mode [ 822.389305][T14805] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 822.418561][T14805] Cannot create hsr debugfs directory [ 822.662398][T14948] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3128'. [ 822.741739][ T4280] Bluetooth: hci0: command 0x040f tx timeout [ 822.801236][T14952] mmap: syz.1.3125 (14952) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 822.883953][T14952] [ 822.886340][T14952] ====================================================== [ 822.893367][T14952] WARNING: possible circular locking dependency detected [ 822.900417][T14952] syzkaller #0 Not tainted [ 822.904845][T14952] ------------------------------------------------------ [ 822.911879][T14952] syz.1.3125/14952 is trying to acquire lock: [ 822.917947][T14952] ffff8880288d41b0 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: process_measurement+0x3af/0x1c40 [ 822.928743][T14952] [ 822.928743][T14952] but task is already holding lock: [ 822.936100][T14952] ffff88807c0917d8 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x1aa/0x7b0 [ 822.946197][T14952] [ 822.946197][T14952] which lock already depends on the new lock. [ 822.946197][T14952] [ 822.956589][T14952] [ 822.956589][T14952] the existing dependency chain (in reverse order) is: [ 822.965589][T14952] [ 822.965589][T14952] -> #1 (&mm->mmap_lock){++++}-{3:3}: [ 822.973144][T14952] down_read_killable+0x4c/0x340 [ 822.978599][T14952] mmap_read_lock_killable+0x1d/0x60 [ 822.984399][T14952] lock_mm_and_find_vma+0x2b1/0x2f0 [ 822.990115][T14952] do_user_addr_fault+0x2e8/0xb20 [ 822.995685][T14952] exc_page_fault+0x60/0x100 [ 823.000791][T14952] asm_exc_page_fault+0x22/0x30 [ 823.006192][T14952] fault_in_readable+0x13e/0x1f0 [ 823.011651][T14952] fault_in_iov_iter_readable+0xbf/0x2f0 [ 823.017828][T14952] generic_perform_write+0x1f1/0x5c0 [ 823.023699][T14952] __generic_file_write_iter+0x148/0x2a0 [ 823.029856][T14952] generic_file_write_iter+0xab/0x2e0 [ 823.035746][T14952] vfs_write+0x482/0x9a0 [ 823.040511][T14952] ksys_write+0x14d/0x260 [ 823.045365][T14952] do_syscall_64+0x4c/0xa0 [ 823.050304][T14952] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 823.056724][T14952] [ 823.056724][T14952] -> #0 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}: [ 823.065414][T14952] __lock_acquire+0x2d18/0x7c40 [ 823.070788][T14952] lock_acquire+0x1bb/0x4a0 [ 823.075810][T14952] down_write+0x36/0x60 [ 823.080479][T14952] process_measurement+0x3af/0x1c40 [ 823.086206][T14952] ima_file_mmap+0xe9/0x140 [ 823.091258][T14952] __se_sys_remap_file_pages+0x55a/0x7b0 [ 823.097412][T14952] do_syscall_64+0x4c/0xa0 [ 823.102351][T14952] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 823.108764][T14952] [ 823.108764][T14952] other info that might help us debug this: [ 823.108764][T14952] [ 823.118980][T14952] Possible unsafe locking scenario: [ 823.118980][T14952] [ 823.126421][T14952] CPU0 CPU1 [ 823.131776][T14952] ---- ---- [ 823.137130][T14952] lock(&mm->mmap_lock); [ 823.141454][T14952] lock(&sb->s_type->i_mutex_key#13); [ 823.149431][T14952] lock(&mm->mmap_lock); [ 823.156291][T14952] lock(&sb->s_type->i_mutex_key#13); [ 823.161761][T14952] [ 823.161761][T14952] *** DEADLOCK *** [ 823.161761][T14952] [ 823.169897][T14952] 1 lock held by syz.1.3125/14952: [ 823.175002][T14952] #0: ffff88807c0917d8 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x1aa/0x7b0 [ 823.185456][T14952] [ 823.185456][T14952] stack backtrace: [ 823.191335][T14952] CPU: 0 PID: 14952 Comm: syz.1.3125 Not tainted syzkaller #0 [ 823.198783][T14952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 823.208830][T14952] Call Trace: [ 823.212111][T14952] [ 823.215039][T14952] dump_stack_lvl+0x188/0x24e [ 823.219740][T14952] ? load_image+0x410/0x410 [ 823.224250][T14952] ? show_regs_print_info+0x12/0x12 [ 823.229479][T14952] ? print_circular_bug+0x12b/0x1a0 [ 823.234704][T14952] check_noncircular+0x296/0x330 [ 823.239645][T14952] ? look_up_lock_class+0x75/0x140 [ 823.244761][T14952] ? add_chain_block+0x9b0/0x9b0 [ 823.249701][T14952] ? lockdep_lock+0xf1/0x1f0 [ 823.254293][T14952] ? _find_first_zero_bit+0xd2/0x100 [ 823.259590][T14952] __lock_acquire+0x2d18/0x7c40 [ 823.264446][T14952] ? ima_match_policy+0x10d/0x21b0 [ 823.269561][T14952] ? __lock_acquire+0x7c40/0x7c40 [ 823.274582][T14952] ? verify_lock_unused+0x140/0x140 [ 823.279782][T14952] ? ima_match_policy+0x10d/0x21b0 [ 823.284893][T14952] ? ima_match_policy+0x211c/0x21b0 [ 