last executing test programs: 1m29.566653476s ago: executing program 2 (id=223): set_mempolicy(0x3, 0x0, 0x8) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x6, 0x24, &(0x7f0000000300)=ANY=[], 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) 1m25.614705857s ago: executing program 2 (id=235): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)) 1m24.515198515s ago: executing program 2 (id=238): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000005a00)='./gadget\x00', 0x930aa59063c1a109) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x1) socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write(r1, &(0x7f0000005c40)="00000000090209000101008001120100020000004000800000000000000001", 0x1f) close_range(r0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="f3bbbbbb"], 0x0) r6 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000080)=0x3) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001200010200000000fedbdf250200000008000000060000000800e88004004380"], 0x24}}, 0x0) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xb, 0x10000}}) r8 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r8, 0x1, 0x26, &(0x7f0000000000), &(0x7f0000000180)=0x58) 1m19.830892093s ago: executing program 2 (id=253): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) socket(0x10, 0x80002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 1m18.810656269s ago: executing program 2 (id=256): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4002, 0x0) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000240)={0x400}) 1m14.422183131s ago: executing program 2 (id=264): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000005a00)='./gadget\x00', 0x930aa59063c1a109) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x1) socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write(r1, &(0x7f0000005c40)="00000000090209000101008001120100020000004000800000000000000001", 0x1f) close_range(r0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="f3bbbbbb"], 0x0) r6 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000080)=0x3) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001200010200000000fedbdf250200000008000000060000000800e88004004380"], 0x24}}, 0x0) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xb, 0x10000}}) r8 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r8, 0x1, 0x26, &(0x7f0000000000), &(0x7f0000000180)=0x58) 1m14.367786702s ago: executing program 32 (id=264): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000005a00)='./gadget\x00', 0x930aa59063c1a109) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x1) socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write(r1, &(0x7f0000005c40)="00000000090209000101008001120100020000004000800000000000000001", 0x1f) close_range(r0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="f3bbbbbb"], 0x0) r6 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000080)=0x3) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001200010200000000fedbdf250200000008000000060000000800e88004004380"], 0x24}}, 0x0) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xb, 0x10000}}) r8 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r8, 0x1, 0x26, &(0x7f0000000000), &(0x7f0000000180)=0x58) 12.398164765s ago: executing program 0 (id=426): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x5, 0xf1ba, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) close(0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x37b9, 0xc000, 0x3, 0xce}) dup(0xffffffffffffffff) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0) 12.359816206s ago: executing program 4 (id=427): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys/bus/pci/rescan\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x2) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x197, 0x0) prlimit64(0x0, 0xf, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x80, 0x4, 0x6}, 0x3c) chdir(&(0x7f0000000000)='./bus\x00') lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 12.142544761s ago: executing program 4 (id=429): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) sigaltstack(&(0x7f0000000000)={0x0, 0x80000001}, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000020, 0x0, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000001740), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, &(0x7f0000000000)={0x6, "31aeb6bf53768468d0eab6c0a4e98c88c0f69a3fe8d98bc6342595be7cce9e36b6e8662699ba3f3034110e1adfc9c447f94b68ae6d00dd5a45aacd75768b86a1", {0x8000, 0x87}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x40}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) sendmmsg$inet(r1, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) 8.850580025s ago: executing program 4 (id=430): bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000600), 0xfec8) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x82000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r3, &(0x7f0000000380)=ANY=[], 0x4000) close(r3) 6.612507562s ago: executing program 4 (id=438): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000280)={0x3, 0xfffa, 0x9, 0x8, 0xfd, 0xbc, 0x29}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = inotify_init1(0x0) r6 = inotify_add_watch(r5, &(0x7f0000000200)='.\x00', 0x400) r7 = dup(r5) inotify_rm_watch(r7, r6) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10) r9 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f0000000400)={0xf0f000, 0x1}) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) r10 = socket(0x10, 0x2, 0x0) write(r10, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r10, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x8, 0x3, &(0x7f0000000180)=ANY=[@ANYRES64=r1], &(0x7f0000000480)='syzkaller\x00'}, 0x94) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000100), &(0x7f0000000140)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180a0000000000000000000000000000850000006600000095"], &(0x7f0000000000)='syzkaller\x00', 0xc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 6.227969251s ago: executing program 0 (id=440): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86ae", 0xe0}], 0x1, 0x0, 0x0, 0x4048810}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000002c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa13fd664a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d658ef286087e0", 0x60}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb5584920271", 0x43}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd1", 0x62}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="080008000300000000001400000046ad00201d680000ac1e0001ffff02009404016011f3305280f125e6"], 0x2e) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6.227329011s ago: executing program 3 (id=441): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000001000)={0x1, 0x0, [{0x8be}]}) 5.974258068s ago: executing program 3 (id=443): socket$nl_xfrm(0x10, 0x3, 0x6) keyctl$update(0x2, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0xc600, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000240)) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0xa, 0x4, 0x8, 0xf}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000400)=0xe98, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x19, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x18, 0x3e, 0x229, 0x0, 0x25dfdbfc, {0xa}, [@typed={0x4}]}, 0x18}}, 0x8000) 5.625151137s ago: executing program 3 (id=446): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x294800e, 0x0, 0x5, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) epoll_create1(0x80000) close(0xffffffffffffffff) socket(0x28, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100000001000089}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000780)={{0x3}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd451, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000, 0x7785, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10004, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001]}) 5.5066516s ago: executing program 5 (id=447): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)=ANY=[@ANYBLOB="021808082600000029bd7000fcdbdf2505000900e80000006bb6e8df0ea6e18979d0686ba0b177bea6db71cdd56c28f69de61d62c4000000170018000a07b000e6788b3fc237009090a5275c99c36bd2ab8cba0a61c6f15d02479ad566b5d6a63e19dce7477f0fdfa04f3cae54b17779313e3c48b4c22872962682f09eabc1c90b5c57c6286a7762e2ef41b19ad9d60aa73cfd1f053aad92cc3393beba46ced49006e05a9f9e4b11fd0e9393576096e4e6f713bbef2951e845766796c3752fdb79255a1eddbf8b2e48a135a408ae98d893310fe051d518e89bdf82cc4e773180698da73748cf2a2a90c1f9674c2d6098080012"], 0x130}}, 0x4000010) 5.48592107s ago: executing program 5 (id=448): mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000001940)=ANY=[@ANYRESOCT, @ANYRES16, @ANYRES32], 0x48) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x2000, 0x103) r1 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x300, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 4.498210115s ago: executing program 1 (id=449): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @local}], 0x10) sendto$inet6(r0, &(0x7f0000000000)="ea", 0x1, 0x10, &(0x7f00000001c0)={0xa, 0x4e21, 0xe1, @ipv4={'\x00', '\xff\xff', @local}, 0x50be}, 0x1c) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={0x0, 0x7}, 0x8) 3.902665461s ago: executing program 5 (id=450): r0 = syz_open_dev$video4linux(&(0x7f0000000180), 0x4, 0x181001) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000002c0)={0x17, 0x0, {0x1, 0x1, 0x3001, 0x4, 0x5, 0x0, 0x0, 0x4}}) 3.843631952s ago: executing program 5 (id=451): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0x2, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x3, 0x2, 0x0, 0x93}, 0xe) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) 3.768590904s ago: executing program 1 (id=452): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x103, 0xb, 0x6, 0xff}, 0x3a, [0x9, 0xc95a, 0xf, 0x8, 0x80, 0x8, 0x3, 0x10007e, 0x20000006, 0x53, 0x6, 0x10000, 0x80005, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x6, 0x7, 0xfffffff4, 0x4, 0x7, 0x6, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x10001, 0x5, 0x6, 0x6, 0x5, 0x1, 0x5], [0x10000007, 0x9, 0x80000130, 0x8, 0x5, 0xfffffff3, 0x2, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x3, 0x0, 0x5, 0x42f, 0x0, 0x312, 0x78, 0x1, 0x0, 0x1, 0x7, 0x3, 0x6, 0x804400, 0x401, 0x6, 0x1, 0xfc, 0x5, 0x1000005, 0x5f31, 0xd, 0x40000101, 0x1, 0x4, 0xffff80f1, 0x8, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x400, 0x3, 0x3, 0xbc45, 0x48c93694, 0xa74, 0x9], [0x7, 0xa, 0x0, 0x5, 0x1, 0x100, 0x9, 0xb42a, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x5, 0x8, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x200000, 0x2, 0x6d03, 0x6, 0xd, 0x800003, 0x200, 0x400080, 0x3, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x6d, 0x7, 0x0, 0x2, 0x21c, 0x120000, 0x6, 0x0, 0x80aaed, 0x4, 0x24], [0x9, 0x40bb33, 0x7ffffffd, 0xb, 0x5, 0x93a, 0x9, 0x1000006, 0x100, 0xb9, 0xce4, 0x1ff, 0x2, 0x54, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x1000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0xfffffffd, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x100, 0x21000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x2c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008008}, 0x4800) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r3, &(0x7f0000000080)=""/1, 0x1) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r5 = fsmount(r4, 0x1, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) write$sysctl(r5, &(0x7f0000000040)='2\x00', 0x2) openat$sndseq(0xffffff9c, &(0x7f0000000140), 0x400) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) munlockall() r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, 0x0) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 3.721056885s ago: executing program 0 (id=453): socket$inet(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06000000040000004000000005"], 0x48) socket(0x10, 0x803, 0x0) syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x400, 0x2, 0x55}, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) socket$phonet_pipe(0x23, 0x5, 0x2) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r1}, 0x20) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r0], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff]}) 3.622711128s ago: executing program 5 (id=454): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x26, 0x0, 0x1, 0x10001}, 0x28) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x10, 0x0, @mcast2}}}, 0x88) syz_usb_connect(0x0, 0x1cb, 0x0, 0x0) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000180)={0x20, 0x2, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x3, 0x2, 0x0, 0x93}, 0xe) ioctl$int_in(r3, 0x5452, 0x0) sendto$inet6(r3, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r3, 0x1) 3.51117344s ago: executing program 0 (id=455): writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) open(0x0, 0x66842, 0xa0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') lseek(r5, 0x2000, 0x0) 3.477293791s ago: executing program 1 (id=456): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000005a00)='./gadget\x00', 0x930aa59063c1a109) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x1) socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write(r1, &(0x7f0000005c40)="00000000090209000101008001120100020000004000800000000000000001", 0x1f) close_range(r0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x200000, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c2, &(0x7f00000006c0)="$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") syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="f3bbbbbb"], 0x0) r6 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000080)=0x3) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001200010200000000fedbdf250200000008000000060000000800e88004004380"], 0x24}}, 0x0) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xb, 0x10000}}) r8 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r8, 0x1, 0x26, &(0x7f0000000000), &(0x7f0000000180)=0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000200000000ebff040000000000000020"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) 2.482697897s ago: executing program 3 (id=457): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f0000000000)={0x2, 0x8, 0x58a, 0x0, 0x6, 0x4, 0xb, "46c37d09dc2a06a78cd956e957e84c119e0f9c18", "3b6c33370e13c69e1da6985232c1d48e86ad7803"}) 2.380357529s ago: executing program 1 (id=458): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000000300)={0x0, 0x0, 0x6, 0x8000, 0x1}) 2.222666433s ago: executing program 1 (id=459): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000700)=""/183) sched_setscheduler(r0, 0x2, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r2, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000080)={0x0, 0x8a, 0x4, 0x7fffffff, 0xd, "00080000000000000000000cadf100004000"}) r5 = syz_open_pts(r4, 0x141401) fcntl$setstatus(r5, 0x4, 0x2000) write(r5, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x3) close_range(r3, 0xffffffffffffffff, 0x0) 1.56950293s ago: executing program 1 (id=460): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0xe000, 0x0, 0x77, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6}, {0xeeee0000, 0x9000, 0x3, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0x1000, 0x0, 0x0, 0x7, 0xc4, 0x40, 0x1, 0x45, 0x3, 0x4, 0xf9}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9}, {0x0, 0xffff1000, 0x3, 