last executing test programs: 7.477559055s ago: executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) read$proc_mixer(0xffffffffffffffff, &(0x7f0000000380)=""/210, 0xd2) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0xffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x1409, 0xd3dc9b1fa9ebf133}, 0x10}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x9, @mcast1}, 0x1c) 6.185682482s ago: executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00'}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="b700000018000000bca30000000000002403000040feffff720af0ff0000000071a4f0ff000000001f030000000000002e0a0200000000002604fdffffff000061140400000000001d430000000000007a0a00fe0000001f6114000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767912d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce0900000000000000499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc682928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348de20f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97b4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b4f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb1bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb36e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b78825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e8a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b60000000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffff8, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000e00)=@gettaction={0x28, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x20000}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x28}}, 0x0) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x21014080, &(0x7f0000001880)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYRES8, @ANYRES64, @ANYRESOCT, @ANYRES32=0x0, @ANYRES64, @ANYRES32, @ANYRES32], 0x1, 0x14e5, &(0x7f0000002a80)="$eJzs3Au4jtX2KPAx5pwvi6QvyWUxxxwvX3KZJEkuSXJJkiRJcktIkiQJiUVuSUhC7knuIbmF5H6/hZAkW5IkISHJPI92e9v73z6P/9m7c5xz1vg9z3zM4f3G/MZ8x7fW977fs9b6rsOgKvWqVqzDzPAfwb/+kwYAKQDQFwCuAYAIAEpmK5nt4vFMGtP+sycRf66Hpl7pCsSVJP1P36T/6Zv0P32T/qdv0v/0Tfqfvkn/0zfpvxDp2dZpua+VkX6HfP6fnsn7f/om/U/fpP/pm/Q/fZP+p2/S//8PmH8/Vfqfvkn/0zfpvxDp2ZX+/Pn/nZHx9zN2pev4c8cVfvkJIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhEgnzoZLDAD8bX6l6xJCCCGEEEIIIcSfJ2S80hUIIYQQQgghhBDifz8EBRoMRJABMkIKZILMcBVkgashK1wDCbgWssF1kB2uhxyQE3JBbkiFPJAXLBA4YIghH+SHJNwABeBGKAiFoDAUAQ9FoRjcBMXhZigBt0BJuBVKwW1QGspAWSgHt0N5uAMqwJ1QEe6CSlAZqkBVuBuqwT1QHe6FGnAf1IT7oRY8ALXhQagDD0FdeBjqwSNQHx6FBtAQGkFjaPJv5b8IXeAl6ArdIA26Qw94GXpCL+gNfaAvvAL94FXoD6/BABgIg+B1GAxvwBB4E4bCMBgOb8EIGAmjYDSMgbEwDt6G8fAOTIB3YSJMgskwBabCNJgO78EMmAmz4H2YDR/AHJgL82A+LIAPYSEsgsXwESyBj2EpLIPlsAJWwipYDWtgLayD9bABNsIm2AxbYCt8AttgO+yAT2En7ILd8Bnsgc9hL3wB++DL/8X8M/8lvyMCAipUaNBgBsyAKZiCmTEzZsEsmBWzYgITmA2z/f3FkgtzYSqmYl7Mi4SEjIz5MB8mMYkFsAAWxIJYGAujR4/FsBgWx5uxBJbAklgSS2EpLI1lsAyWw3JYHstjBayAFbEiVsJKWAWr4N14N96D1bE61sAaWBNrYi2shbWxNtbBOlgX62I9rIf1sT42wAbYCBthE2yCTbEpNsNm2AJbYEtsia2wFbbG1tgG22BbbIvtsB22x/bYATtgR+yEnfBFfBFfwpewG1ZS3bEH9sCe2BN7Yx/sg69gP3wVX8XXcAAOxEH4Or6Ob+AQPI1DcRgOx+FYXo3EUTgaWY3FcTgOx+N4nIATcCJOwkk4BafiNJyO03EGzsSZ+D7Oxg/wA5yLc3E+LsAFuBAX4WJcjEvwDC7FZbgcV+BKXIUrcQ2uxTW4HjfgetyEm3ALbsFP8BPcjtvx05SL538Xfoaf4ef4OQ7AfbgP9+N+PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP4wk8iSfwFJ7C03gGz+JZPIfn8Dw+n/pN3V2F1g0AdZFRRmVQGVSKSlGZVWaVRWVRWVVWlVAJlU1lU9lVdpVD5VC5VC6VqlJVXpVXkSLFKlb5VD6VVElVQBVQBRWowqqw8sqrYqqYKq6KqxKqhCqpblWl1G2qtCqjmvtyqpwqr1r4CupOVVFVVJVUZVVFVVVVVTVVTVVX1VUNVUPVVDVVLfWAqq26Y298SF3sTD01EOurQdhANVSNVGP1Bj6mmqoh2Ew1Vy3UE2oYDsVWqqlvrZ5WbdQobKueVaPxOdVejcUO6gXVUXVSndWLqotq5ruqbmoidlc91BTsqXqp3qqPmoGV1cWOVVGvqQFqoBqkXlfz8Q01RL2phqpharh6S41QI9UoNVqNUWPVOPW2Gq/eURPUu2qimqQmqylqqpqmpqv31Aw1U81S76vZ6gM1R81V89R8tUB9qBaqRQrgI7VEfayWqmVquVqhVqpVarVao9aqdWq92qA2qk1qs9qitqpP1Da1Xe1Qn6qdapfarT5Te9Tnaq/6Qu1TX6r96i/qgPpKHVRfq0PqG3VYfauOqO/UUfW9OqZ+UMfVCXVS/ahOqZ/UacS/fhWrX9R59au6oIICjVpprY2OdAadUafoTDqzvkpn0VfrrPoandDX6mz6Op1dX69z6Jw6l86tU3UenVdbTdpp1rHOp/PrpL5BF9A36oK6kC6si2ivi+pi+iZdXN+sS+hbdEl9qy6lb9OldRldVpfTt+vy+g5dQd+pK+q7dCVdWVfRVfXdupq+R1fX9+oa+j5dU9+va+kHdG39oK6jH9J19cO6nn5E19eP6ga6oW6kG+sm+jHdVD+um+nmuoV+QrfUT+pW+indWj+t2+hndFv9rG6nn9Pt9fO6g35Bd9SddGf9q76gg+6qu+k03V330C/rnrqX7q376L76Fd1Pv6r769f0AD1QD9Kv68H6DT1Ev6mH6mF6uH5Lj9Aj9Sg9Wo/RY/U4/bYer9/RE/S7eqKepCfrKXqqnqZ7/77SrP9G/jv/Ir//b8++RW/Vn+hterveoT/VO/UuvVvv1nv0Hr1X79X79D69X+/XB/QBfVAf1If0IX1YH9ZH9BF9VB/Vx/QxfVyf0D/rH/Up/ZM+rc/oM/pnfU6f0+d/Pwdg0CijjTGRyWAymhSTyWQ2V5ks5mqT1VxjEuZak81cZ7Kb600Ok9PkMrlNqslj8hpryDjDJjb5TH6TNDeYAuZGU9AUMoVNEeNNUVPM3PQf51+uviamiWlqmppmpplpYVqYlqalaWVamdamtWlj2pi2pq1pZ9qZ9qa96WA6mI6mo+lsOpsupovparqaNJNmepiXTU/Ty/Q2fUxf84rpZ/qZ/qa/GWAGmEFmkBlsBpshZogZaoaa4Wa4GWFGmFFmlBljxphxZpwZb8abCWaCmWgmmslmsplqpprpZrqZYWaYWWaWmW1mmzlmjpln5pkFZoFZaBaaxWaxWWKWmKVmmVlmVpgVZpVZZdaYNWadWWc2mA1mk9lklpqtZqvZZraZHWaH2Wl2mt1mt9lj9pi9Zq/ZZ/aZ/Wa/OWAOmIPmoDlkDpnD5rA5Yo6Yo+aoOWaOmePmuDlpTppT5pQ5bU6bs+asOWfOmfPmvLlgLly87ItUpCITmShDlCFKiVKizFHmKEuUJcoaZY0SUSLKFmWLskfXRzminFGuKHeUGuWJ8kY2oshFHMVRvih/lIxuiApEN0YFo0JR4ahI5KOiUbHopqh4dHNUIrolKhndGpWKbotKR2WislG56PaofHRHVCG6M6oY3RVViipHVaKq0d1RteieqHp0b1Qjui+qGd0f1YoeiGpHD0Z1ooeiutHDUb3okah+9GjUIGoYNYoaR03+1PVDOJ3zcd/VdrNptrvtYV+2PW0v29v2sX3tK7affdX2t6/ZAXagHWRft4PtG3aIfdMOtcPscPuWHWFH2lF2tB1jx9px9m073r5jJ9h37UQ7yU62U+xUO81Ot+/ZGXamnWXft7PtB3aOnWvn2fl2gf3QLrSL7GL7kV1iP7ZL7TK73K6wK+0qu9qusWvtOrvebrAb7Sa72W6xW+0ndpvdbnfYT+1Ou8vutp/ZPfZzu9d+YffZL+1++xer4Ct70H5tD9lv7GH7rT1iv7NH7ff2mP3BHrcn7En7oz1lf7Kn7Rl71v5sz9lf7Hn7q71gw8WL+4tv72TIUAbKQCmUQpkpM2WhLJSVslKCEpSNslF2yk45KAflolyUSqmUl/LSRUxM+SgfJSlJBagAFaSCVJgKkydPxagYFafiVIJKUEkqSaWoFJWm0lSWytLtdDvdQXfQnXQn3UV3UWWqTFWpKlWjalSdqlMNqkE1qSbVolpUm2pTHapDdaku1aN6VJ/qUwNqQI2oETWhJtSUmlIzakYtqAW1pJbUilpRa2pNbagNtaW21I7aUXtqTx2oA3WkjtSZOlMX6kJdqSulURr1oB7Uk3pSb+pNfakv9aN+1J/60wAaQINoEA2mwTSEhtBQGkbD6S0aQSNpFI2mMTSWxtE4Gk/jaQJNoIk0kSbTZJpKU2k6TacZNINm0SyaTbNpDs2heTSPFtACWkgLaTEtpiW0hJbSUlpOy2klraTVtJrW0lpaT+tpI22kzbSZttJW2kbbaAftoJ20k3bTbtpDe2gv7aV9tI/20346QAfoIB2kQ3SIDtNhOkJH6CgdpWN0jI7TcTpJJ+kUnaLTdJrO0lk6R7/QefqVLlCgFJfJZXZXuSzuapfVXeP+a5zL5XapLo/L66zL4XL+U0zOuYKukCvsijjvirpi7qY/xKVdGVfWlXO3u/LuDlfhD3E1d4+r7u51Ndx9rqq7+5/imu5+V8s94mq7R10d19DVdY1dPfeIq+8edQ1cQ9fINXYt3ZOulXvKtXZPuzbumT/EC90it9atc+vdBrfHfe7Oup/dEfedO+d+cV1dN9fXveL6uVddf/eaG+AG/iEe7t5yI9xIN8qNdmPc2D/Ek90UN9VNc9Pde26Gm/mHeIH70M12i90cN9fNc/N/iy/WtNh95Ja4j91St8wtdyvcSrfKrXZr/l7rCrfJbXZb3G73mdvmtrsd7lO30+36Lb64j73uC7fPfekOu2/dAfeVO+iOukPum9/ii/s76r53x9wP7rg74U66H90p95M77c78tv+Le//R/eouuOCAkRVrNhxxBs7IKZyJM/NVnIWv5qx8DSf4Ws7G13F2vp5zcE7Oxbk5lfNwXrZM7Jg55nycn5N8AxfgG7kgF+LCXIQ9F+VifBMX55u5BN/CJflWLsW3cWkuw2W5HN/O5fkOrsB3ckW+iytxZa7CVflursb3cHW+l2vwfVyT7+da/ADX5ge5Dj/EdflhrsePcH1+lBtwQ27EjbkJP8ZN+XFuxs25BT/BLflJbsVPcWt+mtvwM9yWn+V2/By35+e5A7/AHbkTd+YXuQu/xF25G6dxd+7BL3NP7sW9uQ/35Ve4H7/K/fk1HsADeRC/zoP5DR7Cb/JQHsbD+S0ewSN5FI/mMTyWx/HbPJ7f4Qn8Lk/kSTyZp/BUnsbT+T2ewTN5Fr/Ps/kDnsNzGWA+L+APeSEv4sX8ES/hj3kpL+PlvIJX8ipezWt4La/j9byBN/Im3sxbeCt/wtt4O+/gT3kn7+Ld/Bnv4c95L3/B+/hL3s9/4QP8FR/kr/kQf8OH+Vs+wt/xUf6ej/EPfJxP8En+kU/xT3yaz/BZ/pnP8S98nn/lCxwYYoxVrGMTR3GGOGOcEmeKM8dXxVniq+Os8TVxIr42zhZfF2ePr49zxDnjXHHuODXOE+eNbUyxizmO43xx/jgZ3xAXiG+MC8aF4sJxkdjHReNi8U1x8fjmuER8S1wyvjUuFd8Wl47LxI/cVy6+PS4f3xFXiO+MK8Z3xZXiynGVuGp8d1wtvieuHt8b14jvi0vE98e14gfi2vGDcZ34obhu/HBcL34krh8/GjeIG8aN4sZxk/ixuGn8eNwsbh63iJ+IW8ZPxq3ip+LW8dNxm/iZyx5Pi7vHPeKX45fjEO7V85LzkwuSHyYXJhclFyc/Si5JfpxcmlyWXJ5ckVyZXJVcnVyTXJtcl1yf3JDcmNyU3Jzckgyhakbw6JXX3vjIZ/AZfYrP5DP7q3wWf7XP6q/xCX+tz+av89n99T6Hz+lz+dw+1efxeb315J1nH/t8Pr9P+ht8AX+jL+gL+cK+iPe+qC/mG/smvolv6h/3zXxz38I/4Z/wT/on/VP+Kf+0b+Of8W39s76df86398/75/0LvqPv5Dv7F30X/5Lv6rv5NJ/me/gevqfv6Xv73r6v7+v7+X6+v+/vB/gBfpAf5Af7wX6IH+KH+qF+uB/uR/gRfpQf5cf4MX6cH+fH+/F+gp/gJ/qJfrKf7Kf6qX66n+5n+Bl+lp/lZxec7ef4OX6en+cX+AV+oV/oF/vFfolf4pf6pX65X+5X+pV+tV/t1/q1fr1f7zf6jX6z3+y3+q1+m9/md/gdfqff6Xf73X6P3+P3+r1+n9/n9/v9/oA/4A/6r/0h/40/7L/1R/x3/qj/3h/zP/jj/oQ/6X/0p/xP/rQ/48/6n/05/4s/73/1F3zw4xJvJ8Yn3klMSLybmJiYlJicmJKYmpiWmJ54LzEjMTMxK/F+Ynbig8ScxNzEvMT8xILEh4mFiUWJxYmPEksSHyeWJpYllidWJFYmViVCyLMtDvlC/pAMN4QC4cZQMBQKhUOR4EPRUCzcFIqHm0OJcEsoGW4NpcJtoXQoE8qGR0OD0DA0Co1Dk/BYaBoeD81C89AiPBFahidDq/BUaB2eDm3CM6FteDa0C8+F9uH50CG8EDqGTqFzeDF0CS+FrqFbSAvdQ4/wcugZeoXeoU/oG14J/cKroX94LQwIA8Og8HoYHN4IQ8KbYWgYFoaHt8KIMDKMCqPDmDA2jAtvh/HhnTAhvBsmhklhcpgSpoZpYXp4L8wIM8Os8H6YHT4Ic8LcMC/MDwvCh2FhWBQWh4/CkvBxWBqWheVhRVgZVoXVYU1YG9aF9WFD2Bg2hc1hS9gaPgnbwvawI3wadoZdYXf4LOwJn4e94YuwL3wZ9oe/hAPhq3AwfB0OhW/C4fBtOBK+C0fD9+FY+CEcDyfCyfBjOBV+CqfDmXA2/BzOhV/C+fBruCC/syaEEEII8d/S9zLHu/+L/1O/j4vSAODq7bkP/eNxDQAbc/x13kultkwAwNPdOjz0t1GpUlpa2u+PXaohyj8XABKX8jPApXgZtIAnoTU0z/Tbjyr8QS/V6RxfZv3krQCZ/yEnBS7Ff18fbv6X+++lRs6+7PpzAQrmv5RzsdS/xZfWL/E/WT9n08usn+mrcQDN/iEnC1yKL61fDB6HZ6D1Pz1SCCGEEEIIIYT4q16qbLvL3d9evD9PNZdyMsKl+NL9Z/ErUr8QQgghhBBCCCEu77lOnZ96rHXr5u1k8n/jZJe0SSZXZnKFvzEJIYQQQggh/nSXLvqvdCVCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIUT69X/iz4ld6T0KIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQV9r/CAAA//+PZSjI") r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x3a) readv(r5, &(0x7f00000006c0)=[{&(0x7f0000000440)=""/129, 0x81}], 0x1) sendto$inet6(r5, &(0x7f0000000a80)="800037bbfa9b6d40", 0x8, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, 0x3, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x4801) r6 = socket(0x9, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x4}]}}}]}, 0x3c}}, 0x0) 5.621213319s ago: executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000002c0)={'team_slave_1\x00', 0x400}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000000000000002eeed88696", @ANYRES32=r3], 0x20}}, 0x0) 5.600331972s ago: executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, 0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000240)={@cgroup, r6, 0x2c, 0x0, 0x0, @link_id}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup=r4, r6, 0x2f, 0x0, 0x4, @prog_fd}, 0x20) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) connect$l2tp(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x121241, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x304001a, &(0x7f0000001800)=ANY=[@ANYRES8=0x0, @ANYBLOB="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"], 0xf, 0x2b2, &(0x7f0000000540)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x275a, 0x0) 4.508020109s ago: executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x853ba85650bf60db, 0x0) 4.220560824s ago: executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5f4ac7c4216632f8bdb81e2058edd7db", 0x10) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000001280)={0x0, 0x3, 0x7f}) r1 = socket$inet(0x2b, 0x801, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="5f4ac7c4216632f8bdb81e2058edd7db", 0x10) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000001380), &(0x7f00000013c0)=0xffffffffffffffe4) socket(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000001500)) socket$inet(0x2b, 0x801, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @private=0xa010102}, 0x46) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000100)="5f4a57db0200002de7000008a800", 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="5f4a00d7000000000000000000000040", 0x10) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000200)={0x6, @private, 0x40, 0x0, 'lblcr\x00'}, 0x2c) 4.194068118s ago: executing program 3: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000000200)={{0x0, 0x0, 0x80}}) 4.087452054s ago: executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x17, 0x5}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)) 3.954750534s ago: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) read$proc_mixer(0xffffffffffffffff, &(0x7f0000000380)=""/210, 0xd2) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0xffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x1409, 0xd3dc9b1fa9ebf133}, 0x10}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x9, @mcast1}, 0x1c) 3.647775761s ago: executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000240)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7}]}}) 3.586258001s ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x700, 0x80, 0x669b221f, 0x2, {{0x10, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x3, 0x0, 0x0, @local, @multicast1, {[@timestamp_prespec={0x44, 0x14, 0x3e, 0x3, 0x0, [{@broadcast, 0x10001}, {@multicast1, 0xe00000}]}, @generic={0x82, 0x3, "14"}, @timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@rand_addr, 0x9}]}]}}}}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) pipe(0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="5200030007"], 0xd) 3.387384251s ago: executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) unshare(0x2000400) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380), 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="2d74202b6e65745f639873202b72646d61202d6d65e3e03e0400000009136f7279202d637078738474200063707561636381202b696f20b6074f07bcae9b78fbdda345564249b23d3c037668a9162933f55825567d2a2c1af0a694a5723a357842439a50b627d7bbf8515dc5bec03897f84e3737fe5cb92bf058f5b2c1cdba96090a79f3141f17d07ab8881faec977c9b16f7c6eb95c747262b9901549e906ca9dadc0e399a56bbc824d35cce58a06f27fc1fb00347ed57ff24450460a5451de9ba9a3ebdab3"], 0x38) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@getstat={0xe0, 0x15, 0x2, 0x70bd29, 0x25dfdbfe, {{'drbg_nopr_sha1\x00'}, '\x00', '\x00', 0x400, 0x400}, ["", "", "", ""]}, 0xe0}}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc}, @handle=@pci={{0x8}, {0x11}}]}, 0x3c}}, 0x0) sendmsg$nl_crypto(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x44040) 2.687667798s ago: executing program 0: r0 = socket(0x200000100000011, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000131f57910000000000d96e6c8d"], 0x18}], 0x1}, 0x0) 2.602112221s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r0, 0x1000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={r0}, 0x4) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x20}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080)=0x474c, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, &(0x7f0000000180)=0x40000000, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2001095, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000840)='./file0\x00', 0x838734, &(0x7f0000000300)={[{@nojournal_checksum}, {@grpjquota, 0x1e}, {@minixdf}, {@noinit_itable}, {@jqfmt_vfsv0}, {@stripe={'stripe', 0x3d, 0x7f}}, {@norecovery}, {@nojournal_checksum}, {@nobarrier}, {@resuid}, {@noblock_validity}, {@debug}]}, 0xee, 0x447, &(0x7f0000000cc0)="$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") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x31, &(0x7f0000000040)=""/200, &(0x7f0000000140)=0xc8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r2}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r3 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x1e, 0x4, @tid=r3}, &(0x7f00000000c0)) 2.593155942s ago: executing program 3: setresuid(0x0, 0xee01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x407, 0x80000000) 2.582696234s ago: executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000002c0)={'team_slave_1\x00', 0x400}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000000000000002eeed88696", @ANYRES32=r3], 0x20}}, 0x0) 2.35328718s ago: executing program 0: socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) munlockall() prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$packet(0x11, 0x0, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) eventfd2(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) creat(0x0, 0x0) write(0xffffffffffffffff, 0x0, 0xfe30) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 2.337322342s ago: executing program 1: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000000c0000000008004500042000000000002f907800000000ffe0efff00000000000c90bd0100"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r1, 0x0, 0x138, 0x4c, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@IEEE802154_ATTR_PAN_ID={0x6}]}, 0x1c}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB='b 75:', @ANYRESOCT], 0xa) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x1}) r5 = socket$isdn_base(0x22, 0x3, 0x0) ioctl(r5, 0x9, &(0x7f0000000580)="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") getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000040)=0x1e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_freezer_state(r6, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040), 0x12) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) write$cgroup_freezer_state(r7, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r7, &(0x7f0000000080)='THAWED\x00', 0x7) socket$isdn(0x22, 0x3, 0x21) socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000040)='cpu.idle\x00', 0x2, 0x0) sendfile(r9, r9, 0x0, 0x9) 2.170936677s ago: executing program 3: socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001a40), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000001e40)={0x14, r1, 0x4ff1a775af5f253}, 0x14}}, 0x0) 2.09062931s ago: executing program 2: r0 = socket(0x28, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0x0) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) r5 = accept4$unix(r4, 0x0, 0x0, 0x0) recvfrom$unix(r5, &(0x7f0000000140)=""/248, 0xf8, 0x0, 0x0, 0x0) 2.081023181s ago: executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup2(r0, r1) sendmmsg$inet(r2, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a00)="316f825a3d29f96a2093a917017b4cd30000000000000035ed313e19d6dd", 0x1e}, {&(0x7f0000000640)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c23374ec7c4aadbb8b985f14893a91d750e168350685e0f4f079d2d8e79be174e", 0xa7}, {&(0x7f0000000700)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df283b3ca3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25c951279b18c8e5bfbc52152be37f5e2b783e2149be25180430ac63ee1bbe01fbb6125e65839ae5b02d542a97d1bfb1ca420b5405baaaf5ec6ad96af2814dbbe", 0xa8}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)="d06e8c3dc885a205000000000000000a29e04f23dac714e90c70202e052be8614169b617d7f8c276b02c19433ccf22467f92ca9f6c5b05029e", 0x39}], 0x1}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)="2ea5d94f90933978352c42a3dad24b4909f57c7dba08e38797ab936fc9c5158f38287dbf6242139b1abfd08aabc9d67efa71c608a29bc1636373ad0461338c453a5bae9e10b5713832e4a6b717d0ebe8c0ee1fd8ccfdd83c514ffa754463ff63126faf04b514e5a27aa54f59f9516e5cba1a7a587a56a944c41c7081bcfd9fc61a4f714f7d7284f39cb83ab2013358814c3043db251e5caab2c359284c5a1f9755c2c7", 0xa3}], 0x1}}], 0x3, 0x0) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[], 0x2b8}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) syz_genetlink_get_family_id$gtp(&(0x7f0000000180), r1) sendto$inet(r0, &(0x7f0000000840)='\t', 0x1, 0x51, 0x0, 0x0) 1.877899102s ago: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x17, 0x5}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)) 1.711575548s ago: executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000b00)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @private2}]}, 0x40}}, 0x0) 1.707639558s ago: executing program 3: ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000000)) 1.702483479s ago: executing program 4: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f00000000c0)={0x6}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) io_uring_setup(0x79af, &(0x7f0000001240)) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r3, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab11e88509de7f1939e8abff005597c8ef039a5be42200"}, 0x60) 1.376812629s ago: executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1.37119071s ago: executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SET_IO_FLUSHER(0x34, 0x2) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000100)) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000180)={r2}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r3, 0x3, r1, 0x5}) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) 1.36816618s ago: executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000001000390400"/20, @ANYRES32=r4, @ANYBLOB], 0x58}}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0xa, @remote={0xac, 0x1c}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty}}}], 0x20, 0x2000000}}], 0x1, 0x0) 109.184643ms ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x700, 0x80, 0x669b221f, 0x2, {{0x10, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x3, 0x0, 0x0, @local, @multicast1, {[@timestamp_prespec={0x44, 0x14, 0x3e, 0x3, 0x0, [{@broadcast, 0x10001}, {@multicast1, 0xe00000}]}, @generic={0x82, 0x3, "14"}, @timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@rand_addr, 0x9}]}]}}}}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="5200030007"], 0xd) 0s ago: executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x17, 0x5}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)) kernel console output (not intermixed with test programs): [ 86.198566][ T3828] ======================================================= [ 86.198566][ T3828] WARNING: The mand mount option has been deprecated and [ 86.198566][ T3828] and is ignored by this kernel. Remove the mand [ 86.198566][ T3828] option from the mount to silence this warning. [ 86.198566][ T3828] ======================================================= [ 86.356999][ T3828] ext4: Unknown parameter 'fsuuid' [ 86.362094][ T3831] loop3: detected capacity change from 0 to 256 [ 86.612058][ T3825] overlayfs: missing 'lowerdir' [ 86.668926][ T3675] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 86.766918][ T3836] loop0: detected capacity change from 0 to 256 [ 86.833114][ T3836] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a37, chksum : 0xd675b107, utbl_chksum : 0xe619d30d) [ 86.933752][ T3840] loop4: detected capacity change from 0 to 256 [ 86.940425][ T3619] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 86.983439][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 87.095186][ T3840] FAT-fs (loop4): Directory bread(block 64) failed [ 87.124150][ T3840] FAT-fs (loop4): Directory bread(block 65) failed [ 87.138667][ T3840] FAT-fs (loop4): Directory bread(block 66) failed [ 87.148817][ T3840] FAT-fs (loop4): Directory bread(block 67) failed [ 87.166067][ T3840] FAT-fs (loop4): Directory bread(block 68) failed [ 87.204704][ T3619] usb 2-1: Using ep0 maxpacket: 8 [ 87.231875][ T3840] FAT-fs (loop4): Directory bread(block 69) failed [ 87.276246][ T3840] FAT-fs (loop4): Directory bread(block 70) failed [ 87.282881][ T3840] FAT-fs (loop4): Directory bread(block 71) failed [ 87.344687][ T3619] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 87.363554][ T3840] FAT-fs (loop4): Directory bread(block 72) failed [ 87.378466][ T3619] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 87.415875][ T3619] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 87.424827][ T3840] FAT-fs (loop4): Directory bread(block 73) failed [ 87.444540][ T3619] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 87.489385][ T3619] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 87.495115][ T3622] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 87.535537][ T3619] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.686051][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 87.784458][ T3622] usb 1-1: Using ep0 maxpacket: 8 [ 87.814658][ T3619] usb 2-1: GET_CAPABILITIES returned 0 [ 87.833140][ T3619] usbtmc 2-1:16.0: can't read capabilities [ 87.904592][ T3622] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.957133][ T3622] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.982180][ T3622] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 88.012993][ T3622] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.044652][ T3834] usbtmc 2-1:16.0: send_request_dev_dep_msg_in returned -71 [ 88.063173][ T3622] usb 1-1: config 0 descriptor?? [ 88.103614][ T3628] usb 2-1: USB disconnect, device number 3 [ 88.466421][ T3857] loop3: detected capacity change from 0 to 128 [ 88.518960][ T3851] loop4: detected capacity change from 0 to 32768 [ 88.541553][ T3851] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (3851) [ 88.578902][ T3622] steelseries_srws1 0003:1038:1410.0001: unknown main item tag 0xd [ 88.614423][ T3622] steelseries_srws1 0003:1038:1410.0001: item fetching failed at offset 6/7 [ 88.623828][ T3622] steelseries_srws1 0003:1038:1410.0001: parse failed [ 88.711015][ T3622] steelseries_srws1: probe of 0003:1038:1410.0001 failed with error -22 [ 88.779059][ T3618] usb 1-1: USB disconnect, device number 2 [ 88.831738][ T3851] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 88.868559][ T3851] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 88.881513][ T3851] BTRFS info (device loop4): using free space tree [ 89.077833][ T3851] BTRFS info (device loop4): enabling ssd optimizations [ 89.475849][ T3887] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 89.852732][ T3577] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 91.816185][ T3924] loop1: detected capacity change from 0 to 256 [ 91.905173][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.924320][ T3924] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a37, chksum : 0xd675b107, utbl_chksum : 0xe619d30d) [ 92.034570][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.232152][ T3929] loop3: detected capacity change from 0 to 128 [ 92.782512][ T3938] sctp: [Deprecated]: syz-executor.3 (pid 3938) Use of int in max_burst socket option deprecated. [ 92.782512][ T3938] Use struct sctp_assoc_value instead [ 92.806043][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 93.152532][ T3948] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 93.241424][ T3948] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.438526][ T3948] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.469602][ T26] audit: type=1804 audit(1719030243.573:2): pid=3937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2779695027/syzkaller.cWj8Dp/16/file0" dev="sda1" ino=1966 res=1 errno=0 [ 93.521039][ T3948] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 93.584478][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.029556][ T3618] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 95.300122][ T3618] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 95.324414][ T3618] usb 2-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 95.360805][ T3618] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 95.391197][ T3618] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 95.423408][ T3618] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10100, setting to 1024 [ 95.574689][ T3618] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 95.583995][ T3959] loop0: detected capacity change from 0 to 32768 [ 95.604360][ T3618] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 95.626570][ T3959] XFS (loop0): sunit and swidth must be specified together [ 95.658578][ T3618] usb 2-1: Product: syz [ 95.680863][ T3618] usb 2-1: Manufacturer: syz [ 95.754918][ T3958] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 95.835148][ T3618] cdc_wdm 2-1:1.0: skipping garbage [ 95.840536][ T3618] cdc_wdm 2-1:1.0: skipping garbage [ 95.879490][ T3618] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 95.888776][ T3618] cdc_wdm 2-1:1.0: Unknown control protocol [ 