823.290102][T14952] lock_acquire+0x1bb/0x4a0 [ 823.294606][T14952] ? process_measurement+0x3af/0x1c40 [ 823.300017][T14952] ? __might_sleep+0xd0/0xd0 [ 823.304601][T14952] ? read_lock_is_recursive+0x10/0x10 [ 823.309973][T14952] ? ima_get_action+0x71/0xa0 [ 823.314656][T14952] down_write+0x36/0x60 [ 823.318805][T14952] ? process_measurement+0x3af/0x1c40 [ 823.324180][T14952] process_measurement+0x3af/0x1c40 [ 823.329385][T14952] ? ima_file_mmap+0x140/0x140 [ 823.334149][T14952] ? aa_file_perm+0x112/0xf00 [ 823.338926][T14952] ? mtree_load+0x100/0xa70 [ 823.343447][T14952] ? apparmor_current_getsecid_subj+0xb1/0x110 [ 823.349624][T14952] ima_file_mmap+0xe9/0x140 [ 823.354143][T14952] ? ima_file_free+0x3e0/0x3e0 [ 823.358911][T14952] ? common_file_perm+0x171/0x1c0 [ 823.363949][T14952] ? bpf_lsm_mmap_file+0x5/0x10 [ 823.368804][T14952] ? security_mmap_file+0x11b/0x180 [ 823.374090][T14952] __se_sys_remap_file_pages+0x55a/0x7b0 [ 823.379738][T14952] ? __x64_sys_remap_file_pages+0xc0/0xc0 [ 823.385480][T14952] ? lock_chain_count+0x20/0x20 [ 823.390352][T14952] ? lockdep_hardirqs_on+0x94/0x140 [ 823.395548][T14952] ? __x64_sys_remap_file_pages+0x1c/0xc0 [ 823.401271][T14952] do_syscall_64+0x4c/0xa0 [ 823.405699][T14952] ? clear_bhb_loop+0x60/0xb0 [ 823.410377][T14952] ? clear_bhb_loop+0x60/0xb0 [ 823.415055][T14952] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 823.420977][T14952] RIP: 0033:0x7f0688f9e159 [ 823.425385][T14952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 823.445001][T14952] RSP: 002b:00007f0689ec8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 823.453435][T14952] RAX: ffffffffffffffda RBX: 00007f0689226090 RCX: 00007f0688f9e159 [ 823.461404][T14952] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 00002000005fd000 [ 823.469371][T14952] RBP: 00007f068903503b R08: 0000000000000020 R09: 0000000000000000 [ 823.477357][T14952] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 823.485510][T14952] R13: 00007f0689226128 R14: 00007f0689226090 R15: 00007ffe4f7d05e8 [ 823.493491][T14952] [ 823.796184][ T4990] device hsr_slave_0 left promiscuous mode [ 823.802413][ T4990] device hsr_slave_1 left promiscuous mode [ 823.808538][ T4990] device bridge_slave_1 left promiscuous mode [ 823.815087][ T4990] bridge0: port 2(bridge_slave_1) entered disabled state [ 823.824778][ T4990] device bridge_slave_0 left promiscuous mode [ 823.830931][ T4990] bridge0: port 1(bridge_slave_0) entered disabled state [ 823.994916][ T4990] device veth1_macvtap left promiscuous mode [ 824.001007][ T4990] device veth0_macvtap left promiscuous mode [ 824.007204][ T4990] device veth1_vlan left promiscuous mode [ 824.013160][ T4990] device veth0_vlan left promiscuous mode [ 824.144594][ T4990] team0 (unregistering): Port device team_slave_1 removed [ 824.170842][ T4990] team0 (unregistering): Port device team_slave_0 removed [ 824.486022][T14805] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 824.513482][T14805] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 824.540872][T14805] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 824.551212][T14805] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 824.633349][T14805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 824.649031][ T5009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 824.657665][ T5009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 824.667435][T14805] 8021q: adding VLAN 0 to HW filter on device team0 [ 824.677390][ T5009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 824.692685][ T5009] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 824.702786][ T5009] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.709900][ T5009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 824.718959][ T5009] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 824.744096][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 824.754877][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 824.764682][ T4986] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.771811][ T4986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 824.804372][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 824.816081][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 824.824159][ T4280] Bluetooth: hci0: command 0x0419 tx timeout [ 824.834263][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 824.845835][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 824.854795][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 