last executing test programs: 2m33.949541571s ago: executing program 3 (id=244): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={r4, 0x20, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000004c0)=""/106, 0x6a}}, 0x10) 2m32.732670052s ago: executing program 3 (id=246): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r1, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x700, 0x0) sendfile(r2, r1, 0x0, 0x578410eb) 2m31.672527709s ago: executing program 3 (id=251): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x8001000d, 0xad, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x8d}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r3, 0x8b1a, &(0x7f0000000040)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r4, 0x8b1a, &(0x7f0000000040)) 2m31.521893453s ago: executing program 3 (id=253): r0 = openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, 0x0, 0x8091) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000240)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1df}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x181) syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x0, &(0x7f0000000900), 0x1, 0x84d, &(0x7f0000000940)="$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") setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) bpf$PROG_LOAD(0x5, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x84042, 0x1eb) 2m30.090642172s ago: executing program 3 (id=258): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)="b8a10e4ed67aa8c827c34a4813bf3b6cab6f445e011b6a2becf2fceb5d2171706f07d2c261c615ba55d85d88f6374ca264cb409d6d888898bba0c4b5bb98d890", 0x40}], 0x1, 0x4, 0x2) 2m28.025895972s ago: executing program 3 (id=264): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x1bd, 0x20500) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x0, 0x1017, 0x0, 0x0, 0x2, 0x3, 0x6}}) 2m27.783810031s ago: executing program 32 (id=264): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x1bd, 0x20500) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x0, 0x1017, 0x0, 0x0, 0x2, 0x3, 0x6}}) 21.654125483s ago: executing program 4 (id=612): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000a00)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, r3) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3e, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r3, 0x0, 0x8000) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) mkdirat(0xffffffffffffff9c, 0x0, 0x80) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb0806eb2b08000604"], 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000a40)={@multicast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "70eae4", 0x8, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @private2={0xfc, 0x2, '\x00', 0x1}, {[@routing={0x0, 0x0, 0x5}]}}}}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, 0x8, 0x0, 0x0}}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@dev={0xac, 0x14, 0x14, 0x40}, @in=@local, 0x0, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x16}, {0x0, 0x4, 0x1, 0x0, 0x52b, 0xb}, {0x0, 0xffffffffe, 0x4053e7, 0x20}, 0x6, 0x80001, 0x1, 0x0, 0x2, 0x1}, {{@in6=@local, 0x4d4, 0x32}, 0xa, @in=@private=0xa010102, 0x3505, 0x1, 0x2, 0x0, 0x6, 0xfffffffd}}, 0xe8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000820"], 0x48) 20.390353386s ago: executing program 4 (id=614): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r8, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x700, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r9, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 15.616960259s ago: executing program 4 (id=619): syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file2\x00', 0x408, &(0x7f00000025c0)=ANY=[], 0x3, 0x15d, &(0x7f0000000f00)="$eJzs27+KE1EUB+AzJmrUJrVYDNhYBbWyVCSCOKAoKbRSiDaJBEwzWgWfxNaHEyRVCuGKzpLshoRl/8zO7ub7mhz4ccM9xZ3LGZj3dz6PhpPpp8mreXSyLNqPI49FFt24Eq2ozAIAuEwWKcXvlFK6PosbPyKl1PSOAIC6uf8BYPccev8/amhjAEBtzP8AsHvevH334klR9F/neSfi16wclIPqt8qfPS/69/P/uqtV87IctJb5gyrPD+ZX4+Ze/nBjfi3u3a3yf9nTl8VafiuG9bcPAAAAO6GXL22c73u9bXlV7Xs/sDa/t+N2+8zaAACOYPr12+jDePzxi0JxQYs/KaVjLP/+szoC56SL0y2yiDjZ/zT9ZALqtjr0Te8EAAAAAAAAAAAAAADYpt6vkVpNtwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb/Q0AAP//LjxONw==") renameat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='.\x02\x00', 0x0) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f00000000c0), 0x28c01, 0x118) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f00000021c0)='./file1\x00', 0xcac42, 0x101) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0xf, 0x200, &(0x7f0000003c40)="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"}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000100)='H', 0x0}, 0x20) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000100), 0x6) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r1, 0x8002f515, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, 0x0) 15.398118895s ago: executing program 4 (id=621): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) semctl$IPC_INFO(0x0, 0x2, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000000080)=[{&(0x7f0000000200)="c9fe00001d008104e00f80ecdb4cb9f207c804a01000000088080efb0a000200250ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 14.428172689s ago: executing program 1 (id=623): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, r4, 0x6c04073ee59f7719, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 13.346645356s ago: executing program 1 (id=625): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x1, 0x1f, 0x9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000080)={0x3ff, 0x10, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x8, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) close_range(r0, 0xffffffffffffffff, 0x0) 13.115634664s ago: executing program 2 (id=626): timer_create(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$cont(0x7, r3, 0x2, 0x7) 12.483894215s ago: executing program 1 (id=629): getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000140), &(0x7f0000000180)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="f50dff007179", 0x6, 0x800, 0x0, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000100)={0x7f, 0x4, 0xffff, 0xba03, 0x89, "0300"}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) rename(&(0x7f0000000100)='.\x00', &(0x7f0000000140)='./file0\x00') r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x845, 0x9, 0xfffffffffffffffd, 0x8, 0x10000, 0x0, 0x4002004c2, 0x2000000000fff, 0x1400000000000000, 0x0, 0x3fd, 0x1080, 0x3, 0x0, 0x8, 0x4000000000008d], 0x808a000, 0x80}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12.004843111s ago: executing program 2 (id=630): ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x2080000, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r3, r1, 0x25, 0x0, @val=@netkit}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000080), &(0x7f00000001c0)=r3}, 0x20) syz_emit_ethernet(0x2a, &(0x7f0000000300)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xfffc, 0x0, 0xb, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 11.800135308s ago: executing program 1 (id=631): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x80) timerfd_create(0x8, 0x80800) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000200)='./file1\x00', 0x1000805, &(0x7f0000000140)=ANY=[], 0x4a, 0x20a, &(0x7f00000007c0)="$eJzsmb+LE0EUx78zu5fEQxQLLWxiceCJ3mZ3o3IIV5xgKQh3opbBW4/T8QK5Fe4OhAQbG0sLwdZ/wMIilYWdna0WKggWprQSHJnZmWQ22UUi8Qf4PpDJd97Oe/Pm7eYFEhAE8d/y8cPX948uLq+fAXAQC6ga+2dvtIY76989uXf68cqlp8/fPnu1feh+fzweAyDlaO7/NAOGl6se0D2sZ1K63sCCibkOrrXiKjhOGX0NDIHNVTnLrpYJGG4Y821Htw8YIRJ2sy02bm2JJFRDpIZYDU1A5vIf9Bg2ANTMFszJb2dv/05LAJ1MiMSKOWn3mbg0rcgC1Qqrp/Nb5VhxSqDu1/WHD3pqHhh76NQvAkdkdBMMa0Yvo4ogCOpmmkTO+Y/7o/geUMmffwaHNOKCeQBnEvDIUsklW8sZJ18ivsvfvsXfFr9QTEDw+p+6BTnBxi3qAz20HBv0X096ffo36qwFMJ2XbR0Tl97MC3G50OtoznLC9uSxyLYLlD4SWf9gPnDS6U++863QSIHGzt7+0tbd1maymWzHcfN8eDYMz8UN3ZuzsbD3ZfFruj/NO/HnStZWWAW7rTTtRLtA2omG8zgbnY679qL9Rftw3f84Fr/JDJjmVy3eg5kX1+9KLXqlyRMEQRAEQRAEQRAEQRAEQUxFHQzmt0pm/xMrIL6iFvs/AgAA///t0mWo") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x20008010) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0xfffffffffffffe84, 0x0, &(0x7f0000000000)=[@request_death={0x400c630e, 0x4}], 0x0, 0x0, 0x0}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ef915f210070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c2402080001030000eefe000924060506020100000924030003030005490c240206", @ANYRES8, @ANYBLOB="07cfc2e1"], 0x0) r7 = socket(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @mcast2={0xff, 0x5}, 0x1ff}, 0x1c) syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) 9.229379226s ago: executing program 5 (id=632): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x5, 0x400007f, 0x4000006, 0x3, "42341f9b1000007e4f00"}) r2 = syz_open_pts(r1, 0x62300) dup3(r2, r0, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x0) syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000140)='./file2\x00', 0x2000082, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1, 0x368, &(0x7f00000008c0)="$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") r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 9.131051379s ago: executing program 4 (id=633): syz_open_dev$tty20(0xc, 0x4, 0x1) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000003c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000, &(0x7f0000019680)=ANY=[@ANYRES16=0x0, @ANYRESHEX], 0x1, 0x2cd, &(0x7f0000000080)="$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") setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xa8, 0xf0, 0x52020000, {0x0, 0x6802000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@local, @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000006000000080000000b"], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x52142, 0x8) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) r1 = socket$unix(0x1, 0x1, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000b00)=ANY=[@ANYBLOB="020000000100060000000000040000000000000008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\a\x00', @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="100002000000000020"], 0x3c, 0x3) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2) 9.130421579s ago: executing program 5 (id=634): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x2, 0x4, 0x1, 0xe}, 0x10) write(r3, &(0x7f0000000000)="1c0000001a005f0214f9f4070009010000000000fe03000100000000", 0x1c) 8.952003885s ago: executing program 2 (id=635): mprotect(&(0x7f00001a7000/0x4000)=nil, 0x4000, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = accept(r0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000340)=ANY=[], 0xfffffdef}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) 8.837624149s ago: executing program 4 (id=636): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000800000000000000000000a54000000060a0904000000000000000002000000400004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a320000000008000180fffffffc080001"], 0x7c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x15) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x0, 0x0, 'dh\x00'}, 0x2c) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) 8.835826739s ago: executing program 0 (id=637): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x5, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x101, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0x4}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 8.039818176s ago: executing program 5 (id=638): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='smb3\x00', 0x0, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x271c, 0x0, &(0x7f0000000040)) 8.034370007s ago: executing program 1 (id=648): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x80) timerfd_create(0x8, 0x80800) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000200)='./file1\x00', 0x1000805, &(0x7f0000000140)=ANY=[], 0x4a, 0x20a, &(0x7f00000007c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x20008010) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0xfffffffffffffe84, 0x0, &(0x7f0000000000)=[@request_death={0x400c630e, 0x4}], 0x0, 0x0, 0x0}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ef915f210070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c2402080001030000eefe000924060506020100000924030003030005490c240206", @ANYRES8, @ANYBLOB="07cfc2e1"], 0x0) r7 = socket(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @mcast2={0xff, 0x5}, 0x1ff}, 0x1c) syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) 7.056577879s ago: executing program 5 (id=639): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x632, 0x4}}, @TCA_NETEM_RATE={0x14, 0x6, {0xd, 0x4, 0x7}}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xa888, r6, 0x3a}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x1}], 0x1}, 0x0) 6.866818426s ago: executing program 0 (id=640): mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) socket$nl_audit(0x10, 0x3, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) syz_clone(0x5062011, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) mount(0x0, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000280)='mqueue\x00', 0x280cc08, 0x0) 6.719837311s ago: executing program 2 (id=641): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x80003, 0xff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x301, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x20000080) 6.643658364s ago: executing program 0 (id=642): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 3.204926751s ago: executing program 0 (id=643): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_io_uring_setup(0x49a, 0x0, 0x0, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c080}, 0x40480c0) 2.873393482s ago: executing program 5 (id=644): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) unshare(0x22020400) r3 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000002440)='sessionid\x00') dup3(r4, r3, 0x0) 1.606557775s ago: executing program 0 (id=645): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) preadv2(r3, &(0x7f0000000140)=[{&(0x7f0000000000)=""/151, 0x97}], 0x1, 0x2, 0x1, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[], 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.605734165s ago: executing program 1 (id=646): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x17, 0x11, 0x839, 0x70bd2c, 0x100003, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x2, 0xa}, {0xf, 0xfff1}}}, 0x24}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000d40)={{r0, &(0x7f0000000300)='skcipher\x00', 0x0, 0x0, 0x3, &(0x7f0000000540)={@_ha_fsid}, 0x0}, 0x5, &(0x7f0000000e00)=[{0x1, 0x4caa, &(0x7f0000000700)='connmark\x00', &(0x7f0000000740), 0x0, 0x10}, {0x1, 0x4, &(0x7f0000000900)='connmark\x00', &(0x7f0000000940), 0x0, 0x2}, {0x1, 0x3, &(0x7f0000000980)='\x00', &(0x7f00000009c0)="9515dde9a164bbe50de6f6d046c5f49efba9c621e80713bc2651c3ff043bdce51ea5f97c8a0488a59b00383f454e54a5c034a99082d54b10ae81624eb2f3bd23892ae9533b61cc6d5be0fad39f7d2ca574d26418ea4d537e1ac251177144ebfe2beb51f9510b95ee8837704bb908b7d9a526d1d2cacb7455e11cd6a694e0fd7d70aa7c9972293343fb", 0x89, 0x20}, {0x2, 0x0, 0x0, &(0x7f0000000b80)="04259e439e7a36b5d608631e376f97100b26723336d45c44fd927ae6e950a716363751b014753aad83", 0x29, 0x32}, {0x1, 0x80000001, 0x0, &(0x7f0000000c40)="63602c4d881e675a0ad3e49e5044e8dc7dba90124e2ec2dc19478c8788a3d8fc8cfbc6676ab7f1c1728d038c75822918bf5e875b92187f1db89522bc1cbfd69866fbbad56ff82be5ca52bca254949b8d5a3813a667bddff8ed771d00fac02a", 0x5f, 0xa}]}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.513558888s ago: executing program 2 (id=647): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x3, 0x3a, 'M', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46]}, 0x2a) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40240, 0x80) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x3c8, 0xe8, 0x1d0, 0x1d0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@remote, @multicast2, 0x0, 0x0, 0x7, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xfc, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond_slave_1\x00', 'ipvlan1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 509.136622ms ago: executing program 0 (id=649): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3ab}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000000, 0x2, 0x6}, 0x64}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x4) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000740)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dc0f24000e00003c000c00000000ff840000000200000003125ce882cbf490d908f1523f000000002d9c2740e260a09c6911cda856d5141bffc6e29a5789796eec81944d7dff184d3319ce9dfb5c1fcd66e67b91a917a67ece64299573503cbc7e27133c4e5ed68c7a9b407a275bcff3432a487ebef21275b91d386164b443c1dfdf63831812e0471639a99b97a9923e4659cd5d1e3c", 0x9a}, {&(0x7f0000001300)="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", 0xc9c}, {&(0x7f0000001180)="c91d588b87bd12b736780a766e3ebca34836bf87f46f8027511d29f92e1a4e8bd5fb5367cef57a6d8db59a972c54efc7ece9c07cb4a0921d4a2320d73ff2d3c54d7af0deecef81ce277562dde92e480b2cf42e52cc039c43fea94e730feb6f5cad427446e7357d255248ab48a0b733cc2c7541488d63b8f6d2c4f0e03ac8faecc74486b2cfb59a28d701271dc07ef9d82e0ce78bca83048caf47fedf4f4df5863a2f849b5fc6ef0b49bf7a6cb6faab2a777dde", 0xb3}, {&(0x7f0000000440)="1da19d23fdff85b98167afffffffff20df65aece0cffbb361fd19ec08ddad9340531b1c05e106ea2b36a41070b0be2be119aa8c7d8444f4341cccd89faa6253e1ee49e9132f015fd9988ae0b16b48669fd2863efe80b92787339069a0f79bc832754fc4c564bc7c61f70be9565f15584fd519f000000005d433935485cdc2ffa2be958749701504aefae9ac942fd1dfc86b59a3d1caf7923edfc844f870f12b251ce19cedc69367b00003c404d4ac7409ae7f612cd45bc47765d0c3b530a47f46c3a9887c3e6ea7734e44835fcd6d23a0d7e00b73ac716a577005fe637cf7c7a", 0xe0}, {&(0x7f0000000f80)="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", 0x131}], 0x5}, 0x8bb3a321ef809a) 295.2131ms ago: executing program 2 (id=650): socketpair(0x21, 0x100000005, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000340)='.