95.994499][ T3632] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 96.041358][ T3958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.094894][ T3958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.135616][ T3959] fuse: Unknown parameter '0xffffffffffffffff' [ 96.192443][ T3969] loop3: detected capacity change from 0 to 32768 [ 96.244404][ T3632] usb 3-1: Using ep0 maxpacket: 8 [ 96.272046][ T3969] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 96.301510][ T3969] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 96.344938][ T3958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.364564][ T3632] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 96.369561][ T3958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.408575][ T3632] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 96.454147][ T3632] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 96.480287][ T3632] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 96.492727][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.501135][ T3969] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 96.528403][ T3632] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 96.538306][ T3632] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.554388][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 96.561375][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 96.584372][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 96.587240][ T22] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 96.591081][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 96.611035][ T22] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 96.614361][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 96.624404][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 96.644485][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 96.651116][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 96.674467][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 96.681215][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 96.704353][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 96.711113][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 96.714007][ T3894] usb 2-1: USB disconnect, device number 4 [ 96.717192][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 96.719804][ T3989] cdc_wdm 2-1:1.0: Tx URB error: -19 [ 96.834483][ T3632] usb 3-1: GET_CAPABILITIES returned 0 [ 96.840281][ T3632] usbtmc 3-1:16.0: can't read capabilities [ 96.894991][ T22] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 283ms [ 96.952143][ T22] gfs2: fsid=syz:syz.0: jid=0: Done [ 96.961717][ T3969] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 97.064482][ T3981] usbtmc 3-1:16.0: send_request_dev_dep_msg_in returned -71 [ 97.081705][ T22] usb 3-1: USB disconnect, device number 2 [ 97.334416][ T3894] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 97.734487][ T3894] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 97.743438][ T3894] usb 2-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 97.814578][ T3894] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 98.035707][ T3894] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 98.047772][ T3894] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10100, setting to 1024 [ 99.185243][ T3894] usb 2-1: string descriptor 0 read error: -71 [ 99.202519][ T3894] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 99.217233][ T3894] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 99.511340][ T3894] usb 2-1: can't set config #1, error -71 [ 100.196512][ T3894] usb 2-1: USB disconnect, device number 5 [ 100.523037][ T4033] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'. [ 100.614383][ T4033] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'. [ 100.987941][ T4033] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'. [ 101.914385][ T3620] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 103.064709][ T3620] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 103.093812][ T3620] usb 4-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 103.129860][ T3620] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 103.155806][ T3620] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 103.174025][ T3590] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 103.182636][ T3620] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10100, setting to 1024 [ 103.183908][ T3590] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 103.209288][ T3590] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 103.218812][ T3590] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 103.235625][ T3590] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 103.243037][ T3590] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 103.364733][ T3620] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 103.403578][ T3620] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 103.441188][ T3620] usb 4-1: Product: syz [ 103.459856][ T3620] usb 4-1: Manufacturer: syz [ 103.504734][ T4048] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 103.538163][ T3620] cdc_wdm 4-1:1.0: skipping garbage [ 103.548629][ T3620] cdc_wdm 4-1:1.0: skipping garbage [ 103.599184][ T3620] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 103.634960][ T3620] cdc_wdm 4-1:1.0: Unknown control protocol [ 103.724733][ T4072] chnl_net:caif_netlink_parms(): no params data found [ 103.752633][ T4048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.770395][ T4048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.792482][ T4046] loop4: detected capacity change from 0 to 32768 [ 103.855937][ T4046] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 103.888958][ T4046] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 104.002944][ T4048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.029009][ T4048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.048553][ T4072] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.058515][ T4046] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 12ms [ 104.073106][ T4072] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.084385][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 104.088479][ T7] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 104.091005][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 104.104420][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 104.111056][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 104.111183][ T4072] device bridge_slave_0 entered promiscuous mode [ 104.123815][ T7] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 104.134527][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 104.141170][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 104.142086][ T4072] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.164437][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 104.171100][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 104.204331][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 104.204468][ T4072] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.210964][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 104.234330][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 104.240996][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 104.253582][ T3620] usb 4-1: USB disconnect, device number 2 [ 104.274536][ T4088] cdc_wdm 4-1:1.0: Tx URB error: -19 [ 104.309269][ T4072] device bridge_slave_1 entered promiscuous mode [ 104.325947][ T7] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 202ms [ 104.346027][ T7] gfs2: fsid=syz:syz.0: jid=0: Done [ 104.351296][ T4046] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 104.436957][ T4072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.477997][ T4072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.579466][ T4072] team0: Port device team_slave_0 added [ 104.616944][ T4072] team0: Port device team_slave_1 added [ 104.712012][ T4072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.734391][ T4072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.802124][ T4072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.834488][ T3620] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 104.856774][ T4072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.874912][ T4093] capability: warning: `syz-executor.0' uses deprecated v2 capabilities in a way that may be insecure [ 104.894610][ T4072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.962197][ T4072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.174230][ T4072] device hsr_slave_0 entered promiscuous mode [ 105.199907][ T4072] device hsr_slave_1 entered promiscuous mode [ 105.225203][ T3620] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 105.246745][ T3620] usb 4-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 105.257954][ T4072] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.274437][ T3578] Bluetooth: hci4: command tx timeout [ 105.301667][ T3620] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 105.321233][ T4072] Cannot create hsr debugfs directory [ 105.374984][ T3620] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 105.422117][ T3620] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10100, setting to 1024 [ 105.524575][ T3620] usb 4-1: string descriptor 0 read error: -71 [ 105.534694][ T3620] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 105.624420][ T3620] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 105.654574][ T3620] usb 4-1: can't set config #1, error -71 [ 105.661668][ T3620] usb 4-1: USB disconnect, device number 3 [ 105.968250][ T4102] binder: BINDER_SET_CONTEXT_MGR already set [ 106.023765][ T4102] binder: 4099:4102 ioctl 4018620d 20000100 returned -16 [ 106.025881][ T4103] binder: BINDER_SET_CONTEXT_MGR already set [ 106.101263][ T4103] binder: 4099:4103 ioctl 4018620d 20000040 returned -16 [ 106.119783][ T4072] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.225148][ T4072] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.334438][ T4117] loop0: detected capacity change from 0 to 512 [ 106.349842][ T4072] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.358281][ T4117] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 106.373441][ T4117] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 106.423355][ T4117] EXT4-fs (loop0): 1 orphan inode deleted [ 106.430044][ T4117] EXT4-fs (loop0): 1 truncate cleaned up [ 106.437192][ T4117] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 107.355218][ T3578] Bluetooth: hci4: command tx timeout [ 107.545997][ T22] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 108.321232][ T4117] sched: RT throttling activated [ 109.360711][ T4072] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.514480][ T3578] Bluetooth: hci4: command tx timeout [ 109.650500][ T3581] EXT4-fs (loop0): unmounting filesystem. [ 109.860768][ T4148] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.0'. [ 109.903446][ T4148] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.0'. [ 109.925386][ T4148] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.0'. [ 110.085321][ T4072] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 110.128713][ T4072] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 110.143870][ T4154] loop3: detected capacity change from 0 to 256 [ 110.160562][ T4072] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 110.203854][ T4072] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 110.253030][ T3675] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 110.434153][ T4154] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 110.613227][ T4072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.654564][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 110.679606][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.743753][ T4072] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.810961][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 110.874498][ T3632] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 110.965221][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 110.981885][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.989104][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.464730][ T3632] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 111.594486][ T3578] Bluetooth: hci4: command tx timeout [ 111.784574][ T3632] usb 3-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 111.804365][ T3632] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 111.810716][ T4169] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 111.814863][ T3632] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 111.841193][ T3632] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10100, setting to 1024 [ 111.897202][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 111.930405][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 111.958233][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 111.980625][ T3628] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.988212][ T3628] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.996290][ T3632] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 112.014856][ T3632] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 112.023013][ T3632] usb 3-1: Product: syz [ 112.027830][ T3632] usb 3-1: Manufacturer: syz [ 112.047012][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 112.064225][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 112.081579][ T4158] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 112.095372][ T3632] cdc_wdm 3-1:1.0: skipping garbage [ 112.100625][ T3632] cdc_wdm 3-1:1.0: skipping garbage [ 