0x4, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0x4}, {0xffff1000, 0xffffffff, 0x0, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0x80a0000, 0xa, 0x4, 0x0, 0x0, 0x7, 0x20}, {0x0, 0x6000, 0xd, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0xf000, 0x3}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0xdddd1000, [0x80000001, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe]}) syz_usb_control_io(r0, &(0x7f0000000b40)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="2011b2"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.296184987s ago: executing program 0 (id=461): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x110, 0x30, 0x1, 0x0, 0x4, "", [@nested={0x100, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @typed={0x14, 0xc, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic="50bb2d6f67d29d6fab98adb107d0def49c88ea04abde1d5e8d3fb22a1b50f8778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddca0800000000000000b9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be"]}]}, 0x110}], 0x1}, 0x0) 1.1786441s ago: executing program 0 (id=462): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = inotify_init1(0x0) r3 = dup(r2) inotify_rm_watch(r3, 0x0) 441.435878ms ago: executing program 3 (id=463): r0 = socket$inet_smc(0x2b, 0x1, 0x0) io_setup(0x9, &(0x7f0000001000)=0x0) io_submit(r1, 0x1, &(0x7f0000002700)=[&(0x7f0000001340)={0x0, 0x0, 0x0, 0x3, 0x6, r0, &(0x7f0000002740), 0x0, 0x9, 0x0, 0x2}]) 344.501821ms ago: executing program 5 (id=464): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86ae", 0xe0}], 0x1, 0x0, 0x0, 0x4048810}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000002c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa13fd664a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d658ef286087e0", 0x60}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb5584920271", 0x43}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd1", 0x62}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="080008000300000000001400000046ad00201d680000ac1e0001ffff02009404016011f3305280f125e6"], 0x2e) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 214.307304ms ago: executing program 4 (id=465): socket$inet(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06000000040000004000000005"], 0x48) socket(0x10, 0x803, 0x0) syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x400, 0x2, 0x55}, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) socket$phonet_pipe(0x23, 0x5, 0x2) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r1}, 0x20) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r0], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff]}) 82.568588ms ago: executing program 3 (id=466): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000700)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000a40), 0x3d, 0x22, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = openat$mixer(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000001c0)) fcntl$getownex(r2, 0x10, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x4}, 0x20) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4044c86) connect$l2tp6(r3, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) 0s ago: executing program 4 (id=467): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/class/vtconsole/vtcon1/bind\x00', 0x1, 0x4) write(r0, &(0x7f0000000280)='1', 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.168' (ED25519) to the list of known hosts. [ 56.290246][ T4173] cgroup: Unknown subsys name 'net' [ 56.427387][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 57.711031][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 59.617702][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 59.657330][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 59.697317][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 59.787388][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.795277][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.803903][ T4185] device bridge_slave_0 entered promiscuous mode [ 59.815521][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.822698][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.830490][ T4185] device bridge_slave_1 entered promiscuous mode [ 59.848019][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.855220][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.863484][ T4190] device bridge_slave_0 entered promiscuous mode [ 59.870857][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 59.884849][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 59.900074][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.907304][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.916051][ T4190] device bridge_slave_1 entered promiscuous mode [ 59.938474][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.959690][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.966904][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.975142][ T4193] device bridge_slave_0 entered promiscuous mode [ 59.987522][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.995078][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.002950][ T4193] device bridge_slave_1 entered promiscuous mode [ 60.015343][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.045951][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.077221][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.093934][ T4185] team0: Port device team_slave_0 added [ 60.101567][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.123139][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.134015][ T4185] team0: Port device team_slave_1 added [ 60.160246][ T4190] team0: Port device team_slave_0 added [ 60.194008][ T4190] team0: Port device team_slave_1 added [ 60.212026][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.220388][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.228486][ T4197] device bridge_slave_0 entered promiscuous mode [ 60.239304][ T4193] team0: Port device team_slave_0 added [ 60.246210][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.253414][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.279538][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.298068][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.305086][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.331719][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.347871][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.355272][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.363505][ T4197] device bridge_slave_1 entered promiscuous mode [ 60.371353][ T4193] team0: Port device team_slave_1 added [ 60.384799][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.391761][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.418167][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.434192][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.441407][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.449321][ T4186] device bridge_slave_0 entered promiscuous mode [ 60.457995][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.465743][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.474211][ T4186] device bridge_slave_1 entered promiscuous mode [ 60.498797][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.508470][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.515661][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.541861][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.576566][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.596655][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.603908][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.630322][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.643090][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.652579][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.659525][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.685480][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.710869][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.738399][ T4185] device hsr_slave_0 entered promiscuous mode [ 60.745220][ T4185] device hsr_slave_1 entered promiscuous mode [ 60.772499][ T4197] team0: Port device team_slave_0 added [ 60.797254][ T4190] device hsr_slave_0 entered promiscuous mode [ 60.804276][ T4190] device hsr_slave_1 entered promiscuous mode [ 60.810718][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.818721][ T4190] Cannot create hsr debugfs directory [ 60.825474][ T4197] team0: Port device team_slave_1 added [ 60.838401][ T4186] team0: Port device team_slave_0 added [ 60.853492][ T4186] team0: Port device team_slave_1 added [ 60.883992][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.890976][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.917465][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.931766][ T4193] device hsr_slave_0 entered promiscuous mode [ 60.938664][ T4193] device hsr_slave_1 entered promiscuous mode [ 60.945267][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.952980][ T4193] Cannot create hsr debugfs directory [ 60.972118][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.979362][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.005487][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.024911][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.031874][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.059383][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.074905][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.081868][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.108174][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.172136][ T4186] device hsr_slave_0 entered promiscuous mode [ 61.179830][ T4186] device hsr_slave_1 entered promiscuous mode [ 61.187163][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.194867][ T4186] Cannot create hsr debugfs directory [ 61.218010][ T4197] device hsr_slave_0 entered promiscuous mode [ 61.225487][ T4197] device hsr_slave_1 entered promiscuous mode [ 61.232158][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.239892][ T4197] Cannot create hsr debugfs directory [ 61.355856][ T1108] Bluetooth: hci3: command 0x0409 tx timeout [ 61.362827][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 61.368857][ T1108] Bluetooth: hci1: command 0x0409 tx timeout [ 61.369633][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 61.382676][ T1108] Bluetooth: hci2: command 0x0409 tx timeout [ 61.530922][ T4185] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.542092][ T4185] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.555432][ T4185] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.571095][ T4185] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.595613][ T4190] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.608721][ T4190] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.619576][ T4190] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.641120][ T4190] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.714818][ T4193] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.733542][ T4193] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.763049][ T4193] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.792822][ T4193] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.803190][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.834398][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.848215][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.871258][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 61.880406][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 61.897590][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.909316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.918752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.930281][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.940521][ T4197] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.968582][ T4197] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.978981][ T4197] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.988912][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.998602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.008964][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.016289][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.025989][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.035800][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.044483][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.051537][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.059785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.090539][ T4197] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.100813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.109260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.120492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.129483][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.138712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.147901][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.157510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.166368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.177129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.185122][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.198788][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.214627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.223016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.231333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.240327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.250102][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.258915][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.266095][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.275684][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.286042][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.304097][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.312811][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.321679][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.328801][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.341265][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.383981][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.393766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.406601][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.416226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.428120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.437460][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.447109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.455922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.465240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.474488][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.495805][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.532033][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.548929][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.581370][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.600462][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.618829][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.652920][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.660826][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.669124][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.678235][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.687065][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.694381][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.703834][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.712908][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.721394][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.728622][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.736524][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.745454][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.753133][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.760972][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.772089][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.791953][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.838358][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.848887][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.860639][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.871009][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.881950][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.891374][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.900282][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.909432][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.918845][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.927696][ T4212] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.934825][ T4212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.942937][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.951537][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.960303][ T4212] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.967419][ T4212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.976681][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.985150][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.993724][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.003067][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.011199][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.031768][ T4185] device veth0_vlan entered promiscuous mode [ 63.054520][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.063942][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.075372][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.083796][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.093055][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.101592][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.110311][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.130685][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.139639][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.152813][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.160786][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.168881][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.177857][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.186992][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.204953][ T4185] device veth1_vlan entered promiscuous mode [ 63.221292][ T4186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.233085][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.249220][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.264491][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.279946][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.289704][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.303449][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.310959][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.320014][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.328798][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.340552][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.363092][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.370532][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.399423][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.432851][ T21] Bluetooth: hci2: command 0x041b tx timeout [ 63.440160][ T21] Bluetooth: hci1: command 0x041b tx timeout [ 63.443123][ T4233] Bluetooth: hci0: command 0x041b tx timeout [ 63.452382][ T21] Bluetooth: hci3: command 0x041b tx timeout [ 63.466479][ T4233] Bluetooth: hci4: command 0x041b tx timeout [ 63.484125][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.498653][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.507887][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.519217][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.528109][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.539535][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.546669][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.556904][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.577291][ T4185] device veth0_macvtap entered promiscuous mode [ 63.600920][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.611483][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.621492][ T4254] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.628592][ T4254] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.636834][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.645743][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.654723][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.662640][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.670395][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.680058][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.691190][ T4185] device veth1_macvtap entered promiscuous mode [ 63.708808][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.720251][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.729950][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.769874][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.781025][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.790051][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.799594][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.808989][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.819444][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.828623][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.843875][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.852793][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.861092][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.869696][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.881636][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.890043][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.897541][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.906053][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.915355][ T4190] device veth0_vlan entered promiscuous mode [ 63.926718][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.942168][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.982429][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.991307][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.009599][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.018778][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.036335][ T4190] device veth1_vlan entered promiscuous mode [ 64.055298][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.083226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.092124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.102839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.111698][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.122291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.131022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.140213][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.156606][ T4185] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.173916][ T4185] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.187596][ T4185] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.197487][ T4185] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.224014][ T4186] device veth0_vlan entered promiscuous mode [ 64.245993][ T4186] device veth1_vlan entered promiscuous mode [ 64.271924][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.280636][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.290447][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.299843][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.307582][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.316509][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.328056][ T4190] device veth0_macvtap entered promiscuous mode [ 64.345023][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.360791][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.374867][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.384821][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.395448][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.406148][ T4190] device veth1_macvtap entered promiscuous mode [ 64.428400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.437759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.446705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.479223][ T4186] device veth0_macvtap entered promiscuous mode [ 64.494415][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.504679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.513680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.521954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.531301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.544271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.552096][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.563907][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.575363][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.589930][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.598322][ T4186] device veth1_macvtap entered promiscuous mode [ 64.624858][ T4193] device veth0_vlan entered promiscuous mode [ 64.635531][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.644002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.653184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.665034][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.677847][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.688858][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.701739][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.710666][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.720289][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.729183][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.750561][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.759150][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.769010][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.778470][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.787221][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.795861][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.807343][ T4193] device veth1_vlan entered promiscuous mode [ 64.813101][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.833122][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.843901][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.855492][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.865754][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.877314][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.894635][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.902405][ T4197] device veth0_vlan entered promiscuous mode [ 64.924765][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.932929][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.941970][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.970762][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.982395][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.992922][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.003688][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.015276][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.035727][ T4254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.044931][ T4254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.062985][ T4197] device veth1_vlan entered promiscuous mode [ 65.070345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.081027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.090832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.103557][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.113152][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.121889][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.130982][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.158826][ T4193] device veth0_macvtap entered promiscuous mode [ 65.175182][ T4193] device veth1_macvtap entered promiscuous mode [ 65.196956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.215183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.230991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.239302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.295278][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.317542][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.331737][ T4267] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 65.334747][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.373917][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.384056][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.394856][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.405009][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.416053][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.428370][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.454127][ T4197] device veth0_macvtap entered promiscuous mode [ 65.480576][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.490545][ T4254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.497955][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.507679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.509024][ T4254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.516808][ T4269] Bluetooth: hci3: command 0x040f tx timeout [ 65.524012][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 65.529792][ T4269] Bluetooth: hci1: command 0x040f tx timeout [ 65.542011][ T4269] Bluetooth: hci2: command 0x040f tx timeout [ 65.548908][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 65.551427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.583531][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.596966][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.628095][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.631238][ T4271] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 65.638910][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.646360][ T4271] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 65.656910][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.684632][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.697480][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.112202][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 66.132218][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 66.182214][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 66.262209][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 66.302238][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 66.312229][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 66.322229][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 66.332230][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 66.342230][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 66.352232][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 66.999420][ T4197] device veth1_macvtap entered promiscuous mode [ 