last executing test programs: 10.34855729s ago: executing program 1 (id=593): openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x42c41, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x22) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = socket(0x28, 0x5, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060006"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x201) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = accept(r5, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[], 0x454}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r9) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 9.384553414s ago: executing program 1 (id=594): ppoll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x200}], 0x1, &(0x7f0000002240), &(0x7f00000022c0)={[0x93]}, 0x8) r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r0, 0x6f2d, 0x7) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000001280)=""/173, 0xad) ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x101000, 0x0) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) rt_tgsigqueueinfo(r1, r1, 0x2a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) 8.745772836s ago: executing program 3 (id=598): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000007fc0)={0x2020}, 0x2020) 8.498376694s ago: executing program 4 (id=599): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 8.384600118s ago: executing program 3 (id=600): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f00000000c0)='./file0\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x2b2, &(0x7f0000000440)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r2) socket$kcm(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="018d008d8dff"}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_INPUT(r3, &(0x7f0000010140)={0x8, {"7f9654d636ab18b7938a2804505c72e9994ca22404fc203334cc21ed3d6a776fd12d13f9602b2980f983c31a5d1e431db778099ce3af3fb20e1ee1f4fdb77cbb36154982a93c19825d6fd273ab1eb5bcd47adad50de8a6791486e482e29ecc94284921f33b941cfc1000c9781d9a828c5ec7a2c77b4e624a5aa0e9e39782bad733eda81ba47e1c6116e4170e6587dd6210a57abe91f1f80c4e31139d8b73fe35ac1f99ea82dd6aa9c9aa67de88ae3e141020e1a876bbc449d2d843aa7e6d90b948b7e28770e6ac71010c63f17e90fd20806a9f8d9f418ee3af74aac64b04a27c4f5e3626ca2da546c79d24acadd11e8d272a22fc54078fd5e64475993668980a9f95aff964dee674356af492b8377a759d8ccf1accb9a18ef7ad16f438dde69cd020d71552b0810688c882a26a22b23f4b35471b08b379193db1cd7934a4049ff1b00d9795cda6e73951641d5e2365c24facd5afd09ed1d096d758b4fef66fe1aa22395d67b7e1db623d4a60a7dc93893d6c4a91df79535a855868c5dc0033d5c428cd25b85c5deb6e81068553bc84cead4d1eba8aa57e2b354a6899e44acbd3834491219b3e231cd55d82f161774a689efe197cc193ac0124c67738a0a1d5f16a6768c2c2ba7386c8c95ca08c55117f344f5a2bca0d09e79ea3fc49491f2c7adc513c2779c1bf62b1a8643d23e9e8b2ae41d4a59f1b82b82e092b36eb851b8456da871b4057aec325a9d4cccafde61f2abc85e3cabeabb856f6ffbfe23d69219ec8fae6beb54abe7870dbae823d49806a967a1c7f252999804f106745f20490bb3347b59321dc69765567abcbd89de04d89622170005df5871ed0fb72345a11da074060d7d4ee2e437f71a45723fb6b02de56067e54f54c52d10f7874a13cbfb3bd65ce54f9d6719ea210e0cf79e4e2157736ec07ac5915682ab81bced665c1e72fab8d8cfe509de0f21fe374b957b379fd5918061e21c2e96985cc1354b2de859b0f1a463ab04683b1253eda671c2353b5c208aca652f5419ffc4949a7fa909b95653f42d97390c400b4a1c308b11e73e9a06d3b164d3361e75584d70e6bc61d570a7e0c7da330f643194c1893fcd6489fac605eead61b53dff18caf526ecccc9bbd9146bc3c3bb67677695e6fddaab081786e9084014e60f5c03ae5a9087726b05e17402cd2fbb80d773b8a41470b1f901a8c2b2d57450181f4fc5bc53c7cb3dc032b84567492607cb08832eca9f79da9210d197863e5db5a74a9823dc0cc8bd9f3a9b6ff5a7d15d4747a9b26e088f4fad96d81cd1214226b1c4585d418d593220fcbb9ad949266cc48163e3498b46ebcdf7b2b5ecfe67539a61ed9e39b02d5b35ac0d0e7fa830034ca2da8a7ddf04bcf2cee939994369feb77023e0e3de04b21db7a640a92c17748245005cd75a7deba4ff0e4c104a9db2d9a98ec8edb3562050a3bac5f322290e3d8b6fb21770ac436d4cb12b97fc8f76d7bb9eeed85663eb0626f1ad1719ee4b07f7de2c1d1a31c27c6879f4fa3dbdfb2bfc0898beabafbeca9f13050e6b2f6c432e423cd5cb6b8fa56fe32c3e50104e44462c0a5c69de6a7ac5ae3d9f07ceed64dbffa42e4663838bfcde92f0fcb895f3b93c59b0e48c09890dfc36436db56b708f6e7cbbd2a6305f573cee099dbcd263cb96d9fb69cbc3cb06d8f5e3789698a17e71d22b4665ff5447fcc17a31bb136c8bb4b984573bcaf1cb650198c1266e6ddfd42d44f9de02cb9d915c5334c550fac3fcee56790aeb09d81e7690a32d8b0cc477b23f15257820de227be1ffaec2f63f3266b8f5dd78947dcee355fe59bfb100e5244425532bb1d115acd211b8c16b0ec0aae00fca5d4511a05c3ff027a1cac56210a10d81c01b90e156cc7b33de0fac825dc516d398166096013e068db935483c93ba95da39b5ae4087d84479a4c4809f28f93790dc279637bd6f3dc441d315cf6bd7b0e3d92070a45baf4445ce063fd12690eb002f5ca068a256bc54100c99a02a346beca39072163c4b297d117f1ed9fef42e3dbc11d36a0a0db52e84461c6fbb4aad62cd6c8dc9ae6a3390a5e8773ac599e67436220c8d541a9039762bffaa7f490e31dddbc362fb4ff686cda905f3b02a1db76d4d570d970434921ca8a4765af6d5c8b881e1f4ffa7e2d9ef5f5511b94f88474674ec790bb5186c73446a227bf1ffd19b605733abd1bd41e421aeaf2ed4617088c7ceef85451225056435993e89e4bccd2c2e4b39af99feef11fea645eeb5cf9f77b1e19a72d3efb613100969b84302789714bca65bcbc96762b4012a5700c62aed706433b9f142b7302442b6a9958b0e28e8b1cfa9eeb4ac0d71f497b23babf9f0221dcb658d9f4db5d45bee30d2ad7c97d6a562e014a7701c15325ec5d42ab732b37714a77a95c03fb15bbfba6fade32bf50f985a1df362ca7216cc152907dd931acb58a63920f581e82b590c0d6a0033009f8e50c3263d3f58596b63d507cadbc809a6690561f74d0772bf92d04e06c47a350724b106f5e83f7e71c4b2a983bf5ad7d8684e7b8b5dc1273d0fa5879b8e61bde33d602bc8ff0913b6d32dcac366d568dc7cf82bbfc405cbe418a2644c26592b32ca1a632fc95123efb784cfb6953a94ebeccd24fba389a0e56b043df07d9a2dd38a1196e5e55576b25f85cb96f6560802a4a58b7a6857e8454faa2c880bf32d464562b2bdc5f0df22b663f2c01fc944f1cfd1908f617f8295a5440bb79ae178ea46a95baeea48322105146ac3ed2de7d3796ddddcc848a8ecf4a00dd055733b4f59211f5a40deea44e74b3bc57953b26ed61e6fd67889edfe8d0902385e37666aacec072735630ecc441c3cc6b09bb2f63aa4e332c6df728dc74078a83ce20454dfd616d116270666ddc09c5fea2e8442bc43455d0257fac92f3780061178f9420bf8e463f29896c12383dbb9a81bc5c87376e647c8a7986cb514fb9696d9c0a8d303c5c4b5b7c5f601c01fa19323e02f675c371bc44fbc1ac5704d41a89a2a4ccec6ac8440c532f07da25aa2dce6a5d2ebe694eb4017d178b221213bfe2a01d9cfe689bd190776bca6c032f446eb8862587a7826e35f3f691763212eee6af2e49bbeb0a27e07c5714b74e373798c7bebce265f7ebef3a1ea64078cf1e8a9d433af32c53090c972ffedbadafb50b9a6e540abd84f8e938583ea725954be3b236c5d8aca7d486d21902a2902f25a7c02dbe83c39bd0b81513f9ef198c49d560e930ae224ff47f92e4851e1f7ab5bb406abcf6596569261e6b0c67bb3b854e9c6de60bfb60fcf29241ff237151310ecd19f8b2cfe764c1df1a2de9d840eca47aa169ba9a415901204ec31ccdfd76e908029ae34fb12dc286758c64fd6d42bc82b14e07e421f4b42b180cd6ef40cac8062928b4a420a4577f24295f54de9048ac9d34307bf93e463cea4967cf4880166f68ed1eb965db2e4fb9f5f0b1c695d621e427ccb9a3188073ee6fde729c6698346efa1c0ba643c1efd20858965511da750060d551c44c435a5f1603fae7357e0bc78e92aad3d88790ec2aa1a42d6fe7e0ffc57f3599e406db63be7dd32692df32ce33dee0a2becdb02d6e435e09de3d356497543db23f53da25643f9c585e275297800d8beed47f0e622f86fc25d2e87036fdceebfe7257cb6de0c02412d1c0758acfcd0862e99ad17a118f46f635a87477e8b825423d94ada35bf0b5444aa7d3de4bb7eec7ae5129fcc2cba651cc972f5500fc5161149d29f452962afb102a01ae76825cb4477460be0b85d75058595c27e9b7fae3492ec3925c671bee5f4ca534d5a294f783d6cc073c992139b61d21fd98297b04c0578dafd5f7ebcaf8d4d9185aea3d76e813421f4573b38c25093c015a65e44fb297f0f6ac2d02c4237b37a3bfca2406c5c95ae5812816bacad59ba7c6f72d7c644ff25b592ed1e89b276e05866c01a4ced7fc6dd9f190c20d420d7c8a1fe908833a24c5e5bd7a95a2a6fbf147fc4b29a179718166dd0fbae2fc6b8c8aac6194fa6baf0d3edc36b2316c56c441ba53e3e7aaaf0a1405566ff584f73a637b74dde9bcb4d41da2be6c9df5d533fbac54f5fb52a8a793757cfe19aa90048c6d07e3474136ae1be2455b0d0d02eb4b5961ba883209355c0dd2af4aad98e7b971e358a7d9b55fe17cd6095f257355d9b99e5ea52848f17b35a80792d9ed0fef6fe3eef9a324902409969823be20bbe0e8dba9c747cd1a14d3642d877b86271f3f0c322a142c4ff635b37d542c3265b5fe8589a732bb1a55010b930dd0196cd43ac3634c01b4a44c517197d03a3d89c67f5c09aab409e84c0af466bfbd0c96d240101a2542c66b4b4b8ef65b41b0079995c52cc9720d2c1d7c128c6f17a65cc798c1986cfbd8888460c54438edc4f91f3580391c8b57d9aee209a59a116c1c44775437e9c30e6d87e82ce84e28532b19441e32ab9aea22177bac9daad25a6c88395e9348d6780de630cddb266c411011175bdb6255a36535180818447d43ffba3758d311539fe9f6811fa470bf3767b4c2d4cdf37854c7ee28730bb1d39d5c0dfffcdbf353cca3e13079f3ae66b839c7dd36914022a0e75bca5b622f521420b73249ef47f03c1fb03ecf7557882afcaa7cf454a68ad237d4ce860bd6b1531c1cafe2cfb76bc4188271ef6bdfb304ee0e6932463a1909f03d6e8a27b5f137d6b342841d613863dfdf37d5ec3a98d667810fb6f82d67620bdefed8b3ff98420a6c7ee577c3ba68b95a20403608a7ba6526ec9e8662c6e15ab09b1a9019d4958af04cb2e4890ee6b1077fcaa5cc0817f388461b230fe631e75f18ab392a5ca5de4a024ca16dd05fcfdf92114e43a5c4a169d462ff0dba57deeaf5eaafd892f8ccbd72ac56471162e1416bca39859b4184ba0d1b3f7ec05db4ef4cf0142867fa9be328a0be8aa74c716aad9411008607980861f4f72e9bfa60195e2f939d3f6a44a6cec07dd376d1bccaa126686f313d5f7918ecd1215026982c82ed1922ef70e36e8ed59b2d5ceab3b4aad7e53049062dd5ba0e87f7005c3f4d2b788245cdc2f35ef2572bea5ea92dfad406ade6d5ad18be8eeb4c652e5277b244645c68c0c0f5a68d42e00d59b75941917b2cdf31fdf809f2078ca97fd5beba65b34e0621138ea0e94feb87166b2dac2232ebca575e5c0a4d565d9992f733bbfbe68a63d99ee93398604065d5517c33ed0e067bdb643e73102f16137afd7d4bf21e8065ea028c392a6dcefbe642dc3fb03a239d9c8b17023eacc8e19fea11c34a10644af1b786fc0f4504038c2ee59c1b353f3d7b9313df025b4b5874ca63ec164a3fe35bf390d266f53dcda6a8e190e63a56ffdf4f7c5c02aa22d376db06d4d2b96be5b331f897d1ecfd25c13a1c194c265dd95a5724a6435bc8138224d9db28b689b9cea5132cd19601dbc4a43e70c71e27e8fd0689d09484974e8a4605f8553735fffaf5654a087e323ca14e02b681b9bbe592bd6b719ae2e86bdf918b27c79d52dd334d1aa7ebc1bff76e97572faad092010a1022f7d33089049107a89c364ae7dd022d119e8f6ab795fd71d76a90e8202339401ff9e9918ea8c8e12f7b0ba10d9ebde5d1bc5988f2d07b34579d8c282628204f2978d8b0cf95dc41f3775a4053f833267c64b42336d7c850f2918ef0dd6d62e43fcc173254eb34748efd4754609ce25afd648ee5a8fc5c64346603f8258592d67b9613e8f7ac0def0958f13436581d729e0b3e062738eb06b2116abe837529690a614fc5d3f53b4d4602e5706000", 0x1000}}, 0x1006) 8.155796756s ago: executing program 4 (id=601): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 7.835936877s ago: executing program 3 (id=602): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x208205, &(0x7f0000000280)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000000}}, {@errors_remount}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@lazytime}]}, 0x81, 0x63d, &(0x7f0000000600)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt(r3, 0x84, 0x82, &(0x7f00000004c0)="36b5a7067df289c36052d32e9266b51ad87c219955103b76ffdeac2fe3d71286eff7892630b006cf7a50adab8ef86d9a74d30d13a5a320fcad350416c64446d1", 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) 7.775155609s ago: executing program 4 (id=603): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @mcast2, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x35}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000200000008cd0cb10040000102030109026e00494181f03b080b0201010130000904000000010130000a2401000a00030000000904010000010230000904010101010230000905010910000005080a2525060000000601000904020000010230000904020101010230000905820908000102040a25250600000048"], 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="1400000016000b63d25a80648c2594f91124fc60", 0x14}], 0x1}, 0x0) syz_usb_control_io$uac3(r3, &(0x7f00000038c0)={0x14, 0x0, &(0x7f0000003880)=ANY=[@ANYBLOB]}, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r6, &(0x7f0000000200)={0x2, 0x4e22, @remote}, 0xa) setsockopt$IP_VS_SO_SET_STOPDAEMON(r6, 0x0, 0x48c, &(0x7f0000000180)={0x2, 'gre0\x00', 0x1}, 0x18) 7.024558005s ago: executing program 1 (id=605): socket$kcm(0x2d, 0xa, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x2, @private=0xa010101}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 6.397921628s ago: executing program 3 (id=608): syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) 6.344098319s ago: executing program 1 (id=609): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x8c, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0xe8c00) io_setup(0x3, &(0x7f0000000180)=0x0) socket(0x400000000010, 0x3, 0x0) io_submit(r2, 0x1, &(0x7f0000000800)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 5.496489778s ago: executing program 4 (id=611): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x10010, 0xffffffffffffffff, 0xffffc000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000000e0c0)=""/102400, 0x19000) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, 0x0, 0x0) 5.393404042s ago: executing program 0 (id=613): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 4.274527851s ago: executing program 2 (id=614): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f00000000c0)='./file0\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x2b2, &(0x7f0000000440)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r2) socket$kcm(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_INPUT(r3, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) 4.274076711s ago: executing program 1 (id=615): ppoll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x200}], 0x1, &(0x7f0000002240), &(0x7f00000022c0)={[0x93]}, 0x8) r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r0, 0x6f2d, 0x7) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000001280)=""/173, 0xad) ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x101000, 0x0) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) rt_tgsigqueueinfo(r1, r1, 0x2a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) 3.974788961s ago: executing program 0 (id=616): openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) openat(0xffffffffffffff9c, 0x0, 0x404400, 0x192) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x10c}}, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2200, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000640)=0x10) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r4, 0x0) 3.586425745s ago: executing program 4 (id=617): socket(0x840000000002, 0x3, 0xff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r3, r1, 0x25, 0x0, @val=@tcx={@void, @value=r2}}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00009e1000)='./file1\x00', 0x169841, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8, @ANYBLOB='\a'], 0x0) 2.814410492s ago: executing program 3 (id=618): openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x42c41, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x22) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = socket(0x28, 0x5, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060006"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x201) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = accept(r5, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[], 0x454}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r9) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 2.792934233s ago: executing program 2 (id=619): socket$kcm(0x2d, 0xa, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x2, @private=0xa010101}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 2.721846365s ago: executing program 0 (id=620): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xf]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2000, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) 2.642193548s ago: executing program 3 (id=621): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @mcast2, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x35}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000200000008cd0cb10040000102030109026e00494181f03b080b0201010130000904000000010130000a2401000a00030000000904010000010230000904010101010230000905010910000005080a2525060000000601000904020000010230000904020101010230000905820908000102040a25250600000048"], 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="1400000016000b63d25a80648c2594f91124fc60", 0x14}], 0x1}, 0x0) syz_usb_control_io$uac3(r3, &(0x7f00000038c0)={0x14, 0x0, &(0x7f0000003880)=ANY=[@ANYBLOB]}, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r6, &(0x7f0000000200)={0x2, 0x4e22, @remote}, 0xa) setsockopt$IP_VS_SO_SET_STOPDAEMON(r6, 0x0, 0x48c, &(0x7f0000000180)={0x2, 'gre0\x00', 0x1}, 0x18) 2.526865402s ago: executing program 0 (id=622): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x24000058) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x3) 2.479882434s ago: executing program 2 (id=623): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000ec0), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000007fc0)={0x2020}, 0x2020) 2.260331721s ago: executing program 2 (id=624): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000480), 0x0, 0x40000, &(0x7f0000000240)={0x11, 0xf8, r2, 0x1, 0x5, 0x6, @random="24f51e8e0a5a"}, 0x14) 1.477304348s ago: executing program 2 (id=625): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82002) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000180)=0xf0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000080)=0xd0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x0, 0x0}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mq_notify(0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, 0x0, 0x2d) 1.43440763s ago: executing program 0 (id=626): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2d}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$eJzs3c9rG1ceAPDvyD/jZNdeWNjNngwLu4YQeZ31JruwsFn2sBQaCLTnJEZWTGrZCpYcYmNIQin00kNLD4XmknPTprdc++PaXvo39FAS0tYJTemhuIw0SmRbcpzEklL8+cBY782M9N533sybZ82gCWDfGk//5CIORwykydFsfhLZjOiPOFlf7+H6WiGdktjYeOW7pLbOg/W1QjS9J3Uwy/wxIj57I+JIbnu5lZXV+ZlSqbiU5SerCxcnKyurRy8szMwV54qLx6emp4+d+MeJ43sX6w9frh66+/b///rRyZ9e/8Ottz5P4mQcypY1x7FXxmM82yYD6Sbc5H97XViPJb2uAM8kPTT76kd5HI7R6NuhJf/T1ZoBAJ1yJSI2AIB9JnH+B4B9pvE9wIP1tUJjivr1nKs9/WKiS+79NyKG6/E3rm/Wl/TXr9l9NVy7DjryIKldI2lIImJsD8ofj4jrt8/cTKfo0HVIgFauXouIc2PjW/v/tIfbes/C0/rbLtYZ35LX/0H3fJKOf/65ffwXkcuO/+Ha363jn6EWx+6zePLxn7uzKTuwB4U2Scd//266t+1hU/yZsb4s95vamG8gOX+hVEz7tt9GxEQMDKX5qR3KmLj/8/12y5rHf9+/89oHafnp6+M1cnf6hza/Z3amOvM8MTe7dy3iT/2t4k8etX/SZvx7epdlvPSvN99vtyyNP423MW2Pv7M2bkT8pWX7P74PKtnx/sTJ2u4w2dgpWvj46/dG2pXf3P7Xb6clrRUa/wt0Q9r+IzvHP5Y0369Zefoyvrgx+mm7ZZvjP3MzLX9z/K33/8Hk1Vp6MJt3eaZaXZqKGExe3j7/2OP3NvKN9dP4J/7c+vjfaf9Pu6FzWXrjCTc/9t/99sNnj7+z0vhn0/ZPsiCe2P5Pn7j1cL6vXfm7a//pWmoim7O9/+vf9rm7reBzbTwAAAAAAAAAAAAAAAAAAAAAAAAA2KVcRByKJJd/lM7l8vn6M7x/HyO5UrlSPXK+vLw4G7VnZY/FQK7xU5ejTb+HOpX9Hn4jf2xL/u8R8buIeHfoQC2fL5RLs70OHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyB9s8/z/1zVCvawcAdMxwrysAAHSd8z8A7D9tzv+DrWcf6GhdAIDuqJ3/k/5eVwMA6CLf/wPA/uP8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQIedPnUqnTZ+XF8rpPnZSyvL8+VLR2eLlfn8wnIhXygvXczPlctzpWK+UF5o+0FX6y+lcvnidCwuX56sFivVycrK6tmF8vJi9eyFhZm54tniQNciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDdq6yszs+USsUliZ0TV16IalzLmq3XW0PihUgMRUSnimjuJQ70pnMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+BX4JQAA//9qsh/Y") bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)={@ifindex, 0xffffffffffffffff, 0x6, 0x4}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x55f, &(0x7f0000000c80)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x390, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x2c0, 0x2e8, 0x2e8, 0x2c0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0xfd}, [0xffffff00, 0xff000000, 0x0, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0xc, 0x7, 0x7, 0x38}, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x100, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee0500000000000000ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06d7d4e252c3394fed47bf78c70f607b0178fa5ea3350ebc989f1f34a214e67442ce98bbaa8e0f7323a4ca0a7be6c60c527bac2b500", 0x1, 0x3}}, @common=@inet=@socket1={{0x28}, 0x1}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @loopback, [], [], 'macvtap0\x00', 'syzkaller1\x00', {}, {0xff}, 0x38, 0xd5, 0x2, 0x41}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) 317.837659ms ago: executing program 0 (id=627): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x100000000001, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000100)=0xc) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d010203010902120001000000000904"], 0x0) 276.23886ms ago: executing program 1 (id=628): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x8c, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0xe8c00) io_setup(0x3, &(0x7f0000000180)=0x0) socket(0x400000000010, 0x3, 0x0) io_submit(r2, 0x1, &(0x7f0000000800)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 264.32006ms ago: executing program 4 (id=629): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000004480)="$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") syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x46b1, 0x5) syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES16=0x0], 0x1, 0x1a1, &(0x7f0000000440)="$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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x118) 0s ago: executing program 2 (id=630): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) kernel console output (not intermixed with test programs): arms(): no params data found [ 68.208899][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.216289][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.224584][ T4276] device bridge_slave_0 entered promiscuous mode [ 68.238745][ T4280] chnl_net:caif_netlink_parms(): no params data found [ 68.252840][ T4266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.268136][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.277187][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.287219][ T4276] device bridge_slave_1 entered promiscuous mode [ 68.309477][ T4266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.370239][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.413979][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.426318][ T4266] team0: Port device team_slave_0 added [ 68.445530][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.456112][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.464574][ T4272] device bridge_slave_0 entered promiscuous mode [ 68.480532][ T4266] team0: Port device team_slave_1 added [ 68.493609][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.500777][ T4265] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.508738][ T4265] device bridge_slave_0 entered promiscuous mode [ 68.516808][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.524604][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.533127][ T4272] device bridge_slave_1 entered promiscuous mode [ 68.572697][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.580092][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.587953][ T4265] device bridge_slave_1 entered promiscuous mode [ 68.606415][ T4276] team0: Port device team_slave_0 added [ 68.637908][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.649875][ T4276] team0: Port device team_slave_1 added [ 68.656477][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.663784][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.693512][ T4266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.705646][ T4280] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.713239][ T4280] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.721286][ T4280] device bridge_slave_0 entered promiscuous mode [ 68.736144][ T4280] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.743679][ T4280] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.752273][ T4280] device bridge_slave_1 entered promiscuous mode [ 68.761293][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.784063][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.792623][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.822447][ T4266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.835752][ T4265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.880912][ T4265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.899931][ T4272] team0: Port device team_slave_0 added [ 68.908364][ T4280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.918845][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.926496][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.957890][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.970773][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.977799][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.004012][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.024228][ T4272] team0: Port device team_slave_1 added [ 69.038219][ T4280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.090660][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.097742][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.123992][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.137705][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.144745][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.171601][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.185938][ T4265] team0: Port device team_slave_0 added [ 69.194653][ T4280] team0: Port device team_slave_0 added [ 69.233429][ T4265] team0: Port device team_slave_1 added [ 69.242875][ T4266] device hsr_slave_0 entered promiscuous mode [ 69.251128][ T4266] device hsr_slave_1 entered promiscuous mode [ 69.259073][ T4280] team0: Port device team_slave_1 added [ 69.267666][ T4276] device hsr_slave_0 entered promiscuous mode [ 69.274874][ T4276] device hsr_slave_1 entered promiscuous mode [ 69.281752][ T4276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.289723][ T4276] Cannot create hsr debugfs directory [ 69.313615][ T4272] device hsr_slave_0 entered promiscuous mode [ 69.321258][ T4272] device hsr_slave_1 entered promiscuous mode [ 69.328230][ T4272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.336163][ T4272] Cannot create hsr debugfs directory [ 69.382254][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.389419][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.416087][ T4280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.433058][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.440226][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.466645][ T4265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.486055][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.493861][ T4279] Bluetooth: hci2: command 0x0409 tx timeout [ 69.494008][ T4279] Bluetooth: hci0: command 0x0409 tx timeout [ 69.500063][ T4271] Bluetooth: hci1: command 0x0409 tx timeout [ 69.512976][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.539339][ T4265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.554711][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.561802][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.588493][ T4271] Bluetooth: hci4: command 0x0409 tx timeout [ 69.588524][ T4280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.594973][ T4267] Bluetooth: hci3: command 0x0409 tx timeout [ 69.687205][ T4280] device hsr_slave_0 entered promiscuous mode [ 69.694330][ T4280] device hsr_slave_1 entered promiscuous mode [ 69.701324][ T4280] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.708948][ T4280] Cannot create hsr debugfs directory [ 69.721772][ T4265] device hsr_slave_0 entered promiscuous mode [ 69.728696][ T4265] device hsr_slave_1 entered promiscuous mode [ 69.735945][ T4265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.744615][ T4265] Cannot create hsr debugfs directory [ 70.066746][ T4276] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.085409][ T4276] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.098686][ T4276] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.115436][ T4276] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.142393][ T4266] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.170677][ T4266] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.191534][ T4266] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.205713][ T4266] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.271243][ T4272] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.301526][ T4272] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.312206][ T4272] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.348049][ T4272] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.395907][ T4280] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.406877][ T4280] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.433492][ T4280] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.444254][ T4280] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.472217][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.495842][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.533277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.546614][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.568971][ T4265] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.582185][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.605689][ T4265] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.617779][ T4265] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.628649][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.636857][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.645018][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.654293][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.664634][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.672247][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.684229][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.701089][ T4265] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.726273][ T4266] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.738086][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.746968][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.757819][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.765060][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.773850][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.812583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.825247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.836717][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.847410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.856403][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.865336][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.874198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.883072][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.890380][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.898259][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.907100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.941751][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.952849][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.962982][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.970204][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.978004][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.986514][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.997644][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.012028][ T4276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.024434][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.037097][ T4280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.052316][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.062564][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.091636][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.102359][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.112192][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.131924][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.155716][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.192990][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.204321][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.213437][ T4308] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.220624][ T4308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.231286][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.241632][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.251208][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.260987][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.273357][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.285538][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.294623][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.303384][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.321421][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.331313][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.340322][ T1314] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.347516][ T1314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.355951][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.383285][ T4280] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.396840][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.406705][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.416610][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.426040][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.436744][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.446304][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.455032][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.467718][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.478189][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.487881][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.499020][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.499156][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.521118][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.543013][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.560311][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.569712][ T4267] Bluetooth: hci0: command 0x041b tx timeout [ 71.570577][ T4271] Bluetooth: hci2: command 0x041b tx timeout [ 71.575860][ T4267] Bluetooth: hci1: command 0x041b tx timeout [ 71.605786][ T1314] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.612973][ T1314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.631460][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.649589][ T4267] Bluetooth: hci4: command 0x041b tx timeout [ 71.655838][ T4267] Bluetooth: hci3: command 0x041b tx timeout [ 71.687436][ T4265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.697115][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.706831][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.715493][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.725506][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.734856][ T1314] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.742168][ T1314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.751465][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.761067][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.768837][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.776946][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.785560][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.798885][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.814186][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.843491][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.855229][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.864119][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.881027][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.897542][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.920706][ T4265] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.934007][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.974304][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.991625][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.005373][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.015471][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.029018][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.045701][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.056168][ T1314] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.063380][ T1314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.081940][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.094445][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.124102][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.163454][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.174409][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.186538][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.196257][ T1314] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.203471][ T1314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.213320][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.222567][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.231834][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.242139][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.252169][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.306103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.325156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.357571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.380619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.400148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.419751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.439186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.460151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.476023][ T4265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.490882][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.506357][ T4276] device veth0_vlan entered promiscuous mode [ 72.518193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.534120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.545846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.559042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.578158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.587759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.607911][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.634185][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.646925][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.661073][ T4276] device veth1_vlan entered promiscuous mode [ 72.684624][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.766723][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.791109][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.800351][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.821377][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.835594][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.860035][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.872410][ T4276] device veth0_macvtap entered promiscuous mode [ 72.900510][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.921839][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.947870][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.965387][ T4276] device veth1_macvtap entered promiscuous mode [ 72.993711][ T4280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.008461][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.030574][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.046614][ T4266] device veth0_vlan entered promiscuous mode [ 73.078540][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.092366][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.111212][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.120928][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.130265][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.180180][ T4266] device veth1_vlan entered promiscuous mode [ 73.201691][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.218819][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.241196][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.254005][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.263799][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.273503][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.286568][ T4276] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.299914][ T4276] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.308805][ T4276] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.318577][ T4276] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.353469][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.363218][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.373945][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.425092][ T4266] device veth0_macvtap entered promiscuous mode [ 73.435939][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.445694][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.455980][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.465911][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.475569][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.486821][ T4280] device veth0_vlan entered promiscuous mode [ 73.502185][ T4266] device veth1_macvtap entered promiscuous mode [ 73.536919][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.556986][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.565916][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.583332][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.613224][ T4280] device veth1_vlan entered promiscuous mode [ 73.649586][ T4267] Bluetooth: hci2: command 0x040f tx timeout [ 73.655918][ T4267] Bluetooth: hci0: command 0x040f tx timeout [ 73.662160][ T4279] Bluetooth: hci1: command 0x040f tx timeout [ 73.664016][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.681383][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.690799][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.702096][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.711595][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.729982][ T4267] Bluetooth: hci3: command 0x040f tx timeout [ 73.729993][ T4271] Bluetooth: hci4: command 0x040f tx timeout [ 73.770132][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.778725][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.797885][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.813886][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.826312][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.850366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.858954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.875549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.884772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.895429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.907105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.916629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.926309][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.937482][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.949444][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.961661][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.977389][ T4265] device veth0_vlan entered promiscuous mode [ 73.996118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.005189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.020997][ T4266] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.032333][ T4266] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.041628][ T4266] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.050803][ T4266] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.074489][ T4265] device veth1_vlan entered promiscuous mode [ 74.093441][ T1314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.101831][ T4272] device veth0_vlan entered promiscuous mode [ 74.102525][ T1314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.110249][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.124814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.134141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.149493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.158110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.167931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.176627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.186572][ T4280] device veth0_macvtap entered promiscuous mode [ 74.220110][ T4272] device veth1_vlan entered promiscuous mode [ 74.255694][ T4280] device veth1_macvtap entered promiscuous mode [ 74.282759][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.297507][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.308121][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.320927][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.330818][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.351250][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.362155][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.373354][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.384157][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.396164][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.440493][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.450049][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.459103][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.482264][ T4265] device veth0_macvtap entered promiscuous mode [ 74.495158][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.512835][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.526139][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.539886][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.553893][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.563568][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.563611][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.583361][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.593133][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.601618][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.612086][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.627535][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.641348][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.690202][ T4280] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.701264][ T4280] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.713802][ T4280] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.724278][ T4280] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.796466][ T4265] device veth1_macvtap entered promiscuous mode [ 74.851277][ T4272] device veth0_macvtap entered promiscuous mode [ 74.957165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.052926][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.238330][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.309018][ T4272] device veth1_macvtap entered promiscuous mode [ 75.317051][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.354445][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.367597][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.382047][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.395282][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.405497][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.416434][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.430792][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.443267][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.452307][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.474747][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.522555][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.548825][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.562000][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.573878][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.584302][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.596439][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.620608][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.656271][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.674928][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.720674][ T4265] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.729826][ T4271] Bluetooth: hci1: command 0x0419 tx timeout [ 75.729871][ T4271] Bluetooth: hci2: command 0x0419 tx timeout [ 75.743256][ T4279] Bluetooth: hci0: command 0x0419 tx timeout [ 75.753475][ T4265] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.762524][ T4265] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.771930][ T4265] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.783831][ T4350] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6'. [ 75.803246][ T4354] loop3: detected capacity change from 0 to 1024 [ 75.811361][ T4271] Bluetooth: hci4: command 0x0419 tx timeout [ 75.811373][ T4279] Bluetooth: hci3: command 0x0419 tx timeout [ 75.826042][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.837111][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.847399][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.858146][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.863427][ T4354] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 75.868918][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.891395][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.901969][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.918150][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.930613][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.985731][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.995972][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.013536][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.031240][ T4354] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 76.031989][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.070969][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.082370][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.093599][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.104794][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.115108][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.126034][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.158639][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.173299][ T4336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.189396][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.198214][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.216687][ T4336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.233632][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.788510][ T4364] syz.0.7 (4364): attempted to duplicate a private mapping with mremap. This is not supported. [ 76.859282][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 76.869259][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 76.879272][ T0] NOHZ tick-stop error: local softirq work is pending, handler #88!!! [ 76.889257][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 76.899274][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 76.909268][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 76.919259][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 76.929254][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 76.931006][ T4272] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.956273][ T4272] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.965531][ T4272] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.974424][ T4272] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.979262][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 77.171390][ T4367] Zero length message leads to an empty skb [ 77.759558][ T4366] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.769330][ T4366] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.803253][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.879060][ T4336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.899040][ T4336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.923392][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.023195][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.054359][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.079614][ T4366] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.087571][ T4366] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.099273][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 78.115059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.126139][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 78.138284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.187410][ T4344] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 78.198525][ T4336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.218209][ T4336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.244458][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.299453][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 78.495593][ T4344] usb 1-1: unable to get BOS descriptor or descriptor too short [ 78.503705][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 78.592725][ T7] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 78.606024][ T4383] netlink: 'syz.4.5': attribute type 1 has an invalid length. [ 78.632476][ T4344] usb 1-1: not running at top speed; connect to a high speed hub [ 78.738694][ T7] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 78.861909][ T4344] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.935191][ T7] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 78.960759][ T4344] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 79.024044][ T7] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 79.056323][ T7] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 79.072605][ T4344] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 79.092249][ T4344] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.103731][ T4344] usb 1-1: Product: syz [ 79.108156][ T7] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 79.108282][ T4385] loop1: detected capacity change from 0 to 2048 [ 79.123839][ T4344] usb 1-1: Manufacturer: syz [ 79.128680][ T4344] usb 1-1: SerialNumber: syz [ 79.135938][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.256310][ T4385] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 79.386555][ T4344] usb 1-1: 0:1 : does not exist [ 79.398898][ T7] usb 3-1: usb_control_msg returned -32 [ 79.404787][ T7] usbtmc 3-1:16.0: can't read capabilities [ 79.411983][ T4344] usb 1-1: 0:2 : does not exist [ 79.426717][ T4344] usb 1-1: 6:0: failed to get current value for ch 0 (-22) [ 79.520009][ T4344] usb 1-1: USB disconnect, device number 2 [ 79.611508][ T4392] tipc: Started in network mode [ 79.622232][ T4392] tipc: Node identity 96a8a4b04c61, cluster identity 4711 [ 79.631891][ T4390] udevd[4390]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 79.637571][ T4392] tipc: Enabled bearer , priority 0 [ 79.717206][ T4392] device syzkaller0 entered promiscuous mode [ 79.773665][ T4392] tipc: Resetting bearer [ 79.795540][ T4391] tipc: Resetting bearer [ 79.803162][ T4398] usbtmc 3-1:16.0: INITIATE_CLEAR returned 0 [ 79.836338][ T4391] tipc: Disabling bearer [ 79.847401][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 79.853925][ T4361] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 80.023424][ T4344] usb 3-1: USB disconnect, device number 2 [ 80.057010][ T4361] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 80.082175][ T4361] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.111488][ T4361] usb 5-1: Product: syz [ 80.115726][ T4361] usb 5-1: Manufacturer: syz [ 80.128621][ T4361] usb 5-1: SerialNumber: syz [ 80.259449][ T4309] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 80.779728][ T4309] usb 2-1: Using ep0 maxpacket: 8 [ 80.843254][ T4309] usb 2-1: config 65 has too many interfaces: 73, using maximum allowed: 32 [ 81.036254][ T4361] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -71 [ 81.103786][ T4361] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 81.119504][ T4361] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 81.149318][ T4361] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 81.194125][ T4361] lan78xx: probe of 5-1:1.0 failed with error -71 [ 81.314105][ T4361] usb 5-1: USB disconnect, device number 2 [ 81.435566][ T4410] binder: 4407:4410 ioctl 4018620d 0 returned -22 [ 81.489869][ T4309] usb 2-1: config 65 has 3 interfaces, different from the descriptor's value: 73 [ 81.504212][ T4413] netlink: 96 bytes leftover after parsing attributes in process `syz.3.15'. [ 81.544217][ T4309] usb 2-1: config 65 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 81.584998][ T4309] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 81.606873][ T4309] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.631490][ T4309] usb 2-1: Product: syz [ 81.635730][ T4309] usb 2-1: Manufacturer: syz [ 81.645349][ T4309] usb 2-1: SerialNumber: syz [ 81.827563][ T27] cfg80211: failed to load regulatory.db [ 82.255111][ T4309] snd-usb-audio: probe of 2-1:65.0 failed with error -71 [ 82.314743][ T4309] usb 2-1: USB disconnect, device number 2 [ 82.532755][ T4428] loop0: detected capacity change from 0 to 1024 [ 82.622551][ T4428] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 82.648177][ T4430] device syzkaller0 entered promiscuous mode [ 82.756568][ T4432] device syzkaller0 entered promiscuous mode [ 82.783495][ T4428] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 83.578647][ T4445] loop1: detected capacity change from 0 to 512 [ 83.620235][ T4445] EXT4-fs: Ignoring removed nomblk_io_submit option [ 83.677699][ T4445] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 83.760167][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 83.766198][ T4445] EXT4-fs (loop1): 1 truncate cleaned up [ 83.766247][ T4445] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 84.676056][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 85.896644][ T4461] binder: 4459:4461 ioctl 4018620d 0 returned -22 [ 85.947447][ T4469] loop3: detected capacity change from 0 to 2048 [ 85.954814][ T4462] netlink: 96 bytes leftover after parsing attributes in process `syz.4.31'. [ 86.014636][ T4467] loop2: detected capacity change from 0 to 2048 [ 86.025158][ T4469] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 86.138361][ T4467] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 87.937630][ T4478] xt_CT: You must specify a L4 protocol and not use inversions on it [ 89.876235][ T4486] device syzkaller0 entered promiscuous mode [ 89.968496][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 90.083313][ T4489] netlink: 'syz.0.38': attribute type 4 has an invalid length. [ 90.209376][ T124] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 90.221699][ T4491] loop3: detected capacity change from 0 to 1024 [ 90.247634][ T4491] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 90.380682][ T4491] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 90.429473][ T124] usb 5-1: Using ep0 maxpacket: 8 [ 90.466907][ T124] usb 5-1: config 65 has too many interfaces: 73, using maximum allowed: 32 [ 90.579910][ T124] usb 5-1: config 65 has 3 interfaces, different from the descriptor's value: 73 [ 90.764889][ T124] usb 5-1: config 65 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 90.981508][ T124] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 91.118251][ T124] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.668408][ T124] usb 5-1: Product: syz [ 91.713935][ T124] usb 5-1: Manufacturer: syz [ 91.718694][ T124] usb 5-1: SerialNumber: syz [ 92.579084][ T124] snd-usb-audio: probe of 5-1:65.0 failed with error -71 [ 92.657330][ T124] usb 5-1: USB disconnect, device number 3 [ 92.707362][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 92.742057][ T4514] binder: 4513:4514 ioctl 4018620d 0 returned -22 [ 92.808928][ T4515] netlink: 96 bytes leftover after parsing attributes in process `syz.1.45'. [ 92.949864][ T4518] loop2: detected capacity change from 0 to 2048 [ 92.991116][ T4518] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 93.108199][ T4527] xt_CT: You must specify a L4 protocol and not use inversions on it [ 93.199526][ T124] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 93.255417][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 93.327156][ T4529] device syzkaller0 entered promiscuous mode [ 93.389593][ T124] usb 1-1: Using ep0 maxpacket: 8 [ 93.397134][ T124] usb 1-1: config 65 has too many interfaces: 73, using maximum allowed: 32 [ 93.419057][ T124] usb 1-1: config 65 has 3 interfaces, different from the descriptor's value: 73 [ 93.430085][ T124] usb 1-1: config 65 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 93.455953][ T124] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 93.469828][ T124] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.486683][ T124] usb 1-1: Product: syz [ 93.498049][ T124] usb 1-1: Manufacturer: syz [ 93.509038][ T124] usb 1-1: SerialNumber: syz [ 93.746318][ T124] snd-usb-audio: probe of 1-1:65.0 failed with error -71 [ 93.807000][ T124] usb 1-1: USB disconnect, device number 3 [ 95.187335][ T4557] loop4: detected capacity change from 0 to 2048 [ 95.261817][ T4557] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 95.291282][ T4553] loop0: detected capacity change from 0 to 4096 [ 95.367189][ T4553] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 95.429373][ T27] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 95.572204][ T4560] ntfs3: loop0: ino=1f, "file2" failed to open parent directory r=5 to update [ 95.642611][ T4561] xt_CT: You must specify a L4 protocol and not use inversions on it [ 95.650950][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 95.668225][ T27] usb 4-1: config 65 has too many interfaces: 73, using maximum allowed: 32 [ 95.738817][ T27] usb 4-1: config 65 has 3 interfaces, different from the descriptor's value: 73 [ 95.790380][ T27] usb 4-1: config 65 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 95.823619][ T4348] ntfs3: loop0: ino=1f, failed to open parent directory r=5 to update [ 95.860552][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 95.960351][ T27] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 96.011740][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.043088][ T27] usb 4-1: Product: syz [ 96.047434][ T27] usb 4-1: Manufacturer: syz [ 96.073063][ T27] usb 4-1: SerialNumber: syz [ 96.089949][ T4563] netlink: 76 bytes leftover after parsing attributes in process `syz.4.63'. [ 96.331473][ T27] snd-usb-audio: probe of 4-1:65.0 failed with error -71 [ 96.400810][ T27] usb 4-1: USB disconnect, device number 2 [ 96.575217][ T4568] binder: 4567:4568 ioctl 4018620d 0 returned -22 [ 97.132160][ T4573] netlink: 96 bytes leftover after parsing attributes in process `syz.0.64'. [ 97.438889][ T4580] loop1: detected capacity change from 0 to 128 [ 98.141283][ T4580] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d) [ 98.155912][ T4580] FAT-fs (loop1): Filesystem has been set read-only [ 98.282659][ T4592] binder: 4586:4592 ioctl c0306201 0 returned -14 [ 98.298442][ T4592] binder: 4586:4592 ioctl 4018620d 0 returned -22 [ 98.374858][ T4593] netlink: 96 bytes leftover after parsing attributes in process `syz.0.72'. [ 98.529670][ T4309] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 99.055913][ T4589] loop3: detected capacity change from 0 to 2048 [ 99.189528][ T4309] usb 5-1: Using ep0 maxpacket: 8 [ 99.204431][ T4309] usb 5-1: config 65 has too many interfaces: 73, using maximum allowed: 32 [ 99.214574][ T4589] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 99.243864][ T4309] usb 5-1: config 65 has 3 interfaces, different from the descriptor's value: 73 [ 99.313991][ T4309] usb 5-1: config 65 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 99.381997][ T4309] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 99.431359][ T4309] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.467591][ T4309] usb 5-1: Product: syz [ 99.962519][ T4603] xt_CT: You must specify a L4 protocol and not use inversions on it [ 100.002403][ T4309] usb 5-1: Manufacturer: syz [ 100.069125][ T4309] usb 5-1: SerialNumber: syz [ 100.193236][ T4607] netlink: 76 bytes leftover after parsing attributes in process `syz.0.76'. [ 100.209855][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 100.304812][ T4309] snd-usb-audio: probe of 5-1:65.0 failed with error -71 [ 100.363059][ T4309] usb 5-1: USB disconnect, device number 4 [ 101.779586][ T4309] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 102.029832][ T4309] usb 4-1: Using ep0 maxpacket: 8 [ 102.446289][ T4309] usb 4-1: config 65 has too many interfaces: 73, using maximum allowed: 32 [ 102.474657][ T4309] usb 4-1: config 65 has 3 interfaces, different from the descriptor's value: 73 [ 102.484749][ T4309] usb 4-1: config 65 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 102.518672][ T4309] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 102.529481][ T4309] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.537754][ T4309] usb 4-1: Product: syz [ 102.549986][ T4309] usb 4-1: Manufacturer: syz [ 102.554790][ T4309] usb 4-1: SerialNumber: syz [ 102.581563][ T4629] binder: 4628:4629 ioctl 4018620d 0 returned -22 [ 102.653150][ T4631] netlink: 96 bytes leftover after parsing attributes in process `syz.4.83'. [ 102.763283][ T4633] device syzkaller0 entered promiscuous mode [ 102.803447][ T4309] snd-usb-audio: probe of 4-1:65.0 failed with error -71 [ 102.877019][ T4309] usb 4-1: USB disconnect, device number 3 [ 103.232577][ T4636] loop4: detected capacity change from 0 to 4096 [ 103.244999][ T4625] loop0: detected capacity change from 0 to 32768 [ 103.361670][ T4638] loop1: detected capacity change from 0 to 2048 [ 103.395442][ T4625] XFS (loop0): Mounting V5 Filesystem [ 103.423037][ T4272] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 103.479498][ T4272] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 103.621780][ T4638] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 103.704701][ T4625] XFS (loop0): Ending clean mount [ 103.737192][ T4625] XFS (loop0): Quotacheck needed: Please wait. [ 103.765986][ T4659] netlink: 76 bytes leftover after parsing attributes in process `syz.4.89'. [ 104.337960][ T4666] xt_CT: You must specify a L4 protocol and not use inversions on it [ 104.390323][ T4625] XFS (loop0): Quotacheck: Done. [ 105.007803][ T4276] XFS (loop0): Unmounting Filesystem [ 105.099337][ T4309] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 105.201354][ T4677] binder: 4675:4677 ioctl 4018620d 0 returned -22 [ 105.299516][ T4309] usb 4-1: Using ep0 maxpacket: 8 [ 105.303214][ T4678] netlink: 96 bytes leftover after parsing attributes in process `syz.4.96'. [ 105.334099][ T4309] usb 4-1: config 65 has too many interfaces: 73, using maximum allowed: 32 [ 105.353355][ T4309] usb 4-1: config 65 has 3 interfaces, different from the descriptor's value: 73 [ 105.362768][ T4309] usb 4-1: config 65 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 105.403566][ T4309] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 105.425818][ T4309] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.436612][ T4309] usb 4-1: Product: syz [ 105.441133][ T4309] usb 4-1: Manufacturer: syz [ 105.445920][ T4309] usb 4-1: SerialNumber: syz [ 105.599446][ T14] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 105.695732][ T4309] snd-usb-audio: probe of 4-1:65.0 failed with error -71 [ 105.747327][ T4309] usb 4-1: USB disconnect, device number 4 [ 105.799421][ T14] usb 3-1: Using ep0 maxpacket: 16 [ 105.814152][ T14] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 105.830006][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.843339][ T14] usb 3-1: Product: syz [ 105.847677][ T14] usb 3-1: Manufacturer: syz [ 105.852483][ T14] usb 3-1: SerialNumber: syz [ 106.409615][ T14] usb 3-1: config 0 descriptor?? [ 107.126368][ T14] usb 3-1: USB disconnect, device number 3 [ 107.222880][ T4687] loop0: detected capacity change from 0 to 2048 [ 107.351802][ T4687] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 108.891073][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 108.949351][ T4309] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 109.179668][ T4703] loop1: detected capacity change from 0 to 64 [ 109.189308][ T4309] usb 4-1: Using ep0 maxpacket: 32 [ 109.207318][ T4703] hfs: unable to parse mount options [ 110.634581][ T4309] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.788406][ T4309] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.799614][ T4309] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 110.808884][ T4309] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.833998][ T4309] usb 4-1: config 0 descriptor?? [ 110.865460][ T4309] usbhid 4-1:0.0: can't add hid device: -71 [ 110.871604][ T4309] usbhid: probe of 4-1:0.0 failed with error -71 [ 110.886197][ T4309] usb 4-1: USB disconnect, device number 5 [ 111.107297][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 111.115939][ T4710] loop3: detected capacity change from 0 to 128 [ 111.173485][ T4710] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 111.202182][ T4710] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 111.357542][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 111.438715][ T4718] binder: 4717:4718 ioctl 4018620d 0 returned -22 [ 111.535024][ T4721] netlink: 96 bytes leftover after parsing attributes in process `syz.1.108'. [ 111.874494][ T4361] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 112.080714][ T4361] usb 1-1: Using ep0 maxpacket: 8 [ 112.195367][ T4361] usb 1-1: config 65 has too many interfaces: 73, using maximum allowed: 32 [ 112.204621][ T4361] usb 1-1: config 65 has 3 interfaces, different from the descriptor's value: 73 [ 112.214201][ T4361] usb 1-1: config 65 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 112.319663][ T4361] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 112.329256][ T4361] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.337889][ T4361] usb 1-1: Product: syz [ 112.342481][ T4361] usb 1-1: Manufacturer: syz [ 112.347183][ T4361] usb 1-1: SerialNumber: syz [ 112.652815][ T4361] snd-usb-audio: probe of 1-1:65.0 failed with error -71 [ 112.674912][ T4361] usb 1-1: USB disconnect, device number 4 [ 112.820639][ T4730] loop3: detected capacity change from 0 to 2048 [ 114.270365][ T4730] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 114.466434][ T4740] xt_CT: You must specify a L4 protocol and not use inversions on it [ 114.611267][ T4741] loop2: detected capacity change from 0 to 64 [ 114.626520][ T4741] hfs: unable to parse mount options [ 116.963103][ T7] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 117.159709][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 