112.115093][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 112.142291][ T3632] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 112.153769][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 112.163060][ T3632] cdc_wdm 3-1:1.0: Unknown control protocol [ 112.309707][ T4158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.328653][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 112.341301][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 112.358105][ T4158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.378880][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 112.404012][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 112.416193][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 112.454092][ T4072] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 112.472451][ T4072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 112.490114][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 112.505420][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 112.629641][ T4158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.629898][ T4158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.644324][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 112.644351][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 112.674330][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 112.702608][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 112.724453][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 112.731198][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 112.754437][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 112.761109][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 112.784359][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 112.791030][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 112.800230][ T3016] usb 3-1: USB disconnect, device number 3 [ 112.814385][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 112.815818][ T4189] cdc_wdm 3-1:1.0: Tx URB error: -19 [ 112.821004][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 112.821033][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 113.354672][ T3632] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 113.414014][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 113.424531][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 113.440892][ T4072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.506612][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 113.517529][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 113.690798][ T3693] device hsr_slave_0 left promiscuous mode [ 113.722878][ T3693] device hsr_slave_1 left promiscuous mode [ 113.735081][ T3693] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.753070][ T3693] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.778297][ T3693] device bridge_slave_1 left promiscuous mode [ 113.794462][ T3632] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 113.807756][ T3632] usb 3-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 113.828689][ T3693] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.847495][ T3632] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 113.867499][ T3632] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 113.891344][ T3632] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10100, setting to 1024 [ 113.960728][ T3693] device bridge_slave_0 left promiscuous mode [ 113.971906][ T3693] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.020570][ T3693] device veth1_macvtap left promiscuous mode [ 114.035181][ T3693] device veth0_macvtap left promiscuous mode [ 114.063879][ T3693] device veth1_vlan left promiscuous mode [ 114.070289][ T3632] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 114.084940][ T3632] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 114.106260][ T3693] device veth0_vlan left promiscuous mode [ 114.125904][ T3632] usb 3-1: Product: syz [ 114.147276][ T3632] usb 3-1: Manufacturer: syz [ 114.179135][ T3632] usb 3-1: can't set config #1, error -71 [ 114.198046][ T3632] usb 3-1: USB disconnect, device number 4 [ 114.566218][ T3693] bond1 (unregistering): Released all slaves [ 114.818898][ T4232] loop4: detected capacity change from 0 to 256 [ 115.874014][ T3693] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 115.930532][ T4232] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 115.957866][ T3693] team0 (unregistering): Port device team_slave_1 removed [ 116.002061][ T3693] team0 (unregistering): Port device team_slave_0 removed [ 116.037360][ T4249] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 116.225415][ T3693] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.169692][ T3693] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.176962][ T4249] loop3: detected capacity change from 0 to 256 [ 117.247953][ T26] audit: type=1800 audit(1719030267.353:3): pid=4255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1961 res=0 errno=0 [ 117.621438][ T3693] bond0 (unregistering): Released all slaves [ 117.748424][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 117.952146][ T3016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 117.967057][ T4072] device veth0_vlan entered promiscuous mode [ 118.021118][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 118.045545][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 118.067101][ T4072] device veth1_vlan entered promiscuous mode [ 118.418265][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 118.441147][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 118.472070][ T4072] device veth0_macvtap entered promiscuous mode [ 118.512665][ T4072] device veth1_macvtap entered promiscuous mode [ 118.628089][ T4072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.657569][ T4072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.685672][ T4072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.724332][ T4072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.739946][ T4072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.786828][ T4072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.827400][ T4072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.863830][ T4072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.898387][ T4072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.930616][ T4277] sg_write: data in/out 197376/86 bytes for SCSI command 0x8-- guessing data in; [ 118.930616][ T4277] program syz-executor.3 not setting count and/or reply_len properly [ 118.975944][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 119.010327][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 119.011032][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 119.012194][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 119.025460][ T4072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.025482][ T4072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.025494][ T4072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.025508][ T4072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.025519][ T4072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.025533][ T4072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.025544][ T4072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.025558][ T4072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.026929][ T4072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.029774][ T4072] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.029846][ T4072] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.029877][ T4072] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.029907][ T4072] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.064236][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 119.065162][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 119.213000][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.213069][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.236468][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 119.289622][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.289691][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.292747][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 119.452414][ T4273] Bluetooth: MGMT ver 1.22 [ 119.629114][ T4289] loop0: detected capacity change from 0 to 512 [ 119.673484][ T4289] EXT4-fs (loop0): filesystem is read-only [ 119.791808][ T4291] loop1: detected capacity change from 0 to 512 [ 119.848999][ T4291] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 119.850375][ T4291] EXT4-fs (loop1): 1 truncate cleaned up [ 119.850402][ T4291] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 120.824505][ T3016] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 121.074633][ T3016] usb 1-1: Using ep0 maxpacket: 8 [ 121.196636][ T3016] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.230327][ T4072] EXT4-fs (loop1): unmounting filesystem. [ 121.236314][ T3016] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 121.264130][ T3016] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x76, skipping [ 121.307149][ T3016] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 121.356395][ T3016] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.445941][ T3016] hub 1-1:1.0: bad descriptor, ignoring hub [ 121.462140][ T3016] hub: probe of 1-1:1.0 failed with error -5 [ 121.482876][ T3016] cdc_wdm 1-1:1.0: skipping garbage [ 121.508847][ T3016] cdc_wdm 1-1:1.0: skipping garbage [ 121.529197][ T3016] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 121.792634][ T3618] usb 1-1: USB disconnect, device number 3 [ 122.114454][ T3618] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 122.236733][ T4354] loop2: detected capacity change from 0 to 256 [ 122.251446][ T4354] exfat: Deprecated parameter 'utf8' [ 122.257124][ T4354] exfat: Deprecated parameter 'namecase' [ 122.262882][ T4354] exfat: Deprecated parameter 'utf8' [ 122.300453][ T4354] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 122.364919][ T4354] exFAT-fs (loop2): error, tried to truncate zeroed cluster. [ 122.387276][ T4354] syz-executor.2: attempt to access beyond end of device [ 122.387276][ T4354] loop2: rw=524288, sector=34359738488, nr_sectors = 16 limit=256 [ 122.417928][ T4354] syz-executor.2: attempt to access beyond end of device [ 122.417928][ T4354] loop2: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 122.451868][ T26] audit: type=1800 audit(1719030272.553:4): pid=4354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.2" name="file1" dev="loop2" ino=1048602 res=0 errno=0 [ 122.484554][ T3618] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.533051][ T3618] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 122.571328][ T3618] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x76, skipping [ 122.583627][ T4362] loop3: detected capacity change from 0 to 256 [ 122.608740][ T3618] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 122.662081][ T3618] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.734866][ T4311] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 122.755846][ T3618] hub 1-1:1.0: bad descriptor, ignoring hub [ 122.767404][ T3618] hub: probe of 1-1:1.0 failed with error -5 [ 122.780411][ T3618] cdc_wdm 1-1:1.0: skipping garbage [ 122.796991][ T3618] cdc_wdm 1-1:1.0: skipping garbage [ 122.812211][ T3618] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 123.084814][ T3618] usb 1-1: USB disconnect, device number 4 [ 124.050930][ T4391] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 124.267999][ T4391] loop1: detected capacity change from 0 to 256 [ 124.416811][ T3002] udevd[3002]: worker [3675] terminated by signal 33 (Unknown signal 33) [ 124.431461][ T3002] udevd[3002]: worker [3675] failed while handling '/devices/virtual/block/loop3' [ 126.547472][ T4447] loop3: detected capacity change from 0 to 128 [ 126.566413][ T3578] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 126.582290][ T3578] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 126.590820][ T3578] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 126.600008][ T3578] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 126.611879][ T3578] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 126.616999][ T3577] syz-executor.4 (3577) used greatest stack depth: 20152 bytes left [ 126.635176][ T3582] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 126.682121][ T4447] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 126.698706][ T4447] ext4 filesystem being mounted at /root/syzkaller-testdir2779695027/syzkaller.cWj8Dp/46/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 126.755506][ T32] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.968494][ T4458] loop1: detected capacity change from 0 to 1024 [ 126.987058][ T32] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.005345][ T4460] x_tables: ip_tables: tcp match: only valid for protocol 6 [ 127.027257][ T3584] EXT4-fs (loop3): unmounting filesystem. [ 127.120213][ T32] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.240141][ T32] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.360849][ T4445] chnl_net:caif_netlink_parms(): no params data found [ 127.592671][ T4478] loop3: detected capacity change from 0 to 128 [ 129.174333][ T4484] mmap: syz-executor.1 (4484) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 129.957927][ T3578] Bluetooth: hci0: command tx timeout [ 130.212536][ T4445] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.236622][ T4445] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.316306][ T4445] device bridge_slave_0 entered promiscuous mode [ 130.371072][ T4445] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.729160][ T4445] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.003945][ T4445] device bridge_slave_1 entered promiscuous mode [ 131.199636][ T4445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.341506][ T4445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.550791][ T4445] team0: Port device team_slave_0 added [ 131.570767][ T4445] team0: Port device team_slave_1 added [ 131.711856][ T4445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.746098][ T4445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.781578][ T4495] loop1: detected capacity change from 0 to 32768 [ 131.840876][ T4445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.843287][ T4495] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (4495) [ 131.873555][ T4527] loop0: detected capacity change from 0 to 512 [ 131.928327][ T4527] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 131.953730][ T4445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.959130][ T4495] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 131.964116][ T4445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.999939][ T4495] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 132.010186][ T3578] Bluetooth: hci0: command tx timeout [ 132.027923][ T4495] BTRFS info (device loop1): using free space tree [ 132.063952][ T4527] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz-executor.0: invalid indirect mapped block 512 (level 0) [ 132.118404][ T4527] EXT4-fs (loop0): Remounting filesystem read-only [ 132.165461][ T4527] EXT4-fs (loop0): 1 orphan inode deleted [ 132.197907][ T4527] EXT4-fs (loop0): 1 truncate cleaned up [ 132.231063][ T4527] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 132.244733][ T4495] BTRFS info (device loop1): enabling ssd optimizations [ 132.253218][ T4445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.730275][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.740365][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.102080][ T4072] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 133.249503][ T3674] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop1 scanned by udevd (3674) [ 133.342830][ T4445] device hsr_slave_0 entered promiscuous mode [ 133.381620][ T4445] device hsr_slave_1 entered promiscuous mode [ 133.400280][ T4445] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 133.419801][ T3582] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 133.430127][ T3582] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 133.438052][ T3582] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 133.446622][ T3582] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 133.454678][ T4445] Cannot create hsr debugfs directory [ 133.460361][ T3582] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 133.469666][ T3582] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 133.836231][ T3581] EXT4-fs (loop0): unmounting filesystem. [ 133.906869][ T32] device hsr_slave_0 left promiscuous mode [ 133.983136][ T32] device hsr_slave_1 left promiscuous mode [ 134.000000][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.026503][ T32] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.046818][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.074604][ T3578] Bluetooth: hci0: command tx timeout [ 134.080235][ T32] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.095743][ T32] device bridge_slave_1 left promiscuous mode [ 134.111619][ T32] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.122615][ T32] device bridge_slave_0 left promiscuous mode [ 134.131512][ T32] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.152276][ T32] device veth1_macvtap left promiscuous mode [ 134.172695][ T32] device veth0_macvtap left promiscuous mode [ 134.194601][ T32] device veth1_vlan left promiscuous mode [ 134.200502][ T32] device veth0_vlan left promiscuous mode [ 134.749908][ T32] team0 (unregistering): Port device team_slave_1 removed [ 134.775692][ T32] team0 (unregistering): Port device team_slave_0 removed [ 134.800954][ T32] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.832384][ T32] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.056383][ T32] bond0 (unregistering): Released all slaves [ 135.481302][ T4563] chnl_net:caif_netlink_parms(): no params data found [ 135.524395][ T3578] Bluetooth: hci2: command tx timeout [ 135.718208][ T4616] loop0: detected capacity change from 0 to 256 [ 135.748605][ T4616] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 135.852994][ T4563] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.864876][ T4563] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.881802][ T4563] device bridge_slave_0 entered promiscuous mode [ 135.963277][ T4563] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.987407][ T4563] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.035488][ T4563] device bridge_slave_1 entered promiscuous mode [ 136.154604][ T3578] Bluetooth: hci0: command tx timeout [ 136.171399][ T4563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.295255][ T4563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.390414][ T4445] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 136.462647][ T4563] team0: Port device team_slave_0 added [ 136.492630][ T4445] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 136.505215][ T4563] team0: Port device team_slave_1 added [ 136.514025][ T4445] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 136.617744][ T4445] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 136.652224][ T4563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.661402][ T4563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.741908][ T4638] loop0: detected capacity change from 0 to 8192 [ 136.756423][ T4563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.792904][ T4563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.802798][ T4563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.837226][ T4638] loop0: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 [ 136.846636][ T4563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.948719][ T4638] loop0: p4 start 3388997632 is beyond EOD, truncated [ 137.090078][ T4563] device hsr_slave_0 entered promiscuous mode [ 137.112425][ T4563] device hsr_slave_1 entered promiscuous mode [ 137.343807][ T4645] overlayfs: statfs failed on './file0' [ 137.397853][ T4445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.555455][ T4445] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.594466][ T3578] Bluetooth: hci2: command tx timeout [ 137.595718][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 137.639800][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 137.733349][ T4563] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.775823][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 137.789095][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 137.810165][ T4558] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.817391][ T4558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.867722][ T4563] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.931932][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 137.957889][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 138.008245][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 138.045481][ T4559] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.052689][ T4559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.098269][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 138.177566][ T4563] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.357088][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 138.388315][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 138.431900][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 138.463017][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 138.510214][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 138.550026][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 138.771143][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 138.782898][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 138.827942][ T4563] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.684440][ T3578] Bluetooth: hci2: command tx timeout [ 139.739972][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 139.770509][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 139.816728][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 140.272828][ T3724] udevd[3724]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 140.278095][ T3674] udevd[3674]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 140.296496][ T4509] udevd[4509]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 140.339665][ T3655] udevd[3655]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 140.465557][ T4563] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 140.516062][ T4072] syz-executor.1 (4072) used greatest stack depth: 19960 bytes left [ 140.596321][ T3655] udevd[3655]: inotify_add_watch(7, /dev/loop0p15, 10) failed: No such file or directory [ 140.619131][ T4673] udevd[4673]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 140.619694][ T3674] udevd[3674]: inotify_add_watch(7, /dev/loop0p16, 10) failed: No such file or directory [ 140.647938][ T4509] udevd[4509]: inotify_add_watch(7, /dev/loop0p18, 10) failed: No such file or directory [ 140.649141][ T3724] udevd[3724]: inotify_add_watch(7, /dev/loop0p17, 10) failed: No such file or directory [ 140.670625][ T4563] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 140.699857][ T4674] udevd[4674]: inotify_add_watch(7, /dev/loop0p8, 10) failed: No such file or directory [ 140.817756][ T4563] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 140.936839][ T4563] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 141.275268][ T4445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.377778][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 141.414593][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 141.701428][ T4563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.754728][ T3578] Bluetooth: hci2: command tx timeout [ 142.045809][ T32] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.208097][ T4563] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.262927][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 142.295085][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 142.402162][ T32] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.445723][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 142.475195][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 142.501582][ T3620] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.508894][ T3620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.550408][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 142.585360][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 142.612027][ T3620] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.619219][ T3620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.663522][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 142.676567][ T3582] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 142.687386][ T3582] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 142.696009][ T3582] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 142.705088][ T3582] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 142.713949][ T3582] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 142.721434][ T3582] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 142.769914][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 142.842117][ T32] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.893357][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 143.041126][ T32] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.519610][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 143.574468][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 143.726667][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 143.759913][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 143.777066][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 143.791997][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 143.803734][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 143.860551][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 143.870634][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 143.879105][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 143.888243][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 143.900781][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 143.932536][ T4445] device veth0_vlan entered promiscuous mode [ 143.944185][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 143.960428][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 144.031217][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 144.045929][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 144.109099][ T4445] device veth1_vlan entered promiscuous mode [ 144.272867][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 144.285735][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 144.305189][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 144.323155][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 144.345651][ T4709] chnl_net:caif_netlink_parms(): no params data found [ 144.404447][ T4445] device veth0_macvtap entered promiscuous mode [ 144.416940][ T4445] device veth1_macvtap entered promiscuous mode [ 144.559162][ T4445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.575925][ T4445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.593762][ T4445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.612934][ T4445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.624182][ T4445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.644533][ T4445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.662983][ T4445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.673884][ T4445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.697293][ T4445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.713756][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 144.728827][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 144.745416][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 144.753199][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 144.768560][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 144.781338][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 144.795160][ T3578] Bluetooth: hci4: command tx timeout [ 144.818789][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.826503][ T4709] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.835953][ T4709] device bridge_slave_0 entered promiscuous mode [ 144.869802][ T4445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.899301][ T4445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.909875][ T4445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.921491][ T4445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.933542][ T4445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.946895][ T4445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.957686][ T4445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.968196][ T4445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.979776][ T4445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.988296][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 144.997637][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 145.009762][ T4563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.020241][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.031993][ T4709] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.049767][ T4709] device bridge_slave_1 entered promiscuous mode [ 145.074546][ T4445] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.083370][ T4445] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.100555][ T4445] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.111196][ T4445] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.227951][ T4709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.243190][ T4709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.285061][ T3578] Bluetooth: hci5: command 0x1003 tx timeout [ 145.293735][ T3582] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 145.348100][ T4709] team0: Port device team_slave_0 added [ 145.363889][ T4709] team0: Port device team_slave_1 added [ 145.400396][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.407553][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.479784][ T4709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.520377][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 145.530198][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 145.577475][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.584613][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.617880][ T4709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.664837][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 145.673867][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 145.778140][ T4563] device veth0_vlan entered promiscuous mode [ 145.778279][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.800618][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 145.924701][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 146.564482][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.625640][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 146.709223][ T4709] device hsr_slave_0 entered promiscuous mode [ 146.727683][ T4709] device hsr_slave_1 entered promiscuous mode [ 146.741070][ T4709] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.751295][ T4709] Cannot create hsr debugfs directory [ 146.763914][ T4563] device veth1_vlan entered promiscuous mode [ 146.837459][ T3695] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.884977][ T3582] Bluetooth: hci4: command tx timeout [ 146.891386][ T3695] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.990375][ T4563] device veth0_macvtap entered promiscuous mode [ 147.026272][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 147.043121][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 147.053340][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 147.084479][ T4563] device veth1_macvtap entered promiscuous mode [ 147.131646][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 147.155252][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 147.228407][ T4563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.243910][ T4563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.255463][ T4563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.266418][ T4563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.276773][ T4563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.290453][ T4563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.302431][ T4563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.313832][ T4563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.324569][ T4563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.335739][ T4563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.350664][ T4563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.385095][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 147.400276][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 147.459102][ T4563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.492418][ T4563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.532796][ T4563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.584304][ T4563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.641718][ T4563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.698355][ T4563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.742288][ T4563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.764990][ T4563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.782507][ T4563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.793899][ T4563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.808776][ T4563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.839742][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 147.848852][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 147.861310][ T4563] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.871837][ T4563] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.880785][ T4563] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.889872][ T4563] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.977979][ T32] device hsr_slave_0 left promiscuous mode [ 148.004219][ T32] device hsr_slave_1 left promiscuous mode [ 148.011207][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.019292][ T32] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.029061][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.076738][ T32] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.094992][ T32] device bridge_slave_1 left promiscuous mode [ 148.101368][ T32] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.127181][ T32] device bridge_slave_0 left promiscuous mode [ 148.133549][ T32] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.169340][ T32] device hsr_slave_0 left promiscuous mode [ 148.193635][ T32] device hsr_slave_1 left promiscuous mode [ 148.221858][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.233514][ T32] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.246955][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.255809][ T32] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.280388][ T32] device bridge_slave_1 left promiscuous mode [ 148.286768][ T32] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.298805][ T32] device bridge_slave_0 left promiscuous mode [ 148.320412][ T32] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.350147][ T32] device veth1_macvtap left promiscuous mode [ 148.358225][ T32] device veth0_macvtap left promiscuous mode [ 148.368604][ T32] device veth1_vlan left promiscuous mode [ 148.377039][ T32] device veth0_vlan left promiscuous mode [ 148.385103][ T32] device veth1_macvtap left promiscuous mode [ 148.391344][ T32] device veth0_macvtap left promiscuous mode [ 148.398117][ T32] device veth1_vlan left promiscuous mode [ 148.419106][ T32] device veth0_vlan left promiscuous mode [ 148.954664][ T3582] Bluetooth: hci4: command tx timeout [ 149.644064][ T32] bond1 (unregistering): Released all slaves [ 150.633950][ T32] team0 (unregistering): Port device team_slave_1 removed [ 150.653549][ T32] team0 (unregistering): Port device team_slave_0 removed [ 150.670065][ T32] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.726189][ T32] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.796343][ T32] bond0 (unregistering): Released all slaves [ 150.850696][ T32] bond1 (unregistering): Released all slaves [ 150.941339][ T32] team0 (unregistering): Port device team_slave_1 removed [ 150.957517][ T32] team0 (unregistering): Port device team_slave_0 removed [ 150.977895][ T32] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.993162][ T32] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.044443][ T3578] Bluetooth: hci4: command tx timeout [ 151.068795][ T32] bond0 (unregistering): Released all slaves [ 151.565226][ T3695] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.573394][ T3695] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.653061][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.669287][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 151.724885][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.767134][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 152.009841][ T4709] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 152.073730][ T4709] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 152.108162][ T4709] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 152.158070][ T4709] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 152.361143][ T4875] loop3: detected capacity change from 0 to 256 [ 152.487837][ T4875] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 152.901786][ T4875] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 152.990655][ T4709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.384301][ T4709] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.445466][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 153.453455][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 154.129255][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 154.165705][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 154.195248][ T3621] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.202390][ T3621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.277933][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 154.288208][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 154.314220][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 154.323793][ T3894] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.331001][ T3894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.361807][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 154.395880][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 154.450312][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 154.463786][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 154.484110][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 154.506079][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 154.530166][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 154.561583][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 154.595436][ T4709] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 154.639951][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 154.685256][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 154.693456][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 154.728315][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 155.412662][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 155.423629][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 155.446306][ T4709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.521732][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 155.531241][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 155.584361][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 155.617918][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 155.643321][ T4709] device veth0_vlan entered promiscuous mode [ 155.664912][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 155.672883][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 155.709787][ T4709] device veth1_vlan entered promiscuous mode [ 155.808985][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 155.819521][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 155.854860][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 155.863656][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 155.936308][ T4709] device veth0_macvtap entered promiscuous mode [ 155.963492][ T4709] device veth1_macvtap entered promiscuous mode [ 156.043605][ T4709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.090097][ T4709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.124364][ T4709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.172791][ T4709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.227402][ T4709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.264305][ T4709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.274203][ T4709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.325060][ T4709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.391754][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.420256][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 156.487325][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 156.536228][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 156.580993][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 156.659435][ T4709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.690895][ T4709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.742234][ T4709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.780055][ T4709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.823399][ T4709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.870232][ T4709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.911378][ T4709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.966417][ T4709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.101330][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.124811][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 157.133851][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 157.169330][ T4709] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.185511][ T4709] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.231403][ T4709] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.254532][ T4709] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.502654][ T3695] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.540163][ T3695] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.593820][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 157.621499][ T3695] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.635963][ T3695] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.660701][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 157.876784][ T4999] loop1: detected capacity change from 0 to 2048 [ 157.945974][ T4999] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 158.015708][ T26] audit: type=1804 audit(1719030308.123:5): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir509764074/syzkaller.hSGeRl/0/file2/bus" dev="loop1" ino=16 res=1 errno=0 [ 158.054720][ T4995] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor.1: bg 0: block 234: padding at end of block bitmap is not set [ 158.144762][ T4995] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 0 with max blocks 5 with error 28 [ 158.190989][ T4995] EXT4-fs (loop1): This should not happen!! Data will be lost [ 158.190989][ T4995] [ 158.201776][ T4995] EXT4-fs (loop1): Total free blocks count 0 [ 158.208359][ T4995] EXT4-fs (loop1): Free/Dirty block details [ 158.215620][ T4995] EXT4-fs (loop1): free_blocks=0 [ 158.220651][ T4995] EXT4-fs (loop1): dirty_blocks=16 [ 158.232789][ T4995] EXT4-fs (loop1): Block reservation details [ 158.243901][ T4995] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 158.351036][ T4995] syz-executor.1 (4995) used greatest stack depth: 19824 bytes left [ 158.367974][ T4709] EXT4-fs (loop1): unmounting filesystem. [ 158.453320][ T5019] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 158.571590][ T5019] loop4: detected capacity change from 0 to 256 [ 158.894910][ T5035] loop0: detected capacity change from 0 to 256 [ 159.986416][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 161.002310][ T5079] loop0: detected capacity change from 0 to 512 [ 161.046874][ T5079] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 161.059977][ T5079] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 161.276879][ T3582] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 161.286407][ T3582] Bluetooth: hci1: Injecting HCI hardware error event [ 161.298071][ T3582] Bluetooth: hci1: hardware error 0x00 [ 161.654782][ T4685] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 161.663432][ T5061] loop4: detected capacity change from 0 to 32768 [ 161.706964][ T5061] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 161.751579][ T4685] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 162.011313][ T5082] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 162.088813][ T5087] loop4: detected capacity change from 0 to 64 [ 162.096951][ T5087] hfs: can't find a HFS filesystem on dev loop4 [ 162.771435][ T5086] loop0: detected capacity change from 0 to 40427 [ 162.795258][ T3578] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 162.805024][ T3578] Bluetooth: hci4: Injecting HCI hardware error event [ 162.812948][ T3578] Bluetooth: hci4: hardware error 0x00 [ 163.189391][ T5090] loop0: detected capacity change from 0 to 1024 [ 163.354404][ T3582] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 164.036178][ T5090] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 164.634511][ T3582] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 164.643182][ T3582] Bluetooth: hci2: Injecting HCI hardware error event [ 164.651767][ T3582] Bluetooth: hci2: hardware error 0x00 [ 165.124406][ T3578] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 165.527154][ T3581] EXT4-fs (loop0): unmounting filesystem. [ 166.325489][ T3590] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 166.348968][ T3590] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 166.371429][ T3590] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 166.423578][ T3590] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 166.474647][ T3590] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 166.484003][ T3590] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 166.564215][ T5105] loop1: detected capacity change from 0 to 256 [ 166.954611][ T3582] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 167.383254][ T5106] chnl_net:caif_netlink_parms(): no params data found [ 167.577423][ T5106] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.597288][ T5106] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.627693][ T5106] device bridge_slave_0 entered promiscuous mode [ 167.663622][ T5106] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.701660][ T5106] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.737680][ T5106] device bridge_slave_1 entered promiscuous mode [ 167.823293][ T5103] loop0: detected capacity change from 0 to 40427 [ 167.831242][ T5106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.986635][ T5126] loop1: detected capacity change from 0 to 512 [ 168.058519][ T5126] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 168.072257][ T5126] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 168.183058][ T5103] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 168.626156][ T5103] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 168.629756][ T3582] Bluetooth: hci5: command tx timeout [ 168.689598][ T5106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.745690][ T5103] F2FS-fs (loop0): Failed to start F2FS issue_checkpoint_thread (-12) [ 168.936811][ T5106] team0: Port device team_slave_0 added [ 169.073490][ T5106] team0: Port device team_slave_1 added [ 169.771067][ T5106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.804274][ T5106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.897415][ T5106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.930816][ T5106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.967466][ T5106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.025342][ T5106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.059678][ T5141] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 170.103206][ T5141] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 170.182860][ T5106] device hsr_slave_0 entered promiscuous mode [ 170.237262][ T5106] device hsr_slave_1 entered promiscuous mode [ 170.262236][ T5106] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.275403][ T5106] Cannot create hsr debugfs directory [ 170.364183][ T5131] loop1: detected capacity change from 0 to 32768 [ 170.459040][ T5131] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 170.469480][ T5131] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 170.482048][ T5131] BTRFS info (device loop1): using free space tree [ 170.724480][ T3590] Bluetooth: hci5: command tx timeout [ 171.177947][ T5159] loop0: detected capacity change from 0 to 256 [ 171.326018][ T4685] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 171.350635][ T5170] netlink: 'syz-executor.3': attribute type 20 has an invalid length. [ 171.417957][ T5175] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 171.509407][ T5131] BTRFS info (device loop1): enabling ssd optimizations [ 171.530026][ T5106] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.408919][ T5188] loop4: detected capacity change from 0 to 512 [ 173.424068][ T3590] Bluetooth: hci5: command tx timeout [ 173.450754][ T5188] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 173.465992][ T5188] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 174.197123][ T4709] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 174.527903][ T5106] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.792597][ T5106] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.206052][ T5106] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.464631][ T3582] Bluetooth: hci5: command tx timeout [ 175.556797][ T26] audit: type=1800 audit(1719030325.653:6): pid=5203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1952 res=0 errno=0 [ 175.588195][ T5205] loop3: detected capacity change from 0 to 256 [ 175.601647][ T5205] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 175.870897][ T5203] loop4: detected capacity change from 0 to 4096 [ 175.873386][ T5106] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 175.942233][ T5203] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 175.965624][ T5106] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 176.012514][ T5106] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 176.045343][ T5106] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 176.137268][ T5203] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 176.185217][ T5203] ntfs3: loop4: Failed to load $Extend. [ 176.358659][ T5106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.435466][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 176.445650][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 176.477749][ T5106] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.529430][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 176.547267][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 176.620202][ T3625] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.627402][ T3625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.719767][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 176.729087][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 176.764192][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 176.840788][ T4559] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.848017][ T4559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.856683][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 176.866011][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 176.891664][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 176.925337][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 177.740091][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 177.749543][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 177.782382][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 177.792663][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 177.850442][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 177.883987][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 177.925107][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 177.942688][ T5106] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 179.010145][ T5219] loop1: detected capacity change from 0 to 32768 [ 179.082279][ T5219] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (5219) [ 179.207028][ T5219] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 179.237972][ T5219] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 179.263476][ T5219] BTRFS info (device loop1): using free space tree [ 179.276885][ T5255] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 179.398229][ T5219] BTRFS error (device loop1): open_ctree failed [ 179.423643][ T5106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.550388][ T5274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 179.558223][ T5274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 179.566210][ T5278] dccp_invalid_packet: P.Data Offset(0) too small [ 179.573133][ T5274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 179.583743][ T5274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 179.611219][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 179.625057][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 179.662498][ T5106] device veth0_vlan entered promiscuous mode [ 179.713516][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 179.724129][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 179.758816][ T5106] device veth1_vlan entered promiscuous mode [ 179.819122][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 179.913213][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 179.928030][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 179.958300][ T5106] device veth0_macvtap entered promiscuous mode [ 179.973868][ T5106] device veth1_macvtap entered promiscuous mode [ 