67.028253][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.043786][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.076240][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.096086][ T4193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.108083][ T4193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.119661][ T4193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.128924][ T4193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.162753][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.170593][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.189313][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.208238][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.218324][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.232015][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.242678][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.253936][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.264058][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.274954][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.286818][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.297380][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.307419][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.320860][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.352569][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.360741][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.379930][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.402238][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.412321][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.429449][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.441478][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.460267][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.493158][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.504002][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.515465][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.553059][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.561714][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.572734][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.592782][ T1345] Bluetooth: hci2: command 0x0419 tx timeout [ 67.602344][ T1345] Bluetooth: hci4: command 0x0419 tx timeout [ 67.607870][ T4276] Bluetooth: hci0: command 0x0419 tx timeout [ 67.632661][ T1345] Bluetooth: hci1: command 0x0419 tx timeout [ 67.640253][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.641874][ T4281] device syzkaller0 entered promiscuous mode [ 67.655932][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.664432][ T1345] Bluetooth: hci3: command 0x0419 tx timeout [ 67.669225][ T4197] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.680836][ T4197] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.691424][ T4197] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.701022][ T4197] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.734686][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.821583][ T4254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.836298][ T4254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.879719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.902599][ T13] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 69.050674][ T4293] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 69.094318][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.111786][ T4288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.131893][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.134275][ T4288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.165163][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.174963][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.194646][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.212232][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.228626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.262347][ T13] usb 3-1: Using ep0 maxpacket: 32 [ 69.402674][ T13] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.427190][ T13] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 69.510969][ T25] audit: type=1326 audit(1785533538.526:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4301 comm="syz.0.1" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb0f104019 code=0x0 [ 69.632546][ T13] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 69.652623][ T4238] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 69.662438][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.699073][ T13] usb 3-1: Product: syz [ 70.022770][ T4238] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 70.050861][ T4238] usb 5-1: config 0 interface 0 has no altsetting 0 [ 70.727245][ T13] usb 3-1: Manufacturer: syz [ 70.732654][ T13] usb 3-1: SerialNumber: syz [ 70.760920][ T13] usb 3-1: config 0 descriptor?? [ 70.802403][ T13] usb 3-1: can't set config #0, error -71 [ 70.819336][ T13] usb 3-1: USB disconnect, device number 2 [ 70.912653][ T4238] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 70.912705][ T4238] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 70.912726][ T4238] usb 5-1: Product: syz [ 70.912741][ T4238] usb 5-1: Manufacturer: syz [ 70.912760][ T4238] usb 5-1: SerialNumber: syz [ 70.914294][ T4238] usb 5-1: config 0 descriptor?? [ 70.968081][ T4238] usb 5-1: selecting invalid altsetting 0 [ 70.985094][ T4322] device syzkaller0 entered promiscuous mode [ 71.143762][ T4327] smpboot: CPU 1 is now offline [ 71.157252][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.157338][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.253351][ T4235] usb 5-1: USB disconnect, device number 2 [ 71.264233][ T4328] x86: Booting SMP configuration: [ 71.264260][ T4328] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 71.265861][ T0] kvm-clock: cpu 1, msr f103041, secondary cpu clock [ 71.333941][ T18] kvm-guest: stealtime: cpu 1, msr b9127440 [ 71.579008][ T4331] gadgetfs: bound to dummy_udc driver [ 71.590482][ T4331] loop1: detected capacity change from 0 to 256 [ 71.645693][ T4331] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 71.664494][ T4331] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 72.077719][ T7] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 72.201118][ T4329] gadgetfs: suspended from state 2 [ 75.092274][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 75.245589][ T4345] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 78.516748][ T4353] process 'syz.0.22' launched './file0' with NULL argv: empty string added [ 78.661662][ T4351] overlayfs: './file0' not a directory [ 78.957194][ T4369] autofs4:pid:4369:autofs_fill_super: called with bogus options [ 82.217429][ T26] cfg80211: failed to load regulatory.db [ 82.933330][ T4393] JFS: discard option not supported on device [ 83.020834][ T1092] block nbd0: Attempted send on invalid socket [ 83.028513][ T1092] blk_update_request: I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.062510][ T1092] block nbd0: Attempted send on invalid socket [ 83.070498][ T1092] blk_update_request: I/O error, dev nbd0, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.085610][ T4393] Mount JFS Failure: -5 [ 83.169854][ T4393] jfs_mount failed w/return code = -5 [ 83.869739][ T4383] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.878334][ T4383] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.020306][ T4400] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 84.032325][ T4288] Bluetooth: hci5: Frame reassembly failed (-84) [ 84.042749][ T4339] Bluetooth: hci5: Frame reassembly failed (-84) [ 84.073802][ T154] Bluetooth: hci5: Frame reassembly failed (-84) [ 84.080835][ T154] Bluetooth: hci5: Frame reassembly failed (-84) [ 85.615226][ T4406] afs: Unknown parameter '@' [ 86.082392][ T4317] Bluetooth: hci5: command 0x1003 tx timeout [ 87.784741][ T4383] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.820430][ T4383] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.108502][ T4383] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.119408][ T4383] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.130357][ T4383] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.139667][ T4383] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.152382][ T4317] Bluetooth: hci5: command 0x1001 tx timeout [ 88.158782][ T4198] Bluetooth: hci5: sending frame failed (-49) [ 88.303999][ T4404] lo speed is unknown, defaulting to 1000 [ 88.310054][ T4404] lo speed is unknown, defaulting to 1000 [ 88.317956][ T4404] lo speed is unknown, defaulting to 1000 [ 88.327492][ T4404] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 88.338048][ T4404] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 88.363730][ T4404] lo speed is unknown, defaulting to 1000 [ 88.370468][ T4404] lo speed is unknown, defaulting to 1000 [ 88.376815][ T4404] lo speed is unknown, defaulting to 1000 [ 88.383162][ T4404] lo speed is unknown, defaulting to 1000 [ 88.390079][ T4404] lo speed is unknown, defaulting to 1000 [ 88.450809][ T4411] loop4: detected capacity change from 0 to 512 [ 88.468620][ T4383] syz.1.35 (4383) used greatest stack depth: 20624 bytes left [ 88.503432][ T4411] ======================================================= [ 88.503432][ T4411] WARNING: The mand mount option has been deprecated and [ 88.503432][ T4411] and is ignored by this kernel. Remove the mand [ 88.503432][ T4411] option from the mount to silence this warning. [ 88.503432][ T4411] ======================================================= [ 88.744400][ T4411] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 89.446579][ T4411] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 89.544441][ T4411] EXT4-fs error (device loop4): ext4_init_orphan_info:621: comm syz.4.42: orphan file block 0: bad magic [ 89.672000][ T4411] EXT4-fs (loop4): mount failed [ 89.846116][ T4439] loop2: detected capacity change from 0 to 512 [ 89.990344][ T4439] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 90.053035][ T4439] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 90.061191][ T4439] System zones: 1-12 [ 90.077653][ T4439] EXT4-fs (loop2): orphan cleanup on readonly fs [ 90.112415][ T4439] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.51: attempt to clear invalid blocks 1024 len 1 [ 90.162316][ T1111] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 90.175134][ T4439] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.51: bg 0: block 361: padding at end of block bitmap is not set [ 90.232326][ T4232] Bluetooth: hci5: command 0x1009 tx timeout [ 90.241070][ T4439] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 90.282688][ T4439] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.51: invalid indirect mapped block 1811939328 (level 0) [ 90.332025][ T4439] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.51: invalid indirect mapped block 2 (level 2) [ 90.383768][ T4439] EXT4-fs (loop2): 1 truncate cleaned up [ 90.410718][ T4439] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,,errors=continue. Quota mode: none. [ 91.022995][ T1111] usb 1-1: unable to get BOS descriptor or descriptor too short [ 91.122758][ T1111] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.160210][ T1111] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 91.205712][ T1111] usb 1-1: config 1 interface 2 altsetting 1 has an invalid endpoint with address 0xD1, skipping [ 91.482495][ T1111] usb 1-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 91.500690][ T1111] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.581927][ T4234] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 91.600596][ T1111] usb 1-1: Product: syz [ 91.616063][ T1111] usb 1-1: Manufacturer: syz [ 91.685105][ T1111] usb 1-1: SerialNumber: syz [ 91.765857][ T4470] netlink: 32 bytes leftover after parsing attributes in process `syz.1.59'. [ 91.982331][ T4234] usb 3-1: unable to get BOS descriptor or descriptor too short [ 92.034431][ T1111] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 92.052340][ T4234] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 92.067380][ T4234] usb 3-1: can't read configurations, error -71 [ 92.113783][ T1111] snd-usb-audio: probe of 1-1:1.1 failed with error -22 [ 92.207121][ T1111] snd-usb-audio: probe of 1-1:1.2 failed with error -22 [ 92.244489][ T1111] usb 1-1: USB disconnect, device number 4 [ 92.525169][ T4481] udevd[4481]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 92.686186][ T4488] loop0: detected capacity change from 0 to 512 [ 92.834576][ T4488] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 92.884229][ T4488] EXT4-fs error (device loop0): ext4_init_orphan_info:621: comm syz.0.63: orphan file block 0: bad magic [ 92.940547][ T4488] EXT4-fs (loop0): mount failed [ 93.087738][ T4492] loop1: detected capacity change from 0 to 512 [ 93.208780][ T4492] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 93.298379][ T4492] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 93.322900][ T4492] System zones: 1-12 [ 93.353421][ T4492] EXT4-fs (loop1): orphan cleanup on readonly fs [ 93.402096][ T4492] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.64: attempt to clear invalid blocks 1024 len 1 [ 93.458739][ T4492] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.64: bg 0: block 361: padding at end of block bitmap is not set [ 93.623183][ T4492] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 93.713061][ T4492] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.64: invalid indirect mapped block 1811939328 (level 0) [ 93.784245][ T4492] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.64: invalid indirect mapped block 2 (level 2) [ 93.854288][ T4492] EXT4-fs (loop1): 1 truncate cleaned up [ 93.860034][ T4492] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,,errors=continue. Quota mode: none. [ 98.032012][ T4234] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 98.495718][ T4543] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 98.509115][ T155] Bluetooth: hci5: Frame reassembly failed (-84) [ 98.519145][ T155] Bluetooth: hci5: Frame reassembly failed (-84) [ 98.542540][ T4234] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.581693][ T4234] usb 2-1: config 0 interface 0 has no altsetting 0 [ 98.616667][ T4234] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 98.652666][ T4234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.705812][ T4234] usb 2-1: config 0 descriptor?? [ 98.966469][ T4549] using random self ethernet address [ 98.981888][ T4549] using random host ethernet address [ 100.180721][ T4551] ODEBUG: Out of memory. ODEBUG disabled [ 100.420560][ T4234] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x3 [ 100.452433][ T4234] koneplus 0003:1E7D:2E22.0001: ignoring exceeding usage max [ 100.474212][ T4234] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 100.500107][ T4234] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 100.517773][ T4234] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 100.539481][ T4234] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 100.552342][ T1108] Bluetooth: hci5: command 0x1003 tx timeout [ 100.558504][ T4198] Bluetooth: hci5: sending frame failed (-49) [ 100.559165][ T4234] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 100.586809][ T4234] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 100.601663][ T4234] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 100.617460][ T4234] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 100.635770][ T4234] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 100.650742][ T4234] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 100.666986][ T4234] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 100.702301][ T4234] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 100.726972][ T4234] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 100.744801][ T4234] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 100.752087][ T4234] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 100.873936][ T4234] koneplus 0003:1E7D:2E22.0001: hidraw0: USB HID v0.04 Device [HID 1e7d:2e22] on usb-dummy_hcd.1-1/input0 [ 100.903756][ T4557] netlink: 20 bytes leftover after parsing attributes in process `syz.0.82'. [ 100.926179][ T4234] usb 2-1: USB disconnect, device number 2 [ 101.316574][ T4558] fido_id[4558]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 102.479073][ T4562] netlink: 64 bytes leftover after parsing attributes in process `syz.0.82'. [ 102.632371][ T1108] Bluetooth: hci5: command 0x1001 tx timeout [ 102.639898][ T4198] Bluetooth: hci5: sending frame failed (-49) [ 103.298351][ T4563] loop2: detected capacity change from 0 to 512 [ 103.773443][ T4557] team0 (unregistering): Port device team_slave_0 removed [ 103.786475][ T4563] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 103.832736][ T4563] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 103.883818][ T4563] System zones: 1-12 [ 103.919629][ T4563] EXT4-fs (loop2): orphan cleanup on readonly fs [ 103.952575][ T4557] team0 (unregistering): Port device team_slave_1 removed [ 103.962920][ T4563] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.83: attempt to clear invalid blocks 1024 len 1 [ 104.041163][ T4563] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.83: bg 0: block 361: padding at end of block bitmap is not set [ 104.102875][ T4563] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 104.137977][ T4563] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.83: invalid indirect mapped block 1811939328 (level 0) [ 104.222961][ T4563] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.83: invalid indirect mapped block 2 (level 2) [ 104.304856][ T4563] EXT4-fs (loop2): 1 truncate cleaned up [ 104.428912][ T4563] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,,errors=continue. Quota mode: none. [ 104.480613][ T4581] gadgetfs: bound to dummy_udc driver [ 104.712238][ T1345] Bluetooth: hci5: command 0x1009 tx timeout [ 106.645901][ T4593] sched: RT throttling activated [ 109.825226][ T4616] loop0: detected capacity change from 0 to 512 [ 110.015687][ T4622] gadgetfs: bound to dummy_udc driver [ 110.102028][ T4616] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 110.157428][ T4616] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 110.253063][ T4616] System zones: 1-12 [ 110.265387][ T4616] EXT4-fs (loop0): orphan cleanup on readonly fs [ 110.309256][ T4616] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.103: attempt to clear invalid blocks 1024 len 1 [ 110.391032][ T4616] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.103: bg 0: block 361: padding at end of block bitmap is not set [ 110.454764][ T4616] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 110.493444][ T4616] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.103: invalid indirect mapped block 1811939328 (level 0) [ 110.556190][ T4616] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.103: invalid indirect mapped block 2 (level 2) [ 110.615179][ T4616] EXT4-fs (loop0): 1 truncate cleaned up [ 110.640558][ T4616] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,,errors=continue. Quota mode: none. [ 110.924008][ T4634] capability: warning: `syz.0.107' uses deprecated v2 capabilities in a way that may be insecure [ 111.006665][ T4634] netlink: 84 bytes leftover after parsing attributes in process `syz.0.107'. [ 111.265646][ T13] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 112.553136][ T4235] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 112.822560][ T13] usb 3-1: Using ep0 maxpacket: 16 [ 113.297065][ T13] usb 3-1: unable to get BOS descriptor or descriptor too short [ 113.349524][ T4675] gadgetfs: bound to dummy_udc driver [ 113.472505][ T13] usb 3-1: config 16 has an invalid interface number: 44 but max is 0 [ 113.485129][ T4682] loop4: detected capacity change from 0 to 512 [ 113.502613][ T13] usb 3-1: config 16 has no interface number 0 [ 113.508910][ T13] usb 3-1: config 16 interface 44 altsetting 10 bulk endpoint 0x1 has invalid maxpacket 32 [ 113.522404][ T4235] usb 4-1: unable to get BOS descriptor or descriptor too short [ 113.544401][ T13] usb 3-1: config 16 interface 44 has no altsetting 0 [ 113.598883][ T4682] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 113.612594][ T4235] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.625028][ T4682] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 113.634387][ T4235] usb 4-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.647179][ T4682] System zones: 1-12 [ 113.652794][ T4682] EXT4-fs (loop4): orphan cleanup on readonly fs [ 113.659432][ T4235] usb 4-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.670126][ T4235] usb 4-1: config 1 interface 0 has no altsetting 0 [ 113.677087][ T4682] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.117: attempt to clear invalid blocks 1024 len 1 [ 113.702588][ T4682] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.117: bg 0: block 361: padding at end of block bitmap is not set [ 113.720788][ T4682] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 113.730076][ T13] usb 3-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=1d.64 [ 113.740182][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.748408][ T4682] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.117: invalid indirect mapped block 1811939328 (level 0) [ 113.762826][ T13] usb 3-1: Product: syz [ 113.767013][ T13] usb 3-1: Manufacturer: syz [ 113.771619][ T13] usb 3-1: SerialNumber: syz [ 113.776940][ T4682] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.117: invalid indirect mapped block 2 (level 2) [ 113.797574][ T4682] EXT4-fs (loop4): 1 truncate cleaned up [ 113.805729][ T4682] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,,errors=continue. Quota mode: none. [ 113.872497][ T13] usb 3-1: can't set config #16, error -71 [ 113.889353][ T13] usb 3-1: USB disconnect, device number 5 [ 113.937411][ T4234] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 113.945695][ T4235] usb 4-1: string descriptor 0 read error: -22 [ 113.961142][ T4235] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.40 [ 114.094078][ T4235] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.433493][ T4235] usb 4-1: can't set config #1, error -71 [ 114.457084][ T4235] usb 4-1: USB disconnect, device number 2 [ 115.802560][ T4234] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 115.823828][ T4234] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 116.062988][ T4234] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 116.089625][ T4234] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.127175][ T4234] usb 1-1: config 0 descriptor?? [ 116.162589][ T4683] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 116.472285][ T13] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 116.489043][ T4721] gadgetfs: bound to dummy_udc driver [ 116.537478][ T4723] netlink: 40 bytes leftover after parsing attributes in process `syz.2.129'. [ 116.613814][ T4725] loop2: detected capacity change from 0 to 512 [ 116.644176][ T4234] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 116.658843][ T4234] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 116.696787][ T4725] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 116.822788][ T4725] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 116.846621][ T4725] System zones: 1-12 [ 116.862817][ T4234] microsoft 0003:045E:07DA.0002: No inputs registered, leaving [ 116.872567][ T13] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 116.885684][ T4725] EXT4-fs (loop2): orphan cleanup on readonly fs [ 116.898081][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.908975][ T4234] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 116.941971][ T4725] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.130: attempt to clear invalid blocks 1024 len 1 [ 116.963291][ T4735] capability: warning: `syz.4.134' uses 32-bit capabilities (legacy support in use) [ 116.977488][ T4234] microsoft 0003:045E:07DA.0002: no inputs found [ 116.989283][ T4234] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 117.177381][ T4725] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.130: bg 0: block 361: padding at end of block bitmap is not set [ 117.198900][ C0] vkms_vblank_simulate: vblank timer overrun [ 117.206575][ T4234] usb 1-1: USB disconnect, device number 5 [ 117.962116][ T4742] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 117.988968][ C0] vkms_vblank_simulate: vblank timer overrun [ 117.994960][ T4742] CIFS mount error: No usable UNC path provided in device string! [ 117.994960][ T4742] [ 118.007295][ T4742] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 118.526316][ T4739] loop4: detected capacity change from 0 to 1024 [ 118.542950][ T13] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 118.554194][ T4725] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 118.598463][ T4725] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.130: invalid indirect mapped block 1811939328 (level 0) [ 118.634583][ T4725] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.130: invalid indirect mapped block 2 (level 2) [ 118.658639][ T4725] EXT4-fs (loop2): 1 truncate cleaned up [ 118.665410][ T4725] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,,errors=continue. Quota mode: none. [ 118.723059][ T4739] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: none. [ 118.784919][ T4748] Bluetooth: (null): Non-link packet received in non-active state [ 119.019700][ T4755] netlink: 40 bytes leftover after parsing attributes in process `syz.0.140'. [ 119.568735][ T7] usb 4-1: USB disconnect, device number 3 [ 119.893329][ T4780] loop3: detected capacity change from 0 to 512 [ 119.965709][ T4780] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 120.003464][ T4780] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 120.048172][ T4780] System zones: 1-12 [ 120.064516][ T4780] EXT4-fs (loop3): orphan cleanup on readonly fs [ 120.087665][ T4780] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.148: attempt to clear invalid blocks 1024 len 1 [ 120.135821][ T4780] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.148: bg 0: block 361: padding at end of block bitmap is not set [ 120.181001][ T4780] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 120.210460][ T4780] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.148: invalid indirect mapped block 1811939328 (level 0) [ 120.255279][ T4780] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.148: invalid indirect mapped block 2 (level 2) [ 120.299959][ T4780] EXT4-fs (loop3): 1 truncate cleaned up [ 120.319429][ T4780] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,,errors=continue. Quota mode: none. [ 121.651614][ T4785] netlink: 12 bytes leftover after parsing attributes in process `syz.2.150'. [ 121.894387][ T4786] loop3: detected capacity change from 0 to 1024 [ 121.983241][ T4792] netlink: 32 bytes leftover after parsing attributes in process `syz.2.152'. [ 122.024015][ T4786] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: none. [ 122.245326][ T4798] Bluetooth: (null): Non-link packet received in non-active state [ 122.589464][ T4812] loop3: detected capacity change from 0 to 512 [ 122.705528][ T4812] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 122.751813][ T4812] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 122.923644][ T7] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 124.567851][ T4812] System zones: 1-12 [ 125.471184][ T4812] EXT4-fs (loop3): orphan cleanup on readonly fs [ 125.510840][ T4812] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.159: attempt to clear invalid blocks 1024 len 1 [ 125.597701][ T4812] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.159: bg 0: block 361: padding at end of block bitmap is not set [ 125.665720][ T4817] input: syz1 as /devices/virtual/input/input7 [ 125.672383][ T4817] input: failed to attach handler leds to device input7, error: -6 [ 125.757612][ T4827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.164'. [ 125.783761][ T4812] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 125.903588][ T7] usb 2-1: device not accepting address 3, error -71 [ 127.135621][ T4831] loop2: detected capacity change from 0 to 1024 [ 127.204263][ T4812] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.159: invalid indirect mapped block 1811939328 (level 0) [ 127.306492][ T4831] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: none. [ 127.335175][ T4839] futex_wake_op: syz.4.166 tries to shift op by -1; fix this program [ 127.361720][ T4812] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.159: invalid indirect mapped block 2 (level 2) [ 127.597695][ T4812] EXT4-fs (loop3): 1 truncate cleaned up [ 127.603553][ T4812] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,,errors=continue. Quota mode: none. [ 127.702642][ T4849] Bluetooth: (null): Non-link packet received in non-active state [ 127.876784][ T4405] Bluetooth: (null): Invalid header checksum [ 127.882937][ T4405] Bluetooth: (null): Invalid header checksum [ 131.650223][ T4871] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 131.657538][ T4871] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 132.080113][ T4872] device hsr0 entered promiscuous mode [ 132.141515][ T4872] netlink: 4 bytes leftover after parsing attributes in process `syz.4.177'. [ 133.582264][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.589113][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.633831][ T4881] loop2: detected capacity change from 0 to 1024 [ 133.804166][ T4881] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: none. [ 133.859812][ T4887] device syzkaller0 entered promiscuous mode [ 134.099970][ T4899] loop2: detected capacity change from 0 to 512 [ 134.248700][ T4899] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 134.319501][ T4899] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 134.605004][ T4899] System zones: 1-12 [ 134.615425][ T4899] EXT4-fs (loop2): orphan cleanup on readonly fs [ 134.690145][ T4899] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.183: attempt to clear invalid blocks 1024 len 1 [ 134.778117][ T4912] hpfs: Bad magic ... probably not HPFS [ 134.789163][ T4909] hpfs: Bad magic ... probably not HPFS [ 134.881094][ T4899] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.183: bg 0: block 361: padding at end of block bitmap is not set [ 135.047693][ T4899] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 135.211887][ T4899] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.183: invalid indirect mapped block 1811939328 (level 0) [ 135.314564][ T4899] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.183: invalid indirect mapped block 2 (level 2) [ 135.433463][ T4899] EXT4-fs (loop2): 1 truncate cleaned up [ 135.439163][ T4899] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,,errors=continue. Quota