117.703923][ T7] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 117.731513][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.763424][ T7] usb 1-1: Product: syz [ 117.767708][ T7] usb 1-1: Manufacturer: syz [ 117.783576][ T7] usb 1-1: SerialNumber: syz [ 117.839847][ T7] usb 1-1: config 0 descriptor?? [ 118.789861][ T4361] usb 1-1: USB disconnect, device number 5 [ 121.152107][ T4780] loop1: detected capacity change from 0 to 64 [ 121.165504][ T4780] hfs: unable to parse mount options [ 122.326835][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 125.336595][ T4811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.138'. [ 125.599580][ T4273] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 125.665586][ T4798] loop4: detected capacity change from 0 to 32768 [ 125.783809][ T4798] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.135 (4798) [ 125.879838][ T4798] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 125.899562][ T4273] usb 3-1: Using ep0 maxpacket: 8 [ 125.907022][ T4273] usb 3-1: config 65 has too many interfaces: 73, using maximum allowed: 32 [ 125.914059][ T4798] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 125.925055][ T4273] usb 3-1: config 65 has 3 interfaces, different from the descriptor's value: 73 [ 125.925257][ T4273] usb 3-1: config 65 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 125.927828][ T4273] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 125.995236][ T4273] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.000650][ T4798] BTRFS info (device loop4): setting nodatasum [ 126.014064][ T4273] usb 3-1: Product: syz [ 126.022996][ T4273] usb 3-1: Manufacturer: syz [ 126.027967][ T4798] BTRFS info (device loop4): force zlib compression, level 3 [ 126.037405][ T4273] usb 3-1: SerialNumber: syz [ 126.055750][ T4798] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 126.098748][ T4798] BTRFS info (device loop4): use lzo compression, level 0 [ 126.109933][ T14] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 126.142780][ T4798] BTRFS info (device loop4): turning on flush-on-commit [ 126.165241][ T4798] BTRFS info (device loop4): enabling auto defrag [ 126.184609][ T4798] BTRFS info (device loop4): max_inline at 4096 [ 126.199003][ T4798] BTRFS info (device loop4): using free space tree [ 126.292838][ T4273] snd-usb-audio: probe of 3-1:65.0 failed with error -71 [ 126.299312][ T14] usb 2-1: Using ep0 maxpacket: 16 [ 126.307368][ T14] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.329825][ T14] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 126.340103][ T4273] usb 3-1: USB disconnect, device number 4 [ 126.372583][ T4798] BTRFS error (device loop4): open_ctree failed: -12 [ 126.381680][ T14] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 126.400805][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.420133][ T14] usb 2-1: Product: syz [ 126.424372][ T14] usb 2-1: Manufacturer: syz [ 126.429093][ T14] usb 2-1: SerialNumber: syz [ 126.555661][ T4837] Bluetooth: MGMT ver 1.22 [ 126.562911][ T4837] Bluetooth: hci0: invalid length 0, exp 2 for type 7 [ 126.696714][ T14] usb 2-1: 0:2 : does not exist [ 126.727620][ T14] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 126.855545][ T4847] loop0: detected capacity change from 0 to 64 [ 126.874972][ T4847] hfs: unable to parse mount options [ 126.952067][ T14] usb 2-1: USB disconnect, device number 3 [ 127.713248][ T4343] udevd[4343]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 127.877980][ T4855] loop3: detected capacity change from 0 to 2048 [ 127.956488][ T4855] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 127.986846][ T26] audit: type=1326 audit(1775101089.972:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4861 comm="syz.0.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd761b9c819 code=0x7ffc0000 [ 128.087330][ T26] audit: type=1326 audit(1775101089.972:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4861 comm="syz.0.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd761b9c819 code=0x7ffc0000 [ 128.189165][ T26] audit: type=1326 audit(1775101090.022:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4861 comm="syz.0.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd761b9c819 code=0x7ffc0000 [ 128.214026][ T4869] xt_CT: You must specify a L4 protocol and not use inversions on it [ 128.324118][ T26] audit: type=1326 audit(1775101090.022:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4861 comm="syz.0.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7fd761b9c819 code=0x7ffc0000 [ 128.347277][ T26] audit: type=1326 audit(1775101090.022:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4861 comm="syz.0.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd761b9c819 code=0x7ffc0000 [ 128.371726][ T26] audit: type=1326 audit(1775101090.022:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4861 comm="syz.0.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd761b9c819 code=0x7ffc0000 [ 128.548868][ T26] audit: type=1326 audit(1775101090.022:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4861 comm="syz.0.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd761b9c819 code=0x7ffc0000 [ 129.140017][ T26] audit: type=1326 audit(1775101090.022:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4861 comm="syz.0.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd761b9c819 code=0x7ffc0000 [ 129.207268][ T26] audit: type=1326 audit(1775101090.032:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4861 comm="syz.0.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd761b9c819 code=0x7ffc0000 [ 130.211920][ T4881] device syzkaller0 entered promiscuous mode [ 130.268003][ T4883] loop4: detected capacity change from 0 to 512 [ 130.327457][ T4883] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 130.354215][ T4883] EXT4-fs error (device loop4): ext4_get_journal_inode:5756: comm syz.4.152: inode #1792: comm syz.4.152: iget: illegal inode # [ 130.431737][ T4883] EXT4-fs (loop4): Remounting filesystem read-only [ 130.438883][ T4883] EXT4-fs (loop4): no journal found [ 130.463662][ T4883] EXT4-fs (loop4): can't get journal size [ 130.528184][ T4883] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 130.802214][ T4883] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 130.810446][ T4883] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 130.859428][ T4843] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 130.926651][ T4894] loop1: detected capacity change from 0 to 64 [ 130.941514][ T4894] hfs: unable to parse mount options [ 132.689922][ T4883] EXT4-fs error (device loop4): ext4_append:79: inode #2: comm syz.4.152: Logical block already allocated [ 132.730234][ T4883] EXT4-fs (loop4): Remounting filesystem read-only [ 132.819520][ T4843] usb 1-1: Using ep0 maxpacket: 8 [ 132.828297][ T4843] usb 1-1: config 65 has too many interfaces: 73, using maximum allowed: 32 [ 132.846384][ T4843] usb 1-1: config 65 has 3 interfaces, different from the descriptor's value: 73 [ 132.865957][ T4843] usb 1-1: config 65 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 132.890703][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 132.919978][ T4843] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 132.934525][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.942608][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.949122][ T4843] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.999397][ T4843] usb 1-1: Product: syz [ 133.016569][ T4843] usb 1-1: Manufacturer: syz [ 133.066039][ T4843] usb 1-1: SerialNumber: syz [ 133.210380][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 133.296856][ T4843] snd-usb-audio: probe of 1-1:65.0 failed with error -71 [ 133.419738][ T4843] usb 1-1: USB disconnect, device number 6 [ 134.774641][ T4919] device syzkaller0 entered promiscuous mode [ 135.238128][ T4904] loop2: detected capacity change from 0 to 32768 [ 135.247556][ T4904] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.159 (4904) [ 135.316422][ T4904] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 135.316520][ T4904] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 135.316591][ T4904] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 135.316639][ T4904] BTRFS info (device loop2): use zstd compression, level 3 [ 135.316662][ T4904] BTRFS info (device loop2): using free space tree [ 135.819062][ T4904] BTRFS info (device loop2): enabling ssd optimizations [ 135.888762][ T26] audit: type=1800 audit(1775101097.872:11): pid=4904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.159" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 136.274720][ T4280] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 136.411513][ T4934] loop3: detected capacity change from 0 to 32768 [ 136.562709][ T4934] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.167 (4934) [ 136.660895][ T4934] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 136.689733][ T4934] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 136.705293][ T4934] BTRFS info (device loop3): enabling auto defrag [ 137.223217][ T4934] BTRFS info (device loop3): enabling ssd optimizations [ 137.289553][ T4934] BTRFS info (device loop3): using spread ssd allocation scheme [ 137.329280][ T4934] BTRFS info (device loop3): using free space tree [ 137.350067][ T4956] loop0: detected capacity change from 0 to 2048 [ 137.491528][ T4956] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 137.698438][ T4980] xt_CT: You must specify a L4 protocol and not use inversions on it [ 139.022494][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 139.101023][ T4978] kernel read not supported for file / œ7³ÏüâW)ës“§Ç!Qöì¥fsõl{T‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 4978 comm: syz.2.172) [ 139.116052][ T4266] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 139.207934][ T26] audit: type=1800 audit(1775101101.192:12): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.172" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=35407 res=0 errno=0 [ 141.184782][ T4361] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 142.053725][ T4361] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 142.062901][ T4361] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.073433][ T4361] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 142.083285][ T4361] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.101111][ T4361] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 142.140690][ T4361] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 142.164143][ T4361] usb 1-1: Product: syz [ 142.168478][ T4361] usb 1-1: Manufacturer: syz [ 142.616513][ T4361] cdc_wdm 1-1:1.0: skipping garbage [ 142.622386][ T4361] cdc_wdm 1-1:1.0: skipping garbage [ 142.658606][ T4361] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 142.664712][ T4361] cdc_wdm 1-1:1.0: Unknown control protocol [ 142.843355][ T4361] usb 1-1: USB disconnect, device number 7 [ 143.578586][ T5017] loop4: detected capacity change from 0 to 2048 [ 143.609932][ T5021] device syzkaller0 entered promiscuous mode [ 143.686740][ T5017] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 144.284127][ T5027] loop3: detected capacity change from 0 to 256 [ 144.320688][ T5028] xt_CT: You must specify a L4 protocol and not use inversions on it [ 144.369637][ T5027] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 144.509479][ T26] audit: type=1800 audit(1775101106.502:13): pid=5027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.186" name="bus" dev="loop3" ino=1048595 res=0 errno=0 [ 144.618311][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 144.914103][ T5035] loop1: detected capacity change from 0 to 4096 [ 144.976705][ T5035] NILFS (loop1): mounting unchecked fs [ 144.990935][ T5035] NILFS (loop1): recovery required for readonly filesystem [ 145.079766][ T5035] NILFS (loop1): write access will be enabled during recovery [ 145.589602][ T5035] NILFS (loop1): invalid segment: Checksum error in segment payload [ 145.662067][ T5035] NILFS (loop1): trying rollback from an earlier position [ 145.783561][ T5035] NILFS (loop1): norecovery option specified, skipping roll-forward recovery [ 145.937775][ T5035] NILFS (loop1): couldn't remount because the filesystem is in an incomplete recovery state [ 147.029265][ T27] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 147.212628][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807bd16400: rx timeout, send abort [ 147.223543][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807bd16400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 147.406298][ T27] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA1, skipping [ 147.581158][ T4271] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 147.590386][ T4271] Bluetooth: hci1: Injecting HCI hardware error event [ 147.601701][ T4267] Bluetooth: hci1: hardware error 0x00 [ 147.619393][ T27] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 147.628658][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.654213][ T27] usb 2-1: config 0 descriptor?? [ 147.665863][ T5035] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 148.398542][ T27] ath6kl: Failed to submit usb control message: -71 [ 148.409278][ T27] ath6kl: unable to send the bmi data to the device: -71 [ 148.419349][ T27] ath6kl: Unable to send get target info: -71 [ 148.427195][ T27] ath6kl: Failed to init ath6kl core: -71 [ 148.484447][ T27] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 148.533203][ T27] usb 2-1: USB disconnect, device number 4 [ 148.735947][ T5066] device syzkaller0 entered promiscuous mode [ 148.895985][ T5059] xt_CT: You must specify a L4 protocol and not use inversions on it [ 150.450384][ T4267] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 151.819433][ T4369] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 152.059285][ T4369] usb 5-1: Using ep0 maxpacket: 32 [ 152.075920][ T4369] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 152.169163][ T4369] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 152.208166][ T4369] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 152.219568][ T4369] usb 5-1: Product: syz [ 152.223906][ T4369] usb 5-1: Manufacturer: syz [ 152.228804][ T4369] usb 5-1: SerialNumber: syz [ 152.252820][ T4369] usb 5-1: config 0 descriptor?? [ 152.262303][ T5091] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 152.276206][ T4369] hub 5-1:0.0: bad descriptor, ignoring hub [ 152.282745][ T4369] hub: probe of 5-1:0.0 failed with error -5 [ 152.466530][ T4267] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 152.779946][ T4267] Bluetooth: hci2: Injecting HCI hardware error event [ 152.788497][ T4271] Bluetooth: hci2: hardware error 0x00 [ 152.801868][ T5098] loop1: detected capacity change from 0 to 16 [ 152.891647][ T5098] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 153.589330][ T5091] usb 5-1: reset high-speed USB device number 5 using dummy_hcd [ 154.150141][ T5105] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 154.817168][ T5123] loop3: detected capacity change from 0 to 64 [ 154.827013][ T5123] hfs: unable to parse mount options [ 154.849391][ T4271] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 156.009504][ T4312] usb 5-1: USB disconnect, device number 5 [ 156.314742][ T5131] loop3: detected capacity change from 0 to 1024 [ 156.452265][ T5131] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 156.799474][ T4312] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 156.961301][ T5131] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 156.999447][ T4312] usb 5-1: Using ep0 maxpacket: 16 [ 157.011131][ T4312] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.253072][ T4312] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 157.266952][ T4312] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 157.276736][ T4312] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.285401][ T4312] usb 5-1: Product: syz [ 157.290818][ T4312] usb 5-1: Manufacturer: syz [ 157.295614][ T4312] usb 5-1: SerialNumber: syz [ 157.822695][ T4271] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 157.831816][ T4271] Bluetooth: hci4: Injecting HCI hardware error event [ 157.839963][ T4267] Bluetooth: hci4: hardware error 0x00 [ 157.897460][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 158.059971][ T5150] loop2: detected capacity change from 0 to 32768 [ 158.067323][ T5150] ======================================================= [ 158.067323][ T5150] WARNING: The mand mount option has been deprecated and [ 158.067323][ T5150] and is ignored by this kernel. Remove the mand [ 158.067323][ T5150] option from the mount to silence this warning. [ 158.067323][ T5150] ======================================================= [ 158.197966][ T5150] JBD2: Ignoring recovery information on journal [ 158.246771][ T5150] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 159.979528][ T4267] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 160.200272][ T4280] ocfs2: Unmounting device (7,2) on (node local) [ 161.378469][ T5172] loop0: detected capacity change from 0 to 64 [ 161.390864][ T5172] hfs: unable to parse mount options [ 163.262473][ T4312] usb 5-1: 0:2 : does not exist [ 163.291482][ T4312] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 163.979289][ T4369] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 164.219302][ T4369] usb 3-1: Using ep0 maxpacket: 16 [ 165.520812][ T4369] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 165.579599][ T4369] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.609476][ T4369] usb 