last executing test programs: 2m20.565185732s ago: executing program 0 (id=1): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x32, 0x1, 0x70bd2a, 0x25dbdbfe, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x3214212, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES32], 0x7, 0xf11, &(0x7f0000001100)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x112) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000200)=[{0x0, 0x60}, {&(0x7f0000000180)="5200000000000000c93301a599d9421f073e0ef00222ae25", 0x18}], 0x2}, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events.local\x00', 0x275a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010003b0c00"/20, @ANYRES32=r5, @ANYBLOB="1000000000180200280012800b00010065727370616e000018000280040012000500160001000000080015"], 0x48}}, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f0000000280), 0x80000000002, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 2m14.359727665s ago: executing program 0 (id=11): fcntl$lock(0xffffffffffffffff, 0x6, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x4c}}, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_bond\x00'}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macsec0\x00'}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x3}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x40040) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) write$tun(r3, &(0x7f00000002c0)={@void, @void, @llc={@snap={0x2, 0x1, "ae", "b6141f", 0x8, "9fbc126e1c08623c4cef052b9f81b79601c9883442cfe4c91b4ef5091cf2534ed4858fd6900b57fa54902bac875a97772699f70ff01725bba4fadec47b711dc196f1c2f1b6f69f02c56ec02d8c00"}}}, 0x56) ioctl$KVM_XEN_HVM_CONFIG(r6, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000105, 0x0, 0x0}) ioctl$KVM_GET_MP_STATE(r4, 0x8004ae98, &(0x7f0000000000)) syz_emit_ethernet(0x2a, &(0x7f0000000280)={@local, @random="429e82211cf8", @val={@void, {0x8100, 0x1, 0x1, 0x1}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x0, 0x18, 0x67, 0x0, 0x2, 0x89, 0x0, @rand_addr=0x64010100, @multicast1}, "7550d72e"}}}}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m58.330090893s ago: executing program 32 (id=11): fcntl$lock(0xffffffffffffffff, 0x6, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x4c}}, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_bond\x00'}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macsec0\x00'}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x3}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x40040) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) write$tun(r3, &(0x7f00000002c0)={@void, @void, @llc={@snap={0x2, 0x1, "ae", "b6141f", 0x8, "9fbc126e1c08623c4cef052b9f81b79601c9883442cfe4c91b4ef5091cf2534ed4858fd6900b57fa54902bac875a97772699f70ff01725bba4fadec47b711dc196f1c2f1b6f69f02c56ec02d8c00"}}}, 0x56) ioctl$KVM_XEN_HVM_CONFIG(r6, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000105, 0x0, 0x0}) ioctl$KVM_GET_MP_STATE(r4, 0x8004ae98, &(0x7f0000000000)) syz_emit_ethernet(0x2a, &(0x7f0000000280)={@local, @random="429e82211cf8", @val={@void, {0x8100, 0x1, 0x1, 0x1}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x0, 0x18, 0x67, 0x0, 0x2, 0x89, 0x0, @rand_addr=0x64010100, @multicast1}, "7550d72e"}}}}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m54.079886776s ago: executing program 2 (id=46): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast2, @in6=@loopback, 0x3, 0x5, 0x0, 0x0, 0x2}, {}, {0x0, 0x100000000000000}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) 1m52.279688414s ago: executing program 2 (id=49): socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x80802, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) epoll_create1(0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000ff0000000000000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x48010) 1m50.47965669s ago: executing program 2 (id=51): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x9, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xaae5, 0x0, 0x0, 0x0, 0xfffffffe}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @jmp={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x531b}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r1}, 0x10) 1m49.52397812s ago: executing program 2 (id=54): syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0xc0ed000a, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@nolazytime}, {@debug}, {@noload}, {@auto_da_alloc}, {@commit={'commit', 0x3d, 0x5}}, {@lazytime}, {@discard}, {@nodelalloc}]}, 0xfe, 0x473, &(0x7f00000004c0)="$eJzs3M1vFOUfAPDvTF8ob7/2h/gCglbRiG8tLS9y8KBGEw6YmOgB46m2C6ks1NCaCCFaPeDRkHg33v0DjCe9GPVk4lXvhoQYLqCnNbMzA0u7W7plywL7+STTfZ6ZZ3me78w8O8/Ms0sAPWs0+5NEbImIPyJiOM/eXGA0f7l25fz0P1fOTydRq739d1Ivd/XK+emyaPm+zXmmVivyG5rUe+G9iKlqtXKmyI8vnPpwfP7suRdnT02dqJyonJ48fPjA/t2DhyYPNr5taK1xZnFd3fnJ3K4dR969+Ob0sYvv//Jt1t4txfbGODplNN+7TT3d6cq6bGtDOunvYkNoS19EZIdroN7/h6MvNl7fNhxvfN7VxgHrqlar1ZpdnwuLNeA+lkS3WwB0R3mhz+5/y+UODT3uCpdfzW+AsrivFUu+pT/SPPH4wJL7204ajYhji/9+nS2xTs8hAAAa/ZCNf15oNv5L46E8MZj9+V8xhzISEf+PiG0R8UBEbI+IByPqZR+OiEfarH/pDMny8U96ac3BrUI2/nu5mNu6efyXlkVG+orc1nr8A8nx2WplX7FP9sbAhuOzSWVihTp+fP33L1ttaxz/ZUtWfzkWLNpxqX/JA7qZqYWp24m50eXPInb2N4s/iXIaJ4mIHRGxc411zD7XekLo1vGvoAPzTLVvIp7Jj/9iLIm/lLScn5x46dDkwfGhqFb2jZdnxXK//nbhrVb13xx/DLUVfwdkx39T0/P/evwjyVDE/NlzJ+vztfPt13Hhzy9a3tO0ef4f2Vqc/4PJO/UVg8WGj6cWFs5MRAwmR5evn7zxr5X5snwW/949zfv/trixJx6NiF0RsTsiHstuCou2PxERT0bEnhXi//m1pz5oP/4Vnsp3UBb/zK2OfzQe//YTfSd/+r79+EvZ8T9QT+0t1qzm82+1DbydfQcAAAD3irT+HfgkHbueTtOxsfw7/NtjU1qdm194/vjcR6dn8u/Kj8RAWj7pGm54HjpRPBsu85NL8vuL58Zf9W2s58em56oz3Q4eetzmFv0/81dft1sHrLs1zKO9sh7tAO48v9eE3qX/Q29K9H/oafo/9K5m/f/TlqXHvlvXxgB3lOs/9K5V9P/F/KX1qAC4N7n+Q+/S/6EntfxtfHpbP/mX6Fji6LNJ3AXNWJaI9K5oxv2f6F/1f2bRRqI2nPf/bM2GpmW6/ckEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQGf8FAAD//5qc4N0=") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1c0000000, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x82400, 0x184) getdents(r1, 0x0, 0x40) r2 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x2804, 0x10100}, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff56}) io_uring_enter(r2, 0x7a98, 0x0, 0x0, 0x0, 0x0) r5 = syz_usb_connect$cdc_ncm(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write(r5, 0x4, 0x0, 0x0) 1m46.399660479s ago: executing program 2 (id=59): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x10, &(0x7f0000000580)=ANY=[@ANYRESDEC=0x0], 0x14, 0x550f, &(0x7f00000089c0)="$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") r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x1, [{0x0, 0x2}]}, @const={0x0, 0x0, 0x0, 0xa, 0x2}, @func_proto]}}, 0x0, 0x4a, 0x0, 0x1}, 0x28) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) tee(0xffffffffffffffff, r2, 0xf3a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0x1, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000880)=@generic={&(0x7f0000000840)='./file1\x00', 0x0, 0x18}, 0x18) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000010069000100"/28], 0x50) r7 = syz_open_dev$vcsn(&(0x7f0000000100), 0x6c99, 0x40041) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x8bd4cec) write$P9_RLERROR(r7, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0xb) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="02000000040000000800"/20, @ANYRES32=0x1, @ANYBLOB="0100008000"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="04000000030000000200"/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)='%pI4 \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x23, &(0x7f0000000d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xd10}, [@call={0x85, 0x0, 0x0, 0x8d}, @ldst={0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffffffffffff4, 0xfffffffffffffffc}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_fd={0x18, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x45a3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff8001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x5}}, @alu={0x7, 0x1, 0x1, 0x3, 0x5, 0x8, 0x1}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffff8}]}, &(0x7f00000001c0)='syzkaller\x00', 0x7f, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f00000007c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000800)={0x0, 0xf, 0xffffcaca, 0xff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[r5, r6, r2, r8, r9], 0x0, 0x10, 0x4}, 0x94) r10 = openat(r1, &(0x7f0000000200)='./file0/file0\x00', 0x159a40, 0x19) sendmsg$ETHTOOL_MSG_DEBUG_SET(r10, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000b80)=ANY=[@ANYBLOB="ac000000", @ANYRES16=0x0, @ANYBLOB="00042dbd7000fcdbdf250800000098000280040001007f000500778ed3c1a65a79e7a35d72750fedf5daa0a244f9806dd096cd376c5a74dd23597b36ec846e276f18b7ca0ceb699975c576e3aea6df9e4b77aeba4c2109143392c414f1c913b4a349f8591c09fe95fd037518443bc9faa3eea6c394f67a6e5300bb7aeaa53c94b4adc5e511b0dc41b335d5fe5e092e26838616d711f17c36678e8569f28f890004000100040001000800020000800000"], 0xac}, 0x1, 0x0, 0x0, 0x4}, 0x4000) write$binfmt_format(r10, &(0x7f00000000c0)='1\x00', 0xfffffea7) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x40407, &(0x7f0000000140)={[{@uuid_off}, {@nfs_export_on}, {@redirect_dir_follow}], [], 0x2c}) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000080)=0x81, 0x43) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip6gretap0\x00', 0x0}) r13 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x0) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r13, 0x4c0a, &(0x7f00000002c0)={r14, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xd, "fee8a2a478fc179fd2f8dda1af1ea89de2b7fb0a0100000000000000000300000000000004000000000000000000000000000500", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac001000", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}}) ioctl$LOOP_SET_DIRECT_IO(r13, 0x4c08, 0x591) sendto$packet(r11, &(0x7f0000000180)="0b036800e0ff640002004754a303", 0xfffffdff, 0x871, &(0x7f0000000240)={0x11, 0x16, r12, 0x1, 0x8}, 0x14) 1m42.707558926s ago: executing program 2 (id=67): openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000200)={0x28, 0x4, 0x0, {0x4, 0x808d}}, 0x28) 1m39.194398846s ago: executing program 33 (id=67): openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000200)={0x28, 0x4, 0x0, {0x4, 0x808d}}, 0x28) 1m4.40394022s ago: executing program 5 (id=39): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000fc0)={0x1138, 0x33, 0x100, 0x70bd26, 0x25dfdbfd, "", [@nested={0x1024, 0xfb, 0x0, 0x1, [@nested={0x101d, 0x13, 0x0, 0x1, [@generic="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", @typed={0x14, 0x122, 0x0, 0x0, @ipv6=@private0}, @typed={0x8, 0x10, 0x0, 0x0, @u32=0x7}]}]}, @generic="d90a58cde601d565cdddcc6aa3fcc8c25583297245b4d7973d0df9b022c59bb26343d8fac6abbe023d9e0640355e0034d2aca4a49132b88c8660af242102d45a28332c4b796cc5268b9a5ec5b61042577e3e5ea90f21384e8c5852110520bfd976705ca7e25e8a5ac6dd7bdadeb451f164c86cdb89561b05f0b9e143b1917e3dd99ee920f46511a803ab9cf9dd2d6aaf8aee259d1476cd960ce44acbc6a970c4fdd6f99aeee46de8efec7151b1e4cc13cd723e9cfa7ba2f69b60189d7aff553101c449174d1e18b6c5b148275100a3f8bd0c4c96296c43028aa284f8f626392a21d31e5e06fe98065e0246d46b7fe927a8", @typed={0x8, 0x63, 0x0, 0x0, @u32=0x1}, @typed={0x8, 0x18, 0x0, 0x0, @u32=0x4}]}, 0x1138}], 0x1, 0x0, 0x0, 0x10004800}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x141600, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m3.009084734s ago: executing program 1 (id=118): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000000000100000000000008500000097000000850000008a00000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) 1m2.863693596s ago: executing program 5 (id=119): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8a73, 0x800, 0x2, 0x800001b7}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1}) io_uring_enter(r2, 0x47ba, 0x3000000, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x4, 0x8, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) 1m2.251740192s ago: executing program 1 (id=120): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000fc0)={0x10, 0x33, 0x100, 0x70bd26, 0x25dfdbfd}, 0x10}], 0x1, 0x0, 0x0, 0x10004800}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x141600, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m1.87329255s ago: executing program 5 (id=122): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xfc, 0x7ffffffc}]}) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x3751, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000300)={r1, r1, r1}, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r4 = memfd_secret(0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r5, 0x1, &(0x7f00000002c0)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) fanotify_mark(r4, 0x209, 0x20, r6, &(0x7f0000000180)='./file0\x00') sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xffffb1e0}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) read$FUSE(r7, &(0x7f00000011c0)={0x2020}, 0x2020) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x1, 0x0, 0xc}) 1m0.688598182s ago: executing program 1 (id=124): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x2}]}]}}, 0x0, 0x32, 0x0, 0xa, 0x0, 0x1a00}, 0x28) 59.946836814s ago: executing program 1 (id=127): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x1010, r0, 0x7e435000) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) mmap$snddsp_control(&(0x7f0000ffb000/0x2000)=nil, 0x1000, 0x100000c, 0x10, r0, 0x83000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fchown(r0, 0x0, r1) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e24, @empty}}, [0xd, 0x101, 0x4, 0x80000001, 0x7, 0x0, 0x9, 0x1, 0x2, 0xa05a, 0x0, 0x5, 0x6, 0x6556, 0x3da9]}, &(0x7f0000000240)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000280)={0x8, 0x4, 0x8, 0xde, 0x0}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000300)={r2, 0x10, 0x9, 0x1, 0x1, 0x4, 0x7, 0x2, {r3, @in6={{0xa, 0x4e23, 0x101, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffa}}, 0x3, 0x9492, 0x10000, 0xca8, 0xc31c}}, &(0x7f00000003c0)=0xb0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000400)={r2, 0x2e, 0x3ff}, 0x8) r4 = userfaultfd(0x0) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000000840)={0x5, 0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/122, 0x7a}, {&(0x7f00000004c0)=""/226, 0xe2}, {&(0x7f00000005c0)=""/243, 0xf3}, {&(0x7f00000006c0)=""/70, 0x46}, {&(0x7f0000000740)=""/27, 0x1b}], &(0x7f0000000800)=[0x8, 0xfffffffeffffffff]}, 0x20) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000880)={0x0, r0}, 0x8) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40c0}, 0x4024801) pwrite64(r4, &(0x7f00000009c0)="7e9b22ab4b260640eb40cc2f4c52ece3561b9ec4fb3246e15f56c25f345df0957cc4bfe8d7c07cc57cd81e04a6c606a952d517b4786bd7f2fe016bc4b57d86b81aae5ad45fe61e11fd9e5c1eb2e4e52596e7c5d79e0d59dbd2eae2e6a510110d1a0dc1c983d0d00ed9e2f6f94ad5996b7559611d0fce9279592996aa2154e8076ed820dd6a7c99dd590e6cbd0b3e19a2f49e1385fa5393d43ccacf7b59547eeac2124b15d5182e27016c618444ce4fdf572880c12cbaf82e7ce1f9b835d14e4c1dbe7c426e46689c68", 0xc9, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000b00)={'gre0\x00', &(0x7f0000000ac0)={'tunl0\x00', 0x0, 0x20, 0x3fcf7f634ebd6e0, 0x0, 0x2, {{0x6, 0x4, 0x3, 0x2d, 0x18, 0x64, 0x0, 0x7f, 0x2f, 0x0, @rand_addr=0x64010102, @broadcast, {[@noop]}}}}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0x10, 0x9, 0x4, 0x61, 0x4008, r0, 0x3, '\x00', r6, r0, 0x5, 0x0, 0x4}, 0x50) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000bc0)={0x2, [0x8, 0x667]}, &(0x7f0000000c00)=0x8) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000000c40)) fdatasync(r4) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000c80)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x5}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000cc0)=0x0) ptrace$setregset(0x4205, r8, 0x6, &(0x7f0000000d40)={&(0x7f0000000d00)="75b928a8af3b4351394f4b28d7da3153f7", 0x11}) r9 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000d80), 0x181e00, 0x0) ioctl$DRM_IOCTL_RM_MAP(r9, 0x4028641b, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil}) r10 = dup(r7) ioctl$BLKRRPART(r10, 0x125f, 0x0) 59.096021945s ago: executing program 1 (id=129): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r2, 0x8955, &(0x7f00000004c0)={{0x2, 0x0, @broadcast}, {0x0, @random="9f444415c302"}, 0xffffff6f, {0x2, 0x0, @broadcast}, 'veth0\x00'}) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d000900ea11c21d0005000000", 0x29}], 0x1) 57.878850366s ago: executing program 1 (id=131): ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000080)={@mcast2, 0x52}) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100fec0000000000000080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xd) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x1fc) 46.471090016s ago: executing program 34 (id=122): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xfc, 0x7ffffffc}]}) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x3751, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000300)={r1, r1, r1}, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r4 = memfd_secret(0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r5, 0x1, &(0x7f00000002c0)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) fanotify_mark(r4, 0x209, 0x20, r6, &(0x7f0000000180)='./file0\x00') sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xffffb1e0}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) read$FUSE(r7, &(0x7f00000011c0)={0x2020}, 0x2020) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x1, 0x0, 0xc}) 42.34585625s ago: executing program 35 (id=131): ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000080)={@mcast2, 0x52}) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100fec0000000000000080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xd) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x1fc) 14.727956232s ago: executing program 3 (id=199): r0 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e04fd0a20"], 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)={0x1c, 0x2a, 0x107, 