mode: none. [ 137.290019][ T4923] program syz.2.189 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 139.060496][ T4937] loop4: detected capacity change from 0 to 1024 [ 141.329657][ T4937] EXT4-fs warning (device loop4): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop4. [ 142.399685][ T4952] device syzkaller0 entered promiscuous mode [ 142.631711][ T4956] loop4: detected capacity change from 0 to 512 [ 142.829435][ T4956] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 142.891679][ T4956] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 143.007891][ T4956] System zones: 1-12 [ 143.012430][ T4956] EXT4-fs (loop4): orphan cleanup on readonly fs [ 144.524400][ T4956] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.199: attempt to clear invalid blocks 1024 len 1 [ 144.730759][ T4956] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.199: bg 0: block 361: padding at end of block bitmap is not set [ 144.913916][ T4956] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 145.177617][ T4956] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.199: invalid indirect mapped block 1811939328 (level 0) [ 146.339445][ T4977] loop0: detected capacity change from 0 to 1024 [ 148.238426][ T4956] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.199: invalid indirect mapped block 2 (level 2) [ 148.330731][ T4977] EXT4-fs warning (device loop0): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop0. [ 148.393195][ T4956] EXT4-fs (loop4): 1 truncate cleaned up [ 148.436743][ T4956] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,,errors=continue. Quota mode: none. [ 148.451112][ T4993] device syzkaller0 entered promiscuous mode [ 151.172549][ T5016] dlm: dev_write: no op 0 0 [ 151.974750][ T5031] loop4: detected capacity change from 0 to 512 [ 152.288429][ T5031] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 152.384418][ T5031] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 152.483281][ T5031] System zones: 1-12 [ 152.489813][ T5031] EXT4-fs (loop4): orphan cleanup on readonly fs [ 152.736129][ T5031] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.221: attempt to clear invalid blocks 1024 len 1 [ 152.894894][ T5031] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.221: bg 0: block 361: padding at end of block bitmap is not set [ 152.909328][ T7] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 153.066108][ T5031] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 153.076598][ T5043] device syzkaller0 entered promiscuous mode [ 153.169977][ T5031] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.221: invalid indirect mapped block 1811939328 (level 0) [ 153.307523][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 153.371024][ T7] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 153.381403][ T5031] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.221: invalid indirect mapped block 2 (level 2) [ 153.445464][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 153.513427][ T5031] EXT4-fs (loop4): 1 truncate cleaned up [ 153.519115][ T5031] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,,errors=continue. Quota mode: none. [ 153.543207][ T7] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 153.726416][ T5049] lo speed is unknown, defaulting to 1000 [ 153.796817][ T7] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 153.941734][ T5049] chnl_net:caif_netlink_parms(): no params data found [ 153.997741][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.054537][ T5060] futex_wake_op: syz.0.231 tries to shift op by -1; fix this program [ 154.159201][ T7] usb 3-1: Product: syz [ 154.170271][ T5049] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.199359][ T5049] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.221926][ T5049] device bridge_slave_0 entered promiscuous mode [ 154.254758][ T5049] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.274996][ T5049] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.286094][ T7] usb 3-1: Manufacturer: syz [ 154.293623][ T5049] device bridge_slave_1 entered promiscuous mode [ 154.305543][ T7] usb 3-1: SerialNumber: syz [ 154.364627][ T5049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.392973][ T7] usb 3-1: config 0 descriptor?? [ 154.451432][ T5049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.549675][ T5049] team0: Port device team_slave_0 added [ 154.568523][ T5049] team0: Port device team_slave_1 added [ 154.589982][ T7] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 154.657490][ T5049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.687545][ T5049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.786739][ T5049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.514950][ T1345] Bluetooth: hci0: command 0x0409 tx timeout [ 156.169334][ T7] scsi host1: usb-storage 3-1:0.0 [ 156.448568][ T7] usb 3-1: USB disconnect, device number 6 [ 156.475894][ T5049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.488510][ T5049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.521011][ T5049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.619814][ T5049] device hsr_slave_0 entered promiscuous mode [ 156.659740][ T5049] device hsr_slave_1 entered promiscuous mode [ 156.666645][ T5049] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 156.684799][ T5049] Cannot create hsr debugfs directory [ 157.748436][ T1345] Bluetooth: hci0: command 0x041b tx timeout [ 158.249394][ T5144] device syzkaller0 entered promiscuous mode [ 158.412169][ T5149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.241'. [ 158.678678][ T5149] Zero length message leads to an empty skb [ 158.737819][ T5049] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 158.768215][ T5049] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 158.798945][ T5049] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 158.830270][ T5049] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 158.969561][ T5049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.016398][ T4288] device hsr_slave_0 left promiscuous mode [ 159.157512][ T4288] device hsr_slave_1 left promiscuous mode [ 159.250336][ T4288] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.301753][ T4288] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.404833][ T4288] device bridge_slave_1 left promiscuous mode [ 159.427548][ T4288] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.474535][ T4288] device bridge_slave_0 left promiscuous mode [ 159.491430][ T4288] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.990778][ T4320] Bluetooth: hci0: command 0x040f tx timeout [ 160.154630][ T4288] team0 (unregistering): Port device team_slave_1 removed [ 160.196641][ T4288] team0 (unregistering): Port device team_slave_0 removed [ 160.280265][ T5202] futex_wake_op: syz.0.244 tries to shift op by -1; fix this program [ 160.302130][ T4288] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.628132][ T4288] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.817251][ T4288] bond0 (unregistering): Released all slaves [ 161.044259][ T5049] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.089726][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 161.099213][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 161.136448][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 161.164926][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 161.186114][ T4212] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.193216][ T4212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.233140][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 161.262713][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 161.330730][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 161.349750][ T4212] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.356861][ T4212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.402518][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 161.440325][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 161.476602][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 161.521992][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 161.613501][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 161.656258][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 161.700828][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 161.756114][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 161.788869][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 161.820943][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 161.842942][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 161.884724][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 162.238259][ T1108] Bluetooth: hci0: command 0x0419 tx timeout [ 162.386272][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 162.400793][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 162.430955][ T5049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.494943][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 162.522973][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 162.568465][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 162.592993][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 162.634169][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 162.698912][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 162.748867][ T5049] device veth0_vlan entered promiscuous mode [ 162.787935][ T5049] device veth1_vlan entered promiscuous mode [ 162.862882][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 162.879815][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 162.901115][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 162.929620][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 162.949578][ T5049] device veth0_macvtap entered promiscuous mode [ 162.970143][ T5049] device veth1_macvtap entered promiscuous mode [ 162.993592][ T5049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.017068][ T5049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.044768][ T5049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.059580][ T5049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.075065][ T5049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.092133][ T5278] futex_wake_op: syz.0.255 tries to shift op by -1; fix this program [ 163.106862][ T5049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.120647][ T5049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.138621][ T5049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.182543][ T5049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.196941][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 163.208100][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 163.218669][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 163.231159][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 163.271777][ T5049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.292214][ T5049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.305974][ T5049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.322911][ T5049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.334709][ T5049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.347111][ T5049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.358528][ T5049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.371957][ T5049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.394663][ T5049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.436206][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 163.455300][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 163.486500][ T5049] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.552303][ T5049] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.562158][ T5049] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.576666][ T5049] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.518578][ T5291] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.205772][ T5291] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.746391][ T5291] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.970451][ T4235] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 166.140007][ T5291] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.327454][ T4235] usb 4-1: Using ep0 maxpacket: 8 [ 166.676073][ T4235] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 166.735202][ T4235] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.815483][ T5291] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.901345][ T4235] usb 4-1: Product: syz [ 166.905549][ T4235] usb 4-1: Manufacturer: syz [ 166.910144][ T4235] usb 4-1: SerialNumber: syz [ 167.028107][ T5291] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.096945][ T4235] usb 4-1: config 0 descriptor?? [ 167.164718][ T5291] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.261146][ T4235] gspca_main: sq930x-2.14.0 probing 2770:930c [ 167.351923][ T5291] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.800334][ T4288] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.828854][ T5291] syz.0.258 (5291) used greatest stack depth: 20048 bytes left [ 167.991398][ T5312] lo speed is unknown, defaulting to 1000 [ 168.111228][ T4288] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.164429][ T4312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.178928][ T4235] gspca_sq930x: ucbus_write failed -71 [ 168.186183][ T4312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.216791][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 168.265760][ T4312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.293393][ T4312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.324391][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 168.381262][ T5312] chnl_net:caif_netlink_parms(): no params data found [ 168.467584][ T5312] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.483485][ T5312] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.494273][ T5312] device bridge_slave_0 entered promiscuous mode [ 168.502786][ T5312] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.514592][ T5312] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.544289][ T5312] device bridge_slave_1 entered promiscuous mode [ 168.654040][ T4288] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.825663][ T5312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.845613][ T5312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.892385][ T5312] team0: Port device team_slave_0 added [ 168.930126][ T5312] team0: Port device team_slave_1 added [ 169.261628][ T4235] gspca_sq930x: Unknown sensor [ 169.770594][ T1108] Bluetooth: hci2: command 0x0409 tx timeout [ 170.196086][ T4235] sq930x: probe of 4-1:0.0 failed with error -22 [ 170.985055][ T4235] usb 4-1: USB disconnect, device number 4 [ 171.039133][ T4288] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.023172][ T26] Bluetooth: hci2: command 0x041b tx timeout [ 172.732465][ T5346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.272'. [ 172.906988][ T5064] syz.0.231 (5064) used greatest stack depth: 19760 bytes left [ 172.949322][ T5312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.958619][ T5312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.991484][ T5312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.005422][ T5312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.017133][ T5312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.050448][ T5312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.175331][ T5312] device hsr_slave_0 