3-1: Product: syz [ 165.613794][ T4369] usb 3-1: Manufacturer: syz [ 165.618430][ T4369] usb 3-1: SerialNumber: syz [ 165.693740][ T4369] usb 3-1: config 0 descriptor?? [ 166.013594][ T5200] loop3: detected capacity change from 0 to 128 [ 166.350385][ T5200] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d) [ 166.382804][ T5200] FAT-fs (loop3): Filesystem has been set read-only [ 167.206141][ T4839] usb 3-1: USB disconnect, device number 5 [ 167.817208][ C1] sd 0:0:1:0: [sda] tag#9836 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 167.827979][ C1] sd 0:0:1:0: [sda] tag#9836 CDB: Read(6) 08 00 00 00 00 00 [ 167.970222][ T5213] loop0: detected capacity change from 0 to 64 [ 168.078008][ T5213] hfs: unable to parse mount options [ 169.580911][ T5230] autofs4:pid:5230:autofs_fill_super: called with bogus options [ 170.313859][ T5248] loop2: detected capacity change from 0 to 16 [ 170.404783][ T5248] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 173.209176][ C1] sched: RT throttling activated [ 173.889692][ T5275] loop3: detected capacity change from 0 to 64 [ 173.900456][ T5275] hfs: unable to parse mount options [ 177.297937][ T5306] loop0: detected capacity change from 0 to 16 [ 177.842360][ T5306] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 178.006953][ T5302] binder: 5296:5302 ioctl 4018620d 0 returned -22 [ 178.115064][ T5297] netlink: 96 bytes leftover after parsing attributes in process `syz.3.262'. [ 178.635082][ T5316] loop2: detected capacity change from 0 to 64 [ 178.645177][ T5316] hfs: unable to parse mount options [ 181.374601][ T5328] netlink: 'syz.4.270': attribute type 10 has an invalid length. [ 181.878907][ T5334] loop0: detected capacity change from 0 to 4096 [ 181.956451][ T5334] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 181.969800][ T4842] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 181.992445][ T5328] team0: Device vxcan1 is of different type [ 182.159291][ T4842] usb 2-1: Using ep0 maxpacket: 16 [ 182.183933][ T4842] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 182.233876][ T4842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.246906][ T4842] usb 2-1: Product: syz [ 182.255913][ T4842] usb 2-1: Manufacturer: syz [ 182.264165][ T4842] usb 2-1: SerialNumber: syz [ 182.704594][ T4842] usb 2-1: config 0 descriptor?? [ 182.865910][ T4361] usb 5-1: USB disconnect, device number 6 [ 183.073999][ T22] usb 2-1: USB disconnect, device number 5 [ 183.465673][ T5355] device syzkaller0 entered promiscuous mode [ 183.812275][ T5361] loop3: detected capacity change from 0 to 64 [ 184.031051][ T5363] loop1: detected capacity change from 0 to 64 [ 184.109986][ T5363] hfs: unable to locate alternate MDB [ 184.116414][ T5363] hfs: continuing without an alternate MDB [ 184.292969][ T5361] device erspan0 entered promiscuous mode [ 184.466485][ T5361] device vlan2 entered promiscuous mode [ 184.769665][ T4267] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 184.778529][ T4267] Bluetooth: hci3: Injecting HCI hardware error event [ 184.787830][ T4271] Bluetooth: hci3: hardware error 0x00 [ 185.631763][ T5381] loop0: detected capacity change from 0 to 32768 [ 185.739560][ T5381] JBD2: Ignoring recovery information on journal [ 186.043308][ T5381] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 186.915496][ T4276] ocfs2: Unmounting device (7,0) on (node local) [ 186.929406][ T4271] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 186.966658][ T5390] loop3: detected capacity change from 0 to 2048 [ 187.140224][ T5390] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 187.994735][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 188.179460][ T4273] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 188.689642][ T4273] usb 5-1: Using ep0 maxpacket: 16 [ 188.713874][ T4273] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 188.749487][ T4273] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.757835][ T4273] usb 5-1: Product: syz [ 188.786029][ T5416] device syzkaller0 entered promiscuous mode [ 188.786306][ T4273] usb 5-1: Manufacturer: syz [ 188.816585][ T5418] loop1: detected capacity change from 0 to 512 [ 188.824657][ T4273] usb 5-1: SerialNumber: syz [ 188.844096][ T4273] usb 5-1: config 0 descriptor?? [ 189.071796][ T4273] usb 5-1: USB disconnect, device number 7 [ 189.793835][ T5430] device syzkaller0 entered promiscuous mode [ 189.991743][ T5440] syz.4.310 uses obsolete (PF_INET,SOCK_PACKET) [ 191.339730][ T4271] Bluetooth: hci0: command 0x0406 tx timeout [ 191.562488][ T5467] device syzkaller0 entered promiscuous mode [ 192.639071][ T5486] loop2: detected capacity change from 0 to 512 [ 192.718399][ T5486] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 192.737737][ T5486] EXT4-fs error (device loop2): ext4_get_journal_inode:5756: comm syz.2.324: inode #1792: comm syz.2.324: iget: illegal inode # [ 192.909211][ T5486] EXT4-fs (loop2): Remounting filesystem read-only [ 193.049524][ T5486] EXT4-fs (loop2): no journal found [ 193.148123][ T5486] EXT4-fs (loop2): can't get journal size [ 193.321545][ T5496] device syzkaller0 entered promiscuous mode [ 193.331007][ T5486] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 193.367466][ T5486] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 193.375548][ T5486] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 193.399412][ T5486] EXT4-fs error (device loop2): ext4_append:79: inode #2: comm syz.2.324: Logical block already allocated [ 193.496344][ T5486] EXT4-fs (loop2): Remounting filesystem read-only [ 193.630907][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 194.051073][ T5519] capability: warning: `syz.0.333' uses deprecated v2 capabilities in a way that may be insecure [ 194.420367][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.436318][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.048560][ T5529] device syzkaller0 entered promiscuous mode [ 195.366520][ T5546] device syzkaller0 entered promiscuous mode [ 195.666730][ T5506] input: syz0 as /devices/virtual/input/input5 [ 197.046636][ T5575] loop2: detected capacity change from 0 to 64 [ 197.077414][ T5575] hfs: unable to locate alternate MDB [ 197.086860][ T5575] hfs: continuing without an alternate MDB [ 197.486234][ T5582] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 197.795315][ T5597] loop3: detected capacity change from 0 to 1024 [ 197.833074][ T5597] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 197.922485][ T5597] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 197.950576][ T5597] EXT4-fs (loop3): orphan cleanup on readonly fs [ 197.973738][ T5597] EXT4-fs error (device loop3): ext4_read_inode_bitmap:168: comm syz.3.359: Inode bitmap for bg 0 marked uninitialized [ 197.996391][ T5597] EXT4-fs (loop3): Remounting filesystem read-only [ 198.004430][ T5597] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 198.200067][ T4840] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 198.449354][ T4840] usb 3-1: Using ep0 maxpacket: 8 [ 198.597338][ T4840] usb 3-1: config 65 has too many interfaces: 73, using maximum allowed: 32 [ 198.666243][ T4840] usb 3-1: config 65 has 3 interfaces, different from the descriptor's value: 73 [ 198.824513][ T4840] usb 3-1: config 65 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 199.164696][ T4840] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 199.349218][ T4840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.364976][ T4840] usb 3-1: Product: syz [ 199.369847][ T4840] usb 3-1: Manufacturer: syz [ 199.375749][ T4840] usb 3-1: SerialNumber: syz [ 199.420130][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 199.632753][ T4840] snd-usb-audio: probe of 3-1:65.0 failed with error -71 [ 199.860548][ T5622] loop0: detected capacity change from 0 to 64 [ 200.011323][ T4840] usb 3-1: USB disconnect, device number 6 [ 200.252082][ T5622] hfs: unable to locate alternate MDB [ 200.266129][ T5622] hfs: continuing without an alternate MDB [ 200.565816][ T5629] loop2: detected capacity change from 0 to 16 [ 200.620987][ T5629] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 201.587011][ T5641] loop2: detected capacity change from 0 to 512 [ 201.637218][ T5641] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 201.693017][ T5641] EXT4-fs error (device loop2): ext4_get_journal_inode:5756: comm syz.2.373: inode #1792: comm syz.2.373: iget: illegal inode # [ 201.706986][ T5641] EXT4-fs (loop2): Remounting filesystem read-only [ 201.729347][ T5641] EXT4-fs (loop2): no journal found [ 201.759613][ T5641] EXT4-fs (loop2): can't get journal size [ 202.007726][ T5641] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 202.561881][ T5641] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 202.589274][ T5641] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 202.766405][ T5641] EXT4-fs error (device loop2): ext4_append:79: inode #2: comm syz.2.373: Logical block already allocated [ 202.847907][ T5641] EXT4-fs (loop2): Remounting filesystem read-only [ 202.904315][ T5663] loop0: detected capacity change from 0 to 64 [ 202.986787][ T5663] hfs: unable to locate alternate MDB [ 203.018374][ T5663] hfs: continuing without an alternate MDB [ 203.056135][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 204.027104][ T5668] netlink: 10 bytes leftover after parsing attributes in process `syz.2.380'. [ 204.191969][ T5670] loop0: detected capacity change from 0 to 32768 [ 204.241096][ T5678] loop4: detected capacity change from 0 to 16 [ 204.247565][ T5670] JBD2: Ignoring recovery information on journal [ 204.252687][ T5678] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 204.325718][ T5670] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 205.408351][ T4276] ocfs2: Unmounting device (7,0) on (node local) [ 205.596299][ T5687] loop2: detected capacity change from 0 to 128 [ 205.619558][ T5687] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d) [ 205.629826][ T5687] FAT-fs (loop2): Filesystem has been set read-only [ 206.393299][ T5696] netlink: 'syz.4.391': attribute type 1 has an invalid length. [ 208.220471][ T5700] loop3: detected capacity change from 0 to 2048 [ 208.235634][ T5696] 8021q: adding VLAN 0 to HW filter on device bond1 [ 209.882926][ T5700] EXT4-fs warning (device loop3): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop3. [ 210.036953][ T5704] bond1: (slave veth3): Enslaving as an active interface with a down link [ 210.173732][ T5711] loop4: detected capacity change from 0 to 16 [ 210.191365][ T5711] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 210.747316][ T5723] loop3: detected capacity change from 0 to 32768 [ 210.812859][ T5723] JBD2: Ignoring recovery information on journal [ 210.855326][ T5723] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 212.097914][ T4266] ocfs2: Unmounting device (7,3) on (node local) [ 213.094007][ T4843] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 213.448247][ T4843] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 213.469487][ T4843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.516218][ T4843] usb 2-1: Product: syz [ 213.539789][ T4843] usb 2-1: Manufacturer: syz [ 213.544710][ T4843] usb 2-1: SerialNumber: syz [ 213.572178][ T4843] usb 2-1: config 0 descriptor?? [ 213.783548][ T4843] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 213.909643][ T5755] loop3: detected capacity change from 0 to 16 [ 213.948376][ T5755] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 215.008984][ T4843] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 215.053236][ T4843] usb 2-1: USB disconnect, device number 6 [ 215.290067][ T5759] loop0: detected capacity change from 0 to 32768 [ 215.368620][ T5759] JBD2: Ignoring recovery information on journal [ 216.045383][ T5759] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 217.509872][ T4276] ocfs2: Unmounting device (7,0) on (node local) [ 217.530685][ T5791] loop1: detected capacity change from 0 to 16 [ 217.550790][ T5791] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 218.440505][ T5803] loop3: detected capacity change from 0 to 2048 [ 218.890351][ T5803] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 219.909621][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 219.976453][ T5824] loop0: detected capacity change from 0 to 64 [ 220.099255][ T5824] hfs: unable to locate alternate MDB [ 220.104900][ T5824] hfs: continuing without an alternate MDB [ 220.454754][ T5838] loop0: detected capacity change from 0 to 16 [ 220.578440][ T5838] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 222.036252][ T5851] loop4: detected capacity change from 0 to 2048 [ 222.126527][ T5851] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 222.410185][ T5869] xt_CT: You must specify a L4 protocol and not use inversions on it [ 222.572929][ T5870] loop2: detected capacity change from 0 to 64 [ 223.076951][ T5870] hfs: unable to locate alternate MDB [ 223.291490][ T5870] hfs: continuing without an alternate MDB [ 223.472005][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 223.667932][ T5883] loop3: detected capacity change from 0 to 16 [ 223.730209][ T5883] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 223.848825][ T5884] loop4: detected capacity change from 0 to 4096 [ 223.881760][ T5884] ntfs3: Unknown parameter 'windows_names' [ 223.994776][ T5889] binder: 5887:5889 ioctl 4018620d 0 returned -22 [ 224.064224][ T5890] binder: 5887:5890 ioctl c0306201 0 returned -14 [ 226.148524][ T5912] loop1: detected capacity change from 0 to 64 [ 226.182649][ T5910] loop0: detected capacity change from 0 to 2048 [ 226.194000][ T5912] hfs: unable to locate alternate MDB [ 226.259361][ T5912] hfs: continuing without an alternate MDB [ 226.280765][ T5910] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 226.320765][ T5908] loop4: detected capacity change from 0 to 4096 [ 226.328183][ T5908] ntfs3: Unknown parameter 'windows_names' [ 226.419661][ T4343] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 227.368093][ T5922] xt_CT: You must specify a L4 protocol and not use inversions on it [ 228.358518][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 229.028923][ T5941] binder: 5937:5941 ioctl 4018620d 0 returned -22 [ 229.093333][ T5942] binder: 5937:5942 ioctl c0306201 0 returned -14 [ 231.546188][ T5966] tipc: Failed to remove unknown binding: 66,0,0/0:3303213758/3303213759 [ 231.565965][ T5965] loop0: detected capacity change from 0 to 2048 [ 231.646074][ T5965] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 231.927994][ T5972] xt_CT: You must specify a L4 protocol and not use inversions on it [ 232.441956][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 234.331547][ T6000] loop1: detected capacity change from 0 to 512 [ 234.354897][ T6000] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 234.386653][ T6000] EXT4-fs error (device loop1): ext4_get_journal_inode:5756: comm syz.1.489: inode #1792: comm syz.1.489: iget: illegal inode # [ 234.426606][ T6000] EXT4-fs (loop1): Remounting filesystem read-only [ 234.433532][ T6000] EXT4-fs (loop1): no journal found [ 234.438970][ T6000] EXT4-fs (loop1): can't get journal size [ 234.615447][ T6000] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 234.749831][ T6000] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 234.757679][ T6000] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 234.771239][ T26] audit: type=1326 audit(1775101196.762:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5983 comm="syz.2.484" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa77039c819 code=0x0 [ 234.876563][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 235.195173][ T6009] loop0: detected capacity change from 0 to 2048 [ 236.240009][ T6009] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 236.436028][ T6025] loop1: detected capacity change from 0 to 64 [ 236.446727][ T6025] hfs: unable to parse mount options [ 238.012823][ T4390] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 238.564646][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 238.764228][ T6037] loop4: detected capacity change from 0 to 512 [ 238.794823][ T6037] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 238.834178][ T6037] EXT4-fs error (device loop4): ext4_get_journal_inode:5756: comm syz.4.501: inode #1792: comm syz.4.501: iget: illegal inode # [ 238.899375][ T6037] EXT4-fs (loop4): Remounting filesystem read-only [ 238.906011][ T6037] EXT4-fs (loop4): no journal found [ 238.939281][ T6037] EXT4-fs (loop4): can't get journal size [ 238.951163][ T6037] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 238.988945][ T6037] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 239.142032][ T6037] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 239.700170][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 240.109546][ T4312] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 240.306950][ T6067] loop2: detected capacity change from 0 to 64 [ 240.318739][ T6067] hfs: unable to parse mount options [ 240.319241][ T4312] usb 5-1: Using ep0 maxpacket: 8 [ 241.055375][ T4312] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 241.064066][ T4312] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 241.073919][ T4312] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 241.083978][ T4312] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 241.094265][ T4312] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 241.107415][ T4312] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 241.116518][ T4312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.147383][ T6070] loop0: detected capacity change from 0 to 2048 [ 241.333652][ T4312] usb 5-1: usb_control_msg returned -32 [ 241.347007][ T4312] usbtmc 5-1:16.0: can't read capabilities [ 241.354096][ T6070] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 241.556800][ T6083] xt_CT: You must specify a L4 protocol and not use inversions on it [ 242.139912][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 243.015986][ T6091] loop0: detected capacity change from 0 to 512 [ 243.073619][ T6091] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 243.123476][ T6091] EXT4-fs error (device loop0): ext4_get_journal_inode:5756: comm syz.0.515: inode #1792: comm syz.0.515: iget: illegal inode # [ 243.209195][ T4843] usb 5-1: USB disconnect, device number 8 [ 243.229860][ T6091] EXT4-fs (loop0): Remounting filesystem read-only [ 243.236934][ T6091] EXT4-fs (loop0): no journal found [ 243.290098][ T6091] EXT4-fs (loop0): can't get journal size [ 243.306670][ T6091] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 243.338615][ T6091] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 243.349400][ T6091] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 243.546783][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 243.747328][ T6105] loop0: detected capacity change from 0 to 1024 [ 243.784261][ T6105] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 243.825381][ T6105] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 243.900348][ T6105] EXT4-fs (loop0): orphan cleanup on readonly fs [ 243.937709][ T6105] EXT4-fs error (device loop0): ext4_read_inode_bitmap:168: comm syz.0.519: Inode bitmap for bg 0 marked uninitialized [ 243.954127][ T6105] EXT4-fs (loop0): Remounting filesystem read-only [ 243.961563][ T6105] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 243.979412][ T4843] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 244.807568][ T6114] loop3: detected capacity change from 0 to 4096 [ 244.933344][ T4843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.956541][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 244.973582][ T6117] loop1: detected capacity change from 0 to 64 [ 244.984697][ T6117] hfs: unable to parse mount options [ 245.031830][ T4843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.208514][ T4843] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 245.300362][ T4843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.578631][ T4843] usb 5-1: config 0 descriptor?? [ 245.880363][ T6114] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 245.966465][ T6114] ntfs3: loop3: Failed to load $Extend. [ 246.035639][ T26] audit: type=1800 audit(1775101208.022:15): pid=6114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.523" name="file1" dev="loop3" ino=30 res=0 errno=0 [ 246.116681][ T4843] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 246.153312][ T6121] loop0: detected capacity change from 0 to 2048 [ 246.200245][ T4843] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 246.294044][ T6121] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 246.319369][ T4843] cp2112 0003:10C4:EA90.0001: error requesting version [ 246.358954][ T4843] cp2112: probe of 0003:10C4:EA90.0001 failed with error -71 [ 246.449294][ T4312] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 246.528167][ T6129] xt_CT: You must specify a L4 protocol and not use inversions on it [ 246.639377][ T4312] usb 2-1: Using ep0 maxpacket: 16 [ 246.653075][ T4312] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.703237][ T4312] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 246.765012][ T4312] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 246.773678][ T4843] usb 5-1: USB disconnect, device number 9 [ 246.774363][ T4312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.789654][ T4312] usb 2-1: Product: syz [ 246.794014][ T4312] usb 2-1: Manufacturer: syz [ 246.798749][ T4312] usb 2-1: SerialNumber: syz [ 247.161938][ T4312] usb 2-1: 0:2 : does not exist [ 247.173819][ T4312] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 247.214258][ T4312] usb 2-1: USB disconnect, device number 7 [ 247.222553][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 247.256423][ T6133] binder: 6132:6133 ioctl c0306201 0 returned -14 [ 247.345419][ T6134] loop2: detected capacity change from 0 to 512 [ 247.365147][ T6134] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 247.403813][ T6134] EXT4-fs error (device loop2): ext4_get_journal_inode:5756: comm syz.2.529: inode #1792: comm syz.2.529: iget: illegal inode # [ 247.501167][ T4390] udevd[4390]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 247.520306][ T6134] EXT4-fs (loop2): Remounting filesystem read-only [ 247.526888][ T6134] EXT4-fs (loop2): no journal found [ 247.564683][ T6130] fido_id[6130]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 247.582880][ T6134] EXT4-fs (loop2): can't get journal size [ 247.621458][ T6134] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 247.701519][ T6134] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 247.768225][ T6134] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 247.931309][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 248.019382][ T4312] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 248.052823][ T6150] loop1: detected capacity change from 0 to 1024 [ 248.088914][ T6150] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 248.147290][ T6150] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 248.176240][ T6150] EXT4-fs (loop1): orphan cleanup on readonly fs [ 248.189300][ T4312] usb 5-1: device descriptor read/64, error -71 [ 248.205487][ T6150] EXT4-fs error (device loop1): ext4_read_inode_bitmap:168: comm syz.1.535: Inode bitmap for bg 0 marked uninitialized [ 248.224348][ T6150] EXT4-fs (loop1): Remounting filesystem read-only [ 248.231179][ T6150] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 249.079247][ T4312] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 249.090466][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 249.239375][ T4312] usb 5-1: device descriptor read/64, error -71 [ 249.369408][ T4312] usb usb5-port1: attempt power cycle [ 249.460484][ T6165] loop2: detected capacity change from 0 to 2048 [ 249.505109][ T6165] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 249.819324][ T4312] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 249.850738][ T4312] usb 5-1: device descriptor read/8, error -71 [ 250.119656][ T4312] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 250.151011][ T4312] usb 5-1: device descriptor read/8, error -71 [ 250.269743][ T4312] usb usb5-port1: unable to enumerate USB device [ 252.961442][ T26] audit: type=1326 audit(1775101214.952:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6169 comm="syz.3.542" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd0b359c819 code=0x0 [ 253.178620][ T6174] binder: 6173:6174 ioctl c0306201 0 returned -14 [ 255.216814][ T6187] loop0: detected capacity change from 0 to 1024 [ 255.230878][ T6187] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 255.392274][ T6190] loop1: detected capacity change from 0 to 32768 [ 255.444022][ T6190] JBD2: Ignoring recovery information on journal [ 255.813358][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.820770][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.925617][ T6190] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 255.941815][ T6187] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 256.557022][ T4265] ocfs2: Unmounting device (7,1) on (node local) [ 257.612128][ T4361] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 257.635032][ T6211] loop2: detected capacity change from 0 to 64 [ 257.789254][ T4361] usb 2-1: device descriptor read/64, error -71 [ 258.079321][ T4361] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 258.799624][ T6219] autofs4:pid:6219:autofs_fill_super: called with bogus options [ 258.840818][ T4361] usb 2-1: device descriptor read/64, error -71 [ 259.657873][ T6222] loop2: detected capacity change from 0 to 512 [ 259.724250][ T6222] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 259.742098][ T4361] usb usb2-port1: attempt power cycle [ 259.847357][ T6227] binder: 6225:6227 ioctl c0306201 0 returned -14 [ 259.967328][ T6222] EXT4-fs (loop2): shut down requested (2) [ 260.768987][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 261.607234][ T6235] loop3: detected capacity change from 0 to 32768 [ 261.716000][ T6235] JBD2: Ignoring recovery information on journal [ 261.717145][ T6240] loop4: detected capacity change from 0 to 64 [ 261.795989][ T6235] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 262.438246][ T26] audit: type=1800 audit(1775101224.422:17): pid=6240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.564" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 262.486241][ T4266] ocfs2: Unmounting device (7,3) on (node local) [ 262.606655][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 262.670442][ T4838] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 262.837918][ T26] audit: type=1326 audit(1775101224.822:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6254 comm="syz.2.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77039c819 code=0x7ffc0000 [ 262.861444][ T4838] usb 2-1: Using ep0 maxpacket: 8 [ 262.880091][ T4838] usb 2-1: config 65 has too many interfaces: 73, using maximum allowed: 32 [ 262.909246][ T4838] usb 2-1: config 65 has 3 interfaces, different from the descriptor's value: 73 [ 262.942109][ T4838] usb 2-1: config 65 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 262.974098][ T26] audit: type=1326 audit(1775101224.862:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6254 comm="syz.2.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7fa77039c819 code=0x7ffc0000 [ 262.998936][ T4838] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 263.031212][ T4838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.066565][ T4838] usb 2-1: Product: syz [ 263.086604][ T26] audit: type=1326 audit(1775101224.862:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6254 comm="syz.2.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77039c819 code=0x7ffc0000 [ 263.092365][ T4838] usb 2-1: Manufacturer: syz [ 263.134658][ T26] audit: type=1326 audit(1775101224.862:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6254 comm="syz.2.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77039c819 code=0x7ffc0000 [ 263.137018][ T4838] usb 2-1: SerialNumber: syz [ 263.339290][ T4312] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 263.440844][ T4838] snd-usb-audio: probe of 2-1:65.0 failed with error -71 [ 263.493016][ T6265] loop3: detected capacity change from 0 to 256 [ 263.546045][ T4838] usb 2-1: USB disconnect, device number 11 [ 263.664803][ T6265] FAT-fs (loop3): Directory bread(block 64) failed [ 263.670483][ T6263] loop2: detected capacity change from 0 to 40427 [ 263.687430][ T6263] F2FS-fs (loop2): Unrecognized mount option "age_extent_cache" or missing value [ 263.728647][ T6265] FAT-fs (loop3): Directory bread(block 65) failed [ 263.767912][ T6265] FAT-fs (loop3): Directory bread(block 66) failed [ 263.819852][ T6265] FAT-fs (loop3): Directory bread(block 67) failed [ 263.826627][ T6265] FAT-fs (loop3): Directory bread(block 68) failed [ 263.881603][ T6265] FAT-fs (loop3): Directory bread(block 69) failed [ 263.888940][ T6265] FAT-fs (loop3): Directory bread(block 70) failed [ 263.905106][ T6265] FAT-fs (loop3): Directory bread(block 71) failed [ 263.913925][ T6265] FAT-fs (loop3): Directory bread(block 72) failed [ 263.920749][ T6265] FAT-fs (loop3): Directory bread(block 73) failed [ 263.949266][ T4312] usb 1-1: device descriptor read/64, error -71 [ 264.329228][ T4312] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 264.510303][ T4312] usb 1-1: device descriptor read/64, error -71 [ 264.535029][ T26] audit: type=1800 audit(1775101226.522:22): pid=6265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.574" name="file1" dev="loop3" ino=1048596 res=0 errno=0 [ 264.639904][ T4312] usb usb1-port1: attempt power cycle [ 264.715684][ T6271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.575'. [ 264.804928][ T6265] syz.3.574: attempt to access beyond end of device [ 264.804928][ T6265] loop3: rw=2049, sector=1264, nr_sectors = 92 limit=256 [ 264.928039][ T6274] syz.3.574: attempt to access beyond end of device [ 264.928039][ T6274] loop3: rw=2049, sector=1224, nr_sectors = 8 limit=256 [ 264.948566][ T6273] loop2: detected capacity change from 0 to 32768 [ 264.978117][ T6273] JBD2: Ignoring recovery information on journal [ 265.030345][ T6273] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 265.131466][ T4412] kworker/u4:12: attempt to access beyond end of device [ 265.131466][ T4412] loop3: rw=1, sector=1232, nr_sectors = 32 limit=256 [ 265.329449][ T4312] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 265.371154][ T4312] usb 1-1: device descriptor read/8, error -71 [ 265.659672][ T4312] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 265.710336][ T4312] usb 1-1: device descriptor read/8, error -71 [ 265.809069][ T6271] device hsr_slave_1 left promiscuous mode [ 265.832401][ T4312] usb usb1-port1: unable to enumerate USB device [ 265.869814][ T4280] ocfs2: Unmounting device (7,2) on (node local) [ 265.875739][ T6279] loop3: detected capacity change from 0 to 1024 [ 265.908576][ T6279] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 266.025746][ T6279] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 267.155315][ T6293] loop1: detected capacity change from 0 to 2048 [ 267.212306][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 267.228861][ T6293] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 268.012258][ T6296] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 268.013612][ T6296] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 268.013672][ T6296] EXT4-fs (loop1): This should not happen!! Data will be lost [ 268.013672][ T6296] [ 268.013681][ T6296] EXT4-fs (loop1): Total free blocks count 0 [ 268.013690][ T6296] EXT4-fs (loop1): Free/Dirty block details [ 268.013716][ T6296] EXT4-fs (loop1): free_blocks=66060288 [ 268.013746][ T6296] EXT4-fs (loop1): dirty_blocks=48 [ 268.013756][ T6296] EXT4-fs (loop1): Block reservation details [ 268.013763][ T6296] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 268.727761][ T4443] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 269.129391][ T4840] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 269.284391][ T6310] loop2: detected capacity change from 0 to 32768 [ 269.309266][ T4840] usb 2-1: Using ep0 maxpacket: 8 [ 269.322921][ T4840] usb 2-1: config 65 has too many interfaces: 73, using maximum allowed: 32 [ 269.324055][ T6311] loop4: detected capacity change from 0 to 1024 [ 269.356394][ T4840] usb 2-1: config 65 has 3 interfaces, different from the descriptor's value: 73 [ 269.356551][ T6310] JBD2: Ignoring recovery information on journal [ 269.367295][ T4840] usb 2-1: config 65 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 269.405726][ T6311] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 269.444584][ T4840] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 269.454657][ T4840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.468252][ T4840] usb 2-1: Product: syz [ 269.473450][ T4840] usb 2-1: Manufacturer: syz [ 269.473715][ T6310] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 269.479985][ T4840] usb 2-1: SerialNumber: syz [ 269.507842][ T6311] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 269.945281][ T6311] EXT4-fs (loop4): orphan cleanup on readonly fs [ 270.016650][ T6311] EXT4-fs error (device loop4): ext4_read_inode_bitmap:168: comm syz.4.587: Inode bitmap for bg 0 marked uninitialized [ 270.098067][ T4840] snd-usb-audio: probe of 2-1:65.0 failed with error -71 [ 270.114057][ T6311] EXT4-fs (loop4): Remounting filesystem read-only [ 270.121660][ T6311] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 270.140493][ T4843] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 270.164091][ T4280] ocfs2: Unmounting device (7,2) on (node local) [ 270.391217][ T4840] usb 2-1: USB disconnect, device number 12 [ 270.459532][ T4843] usb 4-1: device descriptor read/64, error -71 [ 270.809335][ T4843] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 270.834113][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 270.969697][ T4843] usb 4-1: device descriptor read/64, error -71 [ 271.109483][ T4843] usb usb4-port1: attempt power cycle [ 271.164692][ T6323] loop0: detected capacity change from 0 to 32768 [ 271.184111][ T6323] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.591 (6323) [ 271.220758][ T6323] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 271.231207][ T6323] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 271.239919][ T6323] BTRFS info (device loop0): setting nodatacow, compression disabled [ 271.248206][ T6323] BTRFS info (device loop0): force clearing of disk cache [ 271.255641][ T6323] BTRFS info (device loop0): enabling ssd optimizations [ 271.263116][ T6323] BTRFS info (device loop0): using spread ssd allocation scheme [ 271.270821][ T6323] BTRFS info (device loop0): turning off barriers [ 271.277255][ T6323] BTRFS info (device loop0): disabling free space tree [ 271.284239][ T6323] BTRFS info (device loop0): not using ssd optimizations [ 271.291635][ T6323] BTRFS info (device loop0): not using spread ssd allocation scheme [ 271.869444][ T4843] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 