0x1, 0x0, {0x2, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x76}]}]}, 0x1c}}, 0xc000) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680), 0x0, 0x5, 0x0, 0x0, r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$MSR(0x0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xe5, 0xc9, 0x50, 0x40, 0x681, 0x10, 0x6d59, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xd9, 0xfd}}]}}]}}, 0x0) ioctl$EVIOCGMASK(r4, 0x5b02, 0x0) 12.471037308s ago: executing program 4 (id=201): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000c280)={0x2020, 0x0, 0x0}, 0x2020) setuid(0xee01) write$FUSE_INIT(r2, &(0x7f0000000380)={0x50, 0x0, r3, {0x7, 0x28, 0x0, 0x4000a004, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x24522716a989086f, 0x1}}, 0x50) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ppoll(&(0x7f0000000080)=[{r4, 0x1130}, {r4, 0x4}], 0x2, 0x0, 0x0, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f0000000240), 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ffb000/0x4000)=nil, 0x1000, 0xb, 0x2012, r7, 0x82000000) setns(r6, 0x24020000) mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2012024, 0x0) read$FUSE(r1, &(0x7f0000002300)={0x2020}, 0xfcdd) 10.468455136s ago: executing program 6 (id=203): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x4000000, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x8db1b}]}}}]}, 0x4c}}, 0x0) 9.163630089s ago: executing program 3 (id=204): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e640000000014000280050001000400000006001900c886"], 0x44}}, 0x0) 8.207608593s ago: executing program 6 (id=205): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast2, @in6=@loopback, 0x3, 0x5, 0x0, 0x0, 0x2}, {}, {0x0, 0x500000000000000}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) 8.207217064s ago: executing program 3 (id=206): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000100), 0x1, 0x599, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143041, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1500ff0f) 6.91637807s ago: executing program 4 (id=207): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r2, 0x8955, &(0x7f00000004c0)={{0x2, 0x0, @broadcast}, {0x0, @random="9f444415c302"}, 0xffffff6f, {0x2, 0x0, @broadcast}, 'veth0\x00'}) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="1c0000001e00190f00003fffffffda060200000000e80001dd0008040d000900ea11c21d0005000000", 0x29}], 0x1) 6.635150756s ago: executing program 6 (id=208): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) 5.875654474s ago: executing program 6 (id=209): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000e00000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) 5.666758997s ago: executing program 3 (id=210): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x3, @remote, 'vcan0\x00'}}, 0x1e) sendmmsg$sock(r1, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="15", 0x1}], 0x48}}], 0x1, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x38, r2, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0xffffffffffffff93}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}]}, 0x38}}, 0x0) 5.479073972s ago: executing program 4 (id=211): syz_mount_image$msdos(&(0x7f0000003a40), &(0x7f0000000100)='./file0\x00', 0x1a4a438, &(0x7f0000000080)=ANY=[], 0x4b, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cbec85bf8e749e04e"], 0x11, 0x443f, &(0x7f00000088c0)="$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") name_to_handle_at(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], 0x0, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f0000000d40)={[{@nombcache}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@mblk_io_submit}, {@nodiscard}, {@resuid}, {@grpjquota}, {}]}, 0x0, 0x7b1, &(0x7f00000004c0)="$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") chdir(0x0) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f40)=@bpf_tracing={0x1a, 0x12, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf81, 0x0, 0x0, 0x0, 0x100}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_fd={0x18, 0xb}, @jmp={0x5, 0x1, 0x3, 0x2, 0x5, 0x1, 0x8}, @alu={0x7, 0x1, 0x5, 0x2, 0x4, 0x0, 0x8}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @map_fd={0x18, 0x4}]}, &(0x7f0000000e00)='GPL\x00', 0xd, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000e80)={0x4, 0xf, 0x9, 0x2}, 0x10, 0xc3ff, r0, 0x1, &(0x7f0000000ec0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000f00)=[{0x1, 0x1, 0xb, 0xa}], 0x10, 0x5}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001180)={@map, r2, 0x14, 0x2004}, 0x20) clock_gettime(0x7, &(0x7f0000000440)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 4.423897382s ago: executing program 6 (id=212): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f0000000c80)={[{@nombcache}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@mblk_io_submit}, {@minixdf}, {@resuid}, {@grpjquota}, {}]}, 0x0, 0x7b1, &(0x7f00000004c0)="$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") syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000540)={[{@gid_ignore}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@utf8}, {@uid}, {@longad}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@volume={'volume', 0x3d, 0xf3}}, {@dmode={'dmode', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@undelete}, {@gid_forget}, {@uid}]}, 0x1, 0xc80, &(0x7f0000000f40)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000100)={0x2, 0x2ae, 0xc, 0x3, 0x2, 0x8000}) mount$overlay(0x0, 0x0, 0x0, 0x20cc0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = gettid() ioprio_get$pid(0x2, r2) io_setup(0x4, &(0x7f00000001c0)=0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) io_submit(r3, 0x1, &(0x7f0000002200)=[0x0]) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4012) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189) r4 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 3.272961414s ago: executing program 4 (id=213): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x20001, 0x0) ioctl$FIONREAD(r1, 0x541b, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4020ae46, &(0x7f00000003c0)=ANY=[]) 1.91580291s ago: executing program 3 (id=214): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000940)=ANY=[@ANYBLOB='allow_utime=00000000000000000006605,sys_tz,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',iocharset=cp936,namecase=1,keep_last_dots,gid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x152f, &(0x7f00000037c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fadvise64(r0, 0x9, 0x0, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x0, &(0x7f0000000440), 0x1, 0x559d, &(0x7f0000005680)="$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") 1.591928155s ago: executing program 4 (id=215): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800010600000000100100000e"], 0x10b8}, 0x0) 705.754504ms ago: executing program 6 (id=216): syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x80402) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) pipe2$9p(0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) setpriority(0x0, 0x1, 0xa7a8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c0002400000"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) 486.125352ms ago: executing program 4 (id=217): r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee688655887", 0x0, 0x80adf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x6a, 0x0, &(0x7f0000000200)="00001dde73622c5e2fe73c522108002164a9a74b4fefdeec0804bd63a997935f1e140e1e9d2f967e9fea34e2a1ff50d0ce864ac3c239218d5948c40c36d9733d5d62f285886303affc5cf10c5a31249aaca547ce3a4c30d1276e7e68f1d5c6ef2ecf26df9c0e5d3eca17", 0x0, 0x80000002, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40}, 0x4c) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) read(r5, &(0x7f0000000000)=""/122, 0x7a) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000340)="fb", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x8}, 0x1c) r6 = socket$qrtr(0x2a, 0x2, 0x0) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r7, &(0x7f0000000200)=ANY=[@ANYBLOB="03040000b50000000100fefffeefffff"], 0xc8) sendmsg$sock(r6, &(0x7f0000001540)={&(0x7f0000000140)=@pppoe={0x2a, 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, 'lo\x00'}}, 0x80, 0x0}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'sh\x00'}, 0x2c) close(r0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 0s ago: executing program 3 (id=218): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x1, 0x490, &(0x7f0000000580)="$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") r0 = open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) r1 = open(&(0x7f0000000080)='./file1\x00', 0x14927e, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x4002011, r1, 0x3000) fallocate(r1, 0x0, 0x0, 0x1000f4) fallocate(r0, 0x8, 0x0, 0x10000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3804402, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@nolazytime}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x55f, &(0x7f0000000c80)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) socket$inet6(0xa, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) r2 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x0, 0x0, 0xc8, r7}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x19) write$binfmt_format(r8, &(0x7f0000000000)='1\x00', 0xb000) kernel console output (not intermixed with test programs): 2 [ 205.957093][ T5823] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 205.973054][ T5826] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 205.980948][ T5115] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 206.009533][ T49] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 206.019597][ T5826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 206.027589][ T5115] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 206.049270][ T5115] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 206.059528][ T49] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 206.074198][ T49] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 206.082670][ T5826] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 206.093067][ T49] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 206.105402][ T49] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 206.110288][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 206.121516][ T49] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 206.133199][ T49] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 206.149744][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 206.184603][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 207.535354][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 207.997316][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 208.091383][ T5115] Bluetooth: hci1: command tx timeout [ 208.097023][ T5115] Bluetooth: hci0: command tx timeout [ 208.226049][ T5826] Bluetooth: hci2: command tx timeout [ 208.231900][ T5115] Bluetooth: hci3: command tx timeout [ 208.279079][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 208.299101][ T5826] Bluetooth: hci4: command tx timeout [ 208.783570][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 208.852242][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 208.945650][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.953407][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.961348][ T5827] bridge_slave_0: entered allmulticast mode [ 208.971584][ T5827] bridge_slave_0: entered promiscuous mode [ 209.138381][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.146536][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.154391][ T5827] bridge_slave_1: entered allmulticast mode [ 209.164176][ T5827] bridge_slave_1: entered promiscuous mode [ 209.395523][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.403443][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.411282][ T5816] bridge_slave_0: entered allmulticast mode [ 209.420997][ T5816] bridge_slave_0: entered promiscuous mode [ 209.551062][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.558654][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.568683][ T5816] bridge_slave_1: entered allmulticast mode [ 209.578616][ T5816] bridge_slave_1: entered promiscuous mode [ 209.613534][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.698164][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.091109][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.109311][ T5827] team0: Port device team_slave_0 added [ 210.140224][ T5826] Bluetooth: hci0: command tx timeout [ 210.145862][ T5826] Bluetooth: hci1: command tx timeout [ 210.243119][ T5827] team0: Port device team_slave_1 added [ 210.260475][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.307241][ T5826] Bluetooth: hci2: command tx timeout [ 210.307509][ T5115] Bluetooth: hci3: command tx timeout [ 210.324473][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.332430][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.340262][ T5819] bridge_slave_0: entered allmulticast mode [ 210.349911][ T5819] bridge_slave_0: entered promiscuous mode [ 210.362286][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.370120][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.377934][ T5832] bridge_slave_0: entered allmulticast mode [ 210.387342][ T5115] Bluetooth: hci4: command tx timeout [ 210.388481][ T5832] bridge_slave_0: entered promiscuous mode [ 210.516904][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.525440][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.533413][ T5819] bridge_slave_1: entered allmulticast mode [ 210.542837][ T5819] bridge_slave_1: entered promiscuous mode [ 210.593812][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.601486][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.609231][ T5832] bridge_slave_1: entered allmulticast mode [ 210.619043][ T5832] bridge_slave_1: entered promiscuous mode [ 210.628719][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.637345][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.645380][ T5825] bridge_slave_0: entered allmulticast mode [ 210.655289][ T5825] bridge_slave_0: entered promiscuous mode [ 210.713943][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.721290][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.747896][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.765623][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.774028][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.800533][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.867376][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.915193][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.922851][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.930835][ T5825] bridge_slave_1: entered allmulticast mode [ 210.941623][ T5825] bridge_slave_1: entered promiscuous mode [ 210.959258][ T5816] team0: Port device team_slave_0 added [ 210.996339][ T5816] team0: Port device team_slave_1 added [ 211.014864][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.206580][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.303643][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.315562][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.323402][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.356277][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.382782][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.498570][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.519502][ T5819] team0: Port device team_slave_0 added [ 211.532277][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.541778][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.569090][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.725924][ T5819] team0: Port device team_slave_1 added [ 211.797848][ T5827] hsr_slave_0: entered promiscuous mode [ 211.809289][ T5827] hsr_slave_1: entered promiscuous mode [ 211.833431][ T5825] team0: Port device team_slave_0 added [ 212.000470][ T5825] team0: Port device team_slave_1 added [ 212.017069][ T5832] team0: Port device team_slave_0 added [ 212.064019][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.071710][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.098276][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.219593][ T5115] Bluetooth: hci1: command tx timeout [ 212.225548][ T5826] Bluetooth: hci0: command tx timeout [ 212.261421][ T5832] team0: Port device team_slave_1 added [ 212.273557][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.282898][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.309895][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.356581][ T5816] hsr_slave_0: entered promiscuous mode [ 212.365705][ T5816] hsr_slave_1: entered promiscuous mode [ 212.375111][ T5816] debugfs: 'hsr0' already exists in 'hsr' [ 212.381416][ T5816] Cannot create hsr debugfs directory [ 212.383197][ T5826] Bluetooth: hci2: command tx timeout [ 212.395516][ T5826] Bluetooth: hci3: command tx timeout [ 212.459182][ T5115] Bluetooth: hci4: command tx timeout [ 212.558545][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.566080][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.592798][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.612078][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.619473][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.646216][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.660819][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.668009][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.694461][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.794303][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.801755][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.828476][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.167513][ T5819] hsr_slave_0: entered promiscuous mode [ 213.176971][ T5819] hsr_slave_1: entered promiscuous mode [ 213.186526][ T5819] debugfs: 'hsr0' already exists in 'hsr' [ 213.192686][ T5819] Cannot create