\x00', 0xa50003d1) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 0s ago: executing program 5 (id=651): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 17][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.878211][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.889570][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.912708][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.921402][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.930034][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.938788][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.946760][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.955875][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.965137][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.979068][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.987175][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.000286][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.013901][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.025450][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.045247][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.059923][ T4189] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.077304][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.096965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.107918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.109014][ T4230] Bluetooth: hci1: command 0x041b tx timeout [ 70.119307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.125006][ T4230] Bluetooth: hci0: command 0x041b tx timeout [ 70.136688][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.146652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.156212][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.164886][ T4230] Bluetooth: hci2: command 0x041b tx timeout [ 70.171156][ T4230] Bluetooth: hci3: command 0x041b tx timeout [ 70.175802][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.184319][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.189090][ T4230] Bluetooth: hci4: command 0x041b tx timeout [ 70.230148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.238850][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.253062][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.263594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.280446][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.287843][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.303407][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.312520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.327500][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.334773][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.342863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.352432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.361821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.370713][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.377971][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.386643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.395533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.406144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.459975][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.475404][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.502129][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.512657][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.530370][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.541076][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.557551][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.570756][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.581650][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.590761][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.600174][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.609358][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.618152][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.629124][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.638494][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.671565][ T4193] device veth0_vlan entered promiscuous mode [ 70.709893][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.722855][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.742094][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.754119][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.765948][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.775441][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.784784][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.793294][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.802941][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.817530][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.828413][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.837611][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.846729][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.856562][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.870792][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.879373][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.916303][ T4193] device veth1_vlan entered promiscuous mode [ 70.942525][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.957963][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.971863][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.989322][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.038096][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.062770][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.075873][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.084588][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.100008][ T4184] device veth0_vlan entered promiscuous mode [ 71.116552][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.136790][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.145898][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.164801][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.181632][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.200640][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.211986][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.227531][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.252008][ T4184] device veth1_vlan entered promiscuous mode [ 71.264821][ T4189] device veth0_vlan entered promiscuous mode [ 71.287647][ T4193] device veth0_macvtap entered promiscuous mode [ 71.310819][ T4193] device veth1_macvtap entered promiscuous mode [ 71.328647][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.339012][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.348190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.356941][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.365741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.373836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.382329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.408519][ T4189] device veth1_vlan entered promiscuous mode [ 71.421552][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.430740][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.438606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.448096][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.457624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.472674][ T4184] device veth0_macvtap entered promiscuous mode [ 71.485484][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.506577][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.535793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.550056][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.556953][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.563920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.576384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.585475][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.594447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.603451][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.612324][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.623893][ T4184] device veth1_macvtap entered promiscuous mode [ 71.636057][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.643436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.654962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.677945][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.687003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.705833][ T4193] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.719313][ T4193] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.729063][ T4193] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.738134][ T4193] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.758718][ T4189] device veth0_macvtap entered promiscuous mode [ 71.781974][ T4189] device veth1_macvtap entered promiscuous mode [ 71.801015][ T4185] device veth0_vlan entered promiscuous mode [ 71.828130][ T4191] device veth0_vlan entered promiscuous mode [ 71.839566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.848210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.857122][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.867465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.876713][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.885873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.895607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.903763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.912143][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.921873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.933874][ T4185] device veth1_vlan entered promiscuous mode [ 71.943007][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.969258][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.982874][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.001245][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.013630][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.025360][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.037580][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.050437][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.064637][ T4191] device veth1_vlan entered promiscuous mode [ 72.079083][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.089054][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.098903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.108170][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.117252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.126481][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.136584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.150672][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.161616][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.173194][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.185928][ T4230] Bluetooth: hci2: command 0x040f tx timeout [ 72.196498][ T4230] Bluetooth: hci0: command 0x040f tx timeout [ 72.203616][ T4230] Bluetooth: hci1: command 0x040f tx timeout [ 72.216093][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.230524][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.241276][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.252373][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.264787][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 72.271017][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 72.279902][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.289008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.299911][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.309557][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.318794][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.328196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.339961][ T4184] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.349773][ T4184] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.358892][ T4184] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.368568][ T4184] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.395023][ T4189] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.403781][ T4189] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.417239][ T4189] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.428758][ T4189] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.465438][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.476261][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.490753][ T4185] device veth0_macvtap entered promiscuous mode [ 72.525507][ T4185] device veth1_macvtap entered promiscuous mode [ 72.531347][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.554928][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.571029][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.582434][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.592435][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.601596][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.613547][ T4191] device veth0_macvtap entered promiscuous mode [ 72.649533][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.662068][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.674374][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.685672][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.696913][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.707549][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.719555][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.729594][ T4191] device veth1_macvtap entered promiscuous mode [ 72.766353][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.779303][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.788354][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.797563][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.809965][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.820907][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.831958][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.842725][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.852646][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.863214][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.875790][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.892277][ T4233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.901488][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.910917][ T4233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.925019][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.935395][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.997538][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.011692][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.020904][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.030170][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.057671][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.074106][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.085785][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.097114][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.107490][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.120554][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.131378][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.142293][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.157378][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.174502][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.182406][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.215816][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.233656][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.241974][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.249206][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.259457][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.278412][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.300571][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.316818][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.327884][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.338698][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.371451][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.382141][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.395485][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.406147][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.418122][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.447412][ T4255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.461574][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.472411][ T4255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.482724][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.493224][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.512555][ T4191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.522980][ T4191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.533206][ T4191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.542628][ T4191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.578111][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.602698][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.635585][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.676012][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.702085][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.758967][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.846597][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.871634][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.918891][ T4274] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 73.922569][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.949036][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.988774][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.998405][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.068035][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.082859][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.099629][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.264458][ T4226] Bluetooth: hci1: command 0x0419 tx timeout [ 74.264528][ T4226] Bluetooth: hci0: command 0x0419 tx timeout [ 74.264579][ T4226] Bluetooth: hci2: command 0x0419 tx timeout [ 74.354337][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 74.354415][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 74.460407][ T4291] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 74.540228][ T4290] netlink: 'syz.3.7': attribute type 15 has an invalid length. [ 74.614313][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 74.654501][ T4194] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 74.753454][ T13] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 74.894185][ T4194] usb 2-1: Using ep0 maxpacket: 16 [ 74.995681][ T4302] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.014921][ T4194] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.027548][ T4194] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.038057][ T4194] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 75.051048][ T4194] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 75.061608][ T4194] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.076702][ T4194] usb 2-1: config 0 descriptor?? [ 75.088935][ T4300] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11'. [ 75.135354][ T4300] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11'. [ 75.147134][ T4300] Zero length message leads to an empty skb [ 75.197166][ T13] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 75.213358][ T13] usb 1-1: config 2 has 1 interface, different from the descriptor's value: 3 [ 75.230245][ T4305] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.372062][ T4313] bridge0: port 3(syz_tun) entered blocking state [ 75.402880][ T4313] bridge0: port 3(syz_tun) entered disabled state [ 75.430811][ T13] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=bd.95 [ 75.446081][ T4313] device syz_tun entered promiscuous mode [ 75.453198][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.511638][ T4313] bridge0: port 3(syz_tun) entered blocking state [ 75.518490][ T4313] bridge0: port 3(syz_tun) entered forwarding state [ 75.526307][ T4308] loop3: detected capacity change from 0 to 32768 [ 75.534006][ T13] usb 1-1: Product: syz [ 75.549468][ T13] usb 1-1: Manufacturer: syz [ 75.557277][ T13] usb 1-1: SerialNumber: syz [ 75.569924][ T4315] bridge0: port 3(syz_tun) entered learning state [ 75.661333][ T4308] XFS (loop3): Mounting V5 Filesystem [ 75.803298][ T4194] HID 045e:07da: Invalid code 65791 type 1 [ 75.839830][ T4194] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0001/input/input5 [ 75.878033][ T4287] udc-core: couldn't find an available UDC or it's busy [ 75.878258][ T4308] XFS (loop3): Starting recovery (logdev: internal) [ 75.891597][ T4287] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 75.942143][ T4194] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 76.005266][ T4308] XFS (loop3): Metadata CRC error detected at xfs_agi_read_verify+0x192/0x250, xfs_agi block 0x2 [ 76.016647][ T4308] XFS (loop3): Unmount and run xfs_repair [ 76.022519][ T4308] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 76.030984][ T4308] 00000000: 58 41 47 49 00 00 00 01 00 00 00 00 00 00 20 00 XAGI.......... . [ 76.040215][ T4308] 00000010: 00 00 00 40 00 00 00 03 00 00 00 01 00 00 00 37 ...@...........7 [ 76.041604][ T13] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 76.049264][ T4308] 00000020: 00 00 1d 00 ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 76.049288][ T4308] 00000030: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 76.049303][ T4308] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 76.049319][ T4308] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 76.049334][ T4308] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 76.049350][ T4308] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 76.052597][ T4308] XFS (loop3): log mount/recovery failed: error -74 [ 76.144193][ T13] dvb_usb_af9015: probe of 1-1:2.0 failed with error -22 [ 76.157277][ T4308] XFS (loop3): log mount failed [ 76.266824][ T13] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 76.290586][ T13] dvb_usb_af9035: probe of 1-1:2.0 failed with error -22 [ 76.307349][ T4228] usb 2-1: USB disconnect, device number 2 [ 76.393840][ T13] usb 1-1: USB disconnect, device number 2 [ 76.409960][ T4340] fido_id[4340]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 76.779783][ T4346] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21'. [ 76.862485][ T4350] loop3: detected capacity change from 0 to 512 [ 76.937008][ T4350] ======================================================= [ 76.937008][ T4350] WARNING: The mand mount option has been deprecated and [ 76.937008][ T4350] and is ignored by this kernel. Remove the mand [ 76.937008][ T4350] option from the mount to silence this warning. [ 76.937008][ T4350] ======================================================= [ 77.059031][ T4355] device syzkaller1 entered promiscuous mode [ 77.093290][ T4355] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 77.158164][ T4350] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 77.280126][ T4350] EXT4-fs (loop3): mounted filesystem without journal. Opts: nouid32,errors=remount-ro,user_xattr,nodiscard,dioread_nolock,. Quota mode: writeback. [ 77.356873][ T4350] ext4 filesystem being mounted at /5/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.502780][ T4350] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.22: Unrecognised inode hash code 20 [ 77.527805][ T4350] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.22: Corrupt directory, running e2fsck is recommended [ 77.638738][ T4372] kvm: pic: level sensitive irq not supported [ 77.638942][ T4372] kvm: pic: non byte read [ 77.664356][ T4372] kvm: pic: non byte read [ 77.668847][ T4372] kvm: pic: non byte read [ 77.689371][ T4337] udevd[4337]: incorrect jbd checksum on /dev/loop3 [ 77.734451][ T4372] kvm: pic: non byte read [ 77.738962][ T4372] kvm: pic: non byte read [ 77.791092][ T4372] kvm: pic: non byte read [ 77.806431][ T4372] kvm: pic: non byte read [ 77.811811][ T4372] kvm: pic: non byte read [ 77.838401][ T4372] kvm: pic: non byte read [ 77.859406][ T4372] kvm: pic: non byte read [ 78.006216][ T4390] loop4: detected capacity change from 0 to 256 [ 78.142636][ T4390] FAT-fs (loop4): Directory bread(block 64) failed [ 78.189150][ T4390] FAT-fs (loop4): Directory bread(block 65) failed [ 78.213575][ T4390] FAT-fs (loop4): Directory bread(block 66) failed [ 78.244186][ T4390] FAT-fs (loop4): Directory bread(block 67) failed [ 78.285404][ T4390] FAT-fs (loop4): Directory bread(block 68) failed [ 78.288895][ T4401] loop0: detected capacity change from 0 to 64 [ 78.308881][ T4390] FAT-fs (loop4): Directory bread(block 69) failed [ 78.333124][ T4390] FAT-fs (loop4): Directory bread(block 70) failed [ 78.345722][ T4390] FAT-fs (loop4): Directory bread(block 71) failed [ 78.371391][ T4390] FAT-fs (loop4): Directory bread(block 72) failed [ 78.379872][ T4399] loop1: detected capacity change from 0 to 512 [ 78.386410][ T4390] FAT-fs (loop4): Directory bread(block 73) failed [ 78.508015][ T4405] netlink: 'syz.3.44': attribute type 8 has an invalid length. [ 78.797996][ T4410] tipc: Started in network mode [ 78.840552][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 78.859328][ T4410] tipc: Node identity ac14140f, cluster identity 4711 [ 78.883017][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 78.895847][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 78.905093][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #212!!! [ 78.914176][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #292!!! [ 78.934745][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 78.943799][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #110!!! [ 78.953053][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #312!!! [ 78.962287][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #312!!! [ 78.971475][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #312!!! [ 79.382938][ T4410] tipc: New replicast peer: 255.255.255.255 [ 79.481240][ T4410] tipc: Enabled bearer , priority 10 [ 79.489554][ T4416] netlink: 12 bytes leftover after parsing attributes in process `syz.1.46'. [ 79.490432][ T4416] tipc: Disabling bearer [ 79.873591][ T4435] binder: 4433:4435 ioctl c0306201 0 returned -14 [ 79.886037][ T4410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.46'. [ 80.035577][ T732] wlan1: Trigger new scan to find an IBSS to join [ 80.704173][ T4458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.58'. [ 80.845872][ T4458] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.914585][ T4458] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.987737][ T4458] bond0 (unregistering): Released all slaves [ 81.182108][ T4470] loop0: detected capacity change from 0 to 512 [ 81.321494][ T4470] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 81.543723][ T4228] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 81.587210][ T4470] EXT4-fs (loop0): mounted filesystem without journal. Opts: nouid32,data_err=abort,user_xattr,max_batch_time=0x0000000000000200,dioread_nolock,,errors=continue. Quota mode: writeback. [ 81.590483][ T4477] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.619957][ T4477] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.656579][ T4480] netlink: 'syz.1.64': attribute type 16 has an invalid length. [ 81.743433][ T4480] netlink: 'syz.1.64': attribute type 17 has an invalid length. [ 81.753598][ T4470] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.956449][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 82.174018][ T4228] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 82.232666][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 82.241041][ T4228] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.378008][ T4228] usb 5-1: Product: syz [ 82.471666][ T4228] usb 5-1: Manufacturer: syz [ 82.563214][ T4228] usb 5-1: SerialNumber: syz [ 83.013025][ T4480] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 83.408051][ T4491] loop2: detected capacity change from 0 to 8192 [ 83.414875][ T4228] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 83.526364][ T4491] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 83.617416][ T4491] REISERFS (device loop2): using ordered data mode [ 83.659516][ T4491] reiserfs: using flush barriers [ 83.667828][ T4491] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 83.694406][ T4491] REISERFS (device loop2): checking transaction log (loop2) [ 83.729998][ T4491] REISERFS (device loop2): Using r5 hash to sort names [ 83.766236][ T4491] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 83.998261][ T4516] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 84.985298][ T144] wlan1: Trigger new scan to find an IBSS to join [ 85.211762][ T4228] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -71 [ 85.248577][ T4228] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 85.284236][ T4228] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 85.323130][ T4228] lan78xx: probe of 5-1:1.0 failed with error -71 [ 85.380824][ T4228] usb 5-1: USB disconnect, device number 2 [ 85.724357][ T4523] loop1: detected capacity change from 0 to 32768 [ 85.829050][ T4532] loop2: detected capacity change from 0 to 256 [ 85.840918][ T4523] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.78 (4523) [ 85.944853][ T4534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.958045][ T4429] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00 [ 86.122156][ T4532] FAT-fs (loop2): Unrecognized mount option "iochars³ï¦&èk‰¬>„et=cp855" or missing value [ 86.133977][ T4523] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 86.464291][ T4523] BTRFS info (device loop1): using free space tree [ 86.607426][ T4523] BTRFS info (device loop1): has skinny extents [ 86.904934][ T1324] cfg80211: failed to load regulatory.db [ 86.925147][ T4544] 9pnet: Insufficient options for proto=fd [ 86.944771][ T4548] netlink: 24 bytes leftover after parsing attributes in process `syz.4.85'. [ 87.295909][ T4523] BTRFS info (device loop1): enabling ssd optimizations [ 87.397633][ T4566] loop0: detected capacity change from 0 to 40427 [ 87.444583][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 87.481500][ T4566] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 87.489554][ T4566] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 87.502756][ T4566] F2FS-fs (loop0): invalid crc value [ 87.547354][ T4544] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 87.577878][ T4566] F2FS-fs (loop0): Found nat_bits in checkpoint [ 87.639413][ T4566] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 87.648244][ T4566] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 87.911280][ T4578] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 87.918983][ T4578] IPv6: NLM_F_CREATE should be set when creating new route [ 91.211304][ C0] bridge0: port 3(syz_tun) entered forwarding state [ 97.480345][ T4647] netlink: 'syz.0.96': attribute type 4 has an invalid length. [ 98.399432][ T4656] loop2: detected capacity change from 0 to 4096 [ 98.517665][ T4655] netlink: 'syz.0.96': attribute type 4 has an invalid length. [ 98.567230][ T4656] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 98.637331][ T732] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22. [ 98.646272][ T4191] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 98.652971][ T4191] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 98.663245][ T4191] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 98.672252][ T732] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22. [ 98.680885][ T4191] ntfs3: loop2: ntfs_evict_inode r=3 failed, -22. [ 98.867630][ T4666] tipc: Failed to remove unknown binding: 66,0,0/0:565034672/565034674 [ 99.099727][ T4666] tipc: Failed to remove unknown binding: 66,0,0/0:565034672/565034673 [ 99.914199][ C1] sched: RT throttling activated [ 99.965838][ T4666] tipc: Failed to remove unknown binding: 66,0,0/0:565034672/565034674 [ 100.013991][ T4666] tipc: Failed to remove unknown binding: 66,0,0/0:565034672/565034673 [ 100.067006][ T4684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.121'. [ 100.146965][ T4684] device bridge_slave_1 left promiscuous mode [ 100.198476][ T4684] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.262182][ T4684] device bridge_slave_0 left promiscuous mode [ 100.268805][ T4684] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.297145][ T4695] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 100.489404][ T4693] netlink: 'syz.1.123': attribute type 4 has an invalid length. [ 100.558589][ T4699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.126'. [ 100.832737][ T4712] tipc: Failed to remove unknown binding: 66,0,0/0:2780229093/2780229095 [ 100.965632][ T4712] tipc: Failed to remove unknown binding: 66,0,0/0:2780229093/2780229094 [ 101.455517][ T4715] tipc: Failed to remove unknown binding: 66,0,0/0:2780229093/2780229095 [ 101.467200][ T4715] tipc: Failed