entered promiscuous mode [ 173.322467][ T4968] syz.0.203 (4968) used greatest stack depth: 19312 bytes left [ 173.366583][ T5312] device hsr_slave_1 entered promiscuous mode [ 173.408165][ T5312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 173.431125][ T5312] Cannot create hsr debugfs directory [ 173.602353][ T5349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.273'. [ 174.275990][ T1108] Bluetooth: hci2: command 0x040f tx timeout [ 176.490382][ T5312] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 176.528994][ T1345] Bluetooth: hci2: command 0x0419 tx timeout [ 176.613014][ T5312] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 176.661792][ T4288] device hsr_slave_0 left promiscuous mode [ 176.674606][ T4288] device hsr_slave_1 left promiscuous mode [ 176.689789][ T4288] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.710579][ T4288] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.733406][ T4288] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.743503][ T4288] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.753511][ T4288] device bridge_slave_1 left promiscuous mode [ 176.762639][ T4288] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.774301][ T4288] device bridge_slave_0 left promiscuous mode [ 176.784334][ T4288] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.802535][ T4288] device veth1_macvtap left promiscuous mode [ 176.809004][ T4288] device veth0_macvtap left promiscuous mode [ 176.817164][ T4288] device veth1_vlan left promiscuous mode [ 176.826194][ T4288] device veth0_vlan left promiscuous mode [ 176.977756][ T5045] syz.0.219 (5045) used greatest stack depth: 18688 bytes left [ 180.467239][ T4288] team0 (unregistering): Port device team_slave_1 removed [ 180.489408][ T4288] team0 (unregistering): Port device team_slave_0 removed [ 180.503146][ T4288] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.524834][ T4288] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.587166][ T4288] bond0 (unregistering): Released all slaves [ 180.785659][ T5312] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 180.829543][ T1345] lo speed is unknown, defaulting to 1000 [ 180.855166][ T5312] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 181.187973][ T5312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.222462][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 181.270341][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 181.297416][ T5312] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.334245][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 181.364130][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 181.399137][ T4339] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.406308][ T4339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.471752][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 181.504254][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 181.526170][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 181.558049][ T4339] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.565155][ T4339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.594413][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 181.624276][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 181.648431][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 181.678687][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 181.773248][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 181.847488][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 181.902930][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 181.966988][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 182.005610][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 182.033903][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 182.059191][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 182.090381][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 183.238867][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 183.257054][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 183.343716][ T5312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.591065][ T7] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 183.949443][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 183.995993][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 184.057849][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 184.133573][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 184.143664][ T7] usb 5-1: unable to get BOS descriptor or descriptor too short [ 184.198623][ T5312] device veth0_vlan entered promiscuous mode [ 184.214087][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 184.232843][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 184.258605][ T5312] device veth1_vlan entered promiscuous mode [ 184.267285][ T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.343919][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 184.355007][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 184.414298][ T7] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 184.422138][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 184.466294][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 184.516845][ T5312] device veth0_macvtap entered promiscuous mode [ 184.529995][ T5474] JFS: discard option not supported on device [ 184.554714][ T5312] device veth1_macvtap entered promiscuous mode [ 184.623936][ T5312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.670005][ T5312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.682935][ T1092] block nbd3: Attempted send on invalid socket [ 184.689283][ T1092] blk_update_request: I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 184.703142][ T1092] block nbd3: Attempted send on invalid socket [ 184.709418][ T1092] blk_update_request: I/O error, dev nbd3, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 184.721876][ T5474] Mount JFS Failure: -5 [ 184.726147][ T5312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.767704][ T5312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.798483][ T7] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 184.816957][ T5312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.868007][ T5312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.872790][ T5474] jfs_mount failed w/return code = -5 [ 184.931288][ T5312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.979019][ T5312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.045113][ T5312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.092942][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 185.110311][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 185.122393][ T7] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 185.150495][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 185.203841][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 185.285142][ T5312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.318734][ T5312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.376291][ T5312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.416615][ T5312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.449398][ T5312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.471257][ T5312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.496676][ T5312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.518574][ T5312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.548889][ T5312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.585497][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 185.602718][ T7] usb 5-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 185.603421][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 185.671280][ T5312] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.699350][ T5312] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.732159][ T5312] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.754206][ T5312] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.919299][ T4339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.967974][ T4339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.983367][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.027128][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 186.039095][ T4336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.062893][ T4336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.103846][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 186.166801][ T7] usb 5-1: Product: syz [ 186.418218][ T7] usb 5-1: Manufacturer: syz [ 186.422982][ T7] usb 5-1: SerialNumber: syz [ 187.278060][ T7] usb 5-1: can't set config #1, error -71 [ 187.634599][ T7] usb 5-1: USB disconnect, device number 3 [ 188.920718][ T4232] Bluetooth: hci4: command 0x0406 tx timeout [ 188.933101][ T4232] Bluetooth: hci3: command 0x0406 tx timeout [ 188.939783][ T4232] Bluetooth: hci1: command 0x0406 tx timeout [ 192.374992][ T5601] JFS: discard option not supported on device [ 192.390583][ T1092] block nbd5: Attempted send on invalid socket [ 192.396807][ T1092] blk_update_request: I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.416987][ T1092] block nbd5: Attempted send on invalid socket [ 192.423266][ T1092] blk_update_request: I/O error, dev nbd5, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.443091][ T5601] Mount JFS Failure: -5 [ 192.447900][ T5601] jfs_mount failed w/return code = -5 [ 192.581611][ T5599] device syzkaller0 entered promiscuous mode [ 193.729677][ T13] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 193.903054][ T1345] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 194.173850][ T1345] usb 6-1: Using ep0 maxpacket: 16 [ 194.304021][ T1345] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 194.314639][ T1345] usb 6-1: config 0 has no interface number 0 [ 194.320805][ T1345] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 194.337453][ T1345] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 194.477334][ T1345] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 194.492054][ T1345] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 194.501684][ T1345] usb 6-1: Product: syz [ 194.505872][ T1345] usb 6-1: SerialNumber: syz [ 194.525737][ T1345] usb 6-1: config 0 descriptor?? [ 194.568301][ T1345] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 194.595707][ T1345] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input8 [ 194.802347][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 194.834686][ T13] usb 4-1: config 160 has an invalid interface number: 200 but max is 0 [ 194.888178][ T13] usb 4-1: config 160 has no interface number 0 [ 194.945091][ T13] usb 4-1: config 160 interface 200 has no altsetting 0 [ 195.033443][ T4232] usb 6-1: USB disconnect, device number 2 [ 195.062501][ T4232] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 195.235519][ T13] usb 4-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 195.248300][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.339339][ T13] usb 4-1: Product: syz [ 195.343526][ T13] usb 4-1: Manufacturer: syz [ 195.484094][ T13] usb 4-1: SerialNumber: syz [ 195.721941][ T5637] device syzkaller0 entered promiscuous mode [ 195.993717][ T13] usb 4-1: MIDIStreaming interface descriptor not found [ 196.252390][ T5653] syz.5.328 uses obsolete (PF_INET,SOCK_PACKET) [ 196.279134][ T5642] JFS: discard option not supported on device [ 196.301257][ T1092] block nbd0: Attempted send on invalid socket [ 196.308602][ T1092] blk_update_request: I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.319912][ T1092] block nbd0: Attempted send on invalid socket [ 196.326110][ T1092] blk_update_request: I/O error, dev nbd0, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.337503][ T5642] Mount JFS Failure: -5 [ 196.431480][ T13] usb 4-1: USB disconnect, device number 5 [ 196.456586][ T5642] jfs_mount failed w/return code = -5 [ 198.072994][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.079422][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.118408][ T5663] ip6t_srh: unknown srh match flags FF3F [ 200.309526][ T5706] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 200.316351][ T5706] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 200.370935][ T5706] vhci_hcd vhci_hcd.0: Device attached [ 200.640503][ T4238] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 200.673063][ T4232] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 200.943780][ T4232] usb 6-1: Using ep0 maxpacket: 16 [ 201.048756][ T5710] vhci_hcd: connection closed [ 201.052793][ T4316] vhci_hcd: stop threads [ 201.084037][ T4316] vhci_hcd: release socket [ 201.097287][ T4232] usb 6-1: unable to get BOS descriptor or descriptor too short [ 201.116171][ T4232] usb 6-1: no configurations [ 201.141328][ T4316] vhci_hcd: disconnect device [ 201.157572][ T4232] usb 6-1: can't read configurations, error -22 [ 201.203759][ T4238] usb 43-1: device descriptor read/64, error -71 [ 201.420395][ T4238] vhci_hcd: vhci_device speed not set [ 203.770663][ T5746] mmap: syz.0.345 (5746) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 204.873413][ T5785] JFS: discard option not supported on device [ 204.891310][ T1092] block nbd1: Attempted send on invalid socket [ 204.898155][ T1092] blk_update_request: I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 204.914681][ T1092] block nbd1: Attempted send on invalid socket [ 204.921239][ T1092] blk_update_request: I/O error, dev nbd1, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 204.936283][ T5785] Mount JFS Failure: -5 [ 204.993475][ T5785] jfs_mount failed w/return code = -5 [ 209.327934][ T4238] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 209.445883][ T5896] Console: switching to colour VGA+ 80x25 [ 209.717786][ T4238] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.734180][ T4238] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 209.912725][ T4238] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 209.921885][ T4238] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.935877][ T4238] usb 6-1: Product: syz [ 209.940071][ T4238] usb 6-1: Manufacturer: syz [ 209.944748][ T4238] usb 6-1: SerialNumber: syz [ 210.000960][ T4238] cdc_mbim 6-1:1.0: skipping garbage [ 210.221652][ T5892] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 210.936111][ T5892] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 210.952557][ T4238] cdc_mbim 6-1:1.0: setting tx_max = 16384 [ 210.975423][ T4238] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 211.013630][ T4238] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, c6:d0:0f:0d:32:48 [ 211.250848][ T4238] usb 6-1: USB disconnect, device number 5 [ 211.262058][ T4238] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 212.220379][ T4276] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 212.707392][ T4276] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.718163][ T5956] device syzkaller0 entered promiscuous mode [ 212.735771][ T4276] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 212.798802][ T4276] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 212.855759][ T4276] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 212.891730][ T4276] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.923240][ T4276] usb 1-1: config 0 descriptor?? [ 213.227141][ T4276] ath6kl: Failed to submit usb control message: -71 [ 214.613406][ T4276] ath6kl: unable to send the bmi data to the device: -71 [ 214.642557][ T4276] ath6kl: Unable to send get target info: -71 [ 214.723953][ T4276] ath6kl: Failed to init ath6kl core: -71 [ 214.768462][ T4276] ath6kl_usb: probe of 1-1:0.0 failed with error -71 [ 214.813145][ T4276] usb 1-1: USB disconnect, device number 6 [ 219.212638][ T6013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.396'. [ 219.563803][ T7] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 220.647102][ T7] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 220.768457][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.806184][ T7] usb 5-1: Product: syz [ 220.929119][ T7] usb 5-1: Manufacturer: syz [ 220.933739][ T7] usb 5-1: SerialNumber: syz [ 220.969431][ T7] usb 5-1: config 0 descriptor?? [ 221.001528][ T6038] gadgetfs: bound to dummy_udc driver [ 221.013815][ T6037] loop0: detected capacity change from 0 to 256 [ 221.049343][ T6037] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 221.064760][ T6037] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 221.266301][ T7] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 221.907544][ T6055] fuse: Bad value for 'fd' [ 222.986744][ T7] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 223.024603][ T7] usb 5-1: USB disconnect, device number 4 [ 223.094886][ T26] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 223.376644][ T26] usb 6-1: Using ep0 maxpacket: 16 [ 223.734789][ T26] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 223.754704][ T26] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.782266][ T26] usb 6-1: Product: syz [ 223.796893][ T26] usb 6-1: Manufacturer: syz [ 223.813563][ T26] usb 6-1: SerialNumber: syz [ 223.878399][ T26] usb 6-1: config 0 descriptor?? [ 223.949540][ T26] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 224.644477][ T26] ssu100: probe of 6-1:0.0 failed with error -71 [ 224.693665][ T26] usb 6-1: USB disconnect, device number 6 [ 225.698533][ T6076] netlink: 4 bytes leftover after parsing attributes in process `syz.5.413'. [ 225.713926][ T6076] netlink: 4 bytes leftover after parsing attributes in process `syz.5.413'. [ 225.738203][ T6076] Mass Storage Function, version: 2009/09/11 [ 225.759866][ T6076] LUN: removable file: (no medium) [ 225.788602][ T25] audit: type=1800 audit(1785533688.967:3): pid=6076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.413" name="UDC" dev="configfs" ino=40784 res=0 errno=0 [ 225.950558][ T6085] netlink: 8 bytes leftover after parsing attributes in process `syz.5.417'. [ 228.328800][ T6100] netlink: 12 bytes leftover after parsing attributes in process `syz.5.419'. [ 229.353028][ T6110] syz.4.423 (6110) used greatest stack depth: 18640 bytes left [ 229.875911][ T26] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 230.180047][ T26] usb 6-1: Using ep0 maxpacket: 8 [ 230.395825][ T26] usb 6-1: unable to get BOS descriptor or descriptor too short [ 230.522108][ T26] usb 6-1: config 8 interface 0 has no altsetting 0 [ 230.720863][ T26] usb 6-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=31.0a [ 230.740518][ T26] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.768447][ T26] usb 6-1: Product: syz [ 230.778738][ T26] usb 6-1: Manufacturer: syz [ 230.783400][ T26] usb 6-1: SerialNumber: syz [ 230.912789][ T26] usb 6-1: active config #8 != 1 ?? [ 231.989329][ T4212] wlan0: Trigger new scan to find an IBSS to join [ 232.976303][ T4320] usb 6-1: USB disconnect, device number 7 [ 233.077268][ T6133] netlink: 20 bytes leftover after parsing attributes in process `syz.5.431'. [ 233.095347][ T6133] netlink: 20 bytes leftover after parsing attributes in process `syz.5.431'. [ 235.808681][ T6176] netlink: 132 bytes leftover after parsing attributes in process `syz.5.442'. [ 236.321757][ T4314] wlan0: Trigger new scan to find an IBSS to join [ 238.946851][ T9] wlan0: Creating new IBSS network, BSSID 7e:19:26:58:1e:2e [ 239.243394][ T6215] gadgetfs: bound to dummy_udc driver [ 239.259456][ T6214] loop1: detected capacity change from 0 to 256 [ 239.290049][ T6214] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 239.305557][ T6214] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 241.958800][ T6244] ================================================================== [ 241.958887][ T6244] BUG: KASAN: slab-out-of-bounds in fbcon_prepare_logo+0x5c8/0xda0 [ 241.958928][ T6244] Read of size 256 at addr ffff88805333ff80 by task syz.4.467/6244 [ 241.958945][ T6244] [ 241.958952][ T6244] CPU: 0 PID: 6244 Comm: syz.4.467 Not tainted syzkaller #0 [ 241.958970][ T6244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 241.958988][ T6244] Call Trace: [ 241.958995][ T6244] [ 241.959004][ T6244] dump_stack_lvl+0x188/0x250 [ 241.959034][ T6244] ? show_regs_print_info+0x20/0x20 [ 241.959057][ T6244] ? _printk+0xda/0x130 [ 241.959087][ T6244] ? load_image+0x410/0x410 [ 241.959104][ T6244] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 241.959135][ T6244] print_address_description+0x60/0x2d0 [ 241.959158][ T6244] ? fbcon_prepare_logo+0x5c8/0xda0 [ 241.959179][ T6244] kasan_report+0xdf/0x130 [ 241.959204][ T6244] ? fbcon_prepare_logo+0x5c8/0xda0 [ 241.959230][ T6244] kasan_check_range+0x235/0x290 [ 241.959256][ T6244] ? fbcon_prepare_logo+0x5c8/0xda0 [ 241.959278][ T6244] memcpy+0x25/0x60 [ 241.959298][ T6244] fbcon_prepare_logo+0x5c8/0xda0 [ 241.959333][ T6244] fbcon_init+0x12f1/0x2310 [ 241.959371][ T6244] visual_init+0x2dd/0x650 [ 241.959399][ T6244] do_bind_con_driver+0x859/0x1030 [ 241.959443][ T6244] store_bind+0x794/0xa20 [ 241.959472][ T6244] ? sysfs_kf_read+0x350/0x350 [ 241.959491][ T6244] kernfs_fop_write_iter+0x3a8/0x500 [ 241.959521][ T6244] vfs_write+0x748/0xd70 [ 241.959552][ T6244] ? file_end_write+0x250/0x250 [ 241.959591][ T6244] ? mutex_lock_nested+0x17/0x20 [ 241.959614][ T6244] ? __fdget_pos+0x2bf/0x370 [ 241.959633][ T6244] ? ksys_write+0x70/0x260 [ 241.959658][ T6244] ksys_write+0x153/0x260 [ 241.959681][ T6244] ? __ia32_sys_read+0x80/0x80 [ 241.959707][ T6244] ? lockdep_hardirqs_on+0x94/0x140 [ 241.959735][ T6244] do_syscall_64+0x4c/0xa0 [ 241.959754][ T6244] ? clear_bhb_loop+0x30/0x80 [ 241.959773][ T6244] ? clear_bhb_loop+0x30/0x80 [ 241.959797][ T6244] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 241.959824][ T6244] RIP: 0033:0x7f1a10f70019 [ 241.959845][ T6244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.959868][ T6244] RSP: 002b:00007f1a0f1c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 241.959894][ T6244] RAX: ffffffffffffffda RBX: 00007f1a111f7fa0 RCX: 00007f1a10f70019 [ 241.959910][ T6244] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000003 [ 241.959923][ T6244] RBP: 00007f1a1100700c R08: 0000000000000000 R09: 0000000000000000 [ 241.959937][ T6244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.959950][ T6244] R13: 00007f1a111f8038 R14: 00007f1a111f7fa0 R15: 00007ffd7126d888 [ 241.959983][ T6244] [ 241.959990][ T6244] [ 241.959996][ T6244] Allocated by task 4410: [ 241.960006][ T6244] __kasan_slab_alloc+0x92/0xc0 [ 241.960028][ T6244] slab_post_alloc_hook+0x4c/0x380 [ 241.960046][ T6244] kmem_cache_alloc+0x15d/0x280 [ 241.960062][ T6244] __alloc_file+0x25/0x240 [ 241.960081][ T6244] alloc_empty_file+0x90/0x180 [ 241.960100][ T6244] path_openat+0x11c/0x2fb0 [ 241.960118][ T6244] do_filp_open+0x1df/0x400 [ 241.960137][ T6244] do_sys_openat2+0x14b/0x500 [ 241.960153][ T6244] __x64_sys_openat+0x135/0x160 [ 241.960170][ T6244] do_syscall_64+0x4c/0xa0 [ 241.960187][ T6244] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 241.960205][ T6244] [ 241.960210][ T6244] Freed by task 0: [ 241.960219][ T6244] kasan_set_track+0x4b/0x70 [ 241.960239][ T6244] kasan_set_free_info+0x1f/0x40 [ 241.960259][ T6244] ____kasan_slab_free+0xd5/0x110 [ 241.960279][ T6244] slab_free_freelist_hook+0xec/0x170 [ 241.960297][ T6244] kmem_cache_free+0x8f/0x210 [ 241.960314][ T6244] rcu_core+0x96e/0x1650 [ 241.960333][ T6244] handle_softirqs+0x336/0x830 [ 241.960351][ T6244] __irq_exit_rcu+0x13b/0x230 [ 241.960368][ T6244] irq_exit_rcu+0x5/0x20 [ 241.960385][ T6244] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 241.960404][ T6244] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 241.960425][ T6244] [ 241.960436][ T6244] Last potentially related work creation: [ 241.960443][ T6244] kasan_save_stack+0x35/0x60 [ 241.960463][ T6244] kasan_record_aux_stack+0xb8/0x100 [ 241.960484][ T6244] call_rcu+0x189/0x900 [ 241.960500][ T6244] task_work_run+0x125/0x1a0 [ 241.960521][ T6244] exit_to_user_mode_loop+0x10f/0x130 [ 241.960538][ T6244] exit_to_user_mode_prepare+0xee/0x180 [ 241.960560][ T6244] syscall_exit_to_user_mode+0x16/0x40 [ 241.960581][ T6244] do_syscall_64+0x58/0xa0 [ 241.960597][ T6244] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 241.960614][ T6244] [ 241.960619][ T6244] Second to last potentially related work creation: [ 241.960625][ T6244] kasan_save_stack+0x35/0x60 [ 241.960644][ T6244] kasan_record_aux_stack+0xb8/0x100 [ 241.960664][ T6244] task_work_add+0x2f/0x1d0 [ 241.960683][ T6244] fput_many+0xde/0x1a0 [ 241.960702][ T6244] filp_close+0x10e/0x150 [ 241.960717][ T6244] __x64_sys_close+0x34/0x70 [ 241.960734][ T6244] do_syscall_64+0x4c/0xa0 [ 241.960751][ T6244] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 241.960770][ T6244] [ 241.960774][ T6244] The buggy address belongs to the object at ffff88805333fb80 [ 241.960774][ T6244] which belongs to the cache filp of size 464 [ 241.960792][ T6244] The buggy address is located 560 bytes to the right of [ 241.960792][ T6244] 464-byte region [ffff88805333fb80, ffff88805333fd50) [ 241.960812][ T6244] The buggy address belongs to the page: [ 241.960829][ T6244] page:ffffea00014ccf80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5333e [ 241.960856][ T6244] head:ffffea00014ccf80 order:1 compound_mapcount:0 [ 241.960869][ T6244] memcg:ffff888078397e81 [ 241.960878][ T6244] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 241.960911][ T6244] raw: 00fff00000010200 ffffea00019a0e00 0000000700000007 ffff888016ddd8c0 [ 241.960929][ T6244] raw: 0000000000000000 00000000000c000c 00000001ffffffff ffff888078397e81 [ 241.960940][ T6244] page dumped because: kasan: bad access detected [ 241.960955][ T6244] page_owner tracks the page as allocated [ 241.960962][ T6244] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4410, ts 190272869949, free_ts 190056684003 [ 241.960994][ T6244] get_page_from_freelist+0x24f6/0x2670 [ 241.961017][ T6244] __alloc_pages+0x1ee/0x480 [ 241.961038][ T6244] new_slab+0xc0/0x4b0 [ 241.961054][ T6244] ___slab_alloc+0x807/0xdd0 [ 241.961071][ T6244] kmem_cache_alloc+0xf0/0x280 [ 241.961088][ T6244] __alloc_file+0x25/0x240 [ 241.961105][ T6244] alloc_empty_file+0x90/0x180 [ 241.961124][ T6244] path_openat+0x11c/0x2fb0 [ 241.961143][ T6244] do_filp_open+0x1df/0x400 [ 241.961160][ T6244] do_sys_openat2+0x14b/0x500 [ 241.961177][ T6244] __x64_sys_openat+0x135/0x160 [ 241.961193][ T6244] do_syscall_64+0x4c/0xa0 [ 241.961210][ T6244] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 241.961230][ T6244] page last free stack trace: [ 241.961236][ T6244] free_unref_page_prepare+0x637/0x6c0 [ 241.961257][ T6244] free_unref_page_list+0x119/0x830 [ 241.961277][ T6244] release_pages+0x185f/0x1bd0 [ 241.961293][ T6244] tlb_finish_mmu+0x1b4/0x370 [ 241.961315][ T6244] exit_mmap+0x3d0/0x640 [ 241.961334][ T6244] __mmput+0x115/0x390 [ 241.961351][ T6244] exit_mm+0x632/0x7b0 [ 241.961366][ T6244] do_exit+0x5b8/0x2110 [ 241.961381][ T6244] do_group_exit+0x12c/0x2f0 [ 241.961398][ T6244] get_signal+0x7eb/0x12e0 [ 241.961414][ T6244] arch_do_signal_or_restart+0xe6/0x12a0 [ 241.961445][ T6244] exit_to_user_mode_loop+0x9e/0x130 [ 241.961463][ T6244] exit_to_user_mode_prepare+0xee/0x180 [ 241.961479][ T6244] irqentry_exit_to_user_mode+0x5/0x30 [ 241.961500][ T6244] exc_page_fault+0x88/0x100 [ 241.961518][ T6244] asm_exc_page_fault+0x22/0x30 [ 241.961536][ T6244] [ 241.961542][ T6244] Memory state around the buggy address: [ 241.961551][ T6244] ffff88805333fe80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 241.961564][ T6244] ffff88805333ff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 241.961577][ T6244] >ffff88805333ff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 241.961588][ T6244] ^ [ 241.961598][ T6244] ffff888053340000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 241.961611][ T6244] ffff888053340080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 241.961621][ T6244] ================================================================== [ 241.961629][ T6244] Disabling lock debugging due to kernel taint [ 242.104855][ T7] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 242.161303][ T6244] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 242.161320][ T6244] CPU: 0 PID: 6244 Comm: syz.4.467 Tainted: G B syzkaller #0 [ 242.161343][ T6244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 242.161354][ T6244] Call Trace: [ 242.161361][ T6244] [ 242.161370][ T6244] dump_stack_lvl+0x188/0x250 [ 242.161399][ T6244] ? show_regs_print_info+0x20/0x20 [ 242.161431][ T6244] ? load_image+0x410/0x410 [ 242.161457][ T6244] panic+0x2f8/0x850 [ 242.161477][ T6244] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 242.161501][ T6244] ? bpf_jit_dump+0xd0/0xd0 [ 242.161523][ T6244] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 242.161544][ T6244] ? _raw_spin_unlock+0x40/0x40 [ 242.161562][ T6244] ? fbcon_prepare_logo+0x5c8/0xda0 [ 242.161581][ T6244] check_panic_on_warn+0x80/0xa0 [ 242.161604][ T6244] ? fbcon_prepare_logo+0x5c8/0xda0 [ 242.161621][ T6244] end_report+0x6d/0xf0 [ 242.161640][ T6244] kasan_report+0x102/0x130 [ 242.161663][ T6244] ? fbcon_prepare_logo+0x5c8/0xda0 [ 242.161683][ T6244] kasan_check_range+0x235/0x290 [ 242.161704][ T6244] ? fbcon_prepare_logo+0x5c8/0xda0 [ 242.161723][ T6244] memcpy+0x25/0x60 [ 242.161741][ T6244] fbcon_prepare_logo+0x5c8/0xda0 [ 242.161764][ T6244] fbcon_init+0x12f1/0x2310 [ 242.161788][ T6244] visual_init+0x2dd/0x650 [ 242.161810][ T6244] do_bind_con_driver+0x859/0x1030 [ 242.161836][ T6244] store_bind+0x794/0xa20 [ 242.161860][ T6244] ? sysfs_kf_read+0x350/0x350 [ 242.161877][ T6244] kernfs_fop_write_iter+0x3a8/0x500 [ 242.161902][ T6244] vfs_write+0x748/0xd70 [ 242.161922][ T6244] ? file_end_write+0x250/0x250 [ 242.161947][ T6244] ? mutex_lock_nested+0x17/0x20 [ 242.161968][ T6244] ? __fdget_pos+0x2bf/0x370 [ 242.161985][ T6244] ? ksys_write+0x70/0x260 [ 242.162013][ T6244] ksys_write+0x153/0x260 [ 242.162033][ T6244] ? __ia32_sys_read+0x80/0x80 [ 242.162053][ T6244] ? lockdep_hardirqs_on+0x94/0x140 [ 242.162075][ T6244] do_syscall_64+0x4c/0xa0 [ 242.162093][ T6244] ? clear_bhb_loop+0x30/0x80 [ 242.162112][ T6244] ? clear_bhb_loop+0x30/0x80 [ 242.162132][ T6244] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 242.162152][ T6244] RIP: 0033:0x7f1a10f70019 [ 242.162169][ T6244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.162187][ T6244] RSP: 002b:00007f1a0f1c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 242.162209][ T6244] RAX: ffffffffffffffda RBX: 00007f1a111f7fa0 RCX: 00007f1a10f70019 [ 242.162223][ T6244] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000003 [ 242.162236][ T6244] RBP: 00007f1a1100700c R08: 0000000000000000 R09: 0000000000000000 [ 242.162250][ T6244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.162262][ T6244] R13: 00007f1a111f8038 R14: 00007f1a111f7fa0 R15: 00007ffd7126d888 [ 242.162281][ T6244] [ 242.162512][ T6244] Kernel Offset: disabled [ 243.269891][ T6244] Rebooting in 86400 seconds..