hsr debugfs directory [ 213.312099][ T5832] hsr_slave_0: entered promiscuous mode [ 213.323140][ T5832] hsr_slave_1: entered promiscuous mode [ 213.332353][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 213.338283][ T5832] Cannot create hsr debugfs directory [ 213.534860][ T5825] hsr_slave_0: entered promiscuous mode [ 213.544619][ T5825] hsr_slave_1: entered promiscuous mode [ 213.553850][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 213.559881][ T5825] Cannot create hsr debugfs directory [ 214.299246][ T5115] Bluetooth: hci0: command tx timeout [ 214.304884][ T5115] Bluetooth: hci1: command tx timeout [ 214.468484][ T5826] Bluetooth: hci3: command tx timeout [ 214.474559][ T5826] Bluetooth: hci2: command tx timeout [ 214.539065][ T5826] Bluetooth: hci4: command tx timeout [ 214.824073][ T5827] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 214.859914][ T5827] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 214.931314][ T5827] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 214.997205][ T5827] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 215.154781][ T5816] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 215.223463][ T5816] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 215.250161][ T5816] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 215.297387][ T5816] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 215.457335][ T5819] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 215.496028][ T5819] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 215.580199][ T5819] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 215.609883][ T5819] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 215.675503][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 215.776185][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 215.854398][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 215.881650][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 215.996003][ T5825] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 216.115745][ T5825] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 216.165417][ T5825] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 216.252058][ T5825] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 216.742675][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.800420][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.922606][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.062358][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.070068][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.090122][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.220390][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.227942][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.244702][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.252619][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.443916][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.523868][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.531548][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.687715][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.932481][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.981241][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.087523][ T4842] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.095216][ T4842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.112229][ T4842] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.119929][ T4842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.199343][ T4842] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.206892][ T4842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.224097][ T4842] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.232021][ T4842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.264548][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.517484][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.676381][ T4842] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.684098][ T4842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.793495][ T4842] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.801151][ T4842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.227849][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.575349][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.314826][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.329345][ T5816] veth0_vlan: entered promiscuous mode [ 221.410462][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.467727][ T5816] veth1_vlan: entered promiscuous mode [ 221.666828][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.035534][ T5816] veth0_macvtap: entered promiscuous mode [ 222.095492][ T5832] veth0_vlan: entered promiscuous mode [ 222.109921][ T5819] veth0_vlan: entered promiscuous mode [ 222.182329][ T5816] veth1_macvtap: entered promiscuous mode [ 222.201775][ T5832] veth1_vlan: entered promiscuous mode [ 222.265548][ T5819] veth1_vlan: entered promiscuous mode [ 222.394439][ T5825] veth0_vlan: entered promiscuous mode [ 222.508494][ T5825] veth1_vlan: entered promiscuous mode [ 222.535723][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.664950][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.717121][ T5832] veth0_macvtap: entered promiscuous mode [ 222.777404][ T5819] veth0_macvtap: entered promiscuous mode [ 222.815653][ T4018] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.850618][ T5832] veth1_macvtap: entered promiscuous mode [ 222.887118][ T5819] veth1_macvtap: entered promiscuous mode [ 222.905135][ T4018] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.949947][ T1100] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.991524][ T3504] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.130920][ T5825] veth0_macvtap: entered promiscuous mode [ 223.185615][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.203524][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.282204][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.305682][ T5825] veth1_macvtap: entered promiscuous mode [ 223.341231][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.451255][ T1100] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.480577][ T1100] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.605409][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.630157][ T1100] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.697116][ T4018] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.706981][ T5827] veth0_vlan: entered promiscuous mode [ 223.747138][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.780001][ T4018] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.807829][ T4018] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.859749][ T4018] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.873017][ T5827] veth1_vlan: entered promiscuous mode [ 223.919906][ T4018] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.996355][ T4018] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.067994][ T4018] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.112581][ T4018] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.196932][ T4018] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.326753][ T5827] veth0_macvtap: entered promiscuous mode [ 224.433232][ T5827] veth1_macvtap: entered promiscuous mode [ 224.683191][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.814573][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.950203][ T3639] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.986616][ T3639] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.050780][ T3639] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.119276][ T68] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.126466][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.134819][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.305627][ T3795] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.315792][ T3795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.361676][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.369948][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.453577][ T3607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.462318][ T3607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.685414][ T3504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.693807][ T3504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.698583][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.710012][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.044286][ T5816] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 232.085534][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.093948][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.180890][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.189192][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.375500][ T3795] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.385059][ T3795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.489274][ T3795] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.497347][ T3795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.206207][ T6008] loop3: detected capacity change from 0 to 2048 [ 233.286650][ T6008] EXT4-fs: Ignoring removed mblk_io_submit option [ 233.475780][ T6006] loop0: detected capacity change from 0 to 4096 [ 233.555112][ T6008] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.727210][ T6021] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 233.798541][ T6020] loop2: detected capacity change from 0 to 256 [ 234.094971][ T6020] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x10e00a98, utbl_chksum : 0xe619d30d) [ 234.512027][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 234.614570][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 234.719049][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 234.921728][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 235.024171][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 235.229336][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 235.304272][ T6025] loop4: detected capacity change from 0 to 40427 [ 235.346310][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 235.353222][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 235.444481][ T6020] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6'. [ 235.475828][ T6008] loop6: detected capacity change from 0 to 7 [ 235.491026][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 235.491499][ T6026] 8021q: VLANs not supported on ipvlan0 [ 235.509372][ T6025] F2FS-fs (loop4): invalid crc value [ 235.599963][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 235.609783][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 235.639751][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 235.835980][ T6025] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 235.851008][ T6025] F2FS-fs (loop4): Start checkpoint disabled! [ 235.866327][ T6008] Dev loop6: unable to read RDB block 7 [ 235.872884][ T6008] loop6: unable to read partition table [ 235.896442][ T6025] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 235.935440][ T6025] syz.4.7: attempt to access beyond end of device [ 235.935440][ T6025] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 236.510671][ T6008] loop6: partition table beyond EOD, truncated [ 236.517131][ T6008] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 236.553917][ T6025] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7'. [ 236.983962][ T3795] kworker/u8:20: attempt to access beyond end of device [ 236.983962][ T3795] loop4: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 237.134979][ T4018] kworker/u8:25: attempt to access beyond end of device [ 237.134979][ T4018] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 237.151140][ T4018] CPU: 0 UID: 0 PID: 4018 Comm: kworker/u8:25 Not tainted syzkaller #0 PREEMPT(none) [ 237.151296][ T4018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 237.151437][ T4018] Workqueue: writeback wb_workfn (flush-7:4) [ 237.151730][ T4018] Call Trace: [ 237.151790][ T4018] [ 237.151844][ T4018] __dump_stack+0x26/0x30 [ 237.152040][ T4018] dump_stack_lvl+0x1df/0x270 [ 237.152250][ T4018] dump_stack+0x1e/0x25 [ 237.152435][ T4018] f2fs_handle_critical_error+0xa6f/0xc20 [ 237.152716][ T4018] f2fs_stop_checkpoint+0x65/0x80 [ 237.152950][ T4018] f2fs_write_end_io+0x101c/0x1bc0 [ 237.153167][ T4018] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 237.153329][ T4018] bio_endio+0xeb4/0x1010 [ 237.153526][ T4018] submit_bio_noacct+0x213/0x2750 [ 237.153788][ T4018] submit_bio+0x57c/0x630 [ 237.153988][ T4018] f2fs_submit_write_bio+0x92/0x250 [ 237.154232][ T4018] __submit_merged_bio+0x16f/0x6a0 [ 237.154447][ T4018] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 237.154675][ T4018] __submit_merged_write_cond+0x458/0x9a0 [ 237.154919][ T4018] f2fs_write_data_pages+0x4bb2/0x5480 [ 237.155245][ T4018] ? kmsan_get_metadata+0xfb/0x160 [ 237.155472][ T4018] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 237.155672][ T4018] ? module_trace_bprintk_format_notify+0x2d0/0xc30 [ 237.155908][ T4018] ? kmsan_get_metadata+0xfb/0x160 [ 237.156102][ T4018] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 237.156294][ T4018] ? kmsan_get_metadata+0xfb/0x160 [ 237.156479][ T4018] ? kmsan_get_metadata+0xfb/0x160 [ 237.156672][ T4018] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 237.156870][ T4018] ? kmsan_get_metadata+0xfb/0x160 [ 237.157058][ T4018] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 237.157251][ T4018] ? kmsan_get_metadata+0xfb/0x160 [ 237.157438][ T4018] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 237.157636][ T4018] ? kmsan_get_metadata+0xfb/0x160 [ 237.157821][ T4018] ? kmsan_get_metadata+0xfb/0x160 [ 237.158009][ T4018] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 237.158204][ T4018] ? kmsan_get_metadata+0xfb/0x160 [ 237.158393][ T4018] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 237.158590][ T4018] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 237.158824][ T4018] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 237.159050][ T4018] do_writepages+0x3ef/0x860 [ 237.159209][ T4018] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 237.159384][ T4018] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 237.159560][ T4018] ? kmsan_get_metadata+0xfb/0x160 [ 237.159762][ T4018] __writeback_single_inode+0x101/0x1190 [ 237.159952][ T4018] ? kmsan_get_metadata+0xfb/0x160 [ 237.160153][ T4018] writeback_sb_inodes+0xac1/0x1cb0 [ 237.160422][ T4018] ? kmsan_get_metadata+0xfb/0x160 [ 237.160664][ T4018] wb_writeback+0x4ce/0xc00 [ 237.160857][ T4018] ? queue_io+0x4c1/0x790 [ 237.161036][ T4018] wb_workfn+0x397/0x1910 [ 237.161257][ T4018] ? kmsan_get_metadata+0xfb/0x160 [ 237.161473][ T4018] ? __pfx_wb_workfn+0x10/0x10 [ 237.161693][ T4018] process_scheduled_works+0xb8e/0x1d80 [ 237.161981][ T4018] worker_thread+0xedf/0x1590 [ 237.162241][ T4018] kthread+0xd59/0xf00 [ 237.162400][ T4018] ? __pfx_worker_thread+0x10/0x10 [ 237.162658][ T4018] ? __pfx_kthread+0x10/0x10 [ 237.162823][ T4018] ret_from_fork+0x233/0x380 [ 237.162990][ T4018] ? __pfx_kthread+0x10/0x10 [ 237.163161][ T4018] ret_from_fork_asm+0x1a/0x30 [ 237.163406][ T4018] [ 237.393427][ T6023] syz.0.1 (6023): drop_caches: 2 [ 237.403309][ T4018] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 237.812529][ T6016] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 237.897103][ T6016] EXT4-fs (loop3): Remounting filesystem read-only [ 238.158357][ T5819] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.440876][ T6031] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8'. [ 239.125571][ T6035] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9'. [ 239.594109][ T6033] loop2: detected capacity change from 0 to 32768 [ 239.874921][ T6033] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 239.875089][ T6033] allowing incompatible features above 0.0: (unknown version) [ 239.875188][ T6033] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 239.946716][ T6033] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 239.957484][ T6033] bcachefs (loop2): initializing new filesystem [ 239.981632][ T6033] bcachefs (loop2): going read-write [ 240.072025][ T6033] bcachefs (loop2): marking superblocks [ 240.133359][ T6033] bcachefs (loop2): initializing freespace [ 240.172575][ T6033] bcachefs (loop2): done initializing freespace [ 240.195005][ T6033] bcachefs (loop2): reading snapshots table [ 240.201538][ T6033] bcachefs (loop2): reading snapshots done [ 240.452426][ T6033] bcachefs (loop2): done starting filesystem [ 240.501773][ T6049] FAULT_INJECTION: forcing a failure. [ 240.501773][ T6049] name failslab, interval 1, probability 0, space 0, times 1 [ 240.515003][ T6049] CPU: 1 UID: 0 PID: 6049 Comm: syz.3.13 Not tainted syzkaller #0 PREEMPT(none) [ 240.515166][ T6049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 240.515262][ T6049] Call Trace: [ 240.515324][ T6049] [ 240.515379][ T6049] __dump_stack+0x26/0x30 [ 240.515580][ T6049] dump_stack_lvl+0x1df/0x270 [ 240.515791][ T6049] dump_stack+0x1e/0x25 [ 240.515978][ T6049] should_fail_ex+0x7dc/0x8a0 [ 240.516173][ T6049] should_failslab+0x15b/0x200 [ 240.516382][ T6049] kmem_cache_alloc_noprof+0xf0/0xec0 [ 240.516601][ T6049] ? vm_area_alloc+0x5c/0x230 [ 240.516821][ T6049] ? kmsan_get_metadata+0xfb/0x160 [ 240.517021][ T6049] vm_area_alloc+0x5c/0x230 [ 240.517238][ T6049] mmap_region+0x2271/0x4ff0 [ 240.517627][ T6049] do_mmap+0x17a8/0x1d70 [ 240.517826][ T6049] vm_mmap_pgoff+0x40d/0x770 [ 240.518074][ T6049] ksys_mmap_pgoff+0x16c/0x7c0 [ 240.518244][ T6049] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 240.518461][ T6049] __x64_sys_mmap+0x19c/0x260 [ 240.518666][ T6049] x64_sys_call+0x18a7/0x3e20 [ 240.518884][ T6049] do_syscall_64+0xd9/0x210 [ 240.519044][ T6049] ? irqentry_exit+0x16/0x60 [ 240.519247][ T6049] ? clear_bhb_loop+0x40/0x90 [ 240.519437][ T6049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.519613][ T6049] RIP: 0033:0x7f33b678ebe3 [ 240.519769][ T6049] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 240.519905][ T6049] RSP: 002b:00007f33b75c2e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 240.520054][ T6049] RAX: ffffffffffffffda RBX: 0000000000024c7b RCX: 00007f33b678ebe3 [ 240.520165][ T6049] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 240.520255][ T6049] RBP: 00002000000499c2 R08: 00000000ffffffff R09: 0000000000000000 [ 240.520397][ T6049] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000004 [ 240.520497][ T6049] R13: 00007f33b75c2ef0 R14: 00007f33b75c2eb0 R15: 0000200000000180 [ 240.520642][ T6049] [ 240.803027][ T6033] syz.2.10 (6033) used greatest stack depth: 1200 bytes left [ 240.969927][ T5832] bcachefs (loop2): shutting down [ 240.975182][ T5832] bcachefs (loop2): going read-only [ 240.980963][ T5832] bcachefs (loop2): finished waiting for writes to stop [ 241.033432][ T5832] bcachefs (loop2): flushing journal and stopping allocators, journal seq 3 [ 241.174435][ T6052] netlink: 'syz.1.14': attribute type 21 has an invalid length. [ 241.182792][ T6052] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14'. [ 241.286444][ T6055] 9pnet_fd: Insufficient options for proto=fd [ 241.380315][ T6054] loop4: detected capacity change from 0 to 256 [ 241.401109][ T6054] ======================================================= [ 241.401109][ T6054] WARNING: The mand mount option has been deprecated and [ 241.401109][ T6054] and is ignored by this kernel. Remove the mand [ 241.401109][ T6054] option from the mount to silence this warning. [ 241.401109][ T6054] ======================================================= [ 241.450755][ T5832] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3 [ 241.462761][ T6052] warning: `syz.1.14' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 241.554707][ T5832] bcachefs (loop2): clean shutdown complete, journal seq 4 [ 241.626868][ T6054] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 241.651615][ T5832] bcachefs (loop2): marking filesystem clean [ 241.857737][ T5832] bcachefs (loop2): shutdown complete [ 242.150134][ T32] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 242.333189][ T32] usb 5-1: device descriptor read/64, error -71 [ 242.606442][ T32] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 242.981295][ T6060] loop1: detected capacity change from 0 to 512 [ 243.054038][ T6060] EXT4-fs: Ignoring removed oldalloc option [ 243.060645][ T6060] EXT4-fs: Ignoring removed nobh option [ 243.532664][ T6062] loop3: detected capacity change from 0 to 32768 [ 243.553817][ T6060] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.18: iget: bad extended attribute block 1 [ 243.603063][ T32] usb 5-1: device descriptor read/64, error -71 [ 243.637711][ T6060] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.18: couldn't read orphan inode 15 (err -117) [ 243.673986][ T6060] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.780381][ T32] usb usb5-port1: attempt power cycle [ 243.895521][ T6060] batman_adv: batadv0: Adding interface: dummy0 [ 243.904063][ T6060] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.934607][ T6060] batman_adv: batadv0: Interface activated: dummy0 [ 244.016276][ T6062] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=12,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,degraded=yes,nojournal_transaction_names [ 244.016454][ T6062] allowing incompatible features above 0.0: (unknown version) [ 244.016550][ T6062] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 244.073610][ T6062] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 244.082239][ T6062] bcachefs (loop3): initializing new filesystem [ 244.104552][ T6062] bcachefs (loop3): going read-write [ 244.198127][ T6060] batadv0: mtu less than device minimum [ 244.206682][ T6060] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 244.220230][ T6060] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 244.233465][ T6060] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 244.246746][ T6060] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 244.260471][ T6060] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 244.273799][ T6060] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 244.287160][ T6060] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 244.300496][ T6060] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 244.313835][ T6060] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 244.380902][ T32] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 244.470353][ T6062] bcachefs (loop3): marking superblocks [ 244.557229][ T6062] bcachefs (loop3): initializing freespace [ 244.604360][ T6062] bcachefs (loop3): done initializing freespace [ 244.635333][ T6062] bcachefs (loop3): reading snapshots table [ 244.642069][ T6062] bcachefs (loop3): reading snapshots done [ 244.837188][ T32] usb 5-1: device descriptor read/8, error -71 [ 244.867095][ T6062] bcachefs (loop3): done starting filesystem [ 245.138183][ T6062] syz.3.19 (6062) used greatest stack depth: 1136 bytes left [ 245.206893][ T5819] bcachefs (loop3): shutting down [ 245.213243][ T5819] bcachefs (loop3): going read-only [ 245.218679][ T5819] bcachefs (loop3): finished waiting for writes to stop [ 245.344061][ T5819] bcachefs (loop3): flushing journal and stopping allocators, journal seq 3 [ 245.483046][ T5825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.642883][ T6077] loop4: detected capacity change from 0 to 64 [ 245.703511][ T6077] hfs: Unknown parameter 'ui' [ 245.791008][ T5819] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3 [ 245.909637][ T5819] bcachefs (loop3): clean shutdown complete, journal seq 4 [ 245.999639][ T5819] bcachefs (loop3): marking filesystem clean [ 246.224670][ T5819] bcachefs (loop3): shutdown complete [ 246.714116][ T6085] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 246.867033][ T6082] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 247.426395][ T6088] FAULT_INJECTION: forcing a failure. [ 247.426395][ T6088] name failslab, interval 1, probability 0, space 0, times 0 [ 247.439761][ T6088] CPU: 1 UID: 0 PID: 6088 Comm: syz.1.24 Not tainted syzkaller #0 PREEMPT(none) [ 247.439911][ T6088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 247.440003][ T6088] Call Trace: [ 247.440052][ T6088] [ 247.440105][ T6088] __dump_stack+0x26/0x30 [ 247.440294][ T6088] dump_stack_lvl+0x1df/0x270 [ 247.440482][ T6088] dump_stack+0x1e/0x25 [ 247.440650][ T6088] should_fail_ex+0x7dc/0x8a0 [ 247.440838][ T6088] should_failslab+0x15b/0x200 [ 247.441020][ T6088] __kmalloc_noprof+0x182/0x1310 [ 247.441207][ T6088] ? tomoyo_encode+0x626/0xa10 [ 247.441381][ T6088] ? prepend_path+0xff2/0x10c0 [ 247.441581][ T6088] ? kmsan_get_metadata+0xfb/0x160 [ 247.441761][ T6088] ? kmsan_get_metadata+0xfb/0x160 [ 247.441951][ T6088] tomoyo_encode+0x626/0xa10 [ 247.442168][ T6088] tomoyo_realpath_from_path+0x92e/0x9f0 [ 247.442396][ T6088] tomoyo_path_number_perm+0x1d0/0x7d0 [ 247.442562][ T6088] ? stack_depot_save_flags+0x35/0x7b0 [ 247.442743][ T6088] ? kmsan_get_metadata+0xfb/0x160 [ 247.442912][ T6088] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 247.443142][ T6088] tomoyo_file_ioctl+0x3d/0x50 [ 247.443337][ T6088] security_file_ioctl+0x141/0x590 [ 247.443495][ T6088] __se_sys_ioctl+0xbb/0x400 [ 247.443666][ T6088] __x64_sys_ioctl+0x97/0xe0 [ 247.443878][ T6088] x64_sys_call+0x1cbc/0x3e20 [ 247.444076][ T6088] do_syscall_64+0xd9/0x210 [ 247.444219][ T6088] ? irqentry_exit+0x16/0x60 [ 247.444409][ T6088] ? clear_bhb_loop+0x40/0x90 [ 247.444573][ T6088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.444742][ T6088] RIP: 0033:0x7f060358eba9 [ 247.444873][ T6088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.445001][ T6088] RSP: 002b:00007f060433e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 247.445161][ T6088] RAX: ffffffffffffffda RBX: 00007f06037d5fa0 RCX: 00007f060358eba9 [ 247.445269][ T6088] RDX: 00002000000000c0 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 247.445368][ T6088] RBP: 00007f060433e090 R08: 0000000000000000 R09: 0000000000000000 [ 247.445463][ T6088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.445552][ T6088] R13: 00007f06037d6038 R14: 00007f06037d5fa0 R15: 00007fff36820058 [ 247.445702][ T6088] [ 247.445810][ T6088] ERROR: Out of memory at tomoyo_realpath_from_path. [ 247.863798][ T6090] netlink: 'syz.4.25': attribute type 9 has an invalid length. [ 248.395971][ T6095] FAULT_INJECTION: forcing a failure. [ 248.395971][ T6095] name failslab, interval 1, probability 0, space 0, times 0 [ 248.409832][ T6095] CPU: 0 UID: 0 PID: 6095 Comm: syz.1.26 Not tainted syzkaller #0 PREEMPT(none) [ 248.409982][ T6095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 248.410068][ T6095] Call Trace: [ 248.410118][ T6095] [ 248.410171][ T6095] __dump_stack+0x26/0x30 [ 248.410357][ T6095] dump_stack_lvl+0x1df/0x270 [ 248.410581][ T6095] dump_stack+0x1e/0x25 [ 248.410751][ T6095] should_fail_ex+0x7dc/0x8a0 [ 248.410941][ T6095] should_failslab+0x15b/0x200 [ 248.411125][ T6095] kmem_cache_alloc_node_noprof+0xf3/0xf00 [ 248.411326][ T6095] ? __alloc_skb+0x1e0/0x7d0 [ 248.411493][ T6095] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 248.411667][ T6095] ? kmsan_get_metadata+0xfb/0x160 [ 248.411840][ T6095] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 248.412028][ T6095] __alloc_skb+0x1e0/0x7d0 [ 248.412220][ T6095] netlink_alloc_large_skb+0xa5/0x280 [ 248.412407][ T6095] netlink_sendmsg+0xaea/0x1250 [ 248.412631][ T6095] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.412827][ T6095] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.413061][ T6095] __sock_sendmsg+0x333/0x3d0 [ 248.413250][ T6095] sock_write_iter+0x318/0x390 [ 248.413453][ T6095] ? __pfx_sock_write_iter+0x10/0x10 [ 248.413602][ T6095] do_iter_readv_writev+0x9cd/0xc00 [ 248.413834][ T6095] ? __pfx_sock_write_iter+0x10/0x10 [ 248.413981][ T6095] vfs_writev+0x52a/0x1500 [ 248.414145][ T6095] ? stack_depot_save_flags+0x35/0x7b0 [ 248.414300][ T6095] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 248.414467][ T6095] ? kmsan_get_metadata+0xfb/0x160 [ 248.414654][ T6095] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 248.414844][ T6095] do_writev+0x1b5/0x580 [ 248.414975][ T6095] ? kmsan_get_metadata+0xfb/0x160 [ 248.415165][ T6095] __x64_sys_writev+0x99/0xf0 [ 248.415352][ T6095] x64_sys_call+0x24b1/0x3e20 [ 248.415551][ T6095] do_syscall_64+0xd9/0x210 [ 248.415688][ T6095] ? irqentry_exit+0x16/0x60 [ 248.415873][ T6095] ? clear_bhb_loop+0x40/0x90 [ 248.416036][ T6095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.416192][ T6095] RIP: 0033:0x7f060358eba9 [ 248.416300][ T6095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.416424][ T6095] RSP: 002b:00007f060433e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 248.416568][ T6095] RAX: ffffffffffffffda RBX: 00007f06037d5fa0 RCX: 00007f060358eba9 [ 248.416666][ T6095] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 248.416756][ T6095] RBP: 00007f060433e090 R08: 0000000000000000 R09: 0000000000000000 [ 248.416849][ T6095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.416942][ T6095] R13: 00007f06037d6038 R14: 00007f06037d5fa0 R15: 00007fff36820058 [ 248.417092][ T6095] [ 249.601847][ T6099] loop4: detected capacity change from 0 to 2048 [ 249.658588][ T6099] NILFS (loop4): invalid segment: Magic number mismatch [ 249.670750][ T6099] NILFS (loop4): trying rollback from an earlier position [ 249.762510][ T6099] NILFS (loop4): recovery complete [ 249.807547][ T6104] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 249.884260][ T6103] loop2: detected capacity change from 0 to 256 [ 250.026888][ T6103] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 251.654197][ T6113] Zero length message leads to an empty skb [ 252.035872][ T6115] loop3: detected capacity change from 0 to 256 [ 252.207972][ T6115] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 252.295775][ T6115] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 252.306897][ T6115] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 252.315139][ T6115] UDF-fs: Scanning with blocksize 512 failed [ 252.484360][ T6115] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 252.557076][ T6115] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 252.859887][ T5875] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 253.100446][ T5875] usb 5-1: Using ep0 maxpacket: 8 [ 253.150411][ T5875] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 253.159199][ T5875] usb 5-1: config 179 has no interface number 0 [ 253.165848][ T5875] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 253.177738][ T5875] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 253.189764][ T5875] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 253.201450][ T5875] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 253.211955][ T5875] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 253.225775][ T5875] usb 5-1: config 179 interface 65 has no altsetting 0 [ 253.233324][ T5875] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 253.242808][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.957921][ T5875] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input5 [ 254.462563][ T5875] usb 5-1: USB disconnect, device number 6 [ 255.576969][ T6139] FAULT_INJECTION: forcing a failure. [ 255.576969][ T6139] name failslab, interval 1, probability 0, space 0, times 0 [ 255.591026][ T6139] CPU: 1 UID: 0 PID: 6139 Comm: syz.4.43 Not tainted syzkaller #0 PREEMPT(none) [ 255.591183][ T6139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 255.591270][ T6139] Call Trace: [ 255.591325][ T6139] [ 255.591386][ T6139] __dump_stack+0x26/0x30 [ 255.591576][ T6139] dump_stack_lvl+0x1df/0x270 [ 255.591772][ T6139] dump_stack+0x1e/0x25 [ 255.591942][ T6139] should_fail_ex+0x7dc/0x8a0 [ 255.592125][ T6139] should_failslab+0x15b/0x200 [ 255.592311][ T6139] __kmalloc_node_noprof+0x18b/0x1300 [ 255.592517][ T6139] ? alloc_slab_obj_exts+0xa2/0x2f0 [ 255.592720][ T6139] ? kmsan_get_metadata+0xfb/0x160 [ 255.592893][ T6139] ? kmsan_get_shadow_origin_ptr+0x35/0xb0 [ 255.593103][ T6139] alloc_slab_obj_exts+0xa2/0x2f0 [ 255.593316][ T6139] __memcg_slab_post_alloc_hook+0x9f3/0x1270 [ 255.593536][ T6139] ? kmsan_get_metadata+0xfb/0x160 [ 255.593747][ T6139] kmem_cache_alloc_lru_noprof+0xa31/0xed0 [ 255.593960][ T6139] ? shmem_alloc_inode+0x5a/0xd0 [ 255.594106][ T6139] ? __x64_sys_memfd_create+0x78/0xb0 [ 255.594293][ T6139] shmem_alloc_inode+0x5a/0xd0 [ 255.594439][ T6139] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 255.594586][ T6139] alloc_inode+0x8a/0x4a0 [ 255.594755][ T6139] ? kmsan_get_metadata+0xfb/0x160 [ 255.594923][ T6139] ? kmsan_get_metadata+0xfb/0x160 [ 255.595099][ T6139] new_inode+0x39/0x460 [ 255.595286][ T6139] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 255.595467][ T6139] shmem_get_inode+0x663/0x1c20 [ 255.595645][ T6139] __shmem_file_setup+0x210/0x590 [ 255.595861][ T6139] shmem_file_setup+0x61/0x80 [ 255.596061][ T6139] __se_sys_memfd_create+0x844/0x11f0 [ 255.596347][ T6139] __x64_sys_memfd_create+0x78/0xb0 [ 255.596538][ T6139] x64_sys_call+0x3500/0x3e20 [ 255.596739][ T6139] do_syscall_64+0xd9/0x210 [ 255.596885][ T6139] ? irqentry_exit+0x16/0x60 [ 255.597075][ T6139] ? clear_bhb_loop+0x40/0x90 [ 255.597296][ T6139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.597566][ T6139] RIP: 0033:0x7f472d98eba9 [ 255.597688][ T6139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.597819][ T6139] RSP: 002b:00007f472e829e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 255.597985][ T6139] RAX: ffffffffffffffda RBX: 0000000000024c7d RCX: 00007f472d98eba9 [ 255.598088][ T6139] RDX: 00007f472e829ef0 RSI: 0000000000000000 RDI: 00007f472da127e8 [ 255.598302][ T6139] RBP: 00002000000499c0 R08: 00007f472e829bb7 R09: 00007f472e829e40 [ 255.598422][ T6139] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000080 [ 255.598544][ T6139] R13: 00007f472e829ef0 R14: 00007f472e829eb0 R15: 0000200000000180 [ 255.598728][ T6139] [ 256.453253][ T6142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.44'. [ 257.149459][ T32] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 257.166235][ T5115] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 257.177252][ T5115] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 257.194071][ T5115] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 257.210829][ T5115] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 257.225434][ T5115] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 257.358360][ T32] usb 4-1: unable to get BOS descriptor or descriptor too short [ 257.372435][ T32] usb 4-1: config 4 has an invalid interface number: 180 but max is 0 [ 257.381092][ T32] usb 4-1: config 4 has no interface number 0 [ 257.387414][ T32] usb 4-1: config 4 interface 180 has no altsetting 0 [ 257.453816][ T32] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice=eb.29 [ 257.463455][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.471964][ T32] usb 4-1: Product: syz [ 257.476336][ T32] usb 4-1: Manufacturer: syz [ 257.481251][ T32] usb 4-1: SerialNumber: syz [ 257.890742][ T6146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.902591][ T6146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.109273][ T32] qmi_wwan 4-1:4.180: probe with driver qmi_wwan failed with error -22 [ 258.228375][ T32] usb 4-1: USB disconnect, device number 2 [ 258.549690][ T6147] chnl_net:caif_netlink_parms(): no params data found [ 259.339397][ T5826] Bluetooth: hci5: command tx timeout [ 260.965201][ T6154] loop4: detected capacity change from 0 to 40427 [ 260.975464][ T6154] f2fs: Unknown parameter '00000000000000000000' [ 261.413660][ T6161] bond_slave_0: entered promiscuous mode [ 261.419823][ T6161] bond_slave_1: entered promiscuous mode [ 261.426564][ T6161] vlan2: entered promiscuous mode [ 261.432021][ T6161] bond0: entered promiscuous mode [ 261.500377][ T5826] Bluetooth: hci5: command tx timeout [ 261.766393][ T3504] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.095999][ T3504] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.261641][ T5875] IPVS: starting estimator thread 0... [ 262.352112][ T6167] IPVS: using max 192 ests per chain, 9600 per kthread [ 262.415859][ T3504] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.707813][ T3504] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.299107][ T6147] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.306788][ T6147] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.314818][ T6147] bridge_slave_0: entered allmulticast mode [ 263.325146][ T6147] bridge_slave_0: entered promiscuous mode [ 263.537881][ T6147] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.545991][ T6147] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.554034][ T6147] bridge_slave_1: entered allmulticast mode [ 263.564097][ T6147] bridge_slave_1: entered promiscuous mode [ 263.631575][ T5826] Bluetooth: hci5: command tx timeout [ 263.760197][ T6176] loop3: detected capacity change from 0 to 1024 [ 263.864415][ T6176] EXT4-fs: Ignoring removed bh option [ 263.916797][ T6176] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.299495][ T6182] loop2: detected capacity change from 0 to 512 [ 264.387437][ T6147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.467876][ T6147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.478411][ T3504] bridge_slave_1: left allmulticast mode [ 264.484685][ T3504] bridge_slave_1: left promiscuous mode [ 264.491522][ T3504] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.575693][ T6182] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e042c118, mo2=0002] [ 264.601611][ T6182] System zones: 1-12 [ 264.607812][ T3504] bridge_slave_0: left allmulticast mode [ 264.623109][ T3504] bridge_slave_0: left promiscuous mode [ 264.630037][ T3504] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.656783][ T6182] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.54: corrupted in-inode xattr: e_value size too large [ 264.782551][ T6187] 9pnet_fd: Insufficient options for proto=fd [ 264.797552][ T5819] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.814372][ T6182] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.54: couldn't read orphan inode 15 (err -117) [ 264.962862][ T6182] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.353323][ T6182] loop2: detected capacity change from 512 to 0 [ 265.470917][ C1] I/O error, dev loop2, sector 26 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 265.481984][ T6191] EXT4-fs warning (device loop2): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz.2.54: error -5 reading directory block [ 265.672882][ T5115] Bluetooth: hci5: command tx timeout [ 265.731221][ T3504] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.801217][ T3504] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.834080][ T3504] bond0 (unregistering): Released all slaves [ 266.065898][ T6195] loop3: detected capacity change from 0 to 2048 [ 266.204980][ T6195] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 266.444607][ C0] I/O error, dev loop2, sector 26 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 266.472727][ T6147] team0: Port device team_slave_0 added [ 266.511766][ T5832] EXT4-fs warning (device loop2): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 266.527643][ T6197] loop1: detected capacity change from 0 to 512 [ 266.591336][ T6197] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 266.609591][ T6197] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 266.723269][ T6147] team0: Port device team_slave_1 added [ 266.796340][ T6197] EXT4-fs (loop1): 1 truncate cleaned up [ 266.804614][ T6197] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.001585][ C1] I/O error, dev loop2, sector 12 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 2 [ 267.011652][ C1] I/O error, dev loop2, sector 10 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 267.040904][ T5832] EXT4-fs error (device loop2): ext4_get_inode_loc:4999: inode #2: block 5: comm syz-executor: unable to read itable block [ 267.116472][ T5832] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: IO failure [ 267.162422][ T5832] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz-executor: mark_inode_dirty error [ 267.240447][ C1] I/O error, dev loop2, sector 12 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 2 [ 267.242527][ T5825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.250454][ C1] I/O error, dev loop2, sector 10 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 267.264009][ T6147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.279936][ T6147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.308313][ T6147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.341387][ T3795] EXT4-fs error (device loop2): __ext4_get_inode_loc_noinmem:4984: inode #2: block 5: comm kworker/u8:20: unable to read itable block [ 267.363660][ T6200] loop4: detected capacity change from 0 to 1024 [ 267.405073][ T6147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.412525][ T6147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.439243][ T6147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.509722][ T3504] hsr_slave_0: left promiscuous mode [ 267.534820][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.544765][ T3504] hsr_slave_1: left promiscuous mode [ 267.553432][ T3504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.562319][ T3504] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.644153][ T3504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.651878][ T3504] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.665152][ T6200] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 267.679495][ T6200] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.736763][ T3504] veth1_macvtap: left promiscuous mode [ 267.742823][ T3504] veth0_macvtap: left promiscuous mode [ 267.748767][ T3504] veth1_vlan: left promiscuous mode [ 267.755983][ T3504] veth0_vlan: left promiscuous mode [ 268.124738][ T6206] loop1: detected capacity change from 0 to 1024 [ 268.145112][ T6206] EXT4-fs: Ignoring removed oldalloc option [ 268.151743][ T6206] EXT4-fs: Ignoring removed bh option [ 268.186687][ T6200] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 268.290792][ T6200] EXT4-fs (loop4): Remounting filesystem read-only [ 268.441347][ T6206] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 268.495956][ T6202] net_ratelimit: 10 callbacks suppressed [ 268.496055][ T6202] sctp: failed to load transform for md5: -2 [ 268.810058][ T3504] team0 (unregistering): Port device team_slave_1 removed [ 268.857165][ T5827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 268.981636][ T3504] team0 (unregistering): Port device team_slave_0 removed [ 269.201998][ T5825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 269.946517][ T6223] netlink: 16 bytes leftover after parsing attributes in process `syz.1.64'. [ 269.956625][ T6223] netlink: 16 bytes leftover after parsing attributes in process `syz.1.64'. [ 270.210344][ T6223] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 270.270329][ T6227] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20000 [ 270.289435][ T1626] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 270.502795][ T1626] usb 5-1: Using ep0 maxpacket: 8 [ 270.580921][ T6223] bond1: entered allmulticast mode [ 270.587806][ T6223] 8021q: adding VLAN 0 to HW filter on device bond1 [ 270.625396][ T1626] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 270.633994][ T1626] usb 5-1: config 0 has no interface number 0 [ 270.640791][ T1626] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 270.650863][ T1626] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 270.663585][ T1626] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 270.674584][ T1626] usb 5-1: config 0 interface 2 altsetting 0 has an endpoint descriptor with address 0x6A, changing to 0xA [ 270.686566][ T1626] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0xA has an invalid bInterval 146, changing to 11 [ 270.698082][ T1626] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0xA has invalid maxpacket 41369, setting to 1024 [ 270.777455][ T6147] hsr_slave_0: entered promiscuous mode [ 270.819915][ T6230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.68'. [ 270.870263][ T6147] hsr_slave_1: entered promiscuous mode [ 270.879786][ T6147] debugfs: 'hsr0' already exists in 'hsr' [ 270.885725][ T6147] Cannot create hsr debugfs directory [ 270.927104][ T1626] usb 5-1: New USB device found, idVendor=05da, idProduct=0099, bcdDevice=d5.82 [ 270.936906][ T1626] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.945712][ T1626] usb 5-1: Product: syz [ 270.950502][ T1626] usb 5-1: Manufacturer: syz [ 270.955312][ T1626] usb 5-1: SerialNumber: syz [ 271.027595][ T6230] bridge1: entered promiscuous mode [ 271.144023][ T1626] usb 5-1: config 0 descriptor?? [ 271.355937][ T3504] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.384342][ T1626] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 2 is not bulk. [ 271.394581][ T1626] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 10 is not bulk. [ 271.404756][ T1626] microtek usb (rev 0.4.3): couldn't find two input bulk endpoints. Bailing out. [ 271.646323][ T3504] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.683694][ T1626] usb 5-1: USB disconnect, device number 7 [ 271.810959][ T3504] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.006104][ T3504] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.707819][ T3504] bridge_slave_1: left allmulticast mode [ 272.713833][ T3504] bridge_slave_1: left promiscuous mode [ 272.720716][ T3504] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.756300][ T3504] bridge_slave_0: left allmulticast mode [ 272.762489][ T3504] bridge_slave_0: left promiscuous mode [ 272.769389][ T3504] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.281214][ T3504] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.324992][ T3504] bond_slave_0: left promiscuous mode [ 273.361191][ T3504] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.381511][ T3504] bond_slave_1: left promiscuous mode [ 273.393565][ T3504] bond0 (unregistering): Released all slaves [ 273.779407][ T6147] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 273.805413][ T6147] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 274.153092][ T6147] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 274.475296][ T6147] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 274.699652][ T3504] hsr_slave_0: left promiscuous mode [ 274.742377][ T3504] hsr_slave_1: left promiscuous mode [ 274.756494][ T3504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.764326][ T3504] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.897243][ T3504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.905086][ T3504] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.998240][ T6253] loop1: detected capacity change from 0 to 1024 [ 275.095432][ T3504] veth1_macvtap: left promiscuous mode [ 275.101571][ T3504] veth0_macvtap: left promiscuous mode [ 275.107512][ T3504] veth1_vlan: left promiscuous mode [ 275.113340][ T3504] veth0_vlan: left promiscuous mode [ 275.125847][ T6253] EXT4-fs: Ignoring removed nobh option [ 275.133042][ T6253] EXT4-fs: Ignoring removed bh option [ 275.184095][ T6248] loop4: detected capacity change from 0 to 4096 [ 275.257749][ T6248] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 275.694295][ T6253] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 275.753960][ T6255] loop3: detected capacity change from 0 to 32768 [ 275.764011][ T6255] XFS: attr2 mount option is deprecated. [ 275.974412][ T6255] XFS (loop3): Metadata CRC error detected at xfs_sb_read_verify+0x5c7/0x640, xfs_sb_quiet block 0x0 [ 275.989034][ T6255] XFS (loop3): Unmount and run xfs_repair [ 275.995006][ T6255] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 276.007547][ T6255] 00000000: 58 46 53 42 00 00 08 00 00 00 00 00 00 00 20 00 XFSB.......... . [ 276.016870][ T6255] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 276.026123][ T6255] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 276.035344][ T6255] 00000030: 00 00 00 00 00 00 00 20 00 00 00 00 00 00 24 40 ....... ......$@ [ 276.044603][ T6255] 00000040: 00 00 00 00 00 00 24 41 00 00 00 00 00 00 24 42 ......$A......$B [ 276.053838][ T6255] 00000050: 00 00 00 02 00 00 20 00 00 00 00 01 00 00 00 00 ...... ......... [ 276.063306][ T6255] 00000060: 00 00 12 00 b4 b5 02 00 04 00 00 02 00 00 00 00 ................ [ 276.072546][ T6255] 00000070: 00 00 00 00 00 00 00 00 0b 09 0a 01 0d 00 00 32 ...............2 [ 276.120610][ T6253] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 276.661526][ T6183] udevd[6183]: incorrect xfs checksum on /dev/loop3 [ 276.672679][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 276.748536][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 276.761642][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 276.776030][ T5826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 276.789876][ T5826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 276.977733][ T3504] team0 (unregistering): Port device team_slave_1 removed [ 277.051877][ T5825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 277.076093][ T3504] team0 (unregistering): Port device team_slave_0 removed [ 278.000237][ T6272] loop3: detected capacity change from 0 to 64 [ 278.658676][ T6270] loop1: detected capacity change from 0 to 40427 [ 278.669123][ T6270] f2fs: Unknown parameter '00000000000000000000' [ 279.130547][ T5115] Bluetooth: hci0: command tx timeout [ 279.320034][ T6272] hfs: unable to open extent tree [ 279.325432][ T6272] hfs: can't find a HFS filesystem on dev loop3 [ 280.403459][ T6277] netlink: 3 bytes leftover after parsing attributes in process `syz.1.79'. [ 280.444052][ T6281] netlink: 12 bytes leftover after parsing attributes in process `syz.4.78'. [ 280.444506][ T6147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.528354][ T6281] vlan2: entered promiscuous mode [ 280.534018][ T6281] team0: entered promiscuous mode [ 280.539545][ T6281] team_slave_0: entered promiscuous mode [ 280.546526][ T6281] team_slave_1: entered promiscuous mode [ 280.845858][ T6264] chnl_net:caif_netlink_parms(): no params data found [ 280.903113][ T6147] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.096850][ T4018] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.104673][ T4018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.183596][ T5826] Bluetooth: hci0: command tx timeout [ 281.218765][ T6285] loop3: detected capacity change from 0 to 512 [ 281.301600][ T6285] EXT4-fs: Ignoring removed mblk_io_submit option [ 281.360961][ T6285] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 281.364811][ T4018] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.377183][ T4018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.414684][ T6285] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 281.491997][ T6285] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 281.587265][ T6285] EXT4-fs (loop3): orphan cleanup on readonly fs [ 281.648360][ T6285] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.80: Invalid block bitmap block 0 in block_group 0 [ 281.715856][ T6285] EXT4-fs (loop3): Remounting filesystem read-only [ 281.781118][ T6285] Quota error (device loop3): write_blk: dquota write failed [ 281.890329][ T6285] Quota error (device loop3): write_blk: dquota write failed [ 281.898351][ T6285] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 281.909218][ T6285] EXT4-fs (loop3): 1 orphan inode deleted [ 282.042265][ T6285] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 282.111101][ T6285] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.224503][ T6311] FAULT_INJECTION: forcing a failure. [ 283.224503][ T6311] name failslab, interval 1, probability 0, space 0, times 0 [ 283.237770][ T6311] CPU: 0 UID: 0 PID: 6311 Comm: syz.3.85 Not tainted syzkaller #0 PREEMPT(none) [ 283.237922][ T6311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 283.238008][ T6311] Call Trace: [ 283.238062][ T6311] [ 283.238116][ T6311] __dump_stack+0x26/0x30 [ 283.238303][ T6311] dump_stack_lvl+0x1df/0x270 [ 283.238500][ T6311] dump_stack+0x1e/0x25 [ 283.238678][ T6311] should_fail_ex+0x7dc/0x8a0 [ 283.238860][ T6311] should_failslab+0x15b/0x200 [ 283.239041][ T6311] __kmalloc_noprof+0x182/0x1310 [ 283.239233][ T6311] ? video_usercopy+0x260/0x1f70 [ 283.239427][ T6311] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 283.239595][ T6311] ? kmsan_get_metadata+0xfb/0x160 [ 283.239795][ T6311] video_usercopy+0x260/0x1f70 [ 283.240022][ T6311] ? __pfx___video_do_ioctl+0x10/0x10 [ 283.240223][ T6311] ? kmsan_get_metadata+0xfb/0x160 [ 283.240395][ T6311] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 283.240587][ T6311] ? do_vfs_ioctl+0x13a3/0x2900 [ 283.240781][ T6311] ? kmsan_get_metadata+0xfb/0x160 [ 283.240952][ T6311] ? __pfx_video_ioctl2+0x10/0x10 [ 283.241153][ T6311] video_ioctl2+0x46/0x60 [ 283.241352][ T6311] v4l2_ioctl+0x1b8/0x200 [ 283.241543][ T6311] ? __pfx_v4l2_ioctl+0x10/0x10 [ 283.241734][ T6311] __se_sys_ioctl+0x23c/0x400 [ 283.241908][ T6311] __x64_sys_ioctl+0x97/0xe0 [ 283.242079][ T6311] x64_sys_call+0x1cbc/0x3e20 [ 283.242279][ T6311] do_syscall_64+0xd9/0x210 [ 283.242424][ T6311] ? irqentry_exit+0x16/0x60 [ 283.242612][ T6311] ? clear_bhb_loop+0x40/0x90 [ 283.242780][ T6311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.242940][ T6311] RIP: 0033:0x7f33b678eba9 [ 283.243051][ T6311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.243177][ T6311] RSP: 002b:00007f33b75c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 283.243318][ T6311] RAX: ffffffffffffffda RBX: 00007f33b69d5fa0 RCX: 00007f33b678eba9 [ 283.243425][ T6311] RDX: 00002000000000c0 