to remove unknown binding: 66,0,0/0:2780229093/2780229094 [ 101.909532][ T4758] binder: 4755:4758 unknown command 0 [ 102.046547][ T4758] binder: 4755:4758 ioctl c0306201 200000000080 returned -22 [ 102.369684][ T4790] loop4: detected capacity change from 0 to 256 [ 102.416752][ T4791] loop3: detected capacity change from 0 to 4096 [ 102.489315][ T4790] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x395e47cf, utbl_chksum : 0xe619d30d) [ 102.518666][ T4799] netlink: 'syz.2.137': attribute type 1 has an invalid length. [ 102.556018][ T4795] loop0: detected capacity change from 0 to 1024 [ 102.572125][ T4791] NILFS (loop3): invalid segment: Checksum error in segment payload [ 102.581626][ T4791] NILFS (loop3): trying rollback from an earlier position [ 102.680429][ T4799] device bond1 entered promiscuous mode [ 102.694477][ T4799] 8021q: adding VLAN 0 to HW filter on device bond1 [ 102.707272][ T4800] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 102.720692][ T4800] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 102.741032][ T4800] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 102.821061][ T4791] NILFS (loop3): recovery complete [ 102.876098][ T4803] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 102.898310][ T4802] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 102.952954][ T4802] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 103.094328][ T26] audit: type=1800 audit(1775007820.677:2): pid=4791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.134" name="file1" dev="loop3" ino=12 res=0 errno=0 [ 103.113072][ T4230] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 103.461149][ T4817] netlink: 'syz.2.143': attribute type 1 has an invalid length. [ 103.472724][ T4230] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 103.501362][ T4230] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.531078][ T4230] usb 1-1: config 0 has no interface number 0 [ 103.592166][ T4817] 8021q: adding VLAN 0 to HW filter on device bond2 [ 103.634950][ T4822] device ipip0 entered promiscuous mode [ 103.677900][ T4822] 8021q: adding VLAN 0 to HW filter on device bond2 [ 103.686252][ T4822] bond2: (slave ipip0): The slave device specified does not support setting the MAC address [ 103.700239][ T4822] bond2: (slave ipip0): Error -95 calling set_mac_address [ 103.703547][ T4230] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 103.718947][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.740739][ T4230] usb 1-1: Product: syz [ 103.757255][ T4230] usb 1-1: Manufacturer: syz [ 103.768027][ T4230] usb 1-1: SerialNumber: syz [ 103.788317][ T4831] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 103.802666][ T4230] usb 1-1: config 0 descriptor?? [ 103.827964][ T4821] netlink: 20 bytes leftover after parsing attributes in process `syz.1.145'. [ 103.843463][ T4825] picdev_read: 3 callbacks suppressed [ 103.843481][ T4825] kvm: pic: non byte read [ 103.856508][ T4230] ims_pcu 1-1:0.41: Missing CDC union descriptor [ 103.858757][ T4825] kvm: pic: non byte read [ 103.868556][ T4825] kvm: pic: non byte read [ 103.874261][ T4825] kvm: pic: non byte read [ 103.878872][ T4825] kvm: pic: non byte read [ 103.883542][ T4828] netlink: 'syz.1.145': attribute type 6 has an invalid length. [ 103.884065][ T4825] kvm: pic: non byte read [ 103.896481][ T4825] kvm: pic: non byte read [ 103.901072][ T4825] kvm: pic: non byte read [ 103.901852][ T4230] ims_pcu: probe of 1-1:0.41 failed with error -22 [ 103.906751][ T4828] netlink: 72 bytes leftover after parsing attributes in process `syz.1.145'. [ 103.944715][ T4825] kvm: pic: non byte read [ 103.949337][ T4825] kvm: pic: non byte read [ 104.168114][ T4795] hfsplus: bad catalog entry type [ 104.199508][ T4230] usb 1-1: USB disconnect, device number 3 [ 104.305795][ T4843] loop1: detected capacity change from 0 to 64 [ 104.344780][ T4841] overlayfs: statfs failed on './file0' [ 104.583592][ T4848] process 'syz.2.154' launched './file0' with NULL argv: empty string added [ 104.666663][ T4756] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 104.771451][ T4763] hfsplus: b-tree write err: -5, ino 25 [ 104.794541][ T4763] hfsplus: b-tree write err: -5, ino 4 [ 104.831681][ T4763] hfsplus: b-tree write err: -5, ino 2 [ 105.311273][ T4869] binder: 4868:4869 ioctl c0306201 200000000080 returned -14 [ 107.158780][ T4873] loop3: detected capacity change from 0 to 32768 [ 107.513893][ T4873] XFS (loop3): Mounting V5 Filesystem [ 108.437451][ T4916] dlm: dev_write: no op 0 74000000000000 [ 108.455494][ T4873] XFS (loop3): Ending clean mount [ 108.547627][ T4916] sctp: Trying to GSO but underlying device doesn't support it. [ 108.548862][ T4189] XFS (loop3): Unmounting Filesystem [ 108.696144][ T4925] loop0: detected capacity change from 0 to 16 [ 108.810401][ T4925] erofs: (device loop0): mounted with root inode @ nid 36. [ 109.069504][ T4929] attempt to access beyond end of device [ 109.069504][ T4929] loop0: rw=0, want=34359739352, limit=16 [ 109.089925][ T4929] attempt to access beyond end of device [ 109.089925][ T4929] loop0: rw=0, want=34359739352, limit=16 [ 109.104368][ T4929] attempt to access beyond end of device [ 109.104368][ T4929] loop0: rw=0, want=34359739352, limit=16 [ 109.117227][ T4929] capability: warning: `syz.0.175' uses deprecated v2 capabilities in a way that may be insecure [ 109.969287][ T1324] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 110.869649][ T4938] loop1: detected capacity change from 0 to 256 [ 110.920447][ T4938] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x395e47cf, utbl_chksum : 0xe619d30d) [ 110.948782][ T1324] usb 1-1: Using ep0 maxpacket: 16 [ 111.070875][ T1324] usb 1-1: config index 0 descriptor too short (expected 37359, got 202) [ 111.079840][ T1324] usb 1-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 111.106927][ T1324] usb 1-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 111.140113][ T1324] usb 1-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 111.348844][ T1324] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 113.800985][ T1324] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.810138][ T1324] usb 1-1: Product: syz [ 113.814690][ T1324] usb 1-1: Manufacturer: syz [ 113.825187][ T1324] usb 1-1: SerialNumber: syz [ 114.637290][ T1324] usb 1-1: can't set config #33, error -71 [ 114.675870][ T1324] usb 1-1: USB disconnect, device number 4 [ 116.223435][ T4770] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 116.254054][ T4961] loop1: detected capacity change from 0 to 32768 [ 116.378934][ T4981] device syzkaller0 entered promiscuous mode [ 116.391852][ T4983] loop4: detected capacity change from 0 to 128 [ 116.418018][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.436866][ T4981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.453388][ T4986] loop0: detected capacity change from 0 to 512 [ 116.642079][ T4961] XFS (loop1): Mounting V5 Filesystem [ 116.677489][ T4983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.193'. [ 116.757168][ T4983] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 116.810714][ T4961] XFS (loop1): Ending clean mount [ 117.164375][ T4185] XFS (loop1): Unmounting Filesystem [ 118.156971][ T1474] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 118.864903][ T4173] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 120.213770][ T5052] netlink: 12 bytes leftover after parsing attributes in process `syz.2.213'. [ 120.305788][ T5052] bridge1: port 1(geneve2) entered blocking state [ 120.330752][ T5052] bridge1: port 1(geneve2) entered disabled state [ 120.344260][ T4173] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 120.361403][ T5052] device geneve2 entered promiscuous mode [ 120.367703][ T4173] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 120.391253][ T4173] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 120.523178][ T4173] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 120.551793][ T4173] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 120.578617][ T26] audit: type=1326 audit(1775007838.176:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5059 comm="syz.0.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9a42a2819 code=0x7ffc0000 [ 120.607212][ T5060] loop2: detected capacity change from 0 to 7 [ 120.618671][ T26] audit: type=1326 audit(1775007838.196:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5059 comm="syz.0.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fe9a42a2819 code=0x7ffc0000 [ 120.647100][ T5060] loop2: [ 120.650356][ T5060] loop2: partition table partially beyond EOD, truncated [ 120.658625][ T26] audit: type=1326 audit(1775007838.196:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5059 comm="syz.0.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9a42a2819 code=0x7ffc0000 [ 120.677022][ T4173] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 120.696266][ T26] audit: type=1326 audit(1775007838.196:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5059 comm="syz.0.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fe9a42a2819 code=0x7ffc0000 [ 120.709751][ T4173] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 120.731297][ T26] audit: type=1326 audit(1775007838.196:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5059 comm="syz.0.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9a42a2819 code=0x7ffc0000 [ 120.759927][ T26] audit: type=1326 audit(1775007838.206:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5059 comm="syz.0.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7fe9a42a2819 code=0x7ffc0000 [ 120.783838][ T4173] usb 5-1: Product: syz [ 120.788091][ T4173] usb 5-1: Manufacturer: syz [ 120.797307][ T26] audit: type=1326 audit(1775007838.206:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5059 comm="syz.0.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9a42a2819 code=0x7ffc0000 [ 120.828937][ T26] audit: type=1326 audit(1775007838.206:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5059 comm="syz.0.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe9a42a2819 code=0x7ffc0000 [ 120.857394][ T4173] cdc_wdm 5-1:1.0: skipping garbage [ 120.860189][ T26] audit: type=1326 audit(1775007838.206:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5059 comm="syz.0.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9a42a2819 code=0x7ffc0000 [ 120.862668][ T4173] cdc_wdm 5-1:1.0: skipping garbage [ 120.890806][ T4598] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 120.924276][ T26] audit: type=1326 audit(1775007838.206:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5059 comm="syz.0.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe9a42a2819 code=0x7ffc0000 [ 120.936337][ T4173] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 120.976625][ T4173] cdc_wdm 5-1:1.0: Unknown control protocol [ 120.982849][ T5064] device syzkaller0 entered promiscuous mode [ 121.096113][ T4173] usb 5-1: USB disconnect, device number 3 [ 121.298003][ T4598] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 121.561010][ T4598] usb 4-1: config 0 has no interface number 0 [ 121.733496][ T4598] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 121.742799][ T4598] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.751343][ T4598] usb 4-1: Product: syz [ 121.755923][ T4598] usb 4-1: Manufacturer: syz [ 121.760732][ T4598] usb 4-1: SerialNumber: syz [ 121.782433][ T4598] usb 4-1: config 0 descriptor?? [ 122.139451][ T5058] udc-core: couldn't find an available UDC or it's busy [ 122.153338][ T5058] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 123.427064][ T4598] usb 4-1: Found UVC 0.08 device syz (046d:0823) [ 123.978785][ T4598] usb 4-1: No valid video chain found. [ 124.005810][ T4598] usb 4-1: USB disconnect, device number 2 [ 124.289064][ T5089] loop1: detected capacity change from 0 to 16 [ 124.850096][ T5089] erofs: (device loop1): mounted with root inode @ nid 36. [ 125.149976][ T5093] device syzkaller0 entered promiscuous mode [ 127.298909][ T5121] attempt to access beyond end of device [ 127.298909][ T5121] loop1: rw=0, want=34359739352, limit=16 [ 127.364501][ T5125] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 127.389553][ T5121] attempt to access beyond end of device [ 127.389553][ T5121] loop1: rw=0, want=34359739352, limit=16 [ 128.420006][ T4598] usb 2-1: new high-speed USB device number 3 using dummy_hcd syzkaller syzkaller login: [ 129.583824][ T5141] loop3: detected capacity change from 0 to 1024 [ 132.963968][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.971607][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.687415][ T4598] usb 2-1: device descriptor read/64, error -110 [ 134.208521][ T5183] loop3: detected capacity change from 0 to 512 [ 134.263475][ T5183] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 134.290202][ T5183] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 134.340418][ T5183] EXT4-fs (loop3): 1 truncate cleaned up [ 134.355253][ T5183] EXT4-fs (loop3): mounted filesystem without journal. Opts: resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001df,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 134.478645][ T5191] netlink: 28 bytes leftover after parsing attributes in process `syz.1.255'. [ 134.523475][ T5191] device bridge2 entered promiscuous mode [ 134.568857][ T5191] team0: Port device bridge2 added [ 134.587587][ T5192] bridge0: port 3(team0) entered blocking state [ 134.615869][ T5192] bridge0: port 3(team0) entered disabled state [ 134.642786][ T5192] device team0 entered promiscuous mode [ 134.661333][ T5192] device team_slave_0 entered promiscuous mode [ 134.677087][ T4226] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 134.687422][ T5192] device team_slave_1 entered promiscuous mode [ 134.745810][ T4756] bridge0: port 3(team0) entered blocking state [ 134.753478][ T4756] bridge0: port 3(team0) entered forwarding state [ 134.941519][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 134.941538][ T26] audit: type=1800 audit(1775007852.543:15): pid=5183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.253" name="file1" dev="overlay" ino=15 res=0 errno=0 [ 135.098810][ T5196] loop1: detected capacity change from 0 to 512 [ 135.107703][ T4226] usb 1-1: config 0 has no interfaces? [ 135.445133][ T5196] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.257: inode has both inline data and extents flags [ 135.967529][ T5196] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.257: couldn't read orphan inode 15 (err -117) [ 136.147048][ T5196] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 136.335796][ T4226] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 136.363745][ T4226] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.373708][ T4226] usb 1-1: Product: syz [ 136.378967][ T4226] usb 1-1: Manufacturer: syz [ 136.385275][ T4226] usb 1-1: SerialNumber: syz [ 136.546952][ T4226] usb 1-1: config 0 descriptor?? [ 137.362822][ T5208] loop4: detected capacity change from 0 to 16 [ 137.489253][ T4173] usb 1-1: USB disconnect, device number 5 [ 137.507652][ T5208] erofs: (device loop4): mounted with root inode @ nid 36. [ 137.784190][ T154] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.990253][ T5218] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 138.583803][ T154] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.034373][ T154] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.738429][ T154] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.929995][ T5241] attempt to access beyond end of device [ 139.929995][ T5241] loop4: rw=0, want=34359739352, limit=16 [ 139.975879][ T5241] attempt to access beyond end of device [ 139.975879][ T5241] loop4: rw=0, want=34359739352, limit=16 [ 140.032741][ T5240] block device autoloading is deprecated and will be removed. [ 140.049532][ T5225] chnl_net:caif_netlink_parms(): no params data found [ 140.302133][ T5225] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.353902][ T5225] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.363716][ T5225] device bridge_slave_0 entered promiscuous mode [ 140.408655][ T5225] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.417805][ T4225] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 140.448261][ T5225] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.714283][ T4225] usb 5-1: Using ep0 maxpacket: 16 [ 140.793229][ T5225] device bridge_slave_1 entered promiscuous mode [ 140.884765][ T4225] usb 5-1: config index 0 descriptor too short (expected 37359, got 202) [ 141.327791][ T4225] usb 5-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 141.338776][ T4225] usb 5-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 141.351655][ T4225] usb 5-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 141.400689][ T5251] device syzkaller0 entered promiscuous mode [ 141.425741][ T5225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.528252][ T4194] Bluetooth: hci3: command 0x0409 tx timeout [ 141.644469][ T5225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.671731][ T5262] netlink: 'syz.0.276': attribute type 10 has an invalid length. [ 141.690783][ T5262] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.699794][ T5262] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.772857][ T5262] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.781553][ T5262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.790480][ T5262] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.798990][ T5262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.899720][ T5262] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 141.926215][ T5266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.276'. [ 141.939697][ T5266] device bridge_slave_1 left promiscuous mode [ 141.962211][ T5266] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.989675][ T5266] device bridge_slave_0 left promiscuous mode [ 142.008619][ T5266] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.051976][ T5266] bond0: (slave bridge0): Releasing backup interface [ 142.207911][ T5225] team0: Port device team_slave_0 added [ 142.230923][ T5225] team0: Port device team_slave_1 added [ 143.329564][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.387160][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.085853][ T4226] Bluetooth: hci3: command 0x041b tx timeout [ 145.163344][ T5225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.310778][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.343691][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.486185][ T4225] usb 5-1: string descriptor 0 read error: -71 [ 145.494367][ T4225] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 145.505365][ T4225] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.522092][ T5225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.535159][ T4225] usb 5-1: can't set config #33, error -71 [ 145.562190][ T4225] usb 5-1: USB disconnect, device number 4 [ 145.686380][ T5316] loop1: detected capacity change from 0 to 256 [ 145.771208][ T5225] device hsr_slave_0 entered promiscuous mode [ 145.827796][ T5316] FAT-fs (loop1): Directory bread(block 64) failed [ 145.838851][ T5225] device hsr_slave_1 entered promiscuous mode [ 145.856881][ T5316] FAT-fs (loop1): Directory bread(block 65) failed [ 145.869742][ T5225] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.874721][ T5316] FAT-fs (loop1): Directory bread(block 66) failed [ 145.900062][ T5225] Cannot create hsr debugfs directory [ 145.906820][ T5316] FAT-fs (loop1): Directory bread(block 67) failed [ 145.961324][ T5316] FAT-fs (loop1): Directory bread(block 68) failed [ 145.969228][ T5316] FAT-fs (loop1): Directory bread(block 69) failed [ 146.007999][ T5316] FAT-fs (loop1): Directory bread(block 70) failed [ 146.069385][ T5316] FAT-fs (loop1): Directory bread(block 71) failed [ 146.121656][ T5316] FAT-fs (loop1): Directory bread(block 72) failed [ 146.137215][ T5316] FAT-fs (loop1): Directory bread(block 73) failed [ 146.493593][ T5333] [ 147.369213][ T4226] Bluetooth: hci3: command 0x040f tx timeout [ 147.598657][ T5225] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 147.699325][ T5359] loop1: detected capacity change from 0 to 16 [ 147.785214][ T5359] erofs: (device loop1): mounted with root inode @ nid 36. [ 147.801268][ T5225] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 147.890466][ T5225] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 147.969719][ T154] device hsr_slave_0 left promiscuous mode [ 148.021677][ T4228] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 148.076800][ T154] device hsr_slave_1 left promiscuous mode [ 148.097523][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.144681][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.155735][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.165148][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.192371][ T154] device veth1_macvtap left promiscuous mode [ 148.209261][ T154] device veth0_macvtap left promiscuous mode [ 148.223297][ T154] device veth1_vlan left promiscuous mode [ 148.236668][ T154] device veth0_vlan left promiscuous mode [ 148.480238][ T4228] usb 1-1: Using ep0 maxpacket: 16 [ 148.608332][ T4228] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.739725][ T4228] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 149.066236][ T4228] usb 1-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 149.222659][ T4228] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.273150][ T4228] usb 1-1: config 0 descriptor?? [ 149.399895][ T4598] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 149.482281][ T5379] attempt to access beyond end of device [ 149.482281][ T5379] loop1: rw=0, want=34359739352, limit=16 [ 149.496513][ T5379] attempt to access beyond end of device [ 149.496513][ T5379] loop1: rw=0, want=34359739352, limit=16 [ 149.849522][ T4225] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 149.917545][ T4230] Bluetooth: hci3: command 0x0419 tx timeout [ 150.029863][ T4228] usbhid 1-1:0.0: can't add hid device: -71 [ 150.045907][ T4228] usbhid: probe of 1-1:0.0 failed with error -71 [ 150.066310][ T4228] usb 1-1: USB disconnect, device number 6 [ 150.099696][ T4225] usb 2-1: Using ep0 maxpacket: 16 [ 150.219712][ T4225] usb 2-1: config index 0 descriptor too short (expected 37359, got 202) [ 150.244866][ T4225] usb 2-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 150.274598][ T4225] usb 2-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 150.303009][ T4225] usb 2-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 150.331720][ T154] team0 (unregistering): Port device team_slave_1 removed [ 150.353080][ T154] team0 (unregistering): Port device team_slave_0 removed [ 150.370650][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.388893][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.476237][ T154] bond0 (unregistering): Released all slaves [ 150.479909][ T4225] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 150.503868][ T5225] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 150.523436][ T4225] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.533383][ T4225] usb 2-1: Product: syz [ 150.538460][ T4225] usb 2-1: Manufacturer: syz [ 150.544251][ T4225] usb 2-1: SerialNumber: syz [ 150.588350][ T4759] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 150.754032][ T5386] team0: No ports can be present during mode change [ 151.072389][ T5225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.228944][ T4598] usb 3-1: unable to get BOS descriptor or descriptor too short [ 151.249001][ T4225] usb 2-1: 0:2 : does not exist [ 151.329219][ T5225] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.346216][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 151.358747][ T4598] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 151.372615][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 151.389770][ T4598] usb 3-1: can't read configurations, error -71 [ 151.415924][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 151.436958][ T4225] usb 2-1: USB disconnect, device number 5 [ 151.462154][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 151.484492][ T4770] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.493054][ T4770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.511528][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 151.528058][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 151.540948][ T4770] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.549522][ T4770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.587722][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 151.701092][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 151.761178][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 151.804471][ T4337] udevd[4337]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 151.824738][ T5405] loop5: detected capacity change from 0 to 7 [ 151.864558][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 151.900896][ T5405] Dev loop5: unable to read RDB block 7 [ 151.904684][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 151.937307][ T5405] loop5: AHDI p1 p2 p3 [ 151.955675][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 151.963630][ T5405] loop5: partition table partially beyond EOD, truncated [ 151.992751][ T5405] loop5: p1 start 1818582900 is beyond EOD, truncated [ 152.026509][ T5405] loop5: p3 start 335544320 is beyond EOD, truncated [ 152.049398][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 152.254654][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 152.436648][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 152.500071][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 152.516044][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 152.535508][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 153.192374][ T5440] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 153.502734][ T5443] loop0: detected capacity change from 0 to 16 [ 154.154291][ T5443] erofs: (device loop0): mounted with root inode @ nid 36. [ 154.501280][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 154.517948][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 154.566018][ T5225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.272510][ T5476] attempt to access beyond end of device [ 155.272510][ T5476] loop0: rw=0, want=34359739352, limit=16 [ 155.286920][ T5476] attempt to access beyond end of device [ 155.286920][ T5476] loop0: rw=0, want=34359739352, limit=16 [ 155.458563][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 155.509131][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 155.586484][ T4173] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 155.710996][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 155.748534][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 155.762137][ T5225] device veth0_vlan entered promiscuous mode [ 155.780236][ T5480] netlink: 24 bytes leftover after parsing attributes in process `syz.2.319'. [ 155.984995][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 155.995967][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 156.011390][ T5225] device veth1_vlan entered promiscuous mode [ 156.096643][ T4173] usb 1-1: Using ep0 maxpacket: 16 [ 156.287452][ T4173] usb 1-1: config index 0 descriptor too short (expected 37359, got 202) [ 156.591326][ T4173] usb 1-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 156.855814][ T4173] usb 1-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 156.931860][ T5494] netlink: 'syz.1.323': attribute type 10 has an invalid length. [ 156.981251][ T4173] usb 1-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 156.995491][ T5499] loop1: detected capacity change from 0 to 512 [ 157.040318][ T5496] device syzkaller0 entered promiscuous mode [ 157.072664][ T5225] device veth0_macvtap entered promiscuous mode [ 157.081039][ T4173] usb 1-1: string descriptor 0 read error: -71 [ 157.106557][ T4173] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 157.125273][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 157.145915][ T5499] EXT4-fs (loop1): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 157.166387][ T4173] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.184038][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 157.194501][ T5499] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 157.245675][ T5499] EXT4-fs (loop1): inline encryption not supported [ 157.249252][ T4173] usb 1-1: can't set config #33, error -71 [ 157.272819][ T5495] loop2: detected capacity change from 0 to 8192 [ 157.290092][ T5499] EXT4-fs (loop1): Test dummy encryption mode enabled [ 157.316355][ T4173] usb 1-1: USB disconnect, device number 7 [ 157.325609][ T5499] EXT4-fs (loop1): can't mount with both data=journal and dax [ 158.440737][ T5504] [U]  [ 158.668138][ T5225] device veth1_macvtap entered promiscuous mode [ 158.683874][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 158.693819][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 158.807670][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.871904][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.934936][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.959165][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.995267][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.034561][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.081022][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.104978][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.118582][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.181209][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.238826][ T5525] syz.2.329: vmalloc error: size 18446744073709551614, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 159.306746][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.478022][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.556899][ T5525] CPU: 1 PID: 5525 Comm: syz.2.329 Not tainted syzkaller #0 [ 159.565700][ T5525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 159.577905][ T5525] Call Trace: [ 159.581868][ T5525] [ 159.585402][ T5525] dump_stack_lvl+0x188/0x250 [ 159.591142][ T5525] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 159.597928][ T5525] ? show_regs_print_info+0x20/0x20 [ 159.604216][ T5525] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 159.611133][ T5525] warn_alloc+0x243/0x320 [ 159.616354][ T5525] ? zone_watermark_ok_safe+0x240/0x240 [ 159.623137][ T5525] ? __mutex_lock_common+0x47c/0x2400 [ 159.629661][ T5525] __vmalloc_node_range+0x2b1/0x8b0 [ 159.635921][ T5525] ? lockdep_hardirqs_on+0x94/0x140 [ 159.642184][ T5525] ? dvb_dvr_do_ioctl+0x12a/0x220 [ 159.648257][ T5525] vmalloc+0x75/0x80 [ 159.652952][ T5525] ? dvb_dvr_do_ioctl+0x12a/0x220 [ 159.659004][ T5525] dvb_dvr_do_ioctl+0x12a/0x220 [ 159.664853][ T5525] dvb_usercopy+0x191/0x2b0 [ 159.670279][ T5525] ? dvb_dvr_release+0x3d0/0x3d0 [ 159.676233][ T5525] ? dvb_generic_ioctl+0xb0/0xb0 [ 159.682200][ T5525] ? dvb_dvr_poll+0x230/0x230 [ 159.687835][ T5525] dvb_dvr_ioctl+0x25/0x30 [ 159.693154][ T5525] __se_sys_ioctl+0xfa/0x170 [ 159.698683][ T5525] do_syscall_64+0x4c/0xa0 [ 159.704023][ T5525] ? clear_bhb_loop+0x30/0x80 [ 159.709663][ T5525] ? clear_bhb_loop+0x30/0x80 [ 159.715308][ T5525] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 159.722433][ T5525] RIP: 0033:0x7fa089084819 [ 159.727758][ T5525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.751309][ T5525] RSP: 002b:00007fa0872bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 159.761452][ T5525] RAX: ffffffffffffffda RBX: 00007fa0892fe090 RCX: 00007fa089084819 [ 159.771040][ T5525] RDX: fffffffffffffffe RSI: 0000000000006f2d RDI: 0000000000000004 [ 159.780625][ T5525] RBP: 00007fa08911ac91 R08: 0000000000000000 R09: 0000000000000000 [ 159.790225][ T5525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.799815][ T5525] R13: 00007fa0892fe128 R14: 00007fa0892fe090 R15: 00007ffdcf3a5bb8 [ 159.809418][ T5525] [ 159.915352][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.957866][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.000866][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.013406][ T5525] Mem-Info: [ 160.017234][ T5525] active_anon:321 inactive_anon:39945 isolated_anon:0 [ 160.017234][ T5525] active_file:12834 inactive_file:40999 isolated_file:0 [ 160.017234][ T5525] unevictable:768 dirty:330 writeback:0 [ 160.017234][ T5525] slab_reclaimable:20742 slab_unreclaimable:94432 [ 160.017234][ T5525] mapped:30038 shmem:35554 pagetables:605 bounce:0 [ 160.017234][ T5525] kernel_misc_reclaimable:0 [ 160.017234][ T5525] free:1332820 free_pcp:14755 free_cma:0 [ 160.067731][ T5525] Node 0 active_anon:1252kB inactive_anon:159272kB active_file:51132kB inactive_file:163996kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120152kB dirty:1320kB writeback:0kB shmem:140140kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11088kB pagetables:2420kB all_unreclaimable? no [ 160.106692][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.121239][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.139006][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.142481][ T5525] Node 1 active_anon:32kB inactive_anon:508kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 160.184823][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 160.196184][ T5525] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 160.229933][ T5525] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 160.243630][ T5525] Node 0 DMA32 free:1406272kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1252kB inactive_anon:159372kB active_file:51132kB inactive_file:163996kB unevictable:1536kB writepending:1320kB present:3129332kB managed:2606552kB mlocked:0kB bounce:0kB free_pcp:43108kB local_pcp:21628kB free_cma:0kB [ 160.255484][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 160.290574][ T5525] lowmem_reserve[]: 0 0 0 0 0 [ 160.299209][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 160.308395][ T5525] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 