824.863404][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 824.871807][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 824.880083][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 824.888688][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 824.898960][T14805] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 824.910757][T14805] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 824.922040][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 824.930395][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 825.034597][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 825.042256][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 825.054022][T14805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 825.067974][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 825.077332][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 825.095218][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 825.103396][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 825.112617][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 825.120366][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 825.130160][T14805] device veth0_vlan entered promiscuous mode [ 825.139987][T14805] device veth1_vlan entered promiscuous mode [ 825.155458][ T5009] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 825.164303][ T5009] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 825.172601][ T5009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 825.180919][ T5009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 825.192203][T14805] device veth0_macvtap entered promiscuous mode [ 825.202016][T14805] device veth1_macvtap entered promiscuous mode [ 825.213803][T14805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 825.224343][T14805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.234227][T14805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 825.244710][T14805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.254549][T14805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 825.265026][T14805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.275935][T14805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 825.283758][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 825.291970][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 825.299749][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 825.308350][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 825.318553][T14805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 825.329813][T14805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.339908][T14805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 825.350696][T14805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.360770][T14805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 825.371238][T14805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.382659][T14805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 825.389995][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 825.399669][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 825.410698][T14805] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.420189][T14805] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.429326][T14805] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.438490][T14805] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.460124][T14805] ieee80211 phy19: Selected rate control algorithm 'minstrel_ht' [ 825.477804][ T4986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.478616][T14805] ieee80211 phy20: Selected rate control algorithm 'minstrel_ht' [ 825.489207][ T4986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 825.502329][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 825.517843][ T4994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.525814][ T4994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 825.533652][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready Stopping sshd: stopped /usr/sbin/sshd (pid 4030) OK Stopping crond: stopped /usr/sbin/crond (pid 4013) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 3932) Stopping network: OK Stopping iptables: OK Stopping system message bus: done Stopping klogd: OK Stopping acpid: OK Stopping syslogd: stopped /sbin/syslogd (pid 3620) OK umount: can't remount debugfs read-only umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes Connection to 10.128.1.84 closed by remote host.