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 283.243523][ T6311] RBP: 00007f33b75c3090 R08: 0000000000000000 R09: 0000000000000000 [ 283.243615][ T6311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.243706][ T6311] R13: 00007f33b69d6038 R14: 00007f33b69d5fa0 R15: 00007ffdfc5e8b68 [ 283.243842][ T6311] [ 283.301428][ T5826] Bluetooth: hci0: command tx timeout [ 283.502656][ T6264] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.513736][ T6264] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.524844][ T6264] bridge_slave_0: entered allmulticast mode [ 283.534920][ T6264] bridge_slave_0: entered promiscuous mode [ 283.853199][ T6264] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.861291][ T6264] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.872177][ T6264] bridge_slave_1: entered allmulticast mode [ 283.882255][ T6264] bridge_slave_1: entered promiscuous mode [ 283.955660][ T6307] loop4: detected capacity change from 0 to 4096 [ 284.134243][ T6307] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 284.790353][ T6264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.063063][ T6264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.131200][ T6320] loop3: detected capacity change from 0 to 40427 [ 285.141546][ T6320] f2fs: Unknown parameter '00000000000000000000' [ 285.559431][ T5826] Bluetooth: hci0: command tx timeout [ 285.600571][ T6307] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 285.754940][ T6307] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 286.078735][ T6264] team0: Port device team_slave_0 added [ 286.170496][ T6326] loop1: detected capacity change from 0 to 2048 [ 286.208111][ T6264] team0: Port device team_slave_1 added [ 286.313389][ T6326] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 286.323758][ T6326] UDF-fs: Scanning with blocksize 512 failed [ 286.480510][ T6326] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 286.702497][ T6147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.764224][ T6264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.772398][ T6264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.800844][ T6264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.022037][ T6264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.029493][ T6264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.060123][ T6264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.930762][ T6338] netlink: 'syz.3.92': attribute type 10 has an invalid length. [ 287.977991][ T6333] loop4: detected capacity change from 0 to 32768 [ 287.994729][ T6333] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.90 (6333) [ 288.011854][ T6339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.92'. [ 288.028362][ T6333] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 288.039138][ T6333] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm [ 288.048052][ T6333] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 288.143040][ T6339] bridge_slave_1: left allmulticast mode [ 288.149386][ T6339] bridge_slave_1: left promiscuous mode [ 288.156488][ T6339] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.222852][ T6339] bridge_slave_0: left allmulticast mode [ 288.228740][ T6339] bridge_slave_0: left promiscuous mode [ 288.235498][ T6339] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.310438][ T32] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 288.570594][ T32] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 288.583002][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.585175][ T6333] BTRFS info (device loop4): rebuilding free space tree [ 288.715008][ T6333] BTRFS info (device loop4): disabling free space tree [ 288.722733][ T6333] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 288.722851][ T32] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 288.733120][ T6333] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 288.742959][ T32] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 288.760898][ T32] usb 2-1: Manufacturer: syz [ 288.837010][ T6264] hsr_slave_0: entered promiscuous mode [ 288.846208][ T6264] hsr_slave_1: entered promiscuous mode [ 288.854722][ T6264] debugfs: 'hsr0' already exists in 'hsr' [ 288.860760][ T6264] Cannot create hsr debugfs directory [ 288.870544][ T6333] BTRFS info (device loop4): enabling ssd optimizations [ 288.877724][ T6333] BTRFS info (device loop4): turning off barriers [ 288.886697][ T6333] BTRFS info (device loop4): disabling tree log [ 288.894202][ T6333] BTRFS info (device loop4): turning on flush-on-commit [ 288.901453][ T6333] BTRFS info (device loop4): enabling disk space caching [ 288.910516][ T6333] BTRFS info (device loop4): force clearing of disk cache [ 288.917776][ T6333] BTRFS info (device loop4): doing ref verification [ 288.924674][ T6333] BTRFS info (device loop4): use lzo compression, level 1 [ 289.133733][ T32] usb 2-1: config 0 descriptor?? [ 289.264925][ T5882] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 289.547763][ T5882] usb 4-1: New USB device found, idVendor=04a5, idProduct=3035, bcdDevice= d.df [ 289.557335][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.674906][ T5882] usb 4-1: config 0 descriptor?? [ 289.754626][ T5882] gspca_main: benq-2.14.0 probing 04a5:3035 [ 290.489365][ T6336] loop3: detected capacity change from 0 to 32768 [ 290.498381][ T6336] btrfs: Bad value for 'max_inline' [ 290.866563][ T6336] loop3: detected capacity change from 0 to 2048 [ 290.875410][ T6336] nilfs2: Unknown parameter '' [ 290.976303][ T6336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.986173][ T6336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.057524][ T6336] loop3: detected capacity change from 0 to 512 [ 291.244399][ T32] rc_core: IR keymap rc-hauppauge not found [ 291.250998][ T32] Registered IR keymap rc-empty [ 291.259517][ T32] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 291.274213][ T32] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input6 [ 291.355912][ T6336] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.369224][ T6336] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 291.390698][ T11] usb 4-1: USB disconnect, device number 3 [ 291.612623][ C1] igorplugusb 2-1:0.0: Error: urb status = -32 [ 291.659375][ T32] usb 2-1: USB disconnect, device number 2 [ 292.422265][ T5819] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.553683][ T5827] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 293.214254][ T6264] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 293.348304][ T6147] veth0_vlan: entered promiscuous mode [ 293.421297][ T6385] syz.3.94 uses obsolete (PF_INET,SOCK_PACKET) [ 293.524579][ T6264] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 293.657746][ T6147] veth1_vlan: entered promiscuous mode [ 293.752546][ T6264] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 293.916415][ T6264] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 294.438651][ T6147] veth0_macvtap: entered promiscuous mode [ 294.627509][ T6147] veth1_macvtap: entered promiscuous mode [ 295.222132][ T6393] loop1: detected capacity change from 0 to 40427 [ 295.236393][ T6393] f2fs: Bad value for 'fault_type' [ 296.603737][ T6397] autofs4:pid:6397:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(4294934528.1), cmd(0xc0189374) [ 296.618323][ T6397] autofs4:pid:6397:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 296.672006][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 296.678672][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 296.883366][ T6147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.530744][ T6147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.574301][ T3583] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.684777][ T3583] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.767194][ T11] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 297.820675][ T3583] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.901222][ T3583] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.024565][ T11] usb 4-1: Using ep0 maxpacket: 8 [ 298.769944][ T11] usb 4-1: unable to get BOS descriptor or descriptor too short [ 298.855545][ T11] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 298.863806][ T11] usb 4-1: can't read configurations, error -71 [ 299.012999][ T6264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.352883][ T6264] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.515358][ T3729] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.523289][ T3729] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.698647][ T3729] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.706341][ T3729] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.663972][ T5882] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 301.002404][ T5882] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 301.011321][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.040298][ T5882] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 301.050069][ T5882] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 301.058323][ T5882] usb 2-1: Manufacturer: syz [ 301.101922][ T5882] usb 2-1: config 0 descriptor?? [ 301.213532][ T6418] syz.3.101 (6418): drop_caches: 2 [ 301.761069][ T5882] rc_core: IR keymap rc-hauppauge not found [ 301.767305][ T5882] Registered IR keymap rc-empty [ 301.776683][ T5882] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 301.798764][ T5882] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input7 [ 301.962114][ C1] igorplugusb 2-1:0.0: Error: urb status = -32 [ 302.031358][ T5882] usb 2-1: USB disconnect, device number 3 [ 302.066978][ T6436] loop3: detected capacity change from 0 to 64 [ 302.776345][ T6264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.343853][ T6448] loop3: detected capacity change from 0 to 256 [ 303.364150][ T6448] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 303.402954][ T6448] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 303.413239][ T6448] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 303.421465][ T6448] UDF-fs: Scanning with blocksize 512 failed [ 303.538012][ T6448] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 303.744684][ T6448] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 306.370587][ T6264] veth0_vlan: entered promiscuous mode [ 306.500562][ T6264] veth1_vlan: entered promiscuous mode [ 306.932372][ T6264] veth0_macvtap: entered promiscuous mode [ 307.038307][ T6264] veth1_macvtap: entered promiscuous mode [ 307.357714][ T6264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.458123][ T6264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.480041][ T5875] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 307.569658][ T3504] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.683287][ T3583] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.737558][ T5875] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 307.747561][ T5875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.770607][ T3583] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.797239][ T3504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.806462][ T3504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.937283][ T3583] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.964050][ T5875] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 307.973906][ T5875] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 307.982566][ T5875] usb 4-1: Manufacturer: syz [ 307.992778][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.001787][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.108728][ T5875] usb 4-1: config 0 descriptor?? [ 308.681561][ T5875] rc_core: IR keymap rc-hauppauge not found [ 308.687828][ T5875] Registered IR keymap rc-empty [ 308.696067][ T5875] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 308.712044][ T5875] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input8 [ 308.959900][ C0] igorplugusb 4-1:0.0: Error: urb status = -32 [ 308.980913][ T5875] usb 4-1: USB disconnect, device number 6 [ 309.396743][ T6511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.116'. [ 311.549361][ T6538] MPI: mpi too large (113288 bits) [ 313.099669][ T6552] block nbd0: server does not support multiple connections per device. [ 313.110750][ T6552] block nbd0: shutting down sockets [ 314.190105][ T6566] netlink: 'syz.1.129': attribute type 9 has an invalid length. [ 314.749984][ T6564] loop4: detected capacity change from 0 to 32768 [ 315.027509][ T6564] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 315.371748][ T6575] netlink: 'syz.1.131': attribute type 3 has an invalid length. [ 315.380047][ T6575] netlink: 132 bytes leftover after parsing attributes in process `syz.1.131'. [ 316.055307][ T5827] ocfs2: Unmounting device (7,4) on (node local) [ 317.893072][ T6592] capability: warning: `syz.4.133' uses 32-bit capabilities (legacy support in use) [ 318.010743][ T6594] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 318.051705][ T6594] ip6tnl1: entered promiscuous mode [ 318.150884][ T6592] loop4: detected capacity change from 0 to 128 [ 318.191741][ T4337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.199940][ T4337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.396766][ T4337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.405174][ T4337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.961019][ T6599] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 319.934963][ T6614] netem: incorrect gi model size [ 319.940627][ T6614] netem: change failed [ 319.999643][ T5882] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 321.665789][ T6622] loop6: detected capacity change from 0 to 32768 [ 321.881607][ T6622] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 322.201484][ T6633] FAULT_INJECTION: forcing a failure. [ 322.201484][ T6633] name failslab, interval 1, probability 0, space 0, times 0 [ 322.214687][ T6633] CPU: 1 UID: 0 PID: 6633 Comm: syz.4.144 Not tainted syzkaller #0 PREEMPT(none) [ 322.214836][ T6633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 322.214934][ T6633] Call Trace: [ 322.214991][ T6633] [ 322.215045][ T6633] __dump_stack+0x26/0x30 [ 322.215240][ T6633] dump_stack_lvl+0x1df/0x270 [ 322.215458][ T6633] dump_stack+0x1e/0x25 [ 322.215626][ T6633] should_fail_ex+0x7dc/0x8a0 [ 322.215810][ T6633] should_failslab+0x15b/0x200 [ 322.215996][ T6633] kmem_cache_alloc_lru_noprof+0xf7/0xed0 [ 322.216201][ T6633] ? shmem_alloc_inode+0x5a/0xd0 [ 322.216351][ T6633] ? kmsan_slab_alloc+0xde/0x160 [ 322.216504][ T6633] ? __se_sys_memfd_create+0x51d/0x11f0 [ 322.216663][ T6633] ? __x64_sys_memfd_create+0x78/0xb0 [ 322.216820][ T6633] ? x64_sys_call+0x3500/0x3e20 [ 322.217014][ T6633] ? kmsan_get_metadata+0xfb/0x160 [ 322.217224][ T6633] shmem_alloc_inode+0x5a/0xd0 [ 322.217371][ T6633] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 322.217517][ T6633] alloc_inode+0x8a/0x4a0 [ 322.217696][ T6633] ? kmsan_get_metadata+0xfb/0x160 [ 322.217869][ T6633] ? kmsan_get_metadata+0xfb/0x160 [ 322.218045][ T6633] new_inode+0x39/0x460 [ 322.218234][ T6633] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 322.218415][ T6633] shmem_get_inode+0x663/0x1c20 [ 322.218594][ T6633] __shmem_file_setup+0x210/0x590 [ 322.218811][ T6633] shmem_file_setup+0x61/0x80 [ 322.219016][ T6633] __se_sys_memfd_create+0x844/0x11f0 [ 322.219202][ T6633] __x64_sys_memfd_create+0x78/0xb0 [ 322.219374][ T6633] x64_sys_call+0x3500/0x3e20 [ 322.219566][ T6633] do_syscall_64+0xd9/0x210 [ 322.219702][ T6633] ? irqentry_exit+0x16/0x60 [ 322.219909][ T6633] ? clear_bhb_loop+0x40/0x90 [ 322.220074][ T6633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.220232][ T6633] RIP: 0033:0x7f472d98eba9 [ 322.220349][ T6633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.220475][ T6633] RSP: 002b:00007f472e829e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 322.220616][ T6633] RAX: ffffffffffffffda RBX: 0000000000000154 RCX: 00007f472d98eba9 [ 322.220718][ T6633] RDX: 00007f472e829ef0 RSI: 0000000000000000 RDI: 00007f472da127e8 [ 322.220817][ T6633] RBP: 00002000000001c0 R08: 00007f472e829bb7 R09: 00007f472e829e40 [ 322.220920][ T6633] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 322.221022][ T6633] R13: 00007f472e829ef0 R14: 00007f472e829eb0 R15: 0000200000000140 [ 322.221177][ T6633] [ 322.858351][ T6264] ocfs2: Unmounting device (7,6) on (node local) [ 323.309418][ T5882] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 323.604706][ T5882] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 323.613440][ T5882] usb 5-1: config 0 has no interface number 0 [ 323.722483][ T5882] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=4f.5d [ 323.732847][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.741420][ T5882] usb 5-1: Product: syz [ 323.745815][ T5882] usb 5-1: Manufacturer: syz [ 323.750867][ T5882] usb 5-1: SerialNumber: syz [ 323.845961][ T5882] usb 5-1: config 0 descriptor?? [ 323.949274][ T5882] usbtest 5-1:0.85: Linux gadget zero [ 323.955111][ T5882] usbtest 5-1:0.85: high-speed {control in/out int-out} tests (+alt) [ 324.129176][ T5882] usb 5-1: USB disconnect, device number 8 [ 324.679354][ T1626] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 324.939172][ T1626] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 324.947497][ T1626] usb 4-1: can't read configurations, error -22 [ 325.087493][ T6654] loop6: detected capacity change from 0 to 512 [ 325.139291][ T1626] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 325.316303][ T6654] EXT4-fs (loop6): 1 orphan inode deleted [ 325.325029][ T6654] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.433596][ T1626] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 325.447307][ T1626] usb 4-1: can't read configurations, error -22 [ 325.489457][ T1626] usb usb4-port1: attempt power cycle [ 325.512001][ T6654] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 325.875155][ T1626] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 325.961858][ T5175] udevd[5175]: worker [6000] terminated by signal 33 (Unknown signal 33) [ 325.989760][ T1626] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 325.997977][ T1626] usb 4-1: can't read configurations, error -22 [ 326.014431][ T5175] udevd[5175]: worker [6000] failed while handling '/devices/virtual/block/loop6' [ 326.141297][ T6664] netlink: 'syz.4.152': attribute type 4 has an invalid length. [ 326.211994][ T6264] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.212876][ T1626] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 326.373231][ T1626] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 326.381627][ T1626] usb 4-1: can't read configurations, error -22 [ 326.431717][ T1626] usb usb4-port1: unable to enumerate USB device [ 326.849802][ T6673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.155'. [ 326.883287][ T6673] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 326.959667][ T6673] netlink: 'syz.4.155': attribute type 10 has an invalid length. [ 326.995796][ T6673] dummy0: entered promiscuous mode [ 327.006521][ T6673] team0: Port device dummy0 added [ 328.369671][ T6676] loop4: detected capacity change from 0 to 32768 [ 328.446846][ T5821] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 328.456943][ T5821] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 328.499940][ T5821] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 328.543689][ T6676] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 328.576801][ T5821] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 328.597144][ T5821] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 328.877304][ T6681] loop3: detected capacity change from 0 to 128 [ 329.030558][ T5821] Bluetooth: hci1: command 0x0406 tx timeout [ 329.036834][ T5821] Bluetooth: hci2: command 0x0406 tx timeout [ 329.043967][ T49] Bluetooth: hci3: command 0x0406 tx timeout [ 329.152349][ T6681] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 329.203933][ T6681] ext4 filesystem being mounted at /46/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 329.320692][ T5827] ocfs2: Unmounting device (7,4) on (node local) [ 330.325624][ T5819] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 330.637457][ T6701] loop4: detected capacity change from 0 to 64 [ 330.710221][ T5817] Bluetooth: hci4: command tx timeout [ 331.344239][ T6682] chnl_net:caif_netlink_parms(): no params data found [ 331.529699][ T1626] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 331.789942][ T6708] loop6: detected capacity change from 0 to 1024 [ 331.868094][ T1626] usb 4-1: config 6 has an invalid interface number: 58 but max is 3 [ 331.873499][ T6708] EXT4-fs: Ignoring removed bh option [ 331.876727][ T1626] usb 4-1: config 6 has an invalid interface number: 77 but max is 3 [ 331.897233][ T1626] usb 4-1: config 6 has an invalid interface number: 167 but max is 3 [ 331.907593][ T1626] usb 4-1: config 6 has an invalid interface number: 247 but max is 3 [ 331.916231][ T1626] usb 4-1: config 6 has an invalid interface number: 185 but max is 3 [ 331.924796][ T1626] usb 4-1: config 6 has 5 interfaces, different from the descriptor's value: 4 [ 331.934155][ T1626] usb 4-1: config 6 has no interface number 0 [ 331.940636][ T1626] usb 4-1: config 6 has no interface number 1 [ 331.946930][ T1626] usb 4-1: config 6 has no interface number 2 [ 331.953500][ T1626] usb 4-1: config 6 has no interface number 3 [ 331.959919][ T1626] usb 4-1: config 6 has no interface number 4 [ 331.968565][ T1626] usb 4-1: config 6 interface 58 altsetting 112 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 331.980233][ T1626] usb 4-1: config 6 interface 58 altsetting 112 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 331.997068][ T1626] usb 4-1: config 6 interface 58 altsetting 112 has an invalid descriptor for endpoint zero, skipping [ 332.010211][ T1626] usb 4-1: config 6 interface 58 altsetting 112 has an invalid descriptor for endpoint zero, skipping [ 332.021548][ T1626] usb 4-1: config 6 interface 58 altsetting 112 has an invalid descriptor for endpoint zero, skipping [ 332.033549][ T1626] usb 4-1: config 6 interface 58 altsetting 112 has a duplicate endpoint with address 0xC, skipping [ 332.044812][ T1626] usb 4-1: config 6 interface 58 altsetting 112 has an endpoint descriptor with address 0x39, changing to 0x9 [ 332.056894][ T1626] usb 4-1: config 6 interface 58 altsetting 112 endpoint 0x9 has invalid maxpacket 51671, setting to 64 [ 332.078569][ T1626] usb 4-1: config 6 interface 58 altsetting 112 has a duplicate endpoint with address 0xC, skipping [ 332.092805][ T1626] usb 4-1: config 6 interface 58 altsetting 112 has a duplicate endpoint with address 0x9, skipping [ 332.109352][ T1626] usb 4-1: config 6 interface 58 altsetting 112 has 11 endpoint descriptors, different from the interface descriptor's value: 12 [ 332.124918][ T1626] usb 4-1: too many endpoints for config 6 interface 77 altsetting 172: 188, using maximum allowed: 30 [ 332.136578][ T1626] usb 4-1: config 6 interface 77 altsetting 172 endpoint 0x1 has invalid wMaxPacketSize 0 [ 332.146915][ T1626] usb 4-1: config 6 interface 77 altsetting 172 has 2 endpoint descriptors, different from the interface descriptor's value: 188 [ 332.160665][ T1626] usb 4-1: config 6 interface 167 altsetting 138 has a duplicate endpoint with address 0x6, skipping [ 332.171878][ T1626] usb 4-1: config 6 interface 167 altsetting 138 has a duplicate endpoint with address 0x8, skipping [ 332.183223][ T1626] usb 4-1: config 6 interface 167 altsetting 138 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 332.194901][ T1626] usb 4-1: config 6 interface 167 altsetting 138 has a duplicate endpoint with address 0x6, skipping [ 332.211424][ T1626] usb 4-1: config 6 interface 167 altsetting 138 has an invalid descriptor for endpoint zero, skipping [ 332.224712][ T1626] usb 4-1: config 6 interface 167 altsetting 138 has a duplicate endpoint with address 0xF, skipping [ 332.235967][ T1626] usb 4-1: config 6 interface 167 altsetting 138 has a duplicate endpoint with address 0x6, skipping [ 332.247309][ T1626] usb 4-1: config 6 interface 247 altsetting 2 has a duplicate endpoint with address 0xC, skipping [ 332.258507][ T1626] usb 4-1: config 6 interface 247 altsetting 2 has a duplicate endpoint with address 0xE, skipping [ 332.269703][ T1626] usb 4-1: config 6 interface 247 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 332.280916][ T1626] usb 4-1: config 6 interface 247 altsetting 2 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 332.292180][ T1626] usb 4-1: config 6 interface 247 altsetting 2 has a duplicate endpoint with address 0xE, skipping [ 332.308368][ T1626] usb 4-1: config 6 interface 247 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 332.321608][ T1626] usb 4-1: config 6 interface 247 altsetting 2 has a duplicate endpoint with address 0x3, skipping [ 332.332743][ T1626] usb 4-1: config 6 interface 247 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 332.343821][ T1626] usb 4-1: config 6 interface 247 altsetting 2 has a duplicate endpoint with address 0x1, skipping [ 332.355036][ T1626] usb 4-1: config 6 interface 185 altsetting 5 has a duplicate endpoint with address 0xA, skipping [ 332.366150][ T1626] usb 4-1: config 6 interface 185 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 332.377451][ T1626] usb 4-1: config 6 interface 185 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 332.388894][ T1626] usb 4-1: config 6 interface 185 altsetting 5 has a duplicate endpoint with address 0x5, skipping [ 332.400028][ T1626] usb 4-1: config 6 interface 185 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 332.416898][ T1626] usb 4-1: config 6 interface 185 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 332.430429][ T1626] usb 4-1: config 6 interface 185 altsetting 5 has a duplicate endpoint with address 0xF, skipping [ 332.441705][ T1626] usb 4-1: config 6 interface 185 altsetting 5 has a duplicate endpoint with address 0x5, skipping [ 332.452790][ T1626] usb 4-1: config 6 interface 185 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 332.464158][ T1626] usb 4-1: config 6 interface 185 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 332.475247][ T1626] usb 4-1: config 6 interface 185 altsetting 5 has a duplicate endpoint with address 0xF, skipping [ 332.486466][ T1626] usb 4-1: config 6 interface 185 altsetting 5 has a duplicate endpoint with address 0xE, skipping [ 332.497575][ T1626] usb 4-1: config 6 interface 185 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 332.514969][ T1626] usb 4-1: config 6 interface 185 altsetting 5 has a duplicate endpoint with address 0x2, skipping [ 332.527780][ T1626] usb 4-1: config 6 interface 185 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 332.539280][ T1626] usb 4-1: config 6 interface 185 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 332.550385][ T1626] usb 4-1: config 6 interface 58 has no altsetting 0 [ 332.557305][ T1626] usb 4-1: config 6 interface 77 has no altsetting 0 [ 332.564377][ T1626] usb 4-1: config 6 interface 167 has no altsetting 0 [ 332.571489][ T1626] usb 4-1: config 6 interface 247 has no altsetting 0 [ 332.578504][ T1626] usb 4-1: config 6 interface 185 has no altsetting 0 [ 332.655954][ T6708] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 332.694408][ T1626] usb 4-1: New USB device found, idVendor=08f2, idProduct=00ce, bcdDevice=ff.68 [ 332.707209][ T1626] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.729240][ T1626] usb 4-1: Product: с [ 332.733575][ T1626] usb 4-1: Manufacturer: Ё [ 332.738381][ T1626] usb 4-1: SerialNumber: syz [ 332.787278][ T5817] Bluetooth: hci4: command tx timeout [ 332.971293][ T6707] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 333.051575][ T6707] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 333.125994][ T6718] fuse: Bad value for 'fd' [ 333.164445][ T6707] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 333.533207][ T6707] loop3: detected capacity change from 0 to 256 [ 333.622185][ T6707] minix: Unknown parameter 'C' [ 333.730748][ T6707] netlink: 'syz.3.163': attribute type 2 has an invalid length. [ 333.833005][ T6264] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.947100][ T6723] netlink: 'syz.3.163': attribute type 2 has an invalid length. [ 333.994974][ T5115] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 334.010592][ T5115] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 334.053935][ T5115] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 334.075698][ T5115] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 334.101382][ T5115] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 334.537293][ T6730] loop4: detected capacity change from 0 to 1024 [ 334.548038][ T6730] EXT4-fs: Ignoring removed oldalloc option [ 334.560623][ T6730] EXT4-fs: Ignoring removed bh option [ 334.776774][ T6730] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.899772][ T5115] Bluetooth: hci4: command tx timeout [ 334.991708][ T1626] usb 4-1: USB disconnect, device number 12 [ 335.060519][ T6726] EXT4-fs warning (device loop4): ext4_resize_begin:72: won't resize using backup superblock at 1 [ 335.445927][ T3082] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 335.665100][ T6682] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.672984][ T6682] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.686489][ T6682] bridge_slave_0: entered allmulticast mode [ 335.696421][ T6682] bridge_slave_0: entered promiscuous mode [ 335.759734][ T3082] usb 7-1: Using ep0 maxpacket: 8 [ 335.829253][ T3082] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 335.837850][ T3082] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 335.848190][ T3082] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 335.858530][ T3082] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 335.869143][ T3082] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 335.886275][ T3082] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 335.896953][ T3082] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.931997][ T6682] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.939801][ T6682] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.947637][ T6682] bridge_slave_1: entered allmulticast mode [ 335.957819][ T6682] bridge_slave_1: entered promiscuous mode [ 336.219817][ T5115] Bluetooth: hci6: command tx timeout [ 336.313600][ T5827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.491327][ T3082] usb 7-1: usb_control_msg returned -32 [ 336.502743][ T3082] usbtmc 7-1:16.0: can't read capabilities [ 336.572430][ T6682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.677608][ T6682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.939241][ T5115] Bluetooth: hci4: command tx timeout [ 337.265001][ T6746] usbtmc 7-1:16.0: INITIATE_CLEAR returned 8e [ 337.422671][ T6750] 9pnet_fd: Insufficient options for proto=fd [ 337.600580][ T3082] usb 7-1: USB disconnect, device number 2 [ 337.802839][ T6747] loop4: detected capacity change from 0 to 32768 [ 338.043158][ T6751] sctp: failed to load transform for md5: -2 [ 338.089805][ T6747] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 338.128698][ T6682] team0: Port device team_slave_0 added [ 338.326265][ T5115] Bluetooth: hci6: command tx timeout [ 338.349818][ T6682] team0: Port device team_slave_1 added [ 339.132473][ T6682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.139919][ T6682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.171902][ T6682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.301183][ T5827] ocfs2: Unmounting device (7,4) on (node local) [ 339.437407][ T6682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.444888][ T6682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.476338][ T6682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.530423][ T6767] loop6: detected capacity change from 0 to 128 [ 339.577236][ T6722] chnl_net:caif_netlink_parms(): no params data found [ 339.781176][ T6767] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 339.882892][ T6767] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 340.332770][ T6777] fuse: Bad value for 'fd' [ 340.381876][ T5115] Bluetooth: hci6: command tx timeout [ 340.716796][ T6682] hsr_slave_0: entered promiscuous mode [ 340.727672][ T6682] hsr_slave_1: entered promiscuous mode [ 340.736720][ T6682] debugfs: 'hsr0' already exists in 'hsr' [ 340.744763][ T6682] Cannot create hsr debugfs directory [ 340.807249][ T6264] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 341.351422][ T1626] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 341.559500][ T1626] usb 7-1: Using ep0 maxpacket: 8 [ 341.707136][ T1626] usb 7-1: unable to get BOS descriptor or descriptor too short [ 341.759175][ T1626] usb 7-1: config 7 has an invalid interface number: 208 but max is 0 [ 341.767640][ T1626] usb 7-1: config 7 has no interface number 0 [ 341.774260][ T1626] usb 7-1: No eUSB2 isoc ep 7 companion for config 7 interface 208 altsetting 4 [ 341.784214][ T1626] usb 7-1: config 7 interface 208 has no altsetting 0 [ 342.038477][ T1626] usb 7-1: New USB device found, idVendor=5050, idProduct=0900, bcdDevice=b3.ef [ 342.048289][ T1626] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.056803][ T1626] usb 7-1: Product: syz [ 342.061359][ T1626] usb 7-1: Manufacturer: syz [ 342.066178][ T1626] usb 7-1: SerialNumber: syz [ 342.386215][ T1626] ftdi_sio 7-1:7.208: FTDI USB Serial Device converter detected [ 342.398313][ T1626] ftdi_sio ttyUSB0: unknown device type: 0xb3ef [ 342.461791][ T5817] Bluetooth: hci6: command tx timeout [ 342.511317][ T1626] usb 7-1: USB disconnect, device number 3 [ 342.521519][ T1626] ftdi_sio 7-1:7.208: device disconnected [ 343.200736][ T6722] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.208628][ T6722] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.216790][ T6722] bridge_slave_0: entered allmulticast mode [ 343.226921][ T6722] bridge_slave_0: entered promiscuous mode [ 343.483235][ T6722] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.494018][ T6722] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.502342][ T6722] bridge_slave_1: entered allmulticast mode [ 343.512530][ T6722] bridge_slave_1: entered promiscuous mode [ 343.555017][ T6799] loop3: detected capacity change from 0 to 8 [ 343.721803][ T6799] SQUASHFS error: zlib decompression failed, data probably corrupt [ 343.730242][ T6799] SQUASHFS error: Failed to read block 0x9b: -5 [ 343.736677][ T6799] SQUASHFS error: Unable to read metadata cache entry [99] [ 343.744539][ T6799] SQUASHFS error: Unable to read inode 0x127 [ 343.962209][ T6802] loop4: detected capacity change from 0 to 7 [ 344.003558][ T6802] Dev loop4: unable to read RDB block 7 [ 344.009812][ T6802] loop4: unable to read partition table [ 344.081551][ T6802] loop4: partition table beyond EOD, truncated [ 344.088257][ T6802] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 344.140177][ T5175] Dev loop4: unable to read RDB block 7 [ 344.146256][ T5175] loop4: unable to read partition table [ 344.200932][ T5175] loop4: partition table beyond EOD, truncated [ 344.434884][ T6722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.559340][ T6682] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 344.801851][ T6722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.860108][ T6682] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 345.123123][ T6804] loop4: detected capacity change from 0 to 32768 [ 345.327373][ T6682] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 345.457350][ T6804] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 345.550764][ T6682] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 345.682353][ T6722] team0: Port device team_slave_0 added [ 345.741049][ T6722] team0: Port device team_slave_1 added [ 346.071867][ T5827] ocfs2: Unmounting device (7,4) on (node local) [ 346.361802][ T6722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.369761][ T6722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.396461][ T6722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.671748][ T6722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.679427][ T6722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.705972][ T6722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.256660][ T6823] loop6: detected capacity change from 0 to 1764 [ 347.338460][ T6823] iso9660: Unknown parameter 'chec' [ 347.460089][ T6823] netlink: 'syz.6.186': attribute type 1 has an invalid length. [ 347.484678][ T6722] hsr_slave_0: entered promiscuous mode [ 347.501240][ T6722] hsr_slave_1: entered promiscuous mode [ 347.510623][ T6722] debugfs: 'hsr0' already exists in 'hsr' [ 347.516654][ T6722] Cannot create hsr debugfs directory [ 347.653764][ T6823] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 347.942972][ T1626] IPVS: starting estimator thread 0... [ 348.062387][ T6832] IPVS: using max 192 ests per chain, 9600 per kthread [ 348.271944][ T6831] loop3: detected capacity change from 0 to 1024 [ 348.536920][ T6831] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 348.550626][ T6831] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 349.000482][ T6682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.541496][ T6682] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.584002][ T5819] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 349.637387][ T4842] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.645047][ T4842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.980109][ T4842] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.987675][ T4842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.086502][ T6722] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 350.115784][ T6722] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 350.149750][ T6722] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 350.306956][ T6722] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 350.741288][ T6682] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 352.954401][ T6859] loop6: detected capacity change from 0 to 32768 [ 353.109226][ T3082] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 353.215501][ T6722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.289158][ T6859] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 353.407963][ T6862] loop4: detected capacity change from 0 to 1024 [ 353.419770][ T3082] usb 4-1: Using ep0 maxpacket: 16 [ 353.493936][ T3082] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.509396][ T3082] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.521254][ T3082] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 353.534622][ T3082] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 353.544153][ T3082] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.559761][ T6862] EXT4-fs: Ignoring removed nobh option [ 353.565672][ T6862] EXT4-fs: Ignoring removed bh option [ 353.767215][ T6862] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.868501][ T6722] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.915901][ T3082] usb 4-1: config 0 descriptor?? [ 354.084809][ T3504] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.092488][ T3504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.206514][ T6264] ocfs2: Unmounting device (7,6) on (node local) [ 354.305550][ T3504] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.313353][ T3504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.447829][ T3082] microsoft 0003:045E:07DA.0001: unbalanced delimiter at end of report description [ 354.593411][ T3082] microsoft 0003:045E:07DA.0001: parse failed [ 354.601034][ T3082] microsoft 0003:045E:07DA.0001: probe with driver microsoft failed with error -22 [ 354.615914][ T6862] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 15: block 289:freeing already freed block (bit 18); block bitmap corrupt. [ 354.774349][ T3082] usb 4-1: USB disconnect, device number 13 [ 355.122714][ T6682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.846197][ T5827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.089685][ T5875] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 356.353792][ T5875] usb 7-1: Using ep0 maxpacket: 8 [ 356.480194][ T5875] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 356.489147][ T5875] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 356.500302][ T5875] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 356.510649][ T5875] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 356.521052][ T5875] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 356.534529][ T5875] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 356.544613][ T5875] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.209681][ T6888] loop3: detected capacity change from 0 to 1764 [ 357.361583][ T6895] netem: incorrect gi model size [ 357.366818][ T6895] netem: change failed [ 357.481133][ T5875] usb 7-1: GET_CAPABILITIES returned b3 [ 357.487349][ T5875] usbtmc 7-1:16.0: can't read capabilities [ 357.752922][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 357.759941][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 358.679877][ T6910] usbtmc 7-1:16.0: usb_control_msg returned -32 [ 359.002488][ T5882] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 359.086519][ T6722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.263950][ T5882] usb 4-1: Using ep0 maxpacket: 8 [ 359.310061][ T5882] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 359.318541][ T5882] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 359.330158][ T5882] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 359.343829][ T5882] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 359.355440][ T5882] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 359.369014][ T5882] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 359.378333][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.018481][ T5882] usb 4-1: GET_CAPABILITIES returned 0 [ 360.025326][ T5882] usbtmc 4-1:16.0: can't read capabilities [ 360.227147][ T5115] Bluetooth: hci1: unexpected event for opcode 0x200a [ 360.374530][ T6682] veth0_vlan: entered promiscuous mode [ 360.470733][ T5882] usb 7-1: USB disconnect, device number 4 [ 360.676651][ T6682] veth1_vlan: entered promiscuous mode [ 360.923403][ T6923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.933886][ T6923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.652481][ T6924] loop6: detected capacity change from 0 to 32768 [ 361.810236][ T1626] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 361.941300][ T6924] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 361.990874][ T6682] veth0_macvtap: entered promiscuous mode [ 362.121282][ T1626] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 362.130076][ T1626] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.182105][ T1626] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 362.191794][ T1626] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 362.205734][ T1626] usb 5-1: Manufacturer: syz [ 362.217148][ T6682] veth1_macvtap: entered promiscuous mode [ 362.228335][ T1626] usb 5-1: config 0 descriptor?? [ 362.640239][ T6264] ocfs2: Unmounting device (7,6) on (node local) [ 362.740706][ T6682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.022916][ T6682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.109372][ T1626] rc_core: IR keymap rc-hauppauge not found [ 363.115627][ T1626] Registered IR keymap rc-empty [ 363.133333][ T1626] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 363.150546][ T1626] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input9 [ 363.261024][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.342839][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.459880][ T6938] ip6erspan0: entered promiscuous mode [ 363.488453][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.581632][ C0] igorplugusb 5-1:0.0: Error: urb status = -32 [ 363.652255][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.687517][ T5882] usb 4-1: USB disconnect, device number 14 [ 364.471430][ T6945] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (34504) [ 364.481930][ T6945] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 365.636372][ T6950] loop3: detected capacity change from 0 to 1024 [ 365.767542][ T11] usb 5-1: USB disconnect, device number 9 [ 366.069254][ T6950] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 366.082240][ T6950] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 366.109503][ T6722] veth0_vlan: entered promiscuous mode [ 366.257020][ T6722] veth1_vlan: entered promiscuous mode [ 366.338400][ T6950] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 3: comm syz.3.206: lblock 3 mapped to illegal pblock 3 (length 3) [ 366.440870][ T6950] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 366.454019][ T6950] EXT4-fs (loop3): This should not happen!! Data will be lost [ 366.454019][ T6950] [ 367.165160][ T6722] veth0_macvtap: entered promiscuous mode [ 367.306705][ T6722] veth1_macvtap: entered promiscuous mode [ 367.311198][ T3729] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:18: lblock 8 mapped to illegal pblock 8 (length 8) [ 367.451822][ T6968] IPv6: NLM_F_CREATE should be specified when creating new route [ 367.540331][ T3729] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 367.553151][ T3729] EXT4-fs (loop3): This should not happen!! Data will be lost [ 367.553151][ T3729] [ 367.621613][ T6722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.788215][ T5819] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 367.877393][ T6722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.159752][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.296035][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.494581][ T3583] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.689867][ T3583] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.798428][ T6970] loop4: detected capacity change from 0 to 32768 [ 369.168538][ T6970] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 369.664047][ T5827] ocfs2: Unmounting device (7,4) on (node local) [ 369.834293][ T6977] loop6: detected capacity change from 0 to 2048 [ 369.853862][ T6977] EXT4-fs: Ignoring removed mblk_io_submit option [ 369.927848][ T6984] netlink: 24 bytes leftover after parsing attributes in process `syz.3.210'. [ 370.142128][ T6977] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 371.526532][ T6999] loop3: detected capacity change from 0 to 256 [ 371.584442][ T6999] exfat: Deprecated parameter 'namecase' [ 371.957906][ T6999] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 372.251835][ T6264] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.991171][ T7010] ===================================================== [ 372.998417][ T7010] BUG: KMSAN: uninit-value in erspan_build_header+0x167/0x2f0 [ 373.006427][ T7010] erspan_build_header+0x167/0x2f0 [ 373.011897][ T7010] erspan_xmit+0x10b0/0x1ce0 [ 373.016681][ T7010] dev_hard_start_xmit+0x22f/0xa30 [ 373.022287][ T7010] sch_direct_xmit+0x3b2/0xcf0 [ 373.027258][ T7010] __dev_queue_xmit+0x3588/0x5e60 [ 373.032659][ T7010] __bpf_redirect+0x162d/0x1760 [ 373.037745][ T7010] bpf_clone_redirect+0x366/0x530 [ 373.043256][ T7010] ___bpf_prog_run+0x1297/0xeba0 [ 373.048379][ T7010] __bpf_prog_run32+0xc2/0xf0 [ 373.053398][ T7010] bpf_test_run+0x350/0xab0 [ 373.058349][ T7010] bpf_prog_test_run_skb+0x19f8/0x26c0 [ 373.064238][ T7010] bpf_prog_test_run+0x5c2/0xa40 [ 373.069495][ T7010] __sys_bpf+0x89a/0xed0 [ 373.073913][ T7010] __x64_sys_bpf+0xa4/0xf0 [ 373.078552][ T7010] x64_sys_call+0x3550/0x3e20 [ 373.083649][ T7010] do_syscall_64+0xd9/0x210 [ 373.088321][ T7010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.094577][ T7010] [ 373.097001][ T7010] Uninit was created at: [ 373.101726][ T7010] kmem_cache_alloc_node_noprof+0x818/0xf00 [ 373.107862][ T7010] kmalloc_reserve+0x13c/0x4b0 [ 373.112979][ T7010] pskb_expand_head+0x1fc/0x1610 [ 373.118138][ T7010] erspan_xmit+0x952/0x1ce0 [ 373.122988][ T7010] dev_hard_start_xmit+0x22f/0xa30 [ 373.128315][ T7010] sch_direct_xmit+0x3b2/0xcf0 [ 373.133457][ T7010] __dev_queue_xmit+0x3588/0x5e60 [ 373.138703][ T7010] __bpf_redirect+0x162d/0x1760 [ 373.143876][ T7010] bpf_clone_redirect+0x366/0x530 [ 373.149285][ T7010] ___bpf_prog_run+0x1297/0xeba0 [ 373.154431][ T7010] __bpf_prog_run32+0xc2/0xf0 [ 373.159482][ T7010] bpf_test_run+0x350/0xab0 [ 373.164182][ T7010] bpf_prog_test_run_skb+0x19f8/0x26c0 [ 373.170021][ T7010] bpf_prog_test_run+0x5c2/0xa40 [ 373.175148][ T7010] __sys_bpf+0x89a/0xed0 [ 373.179724][ T7010] __x64_sys_bpf+0xa4/0xf0 [ 373.184373][ T7010] x64_sys_call+0x3550/0x3e20 [ 373.189449][ T7010] do_syscall_64+0xd9/0x210 [ 373.194130][ T7010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.200364][ T7010] [ 373.202806][ T7010] CPU: 0 UID: 0 PID: 7010 Comm: syz.4.217 Not tainted syzkaller #0 PREEMPT(none) [ 373.212354][ T7010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 373.222718][ T7010] ===================================================== [ 373.229875][ T7010] Disabling lock debugging due to kernel taint [ 373.236187][ T7010] Kernel panic - not syncing: kmsan.panic set ... [ 373.242773][ T7010] CPU: 0 UID: 0 PID: 7010 Comm: syz.4.217 Tainted: G B syzkaller #0 PREEMPT(none) [ 373.253771][ T7010] Tainted: [B]=BAD_PAGE [ 373.258039][ T7010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 373.268288][ T7010] Call Trace: [ 373.271698][ T7010] [ 373.274751][ T7010] __dump_stack+0x26/0x30 [ 373.279323][ T7010] dump_stack_lvl+0x53/0x270 [ 373.284141][ T7010] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 373.290180][ T7010] dump_stack+0x1e/0x25 [ 373.294556][ T7010] vpanic+0x361/0xc50 [ 373.298768][ T7010] panic+0x15d/0x160 [ 373.302919][ T7010] kmsan_report+0x31c/0x320 [ 373.307643][ T7010] ? __msan_warning+0x1b/0x30 [ 373.312616][ T7010] ? erspan_build_header+0x167/0x2f0 [ 373.318100][ T7010] ? erspan_xmit+0x10b0/0x1ce0 [ 373.323051][ T7010] ? dev_hard_start_xmit+0x22f/0xa30 [ 373.328545][ T7010] ? sch_direct_xmit+0x3b2/0xcf0 [ 373.333645][ T7010] ? __dev_queue_xmit+0x3588/0x5e60 [ 373.339049][ T7010] ? __bpf_redirect+0x162d/0x1760 [ 373.344289][ T7010] ? bpf_clone_redirect+0x366/0x530 [ 373.349684][ T7010] ? ___bpf_prog_run+0x1297/0xeba0 [ 373.354950][ T7010] ? __bpf_prog_run32+0xc2/0xf0 [ 373.359971][ T7010] ? bpf_test_run+0x350/0xab0 [ 373.364837][ T7010] ? bpf_prog_test_run_skb+0x19f8/0x26c0 [ 373.370668][ T7010] ? bpf_prog_test_run+0x5c2/0xa40 [ 373.375941][ T7010] ? __sys_bpf+0x89a/0xed0 [ 373.380501][ T7010] ? __x64_sys_bpf+0xa4/0xf0 [ 373.385277][ T7010] ? x64_sys_call+0x3550/0x3e20 [ 373.390332][ T7010] ? do_syscall_64+0xd9/0x210 [ 373.395164][ T7010] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.401405][ T7010] ? kfree+0x3a8/0xec0 [ 373.405661][ T7010] ? skb_free_head+0x1b5/0x3a0 [ 373.410700][ T7010] ? kmsan_get_metadata+0xfb/0x160 [ 373.416004][ T7010] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 373.422014][ T7010] ? kmsan_get_metadata+0xfb/0x160 [ 373.427324][ T7010] __msan_warning+0x1b/0x30 [ 373.431982][ T7010] erspan_build_header+0x167/0x2f0 [ 373.437292][ T7010] erspan_xmit+0x10b0/0x1ce0 [ 373.442034][ T7010] ? kmsan_get_metadata+0xfb/0x160 [ 373.447338][ T7010] ? __pfx_erspan_xmit+0x10/0x10 [ 373.452418][ T7010] dev_hard_start_xmit+0x22f/0xa30 [ 373.457757][ T7010] sch_direct_xmit+0x3b2/0xcf0 [ 373.462678][ T7010] ? kmsan_get_metadata+0x150/0x160 [ 373.468064][ T7010] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 373.474610][ T7010] __dev_queue_xmit+0x3588/0x5e60 [ 373.479845][ T7010] ? skb_release_data+0xa12/0xac0 [ 373.485061][ T7010] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 373.491578][ T7010] ? kmsan_get_metadata+0xfb/0x160 [ 373.496870][ T7010] ? __dev_queue_xmit+0x30c/0x5e60 [ 373.502219][ T7010] __bpf_redirect+0x162d/0x1760 [ 373.507280][ T7010] ? kmsan_get_metadata+0xfb/0x160 [ 373.512567][ T7010] bpf_clone_redirect+0x366/0x530 [ 373.517815][ T7010] ___bpf_prog_run+0x1297/0xeba0 [ 373.522953][ T7010] __bpf_prog_run32+0xc2/0xf0 [ 373.527765][ T7010] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 373.533756][ T7010] ? kmsan_get_metadata+0xfb/0x160 [ 373.539084][ T7010] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 373.545072][ T7010] ? __pfx___bpf_prog_run32+0x10/0x10 [ 373.550611][ T7010] ? __pfx___bpf_prog_run32+0x10/0x10 [ 373.556135][ T7010] bpf_test_run+0x350/0xab0 [ 373.560830][ T7010] ? csum_partial+0x424/0x480 [ 373.565699][ T7010] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 373.572272][ T7010] ? bpf_test_run+0x1b0/0xab0 [ 373.577158][ T7010] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 373.583176][ T7010] bpf_prog_test_run_skb+0x19f8/0x26c0 [ 373.588909][ T7010] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 373.594955][ T7010] bpf_prog_test_run+0x5c2/0xa40 [ 373.600101][ T7010] __sys_bpf+0x89a/0xed0 [ 373.604551][ T7010] __x64_sys_bpf+0xa4/0xf0 [ 373.609189][ T7010] x64_sys_call+0x3550/0x3e20 [ 373.614080][ T7010] do_syscall_64+0xd9/0x210 [ 373.618768][ T7010] ? irqentry_exit+0x16/0x60 [ 373.623571][ T7010] ? clear_bhb_loop+0x40/0x90 [ 373.628418][ T7010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.634487][ T7010] RIP: 0033:0x7f472d98eba9 [ 373.639033][ T7010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.658830][ T7010] RSP: 002b:00007f472e82a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 373.667462][ T7010] RAX: ffffffffffffffda RBX: 00007f472dbd5fa0 RCX: 00007f472d98eba9 [ 373.675620][ T7010] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 373.683906][ T7010] RBP: 00007f472da11e19 R08: 0000000000000000 R09: 0000000000000000 [ 373.692107][ T7010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 373.700205][ T7010] R13: 00007f472dbd6038 R14: 00007f472dbd5fa0 R15: 00007ffdcfdaf7b8 [ 373.708346][ T7010] [ 373.711650][ T7010] Kernel Offset: disabled [ 373.716061][ T7010] Rebooting in 86400 seconds..