160.312686][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 160.353133][ T5525] lowmem_reserve[]: 0 0 0 0 0 [ 160.360466][ T5525] Node 1 Normal free:3908468kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:15804kB local_pcp:11764kB free_cma:0kB [ 160.405657][ T5526] device syzkaller0 entered promiscuous mode [ 160.419836][ T5525] lowmem_reserve[]: 0 0 0 0 0 [ 160.426005][ T5525] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 160.447847][ T5525] Node 0 DMA32: 107*4kB (UME) 30*8kB (UME) 60*16kB (UME) 72*32kB (UME) 72*64kB (UME) 52*128kB (UME) 26*256kB (M) 15*512kB (UME) 5*1024kB (UME) 4*2048kB (ME) 333*4096kB (M) = 1406812kB [ 160.481142][ T5525] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 160.495700][ T5525] Node 1 Normal: 127*4kB (UME) 27*8kB (UME) 26*16kB (UME) 120*32kB (UME) 46*64kB (UME) 19*128kB (U) 9*256kB (UM) 5*512kB (UE) 2*1024kB (UE) 2*2048kB (UM) 949*4096kB (M) = 3908468kB [ 160.518057][ T5525] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 160.529608][ T5525] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 160.551479][ T5525] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 160.574098][ T5525] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 160.595295][ T5525] 89383 total pagecache pages [ 160.612423][ T5525] 0 pages in swap cache [ 160.636030][ T5525] Swap cache stats: add 79, delete 79, find 0/1 [ 160.736908][ T5525] Free swap = 124728kB [ 160.742230][ T5525] Total swap = 124996kB [ 160.753881][ T5525] 2097051 pages RAM [ 160.758508][ T5525] 0 pages HighMem/MovableOnly [ 160.783053][ T5525] 411490 pages reserved [ 160.807299][ T5525] 0 pages cma reserved [ 160.851505][ T5225] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.874580][ T5225] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.885238][ T5225] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.904360][ T5225] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.805881][ T732] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.889620][ T732] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.990863][ T4428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.006957][ T732] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 163.024597][ T4428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.062647][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 164.298980][ T5575] pit: kvm: requested 129066 ns i8254 timer period limited to 200000 ns [ 164.766527][ T5595] loop2: detected capacity change from 0 to 512 [ 165.833148][ T5607] loop1: detected capacity change from 0 to 32768 [ 166.720432][ T5607] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.347 (5607) [ 166.756665][ T5595] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 166.935158][ T5607] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 166.946854][ T5607] BTRFS info (device loop1): using free space tree [ 166.954818][ T5607] BTRFS info (device loop1): has skinny extents [ 167.005885][ T5595] EXT4-fs (loop2): SIPHASH is not a valid default hash value [ 167.807418][ T5607] BTRFS info (device loop1): enabling ssd optimizations [ 167.949429][ T26] audit: type=1326 audit(1775007885.569:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5630 comm="syz.0.349" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe9a42a2819 code=0x0 [ 168.272692][ T5641] loop5: detected capacity change from 0 to 2048 [ 168.332484][ T5641] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 169.669859][ T5645] loop4: detected capacity change from 0 to 16 [ 169.913345][ T5645] erofs: (device loop4): mounted with root inode @ nid 36. [ 170.569645][ T5645] erofs: (device loop4): z_erofs_extent_lookback: unknown type 3 @ lcn 0 of nid 89 [ 170.864078][ T5645] erofs: (device loop4): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 171.062545][ T5645] erofs: (device loop4): z_erofs_extent_lookback: unknown type 3 @ lcn 0 of nid 89 [ 171.193781][ T5645] erofs: (device loop4): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 171.204665][ T5645] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 4095 of nid 89 [ 171.216748][ T5645] erofs: (device loop4): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 171.230732][ T5645] attempt to access beyond end of device [ 171.230732][ T5645] loop4: rw=524288, want=1072, limit=16 [ 171.244281][ T5645] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 4095 of nid 89 [ 171.256167][ T5645] erofs: (device loop4): z_erofs_readpage: failed to read, err [-95] [ 171.267286][ T26] audit: type=1800 audit(1775007888.891:17): pid=5645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.352" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 172.305762][ T5595] team0: Port device team_slave_0 removed [ 172.318709][ T5653] netlink: 12 bytes leftover after parsing attributes in process `syz.5.354'. [ 172.330057][ T5657] 8021q: VLANs not supported on vcan0 [ 173.377886][ T5662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.464701][ T5687] device syzkaller0 entered promiscuous mode [ 174.410319][ T4229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.467361][ T5655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.505956][ T5704] binder: BINDER_SET_CONTEXT_MGR already set [ 174.521352][ T5705] device macvtap0 entered promiscuous mode [ 174.541685][ T5705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.364'. [ 174.555507][ T5704] binder: 5701:5704 ioctl 4018620d 200000004a80 returned -16 [ 174.671189][ T5705] device veth0_macvtap left promiscuous mode [ 174.971456][ T5718] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 175.003271][ C1] vkms_vblank_simulate: vblank timer overrun [ 175.010685][ T5718] CIFS mount error: No usable UNC path provided in device string! [ 175.010685][ T5718] [ 175.085861][ T5718] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 175.113909][ T5705] device macvtap0 left promiscuous mode [ 176.000686][ T5655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.018756][ T5713] netlink: 'syz.0.368': attribute type 1 has an invalid length. [ 176.308606][ T5730] device syzkaller0 entered promiscuous mode [ 177.417023][ T5659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.427228][ T4598] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.500927][ T5744] loop1: detected capacity change from 0 to 256 [ 177.568538][ T5744] FAT-fs (loop1): Directory bread(block 64) failed [ 177.625853][ T5744] FAT-fs (loop1): Directory bread(block 65) failed [ 177.642717][ T5749] kvm: pic: non byte write [ 177.664729][ T5744] FAT-fs (loop1): Directory bread(block 66) failed [ 177.670441][ T5749] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=42 (84 ns) > initial count (14 ns). Using initial count to start timer. [ 177.717795][ T5744] FAT-fs (loop1): Directory bread(block 67) failed [ 177.734815][ T5744] FAT-fs (loop1): Directory bread(block 68) failed [ 177.751720][ T5744] FAT-fs (loop1): Directory bread(block 69) failed [ 177.796571][ T5744] FAT-fs (loop1): Directory bread(block 70) failed [ 177.818828][ T5744] FAT-fs (loop1): Directory bread(block 71) failed [ 177.842659][ T5744] FAT-fs (loop1): Directory bread(block 72) failed [ 177.868742][ T5744] FAT-fs (loop1): Directory bread(block 73) failed [ 177.972925][ T5744] overlayfs: filesystem on './file0' not supported [ 178.082522][ T5741] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 178.093953][ T5741] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 178.105602][ T5741] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 178.123107][ T26] audit: type=1800 audit(1775007895.704:18): pid=5741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.374" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 178.270411][ T5763] netlink: 56 bytes leftover after parsing attributes in process `syz.0.379'. [ 178.489593][ T5656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.796909][ T5783] device syzkaller0 entered promiscuous mode [ 179.011001][ T5793] device syzkaller0 entered promiscuous mode [ 181.466536][ T4229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.633483][ T4229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.663214][ T5659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.907290][ T4770] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 181.965174][ T5835] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 181.999821][ T26] audit: type=1326 audit(1775007899.626:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5829 comm="syz.0.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9a42a2819 code=0x7ffc0000 [ 182.107050][ T13] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 182.121903][ T5825] device syzkaller0 entered promiscuous mode [ 182.164815][ T26] audit: type=1326 audit(1775007899.626:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5829 comm="syz.0.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fe9a42a2819 code=0x7ffc0000 [ 182.382586][ T26] audit: type=1326 audit(1775007899.626:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5829 comm="syz.0.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9a42a2819 code=0x7ffc0000 [ 183.160498][ T5656] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 183.229227][ T5659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.399110][ T26] audit: type=1326 audit(1775007899.626:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5829 comm="syz.0.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe9a42a2819 code=0x7ffc0000 [ 183.513931][ T26] audit: type=1326 audit(1775007899.626:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5829 comm="syz.0.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9a42a2819 code=0x7ffc0000 [ 183.592613][ T5656] usb 6-1: config 0 has an invalid interface number: 235 but max is 0 [ 183.621788][ T5656] usb 6-1: config 0 has no interface number 0 [ 183.650986][ T5656] usb 6-1: config 0 interface 235 has no altsetting 0 [ 183.905381][ T13] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 183.944394][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.151142][ T13] usb 3-1: Product: syz [ 184.268934][ T4763] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 184.299535][ T13] usb 3-1: Manufacturer: syz [ 184.458972][ T13] usb 3-1: SerialNumber: syz [ 184.569536][ T13] usb 3-1: config 0 descriptor?? [ 184.674200][ T13] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 184.681933][ T5655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.732149][ T5656] usb 6-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 184.753303][ T5656] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.804536][ T5656] usb 6-1: Product: syz [ 184.875610][ T5656] usb 6-1: Manufacturer: syz [ 185.037201][ T5656] usb 6-1: SerialNumber: syz [ 185.426238][ T5656] usb 6-1: config 0 descriptor?? [ 185.548324][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.570182][ T13] gspca_stk1135: reg_w 0x2 err -71 [ 185.577948][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.593230][ T13] gspca_stk1135: serial bus timeout: status=0x00 [ 185.600884][ T13] gspca_stk1135: Sensor write failed [ 185.607957][ T13] gspca_stk1135: serial bus timeout: status=0x00 [ 185.624534][ T13] gspca_stk1135: Sensor write failed [ 185.631051][ T13] gspca_stk1135: serial bus timeout: status=0x00 [ 185.638886][ T13] gspca_stk1135: Sensor read failed [ 185.661982][ T5832] ALSA: mixer_oss: invalid OSS volume '' [ 185.692021][ T5656] usb 6-1: can't set config #0, error -71 [ 185.721753][ T5656] usb 6-1: USB disconnect, device number 2 [ 185.765593][ T13] gspca_stk1135: serial bus timeout: status=0x00 [ 186.116082][ T13] gspca_stk1135: Sensor read failed [ 186.166971][ T13] gspca_stk1135: Detected sensor type unknown (0x0) [ 186.235016][ T13] gspca_stk1135: serial bus timeout: status=0x00 [ 186.270181][ T13] gspca_stk1135: Sensor read failed [ 186.277912][ T13] gspca_stk1135: serial bus timeout: status=0x00 [ 186.291820][ T13] gspca_stk1135: Sensor read failed [ 186.298127][ T13] gspca_stk1135: serial bus timeout: status=0x00 [ 186.313001][ T13] gspca_stk1135: Sensor write failed [ 186.319607][ T13] gspca_stk1135: serial bus timeout: status=0x00 [ 186.333841][ T13] gspca_stk1135: Sensor write failed [ 186.340280][ T13] stk1135: probe of 3-1:0.0 failed with error -71 [ 186.377776][ T13] usb 3-1: USB disconnect, device number 4 [ 186.489870][ T5656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.500988][ T5655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.563210][ T5908] device syzkaller0 entered promiscuous mode [ 187.782458][ T5656] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 188.699329][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.726824][ T5661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.288275][ T5656] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 189.343853][ T5926] binder: BINDER_SET_CONTEXT_MGR already set [ 189.351228][ T5926] binder: 5920:5926 ioctl 4018620d 200000000040 returned -16 [ 189.400217][ T5926] binder: 5920:5926 ioctl c0306201 200000000240 returned -11 [ 189.429477][ T5656] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 189.529652][ T5656] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 189.621252][ T5656] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.730785][ T5903] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 189.758374][ T5935] IPVS: nq: FWM 3 0x00000003 - no destination available [ 189.767913][ C0] IPVS: nq: FWM 3 0x00000003 - no destination available [ 189.776437][ C0] IPVS: nq: FWM 3 0x00000003 - no destination available [ 189.982221][ T5656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.010294][ T5655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.054668][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.368576][ T5655] Bluetooth: hci0: command 0x0406 tx timeout [ 192.153904][ T5655] Bluetooth: hci1: command 0x0406 tx timeout [ 192.176872][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.438576][ T5655] Bluetooth: hci2: command 0x0406 tx timeout [ 192.505779][ T5655] Bluetooth: hci4: command 0x0406 tx timeout [ 193.033153][ T4173] usb 3-1: USB disconnect, device number 5 [ 193.040804][ T5661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.576423][ T5973] loop4: detected capacity change from 0 to 128 [ 194.129915][ T4173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.385871][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.394589][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.613444][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.949258][ T4756] net_ratelimit: 1 callbacks suppressed [ 194.949277][ T4756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.971577][ T4225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.996333][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.037875][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.051687][ T5992] netlink: 798 bytes leftover after parsing attributes in process `syz.2.435'. [ 195.210352][ T5655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.076386][ T6003] device syzkaller0 entered promiscuous mode [ 196.288154][ T4227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.493654][ T5655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.913748][ T6021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.753235][ T4225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.848594][ T5655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.992312][ T6032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.054080][ T6032] MPTCP: addr_signal error, add_addr=1, echo=0 [ 199.399225][ T6042] netlink: 12 bytes leftover after parsing attributes in process `syz.0.447'. [ 199.982549][ T5661] net_ratelimit: 5 callbacks suppressed [ 199.982617][ T5661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.277512][ T6059] loop1: detected capacity change from 0 to 64 [ 201.267701][ T5655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.323771][ T6074] loop4: detected capacity change from 0 to 1024 [ 201.407432][ T732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.572895][ T5655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.221467][ T6074] hfsplus: unable to parse mount options [ 204.486020][ T4598] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.498671][ T4600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.621971][ T13] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 204.670848][ T5655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.938111][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.978682][ T4227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.047335][ T6109] loop4: detected capacity change from 0 to 2048 [ 206.077597][ T1474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.116673][ T4598] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.127822][ T4227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.549248][ T6109] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 207.093179][ T5661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.124368][ T6117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.181160][ T1474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.194186][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.195731][ T6115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.222813][ T4598] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.432271][ T6129] fuse: Bad value for 'fd' [ 208.448768][ T5661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.728703][ T6150] loop5: detected capacity change from 0 to 1024 [ 211.977004][ T6159] loop1: detected capacity change from 0 to 1024 [ 212.701795][ T4230] net_ratelimit: 3 callbacks suppressed [ 212.701814][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.756252][ T6163] loop4: detected capacity change from 0 to 512 [ 212.823402][ T6163] EXT4-fs (loop4): Ignoring removed nobh option [ 212.831342][ T6150] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 212.918658][ T4770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.014351][ T6150] EXT4-fs warning (device loop5): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop5. [ 213.089738][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.115358][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.158387][ T6163] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,noquota,nobh,,errors=continue. Quota mode: writeback. [ 214.032071][ T5661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.042223][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.065440][ T6163] ext4 filesystem being mounted at /100/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 214.220837][ T26] audit: type=1800 audit(1775007931.862:24): pid=6160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.476" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 214.245243][ C0] vkms_vblank_simulate: vblank timer overrun [ 214.409013][ T6180] device syzkaller0 entered promiscuous mode [ 215.087038][ T4173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.117103][ T4770] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 216.346171][ T5655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.913620][ T6216] xt_TPROXY: Can be used only with -p tcp or -p udp [ 219.187742][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.270790][ T4173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.308804][ T4337] udevd[4337]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 220.512196][ T4173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.854882][ T4756] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 220.934466][ T4173] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 221.273757][ T4173] usb 2-1: Using ep0 maxpacket: 16 [ 221.870081][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.954346][ T4173] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.986426][ T6248] device syzkaller0 entered promiscuous mode [ 221.998240][ T4173] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.050898][ T4173] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 222.123212][ T4173] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 222.175246][ T4173] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.193399][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.227023][ T4173] usb 2-1: config 0 descriptor?? [ 222.287709][ T6259] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 222.296451][ T6259] IPv6: NLM_F_CREATE should be set when creating new route [ 223.783823][ T4173] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 223.959645][ T4173] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 224.071550][ T4173] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0002/input/input6 [ 224.104510][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.115249][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.170450][ T4173] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 224.258061][ T4173] usb 2-1: USB disconnect, device number 7 [ 224.454706][ T6286] fido_id[6286]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 225.233160][ T4598] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.283297][ T6291] loop5: detected capacity change from 0 to 16 [ 225.532682][ T6291] erofs: (device loop5): mounted with root inode @ nid 36. [ 225.571132][ T4194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.841536][ T6291] attempt to access beyond end of device [ 225.841536][ T6291] loop5: rw=0, want=34359739352, limit=16 [ 225.856295][ T6291] attempt to access beyond end of device [ 225.856295][ T6291] loop5: rw=0, want=34359739352, limit=16 [ 227.408488][ T4240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.420614][ T4598] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 227.646428][ T6263] bridge0: port 3(syz_tun) entered disabled state [ 227.789762][ T6263] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.798832][ T6263] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.897467][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.963400][ T4173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.206115][ T5655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.512088][ T6334] loop1: detected capacity change from 0 to 1024 [ 230.797973][ T6334] attempt to access beyond end of device [ 230.797973][ T6334] loop1: rw=0, want=5780, limit=1024 [ 230.867221][ T6334] Buffer I/O error on dev loop1, logical block 2889, async page read [ 230.896462][ T6334] attempt to access beyond end of device [ 230.896462][ T6334] loop1: rw=0, want=5780, limit=1024 [ 230.941476][ T6334] Buffer I/O error on dev loop1, logical block 2889, async page read [ 230.998888][ T26] audit: type=1800 audit(1775007948.641:25): pid=6334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.515" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 231.152508][ T6341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.164249][ T6341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.174994][ T6341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.186262][ T6341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.196577][ T6341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.217728][ T6341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.228190][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.259582][ T6341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.276936][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.299178][ T4173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.594264][ T6263] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.434812][ T6263] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.205204][ T6263] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.216198][ T6263] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.227707][ T6263] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.239403][ T6263] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.544445][ T6366] loop1: detected capacity change from 0 to 128 [ 234.022740][ T6368] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 235.783761][ T6402] device batadv_slave_1 entered promiscuous mode [ 235.810882][ T6398] device batadv_slave_1 left promiscuous mode [ 236.397689][ T6404] netlink: 'syz.2.534': attribute type 12 has an invalid length. [ 236.823182][ T5659] net_ratelimit: 71 callbacks suppressed [ 236.823198][ T5659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.563605][ T6423] device syzkaller0 entered promiscuous mode [ 237.839732][ T6433] MPTCP: addr_signal error, add_addr=1, echo=0 [ 238.139262][ T6417] loop1: detected capacity change from 0 to 8192 [ 238.546767][ T6417] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 238.676592][ T5659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.705974][ T4756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.717252][ T5659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.729777][ T4240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.749882][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.059506][ T6458] device syzkaller0 entered promiscuous mode [ 239.943653][ T5659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.228945][ T26] audit: type=1800 audit(1775007957.885:26): pid=6464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.549" name="bus" dev="ramfs" ino=42303 res=0 errno=0 [ 240.994271][ T4240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.664059][ T6439] loop5: detected capacity change from 0 to 32768 [ 242.519622][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.968352][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.983085][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.989551][ T4337] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 scanned by udevd (4337) [ 244.074584][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.280195][ T4759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.290841][ T4600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.303210][ T4240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.381967][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.124843][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.236938][ T6534] netlink: 28 bytes leftover after parsing attributes in process `syz.0.567'. [ 246.283010][ T6537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.572'. [ 246.754487][ T4240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.797718][ T4240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.866044][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.140094][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.947845][ T4240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.088020][ T4759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.102342][ T6586] loop1: detected capacity change from 0 to 1024 [ 250.112856][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.124638][ T5662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.183501][ T6586] EXT4-fs (loop1): Ignoring removed oldalloc option [ 250.351973][ T6586] EXT4-fs (loop1): Ignoring removed bh option [ 251.300061][ T6586] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 251.321497][ T4240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.369375][ T6586] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,nobarrier,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 252.284286][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.415808][ T5662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.627653][ T4763] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 252.664205][ T6619] netlink: 'syz.4.577': attribute type 10 has an invalid length. [ 253.530647][ T6627] loop5: detected capacity change from 0 to 128 [ 253.549970][ T6619] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 253.577327][ T4226] net_ratelimit: 1 callbacks suppressed [ 253.577346][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.587808][ T1108] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 253.927351][ T1108] usb 2-1: Using ep0 maxpacket: 16 [ 254.158068][ T1108] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 254.202239][ T1108] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 254.417834][ T1108] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 254.449425][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.499794][ T1108] usb 2-1: Product: syz [ 254.526425][ T1108] usb 2-1: Manufacturer: syz [ 254.555323][ T1108] usb 2-1: SerialNumber: syz [ 254.724646][ T4759] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 254.870427][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.901395][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.007593][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.016784][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.201009][ T732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.483542][ T5662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.496169][ T4600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.520513][ T4240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.548418][ T1108] usb 2-1: 0:2 : does not exist [ 256.992947][ T1108] usb 2-1: USB disconnect, device number 8 [ 257.624137][ T6664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.586'. [ 257.775505][ T4240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.140776][ T6664] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 258.237878][ T6678] loop2: detected capacity change from 0 to 128 [ 258.417234][ T4337] udevd[4337]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 258.817045][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.905033][ T6696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.976062][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.020447][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.694674][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.988126][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.998194][ T4240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.019331][ T6719] device syzkaller0 entered promiscuous mode [ 261.066715][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.128848][ T4240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.140068][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.213276][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.236539][ T6745] bridge0: port 3(syz_tun) entered blocking state [ 262.263148][ T6745] bridge0: port 3(syz_tun) entered disabled state [ 262.282489][ T6745] device syz_tun entered promiscuous mode [ 262.299507][ T6745] bridge0: port 3(syz_tun) entered blocking state [ 262.307398][ T6745] bridge0: port 3(syz_tun) entered forwarding state [ 262.847735][ T6735] loop2: detected capacity change from 0 to 32768 [ 263.010169][ T4600] Bluetooth: hci3: command 0x0406 tx timeout [ 263.924728][ T6735] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 263.965882][ T4240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.985682][ T6735] BTRFS info (device loop2): enabling auto defrag [ 264.012303][ T6735] BTRFS info (device loop2): force clearing of disk cache [ 264.040009][ T6769] netlink: 'syz.0.611': attribute type 10 has an invalid length. [ 264.167407][ T6735] BTRFS error (device loop2): support for check_integrity* not compiled in! [ 264.201867][ T6735] BTRFS error (device loop2): open_ctree failed: -22 [ 265.110433][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.254013][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.278776][ T6769] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 267.620771][ T6791] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 268.359266][ T4770] wlan1: Trigger new scan to find an IBSS to join [ 268.479009][ T5659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.697413][ T4600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.866007][ T6796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.077688][ T6796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.389922][ T5659] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 269.613769][ T4227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.649520][ T5659] usb 3-1: Using ep0 maxpacket: 16 [ 269.789951][ T5659] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 269.812634][ T5659] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 269.842914][ T6796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.858899][ T6796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.873993][ T6796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.886189][ T6802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.897551][ T6802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.908869][ T6802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.994640][ T6809] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 270.003383][ T6809] IPv6: NLM_F_CREATE should be set when creating new route [ 270.019672][ T5659] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 270.049846][ T5659] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.088224][ T5659] usb 3-1: Product: syz [ 270.088249][ T5659] usb 3-1: Manufacturer: syz [ 270.088266][ T5659] usb 3-1: SerialNumber: syz [ 271.284408][ T5662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.308697][ T5659] usb 3-1: 0:2 : does not exist [ 271.371944][ T5659] usb 3-1: USB disconnect, device number 6 [ 271.681250][ T4759] wlan1: Trigger new scan to find an IBSS to join [ 271.702852][ T4337] udevd[4337]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 272.261122][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.647836][ T4770] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00 [ 273.686855][ T6809] bridge0: port 3(syz_tun) entered disabled state [ 273.784997][ T6809] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.794673][ T6809] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.859251][ T6846] loop1: detected capacity change from 0 to 16 [ 273.941572][ T6846] erofs: (device loop1): mounted with root inode @ nid 36. [ 274.237793][ T6848] attempt to access beyond end of device [ 274.237793][ T6848] loop1: rw=0, want=34359739352, limit=16 [ 274.252224][ T6848] attempt to access beyond end of device [ 274.252224][ T6848] loop1: rw=0, want=34359739352, limit=16 [ 274.547197][ T4228] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 