271.917586][ T6323] BTRFS info (device loop0): rebuilding free space tree [ 271.953242][ T6323] BTRFS info (device loop0): disabling free space tree [ 271.960540][ T6323] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 271.971491][ T6323] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 271.993220][ T4843] usb 4-1: device descriptor read/8, error -71 [ 272.393357][ T4276] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 272.429266][ T4843] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 272.481234][ T4843] usb 4-1: device descriptor read/8, error -71 [ 272.609774][ T4843] usb usb4-port1: unable to enumerate USB device [ 272.947855][ T6372] loop3: detected capacity change from 0 to 64 [ 273.051669][ T6372] device vlan2 entered promiscuous mode [ 273.132631][ T6373] loop0: detected capacity change from 0 to 1024 [ 273.160058][ T6368] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 273.215709][ T6376] device syzkaller0 entered promiscuous mode [ 273.220499][ T6373] Quota error (device loop0): v2_read_file_info: Number of blocks too big for quota file size (6144 > 256). [ 273.266202][ T6373] EXT4-fs warning (device loop0): ext4_enable_quotas:7087: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 273.288193][ T6373] EXT4-fs (loop0): mount failed [ 273.359642][ T6368] usb 3-1: Using ep0 maxpacket: 16 [ 273.365418][ T4343] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 273.371059][ T6368] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 273.437080][ T6368] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 273.478568][ T6368] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 273.521085][ T6368] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.544630][ T6368] usb 3-1: Product: syz [ 273.550601][ T6368] usb 3-1: Manufacturer: syz [ 273.560755][ T6368] usb 3-1: SerialNumber: syz [ 273.681189][ T6384] loop3: detected capacity change from 0 to 1024 [ 273.730640][ T6384] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 273.783271][ T6368] usb 3-1: 0:2 : does not exist [ 273.796293][ T6368] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 273.815391][ T6384] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 273.853220][ T6368] usb 3-1: USB disconnect, device number 7 [ 273.863706][ T6384] EXT4-fs (loop3): orphan cleanup on readonly fs [ 273.887707][ T6384] EXT4-fs error (device loop3): ext4_read_inode_bitmap:168: comm syz.3.602: Inode bitmap for bg 0 marked uninitialized [ 273.902946][ T6384] EXT4-fs (loop3): Remounting filesystem read-only [ 273.912075][ T4843] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 273.914134][ T6384] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 274.109408][ T4843] usb 5-1: Using ep0 maxpacket: 8 [ 274.116691][ T4843] usb 5-1: config 65 has too many interfaces: 73, using maximum allowed: 32 [ 274.145916][ T4843] usb 5-1: config 65 has 3 interfaces, different from the descriptor's value: 73 [ 274.177427][ T4843] usb 5-1: config 65 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 274.241016][ T4843] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 274.277662][ T4843] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.371039][ T4843] usb 5-1: Product: syz [ 274.450896][ T4843] usb 5-1: Manufacturer: syz [ 274.473539][ T4843] usb 5-1: SerialNumber: syz [ 274.727028][ T4843] snd-usb-audio: probe of 5-1:65.0 failed with error -71 [ 274.816689][ T4843] usb 5-1: USB disconnect, device number 14 [ 274.825946][ T4390] udevd[4390]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 274.915433][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 275.899283][ T4843] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 276.064275][ T6413] device syzkaller0 entered promiscuous mode [ 276.903267][ T4843] usb 4-1: device descriptor read/64, error -71 [ 277.066125][ T6422] loop2: detected capacity change from 0 to 64 [ 277.179333][ T4843] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 277.241423][ T6422] device erspan0 entered promiscuous mode [ 277.248071][ T6422] device vlan2 entered promiscuous mode [ 277.399382][ T4843] usb 4-1: device descriptor read/64, error -71 [ 277.482253][ T6428] binder: 6426:6428 ioctl 4018620d 0 returned -22 [ 277.551330][ T6429] binder: 6426:6429 ioctl c0306201 0 returned -14 [ 278.246632][ T4843] usb usb4-port1: attempt power cycle [ 278.699280][ T4361] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 278.899341][ T4361] usb 5-1: Using ep0 maxpacket: 16 [ 278.907146][ T4361] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.981451][ T4361] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 279.115799][ T4361] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 279.324929][ T4361] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.441725][ T4361] usb 5-1: Product: syz [ 279.499743][ T4361] usb 5-1: Manufacturer: syz [ 279.566337][ T4361] usb 5-1: SerialNumber: syz [ 279.844544][ T4361] usb 5-1: 0:2 : does not exist [ 279.849265][ T4843] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 279.870450][ T4361] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 279.890008][ T4843] usb 4-1: Using ep0 maxpacket: 8 [ 279.896942][ T4843] usb 4-1: config 65 has too many interfaces: 73, using maximum allowed: 32 [ 279.930502][ T4843] usb 4-1: config 65 has 3 interfaces, different from the descriptor's value: 73 [ 279.934473][ T4361] usb 5-1: USB disconnect, device number 15 [ 279.965744][ T4843] usb 4-1: config 65 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 279.988064][ T4843] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 280.032243][ T6454] loop0: detected capacity change from 0 to 2048 [ 280.038781][ T4843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.087082][ T4843] usb 4-1: Product: syz [ 280.101106][ T4843] usb 4-1: Manufacturer: syz [ 280.114368][ T4843] usb 4-1: SerialNumber: syz [ 280.163599][ T6454] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 280.755959][ T4843] snd-usb-audio: probe of 4-1:65.0 failed with error -71 [ 280.826073][ T4843] usb 4-1: USB disconnect, device number 12 [ 280.907341][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 281.307712][ T6471] device syzkaller0 entered promiscuous mode [ 281.337676][ T6471] ================================================================== [ 281.345827][ T6471] BUG: KASAN: use-after-free in ieee80211_monitor_select_queue+0x23a/0x240 [ 281.354452][ T6471] Read of size 2 at addr ffff88807c82c5fb by task syz.2.630/6471 [ 281.362198][ T6471] [ 281.364546][ T6471] CPU: 1 PID: 6471 Comm: syz.2.630 Not tainted syzkaller #0 [ 281.371951][ T6471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 281.382124][ T6471] Call Trace: [ 281.385440][ T6471] [ 281.388401][ T6471] dump_stack_lvl+0x188/0x24e [ 281.393219][ T6471] ? __lock_acquire+0x7d10/0x7d10 [ 281.398292][ T6471] ? show_regs_print_info+0x12/0x12 [ 281.403545][ T6471] ? load_image+0x400/0x400 [ 281.408109][ T6471] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 281.413614][ T6471] ? __virt_addr_valid+0x188/0x540 [ 281.418784][ T6471] ? __virt_addr_valid+0x465/0x540 [ 281.424041][ T6471] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 281.430423][ T6471] print_report+0xa8/0x210 [ 281.434893][ T6471] kasan_report+0x10b/0x140 [ 281.439577][ T6471] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 281.445966][ T6471] ieee80211_monitor_select_queue+0x23a/0x240 [ 281.452083][ T6471] ? ieee80211_activate_links_work+0x60/0x60 [ 281.458116][ T6471] netdev_core_pick_tx+0x118/0x340 [ 281.463276][ T6471] __dev_queue_xmit+0xb19/0x37c0 [ 281.468266][ T6471] ? __dev_queue_xmit+0x26b/0x37c0 [ 281.473423][ T6471] ? netdev_core_pick_tx+0x340/0x340 [ 281.478758][ T6471] ? virtio_net_hdr_to_skb+0xac2/0x1290 [ 281.484360][ T6471] ? packet_extra_vlan_len_allowed+0x200/0x200 [ 281.490558][ T6471] ? skb_copy_datagram_from_iter+0x5e0/0x690 [ 281.496590][ T6471] packet_sendmsg+0x3bc3/0x4e60 [ 281.501497][ T6471] ? __schedule+0x119d/0x40e0 [ 281.506318][ T6471] ? __might_sleep+0xd0/0xd0 [ 281.510948][ T6471] ? verify_lock_unused+0x140/0x140 [ 281.516280][ T6471] ? aa_sk_perm+0x81f/0x950 [ 281.520824][ T6471] ? packet_getsockopt+0x9a0/0x9a0 [ 281.525979][ T6471] ? aa_sock_msg_perm+0x94/0x150 [ 281.530957][ T6471] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 281.536285][ T6471] ? security_socket_sendmsg+0x7c/0xa0 [ 281.541803][ T6471] ? packet_getsockopt+0x9a0/0x9a0 [ 281.547001][ T6471] ____sys_sendmsg+0x5be/0x970 [ 281.551906][ T6471] ? __sys_sendmsg_sock+0x30/0x30 [ 281.556988][ T6471] ? __import_iovec+0x315/0x500 [ 281.561883][ T6471] ? import_iovec+0x6f/0xa0 [ 281.566419][ T6471] ___sys_sendmsg+0x2a2/0x360 [ 281.571131][ T6471] ? try_to_wake_up+0x6ae/0x1080 [ 281.576110][ T6471] ? __sys_sendmsg+0x290/0x290 [ 281.580939][ T6471] __se_sys_sendmsg+0x1bb/0x2a0 [ 281.585839][ T6471] ? __x64_sys_sendmsg+0x80/0x80 [ 281.590926][ T6471] ? lockdep_hardirqs_on+0x94/0x140 [ 281.596158][ T6471] do_syscall_64+0x4c/0xa0 [ 281.600617][ T6471] ? clear_bhb_loop+0x60/0xb0 [ 281.605338][ T6471] ? clear_bhb_loop+0x60/0xb0 [ 281.610054][ T6471] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 281.616075][ T6471] RIP: 0033:0x7fa77039c819 [ 281.620524][ T6471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.640178][ T6471] RSP: 002b:00007fa7711ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 281.648642][ T6471] RAX: ffffffffffffffda RBX: 00007fa770615fa0 RCX: 00007fa77039c819 [ 281.656755][ T6471] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 281.664788][ T6471] RBP: 00007fa770432c91 R08: 0000000000000000 R09: 0000000000000000 [ 281.672808][ T6471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 281.680829][ T6471] R13: 00007fa770616038 R14: 00007fa770615fa0 R15: 00007fffe80592c8 [ 281.689129][ T6471] [ 281.692189][ T6471] [ 281.694547][ T6471] Allocated by task 3637: [ 281.698911][ T6471] kasan_set_track+0x4b/0x70 [ 281.703552][ T6471] __kasan_slab_alloc+0x6b/0x80 [ 281.708633][ T6471] slab_post_alloc_hook+0x4b/0x480 [ 281.714219][ T6471] kmem_cache_alloc+0x123/0x2f0 [ 281.719196][ T6471] getname_flags+0xb7/0x500 [ 281.723742][ T6471] do_sys_openat2+0xdd/0x4b0 [ 281.728400][ T6471] __x64_sys_openat+0x135/0x160 [ 281.733304][ T6471] do_syscall_64+0x4c/0xa0 [ 281.737762][ T6471] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 281.743712][ T6471] [ 281.746069][ T6471] Freed by task 3637: [ 281.750093][ T6471] kasan_set_track+0x4b/0x70 [ 281.754916][ T6471] kasan_save_free_info+0x2d/0x50 [ 281.759991][ T6471] ____kasan_slab_free+0x126/0x1e0 [ 281.765154][ T6471] slab_free_freelist_hook+0x131/0x1a0 [ 281.770659][ T6471] kmem_cache_free+0xf7/0x290 [ 281.775460][ T6471] do_sys_openat2+0x20c/0x4b0 [ 281.780184][ T6471] __x64_sys_openat+0x135/0x160 [ 281.785087][ T6471] do_syscall_64+0x4c/0xa0 [ 281.789548][ T6471] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 281.795579][ T6471] [ 281.797948][ T6471] The buggy address belongs to the object at ffff88807c82c400 [ 281.797948][ T6471] which belongs to the cache names_cache of size 4096 [ 281.812481][ T6471] The buggy address is located 507 bytes inside of [ 281.812481][ T6471] 4096-byte region [ffff88807c82c400, ffff88807c82d400) [ 281.825976][ T6471] [ 281.828329][ T6471] The buggy address belongs to the physical page: [ 281.834779][ T6471] page:ffffea0001f20a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c828 [ 281.845057][ T6471] head:ffffea0001f20a00 order:3 compound_mapcount:0 compound_pincount:0 [ 281.853493][ T6471] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 281.861591][ T6471] raw: 00fff00000010200 ffffea000154c000 dead000000000002 ffff888140009640 [ 281.870290][ T6471] raw: 0000000000000000 0000000000070007 00000001ffffffff 0000000000000000 [ 281.878874][ T6471] page dumped because: kasan: bad access detected [ 281.885370][ T6471] page_owner tracks the page as allocated [ 281.891086][ T6471] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3617, tgid 3617 (start-stop-daem), ts 22417281121, free_ts 20378258641 [ 281.912750][ T6471] post_alloc_hook+0x173/0x1a0 [ 281.917533][ T6471] get_page_from_freelist+0x1a1e/0x1ab0 [ 281.923104][ T6471] __alloc_pages+0x1ec/0x4f0 [ 281.927707][ T6471] alloc_slab_page+0x5d/0x160 [ 281.932396][ T6471] new_slab+0x87/0x2c0 [ 281.936535][ T6471] ___slab_alloc+0xbc6/0x1240 [ 281.941226][ T6471] kmem_cache_alloc+0x1b7/0x2f0 [ 281.946102][ T6471] getname_flags+0xb7/0x500 [ 281.950614][ T6471] user_path_at_empty+0x28/0x60 [ 281.955554][ T6471] do_faccessat+0x3bd/0xa10 [ 281.960067][ T6471] do_syscall_64+0x4c/0xa0 [ 281.964493][ T6471] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 281.970479][ T6471] page last free stack trace: [ 281.975148][ T6471] free_unref_page_prepare+0x8b4/0x9a0 [ 281.980645][ T6471] free_unref_page+0x2e/0x3f0 [ 281.985339][ T6471] free_contig_range+0x9d/0x150 [ 281.990227][ T6471] destroy_args+0xf0/0xa0a [ 281.994680][ T6471] debug_vm_pgtable+0x33c/0x38e [ 281.999566][ T6471] do_one_initcall+0x26a/0x840 [ 282.004351][ T6471] do_initcall_level+0x137/0x1e4 [ 282.009302][ T6471] do_initcalls+0x4b/0x8a [ 282.013705][ T6471] kernel_init_freeable+0x415/0x5be [ 282.018920][ T6471] kernel_init+0x19/0x1b0 [ 282.023257][ T6471] ret_from_fork+0x1f/0x30 [ 282.027683][ T6471] [ 282.030011][ T6471] Memory state around the buggy address: [ 282.035645][ T6471] ffff88807c82c480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 282.043709][ T6471] ffff88807c82c500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 282.051771][ T6471] >ffff88807c82c580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 282.059920][ T6471] ^ [ 282.067898][ T6471] ffff88807c82c600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 282.075960][ T6471] ffff88807c82c680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 282.084022][ T6471] ================================================================== [ 282.092176][ T6471] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 282.099405][ T6471] CPU: 1 PID: 6471 Comm: syz.2.630 Not tainted syzkaller #0 [ 282.106727][ T6471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 282.117064][ T6471] Call Trace: [ 282.120377][ T6471] [ 282.123344][ T6471] dump_stack_lvl+0x188/0x24e [ 282.128080][ T6471] ? memcpy+0x3c/0x60 [ 282.132114][ T6471] ? show_regs_print_info+0x12/0x12 [ 282.137366][ T6471] ? load_image+0x400/0x400 [ 282.141922][ T6471] panic+0x2e5/0x730 [ 282.145857][ T6471] ? asm_common_interrupt+0x22/0x40 [ 282.151097][ T6471] ? bpf_jit_dump+0xd0/0xd0 [ 282.155643][ T6471] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 282.161588][ T6471] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 282.167523][ T6471] ? _raw_spin_unlock+0x40/0x40 [ 282.172410][ T6471] check_panic_on_warn+0x80/0xa0 [ 282.177401][ T6471] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 282.183867][ T6471] end_report+0x66/0x110 [ 282.188161][ T6471] kasan_report+0x118/0x140 [ 282.192801][ T6471] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 282.199092][ T6471] ieee80211_monitor_select_queue+0x23a/0x240 [ 282.205286][ T6471] ? ieee80211_activate_links_work+0x60/0x60 [ 282.211307][ T6471] netdev_core_pick_tx+0x118/0x340 [ 282.216731][ T6471] __dev_queue_xmit+0xb19/0x37c0 [ 282.221717][ T6471] ? __dev_queue_xmit+0x26b/0x37c0 [ 282.226960][ T6471] ? netdev_core_pick_tx+0x340/0x340 [ 282.232393][ T6471] ? virtio_net_hdr_to_skb+0xac2/0x1290 [ 282.238169][ T6471] ? packet_extra_vlan_len_allowed+0x200/0x200 [ 282.244364][ T6471] ? skb_copy_datagram_from_iter+0x5e0/0x690 [ 282.250582][ T6471] packet_sendmsg+0x3bc3/0x4e60 [ 282.255477][ T6471] ? __schedule+0x119d/0x40e0 [ 282.260193][ T6471] ? __might_sleep+0xd0/0xd0 [ 282.263451][ T6468] loop4: detected capacity change from 0 to 32768 [ 282.271339][ T6471] ? verify_lock_unused+0x140/0x140 [ 282.276597][ T6471] ? aa_sk_perm+0x81f/0x950 [ 282.281146][ T6471] ? packet_getsockopt+0x9a0/0x9a0 [ 282.286330][ T6471] ? aa_sock_msg_perm+0x94/0x150 [ 282.291290][ T6471] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 282.296590][ T6471] ? security_socket_sendmsg+0x7c/0xa0 [ 282.302076][ T6471] ? packet_getsockopt+0x9a0/0x9a0 [ 282.307205][ T6471] ____sys_sendmsg+0x5be/0x970 [ 282.312019][ T6471] ? __sys_sendmsg_sock+0x30/0x30 [ 282.317199][ T6471] ? __import_iovec+0x315/0x500 [ 282.322235][ T6471] ? import_iovec+0x6f/0xa0 [ 282.326814][ T6471] ___sys_sendmsg+0x2a2/0x360 [ 282.331545][ T6471] ? try_to_wake_up+0x6ae/0x1080 [ 282.336492][ T6471] ? __sys_sendmsg+0x290/0x290 [ 282.341287][ T6471] __se_sys_sendmsg+0x1bb/0x2a0 [ 282.346152][ T6471] ? __x64_sys_sendmsg+0x80/0x80 [ 282.351106][ T6471] ? lockdep_hardirqs_on+0x94/0x140 [ 282.356308][ T6471] do_syscall_64+0x4c/0xa0 [ 282.360799][ T6471] ? clear_bhb_loop+0x60/0xb0 [ 282.365481][ T6471] ? clear_bhb_loop+0x60/0xb0 [ 282.370185][ T6471] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 282.376088][ T6471] RIP: 0033:0x7fa77039c819 [ 282.380518][ T6471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.400313][ T6471] RSP: 002b:00007fa7711ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 282.409012][ T6471] RAX: ffffffffffffffda RBX: 00007fa770615fa0 RCX: 00007fa77039c819 [ 282.417251][ T6471] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 282.425227][ T6471] RBP: 00007fa770432c91 R08: 0000000000000000 R09: 0000000000000000 [ 282.433328][ T6471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 282.441395][ T6471] R13: 00007fa770616038 R14: 00007fa770615fa0 R15: 00007fffe80592c8 [ 282.449381][ T6471] [ 282.453039][ T6471] Kernel Offset: disabled [ 282.457363][ T6471] Rebooting in 86400 seconds..