274.837027][ T4228] usb 2-1: Using ep0 maxpacket: 16 [ 274.977339][ T4228] usb 2-1: config index 0 descriptor too short (expected 37359, got 202) [ 275.003843][ T4228] usb 2-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 275.033410][ T4228] usb 2-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 275.048032][ T4228] usb 2-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 275.106735][ T4240] net_ratelimit: 2 callbacks suppressed [ 275.106754][ T4240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.241886][ T4228] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 275.258950][ T4228] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.274944][ T4228] usb 2-1: Product: syz [ 275.280548][ T4228] usb 2-1: Manufacturer: syz [ 275.286088][ T4228] usb 2-1: SerialNumber: syz [ 275.324867][ T4600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.627219][ T6809] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.686713][ T6809] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.166595][ T5662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.182014][ T6809] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.193504][ T6809] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.208374][ T6809] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.220998][ T6809] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.353559][ T6818] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.621'. [ 276.591049][ T6836] team0: Port device team_slave_0 removed [ 277.611355][ T5659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.730126][ T4228] usb 2-1: 0:2 : does not exist [ 277.793544][ T6869] netlink: 28 bytes leftover after parsing attributes in process `syz.4.636'. [ 277.867359][ T6870] CIFS mount error: No usable UNC path provided in device string! [ 277.867359][ T6870] [ 277.879504][ T6870] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 278.563258][ T4228] usb 2-1: USB disconnect, device number 9 [ 278.572494][ T4225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.727673][ T5659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.772563][ T6875] loop1: detected capacity change from 0 to 16 [ 278.825622][ T4337] udevd[4337]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 278.867341][ T6875] erofs: (device loop1): mounted with root inode @ nid 36. [ 279.198507][ T6891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.209742][ T6891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.220203][ T6891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.230666][ T6891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.296726][ T6892] attempt to access beyond end of device [ 279.296726][ T6892] loop1: rw=0, want=34359739352, limit=16 [ 279.310988][ T6892] attempt to access beyond end of device [ 279.310988][ T6892] loop1: rw=0, want=34359739352, limit=16 [ 282.384536][ T1108] net_ratelimit: 366 callbacks suppressed [ 282.384554][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.435019][ T4225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.444940][ T4225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.602843][ T5659] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 282.893435][ T5659] usb 2-1: Using ep0 maxpacket: 16 [ 283.389119][ T5659] usb 2-1: config index 0 descriptor too short (expected 37359, got 202) [ 284.082076][ T5659] usb 2-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 284.270293][ T6907] binfmt_misc: register: failed to install interpreter file ./file0 [ 284.384551][ T6909] netlink: 'syz.0.645': attribute type 29 has an invalid length. [ 284.397176][ T6909] netlink: 'syz.0.645': attribute type 29 has an invalid length. [ 285.070122][ T5659] usb 2-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 285.128799][ T5659] usb 2-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 285.441923][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.541136][ T5662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.582510][ T5659] usb 2-1: string descriptor 0 read error: -71 [ 285.594842][ T6913] ================================================================== [ 285.601002][ T5659] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 285.605226][ T6913] BUG: KASAN: use-after-free in ieee80211_monitor_select_queue+0x23a/0x240 [ 285.605315][ T6913] Read of size 2 at addr ffff88805fd4d442 by task syz.0.649/6913 [ 285.605334][ T6913] [ 285.605346][ T6913] CPU: 0 PID: 6913 Comm: syz.0.649 Not tainted syzkaller #0 [ 285.605368][ T6913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 285.605382][ T6913] Call Trace: [ 285.605390][ T6913] [ 285.605400][ T6913] dump_stack_lvl+0x188/0x250 [ 285.605426][ T6913] ? show_regs_print_info+0x20/0x20 [ 285.637071][ T5659] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.638629][ T6913] ? load_image+0x400/0x400 [ 285.693898][ T6913] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 285.700500][ T6913] ? ieee80211_tx+0x460/0x460 [ 285.706163][ T6913] print_address_description+0x60/0x2d0 [ 285.712898][ T6913] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 285.720433][ T6913] kasan_report+0xdf/0x130 [ 285.725876][ T6913] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 285.733408][ T6913] ieee80211_monitor_select_queue+0x23a/0x240 [ 285.740732][ T6913] ? ieee80211_recalc_smps_work+0x20/0x20 [ 285.747650][ T6913] netdev_core_pick_tx+0x118/0x2e0 [ 285.752054][ T5659] usb 2-1: can't set config #33, error -71 [ 285.753861][ T6913] __dev_queue_xmit+0x756/0x2f80 [ 285.753893][ T6913] ? __might_fault+0xb7/0x110 [ 285.772474][ T6913] ? dev_queue_xmit+0x20/0x20 [ 285.778117][ T6913] ? virtio_net_hdr_to_skb+0xae3/0x11f0 [ 285.784869][ T6913] ? packet_cached_dev_get+0x270/0x270 [ 285.787704][ T5659] usb 2-1: USB disconnect, device number 10 [ 285.791458][ T6913] ? skb_copy_datagram_from_iter+0x5e3/0x6a0 [ 285.791500][ T6913] packet_sendmsg+0x3dba/0x5060 [ 285.791551][ T6913] ? __might_sleep+0xf0/0xf0 [ 285.791589][ T6913] ? aa_sk_perm+0x7dc/0x910 [ 285.791614][ T6913] ? packet_getsockopt+0x9a0/0x9a0 [ 285.791648][ T6913] ? aa_sock_msg_perm+0x94/0x150 [ 285.791675][ T6913] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 285.841087][ T6913] ? security_socket_sendmsg+0x7c/0xa0 [ 285.847691][ T6913] ? packet_getsockopt+0x9a0/0x9a0 [ 285.853865][ T6913] ____sys_sendmsg+0x5b7/0x8f0 [ 285.859631][ T6913] ? __sys_sendmsg_sock+0x30/0x30 [ 285.865711][ T6913] ? import_iovec+0x6f/0xa0 [ 285.871162][ T6913] ___sys_sendmsg+0x236/0x2e0 [ 285.876817][ T6913] ? __sys_sendmsg+0x2a0/0x2a0 [ 285.882615][ T6913] __se_sys_sendmsg+0x1af/0x290 [ 285.888581][ T6913] ? __x64_sys_sendmsg+0x80/0x80 [ 285.894545][ T6913] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 285.901771][ T6913] ? lockdep_hardirqs_on+0x94/0x140 [ 285.908055][ T6913] do_syscall_64+0x4c/0xa0 [ 285.913389][ T6913] ? clear_bhb_loop+0x30/0x80 [ 285.919033][ T6913] ? clear_bhb_loop+0x30/0x80 [ 285.924679][ T6913] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 285.931777][ T6913] RIP: 0033:0x7fe9a42a2819 [ 285.937105][ T6913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.960923][ T6913] RSP: 002b:00007fe9a24fc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.971129][ T6913] RAX: ffffffffffffffda RBX: 00007fe9a451bfa0 RCX: 00007fe9a42a2819 [ 285.980747][ T6913] RDX: 008bb3a321ef809a RSI: 0000200000000280 RDI: 0000000000000005 [ 285.990351][ T6913] RBP: 00007fe9a4338c91 R08: 0000000000000000 R09: 0000000000000000 [ 285.999959][ T6913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.009668][ T6913] R13: 00007fe9a451c038 R14: 00007fe9a451bfa0 R15: 00007ffff2edea78 [ 286.019398][ T6913] [ 286.023055][ T6913] [ 286.025866][ T6913] Allocated by task 6612: [ 286.031079][ T6913] __kasan_kmalloc+0xb5/0xf0 [ 286.036625][ T6913] inetdev_init+0x7c/0x4d0 [ 286.041954][ T6913] inetdev_event+0x26f/0x1370 [ 286.047592][ T6913] raw_notifier_call_chain+0xcb/0x160 [ 286.054069][ T6913] register_netdevice+0x12a6/0x1710 [ 286.060388][ T6913] register_netdev+0x37/0x50 [ 286.065926][ T6913] vti6_init_net+0x210/0x2c0 [ 286.071468][ T6913] ops_init+0x357/0x600 [ 286.076484][ T6913] setup_net+0x39e/0xa10 [ 286.081598][ T6913] copy_net_ns+0x348/0x5b0 [ 286.087387][ T6913] create_new_namespaces+0x3d3/0x6f0 [ 286.093761][ T6913] unshare_nsproxy_namespaces+0x116/0x160 [ 286.100759][ T6913] ksys_unshare+0x4ca/0x8b0 [ 286.106197][ T6913] __x64_sys_unshare+0x34/0x40 [ 286.111942][ T6913] do_syscall_64+0x4c/0xa0 [ 286.117278][ T6913] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 286.124382][ T6913] [ 286.127194][ T6913] Freed by task 20: [ 286.131790][ T6913] kasan_set_track+0x4b/0x70 [ 286.137337][ T6913] kasan_set_free_info+0x1f/0x40 [ 286.143298][ T6913] ____kasan_slab_free+0xd5/0x110 [ 286.149364][ T6913] slab_free_freelist_hook+0xea/0x170 [ 286.155849][ T6913] kfree+0xef/0x2a0 [ 286.160455][ T6913] rcu_core+0x9d2/0x1670 [ 286.165579][ T6913] handle_softirqs+0x339/0x830 [ 286.171334][ T6913] run_ksoftirqd+0xa4/0x100 [ 286.176772][ T6913] smpboot_thread_fn+0x4f6/0x970 [ 286.182732][ T6913] kthread+0x436/0x520 [ 286.187780][ T6913] ret_from_fork+0x1f/0x30 [ 286.193109][ T6913] [ 286.195931][ T6913] Last potentially related work creation: [ 286.202808][ T6913] kasan_save_stack+0x35/0x60 [ 286.208461][ T6913] kasan_record_aux_stack+0xb8/0x100 [ 286.214942][ T6913] call_rcu+0x189/0x950 [ 286.219972][ T6913] inetdev_event+0x777/0x1370 [ 286.225604][ T6913] raw_notifier_call_chain+0xcb/0x160 [ 286.232063][ T6913] unregister_netdevice_many+0x1049/0x19f0 [ 286.239056][ T6913] vti6_exit_batch_net+0x3d2/0x420 [ 286.245311][ T6913] cleanup_net+0x791/0xba0 [ 286.250619][ T6913] process_one_work+0x85f/0x1010 [ 286.256549][ T6913] worker_thread+0xaa6/0x1290 [ 286.262170][ T6913] kthread+0x436/0x520 [ 286.267053][ T6913] ret_from_fork+0x1f/0x30 [ 286.272355][ T6913] [ 286.275156][ T6913] Second to last potentially related work creation: [ 286.283055][ T6913] kasan_save_stack+0x35/0x60 [ 286.288774][ T6913] kasan_record_aux_stack+0xb8/0x100 [ 286.295121][ T6913] insert_work+0x54/0x3d0 [ 286.300428][ T6913] __queue_work+0x9c5/0xd50 [ 286.305844][ T6913] call_timer_fn+0x17b/0x540 [ 286.311386][ T6913] __run_timers+0x569/0x800 [ 286.316784][ T6913] run_timer_softirq+0x63/0xf0 [ 286.322508][ T6913] handle_softirqs+0x339/0x830 [ 286.328454][ T6913] run_ksoftirqd+0xa4/0x100 [ 286.333853][ T6913] smpboot_thread_fn+0x4f6/0x970 [ 286.339774][ T6913] kthread+0x436/0x520 [ 286.344651][ T6913] ret_from_fork+0x1f/0x30 [ 286.349946][ T6913] [ 286.352862][ T6913] The buggy address belongs to the object at ffff88805fd4d400 [ 286.352862][ T6913] which belongs to the cache kmalloc-512 of size 512 [ 286.369743][ T6913] The buggy address is located 66 bytes inside of [ 286.369743][ T6913] 512-byte region [ffff88805fd4d400, ffff88805fd4d600) [ 286.385574][ T6913] The buggy address belongs to the page: [ 286.392440][ T6913] page:ffffea00017f5300 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5fd4c [ 286.404631][ T6913] head:ffffea00017f5300 order:2 compound_mapcount:0 compound_pincount:0 [ 286.414648][ T6913] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 286.424245][ T6913] raw: 00fff00000010200 0000000000000000 0000000100000001 ffff888016c41c80 [ 286.434541][ T6913] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 286.445073][ T6913] page dumped because: kasan: bad access detected [ 286.452782][ T6913] page_owner tracks the page as allocated [ 286.459650][ T6913] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7, ts 70895401105, free_ts 24098185489 [ 286.481523][ T6913] get_page_from_freelist+0x1bbd/0x1ca0 [ 286.488186][ T6913] __alloc_pages+0x1ee/0x480 [ 286.493693][ T6913] new_slab+0xc0/0x4b0 [ 286.498568][ T6913] ___slab_alloc+0x80a/0xdd0 [ 286.504071][ T6913] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 286.511051][ T6913] __alloc_skb+0x22c/0x750 [ 286.516359][ T6913] ndisc_alloc_skb+0xa6/0x420 [ 286.522020][ T6913] ndisc_send_rs+0x291/0x730 [ 286.527527][ T6913] addrconf_dad_completed+0x75d/0xc80 [ 286.533972][ T6913] addrconf_dad_work+0xc8c/0x1540 [ 286.539996][ T6913] process_one_work+0x85f/0x1010 [ 286.545917][ T6913] worker_thread+0xaa6/0x1290 [ 286.551517][ T6913] kthread+0x436/0x520 [ 286.556390][ T6913] ret_from_fork+0x1f/0x30 [ 286.561690][ T6913] page last free stack trace: [ 286.567291][ T6913] free_unref_page_prepare+0x637/0x6c0 [ 286.573836][ T6913] free_unref_page+0x8f/0x2a0 [ 286.579448][ T6913] free_contig_range+0x96/0xf0 [ 286.585158][ T6913] destroy_args+0xf0/0xa00 [ 286.590452][ T6913] debug_vm_pgtable+0x321/0x380 [ 286.596265][ T6913] do_one_initcall+0x272/0x730 [ 286.601975][ T6913] do_initcall_level+0x137/0x1f0 [ 286.607892][ T6913] do_initcalls+0x4b/0x90 [ 286.613083][ T6913] kernel_init_freeable+0x3e9/0x570 [ 286.619318][ T6913] kernel_init+0x19/0x1b0 [ 286.624532][ T6913] ret_from_fork+0x1f/0x30 [ 286.629827][ T6913] [ 286.632607][ T6913] Memory state around the buggy address: [ 286.639349][ T6913] ffff88805fd4d300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 286.649018][ T6913] ffff88805fd4d380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 286.658684][ T6913] >ffff88805fd4d400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 286.668343][ T6913] ^ [ 286.675714][ T6913] ffff88805fd4d480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 286.685381][ T6913] ffff88805fd4d500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 286.695048][ T6913] ================================================================== [ 286.704817][ T6913] Disabling lock debugging due to kernel taint [ 286.712391][ T6913] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 286.721038][ T6913] CPU: 0 PID: 6913 Comm: syz.0.649 Tainted: G B syzkaller #0 [ 286.731460][ T6913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 286.743522][ T6913] Call Trace: [ 286.747456][ T6913] [ 286.750962][ T6913] dump_stack_lvl+0x188/0x250 [ 286.756569][ T6913] ? show_regs_print_info+0x20/0x20 [ 286.762799][ T6913] ? load_image+0x400/0x400 [ 286.768201][ T6913] panic+0x2e5/0x810 [ 286.772876][ T6913] ? bpf_jit_dump+0xd0/0xd0 [ 286.778274][ T6913] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 286.785342][ T6913] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 286.792405][ T6913] ? _raw_spin_unlock+0x40/0x40 [ 286.798347][ T6913] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 286.805825][ T6913] check_panic_on_warn+0x80/0xa0 [ 286.811742][ T6913] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 286.819223][ T6913] end_report+0x6d/0xf0 [ 286.824206][ T6913] kasan_report+0x102/0x130 [ 286.829727][ T6913] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 286.837224][ T6913] ieee80211_monitor_select_queue+0x23a/0x240 [ 286.844499][ T6913] ? ieee80211_recalc_smps_work+0x20/0x20 [ 286.851366][ T6913] netdev_core_pick_tx+0x118/0x2e0 [ 286.857490][ T6913] __dev_queue_xmit+0x756/0x2f80 [ 286.863402][ T6913] ? __might_fault+0xb7/0x110 [ 286.869124][ T6913] ? dev_queue_xmit+0x20/0x20 [ 286.874727][ T6913] ? virtio_net_hdr_to_skb+0xae3/0x11f0 [ 286.881378][ T6913] ? packet_cached_dev_get+0x270/0x270 [ 286.887919][ T6913] ? skb_copy_datagram_from_iter+0x5e3/0x6a0 [ 286.895091][ T6913] packet_sendmsg+0x3dba/0x5060 [ 286.900912][ T6913] ? __might_sleep+0xf0/0xf0 [ 286.906443][ T6913] ? aa_sk_perm+0x7dc/0x910 [ 286.911839][ T6913] ? packet_getsockopt+0x9a0/0x9a0 [ 286.917997][ T6913] ? aa_sock_msg_perm+0x94/0x150 [ 286.923940][ T6913] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 286.930270][ T6913] ? security_socket_sendmsg+0x7c/0xa0 [ 286.936808][ T6913] ? packet_getsockopt+0x9a0/0x9a0 [ 286.942961][ T6913] ____sys_sendmsg+0x5b7/0x8f0 [ 286.948675][ T6913] ? __sys_sendmsg_sock+0x30/0x30 [ 286.954697][ T6913] ? import_iovec+0x6f/0xa0 [ 286.960093][ T6913] ___sys_sendmsg+0x236/0x2e0 [ 286.965697][ T6913] ? __sys_sendmsg+0x2a0/0x2a0 [ 286.971522][ T6913] __se_sys_sendmsg+0x1af/0x290 [ 286.977339][ T6913] ? __x64_sys_sendmsg+0x80/0x80 [ 286.983273][ T6913] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 286.990657][ T6913] ? lockdep_hardirqs_on+0x94/0x140 [ 286.996902][ T6913] do_syscall_64+0x4c/0xa0 [ 287.002297][ T6913] ? clear_bhb_loop+0x30/0x80 [ 287.007893][ T6913] ? clear_bhb_loop+0x30/0x80 [ 287.013491][ T6913] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 287.020575][ T6913] RIP: 0033:0x7fe9a42a2819 [ 287.025886][ T6913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.049411][ T6913] RSP: 002b:00007fe9a24fc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 287.059533][ T6913] RAX: ffffffffffffffda RBX: 00007fe9a451bfa0 RCX: 00007fe9a42a2819 [ 287.069088][ T6913] RDX: 008bb3a321ef809a RSI: 0000200000000280 RDI: 0000000000000005 [ 287.078645][ T6913] RBP: 00007fe9a4338c91 R08: 0000000000000000 R09: 0000000000000000 [ 287.088215][ T6913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 287.097774][ T6913] R13: 00007fe9a451c038 R14: 00007fe9a451bfa0 R15: 00007ffff2edea78 [ 287.107344][ T6913] [ 287.111213][ T6913] Kernel Offset: disabled [ 287.116418][ T6913] Rebooting in 86400 seconds..