180.033445][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.057762][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.082259][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.107224][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.128557][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.144967][ T5297] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 180.156803][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.173920][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.187675][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.198141][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.209137][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.221578][ T5106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.241644][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 180.253646][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 180.262405][ T3894] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 180.282999][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 180.302254][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 180.327099][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.354033][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.376518][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.388240][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.398388][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.409965][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.419900][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.430580][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.441183][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.452017][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.467101][ T5106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.477201][ T5280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 180.539771][ T5280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 180.568595][ T5106] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.599074][ T5106] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.607928][ T5106] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.616783][ T5106] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.624613][ T3894] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 180.649496][ T3894] usb 5-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 180.676776][ T3894] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 180.729142][ T3894] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 180.911201][ T3894] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10100, setting to 1024 [ 181.614661][ T3894] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 181.633253][ T3894] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 182.355931][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.384334][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.387374][ T3894] usb 5-1: Product: syz [ 182.396046][ T3894] usb 5-1: Manufacturer: syz [ 182.415227][ T5290] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 182.435523][ T3894] cdc_wdm 5-1:1.0: skipping garbage [ 182.451060][ T3894] cdc_wdm 5-1:1.0: skipping garbage [ 182.491852][ T3894] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 182.502177][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 182.512925][ T3894] cdc_wdm 5-1:1.0: Unknown control protocol [ 182.537087][ T3733] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.554336][ T3733] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.576982][ T5280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 182.720743][ T5290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.766658][ T5290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.804505][ T5280] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 182.995494][ T5290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.041925][ T5290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.114355][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 183.121013][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 183.194277][ T5340] loop2: detected capacity change from 0 to 1024 [ 183.204907][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 183.211549][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 183.373689][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 183.380352][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 183.389265][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 183.395909][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 183.404300][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 183.410935][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 183.564393][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 183.571057][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 183.584302][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 183.590969][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 183.605332][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 183.612002][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 183.622940][ T3632] usb 5-1: USB disconnect, device number 2 [ 183.675381][ T5342] cdc_wdm 5-1:1.0: Tx URB error: -19 [ 183.774446][ T5280] usb 4-1: Using ep0 maxpacket: 8 [ 183.844049][ T5340] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 183.904729][ T5280] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 183.932478][ T5280] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 183.989792][ T5280] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 184.144823][ T5280] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 184.181668][ T5280] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 184.254274][ T5280] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 184.420711][ T5351] loop1: detected capacity change from 0 to 136 [ 184.607717][ T3632] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 185.040084][ T4674] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 185.050088][ T3632] usb 5-1: device descriptor read/all, error -71 [ 185.088466][ T5280] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 185.605925][ T5280] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 185.624341][ T5280] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 185.673980][ T5106] EXT4-fs (loop2): unmounting filesystem. [ 185.684621][ T5280] usb 4-1: string descriptor 0 read error: -71 [ 185.691018][ T5280] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 185.726938][ T5359] loop1: detected capacity change from 0 to 512 [ 185.744116][ T5280] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.964723][ T5280] usb 4-1: can't set config #168, error -71 [ 186.613740][ T5359] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 186.645452][ T5359] EXT4-fs (sda1): re-mounted. Quota mode: journalled. [ 186.655448][ T5280] usb 4-1: USB disconnect, device number 5 [ 188.764510][ T3628] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 189.134695][ T3628] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 189.152464][ T3628] usb 5-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 189.169570][ T3628] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 189.204211][ T3628] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 189.223780][ T3628] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10100, setting to 1024 [ 189.354592][ T3628] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 189.377835][ T3628] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 189.411324][ T3628] usb 5-1: Product: syz [ 189.421218][ T3628] usb 5-1: Manufacturer: syz [ 189.475157][ T5393] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 189.495395][ T3628] cdc_wdm 5-1:1.0: skipping garbage [ 189.500651][ T3628] cdc_wdm 5-1:1.0: skipping garbage [ 189.530553][ T3628] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 189.540693][ T3628] cdc_wdm 5-1:1.0: Unknown control protocol [ 189.715501][ T5393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.733449][ T5393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.955234][ T5393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.963866][ T5393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.024303][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 190.031054][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 190.044292][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 190.050940][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 190.064296][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 190.070957][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 190.081028][ T3002] udevd[3002]: worker [4674] terminated by signal 33 (Unknown signal 33) [ 190.084308][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 190.096095][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 190.103850][ T3002] udevd[3002]: worker [4674] failed while handling '/devices/virtual/block/loop2' [ 190.104290][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 190.119694][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 190.126392][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 190.133030][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 190.139062][ T5415] loop1: detected capacity change from 0 to 32768 [ 190.144318][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 190.152159][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 190.164297][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 190.171028][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 190.184289][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 190.190934][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 190.202380][ T5415] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (5415) [ 190.204308][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 190.221543][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 190.228060][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 190.234699][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 190.244349][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 190.250997][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 190.264314][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 190.270959][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 190.284385][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 190.284399][ T5415] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 190.284483][ T5415] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 190.291015][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 190.304620][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 190.323394][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 190.329775][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 190.336412][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 190.343880][ T5415] BTRFS info (device loop1): setting nodatacow, compression disabled [ 190.352203][ T5415] BTRFS info (device loop1): turning on flush-on-commit [ 190.359251][ T5415] BTRFS info (device loop1): enabling auto defrag [ 190.365873][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 190.372508][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 190.381106][ T5415] BTRFS info (device loop1): max_inline at 0 [ 190.387242][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 190.387266][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 190.400346][ T3628] usb 5-1: USB disconnect, device number 5 [ 190.410310][ T5415] BTRFS info (device loop1): using free space tree [ 190.507176][ T5415] BTRFS info (device loop1): enabling ssd optimizations [ 190.696707][ T4709] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 190.924866][ T3628] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 191.114345][ T3582] Bluetooth: hci3: command 0x0406 tx timeout [ 191.303348][ T3628] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 191.313919][ T3628] usb 5-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 191.326552][ T3628] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 191.338029][ T5462] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.1'. [ 191.348050][ T3628] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 191.387022][ T3628] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10100, setting to 1024 [ 191.515044][ T3628] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 191.524977][ T3628] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 191.533202][ T3628] usb 5-1: Product: syz [ 191.537548][ T3628] usb 5-1: Manufacturer: syz [ 191.604966][ T3628] usb 5-1: can't set config #1, error -71 [ 191.624170][ T3628] usb 5-1: USB disconnect, device number 6 [ 191.859166][ T5474] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 192.145345][ T5480] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 192.735028][ T5489] ptrace attach of "/root/syz-executor.2 exec"[5106] was attempted by "/root/syz-executor.2 exec"[5489] [ 192.822312][ T5491] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'. [ 192.979427][ T5483] loop3: detected capacity change from 0 to 32768 [ 193.015738][ T5483] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (5483) [ 193.063732][ T5483] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 193.085467][ T5483] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 193.116851][ T5483] BTRFS info (device loop3): setting nodatacow, compression disabled [ 193.173984][ T5483] BTRFS info (device loop3): turning on flush-on-commit [ 193.220932][ T5483] BTRFS info (device loop3): enabling auto defrag [ 193.260848][ T5483] BTRFS info (device loop3): max_inline at 0 [ 193.284774][ T5483] BTRFS info (device loop3): using free space tree [ 193.504437][ T5483] BTRFS info (device loop3): enabling ssd optimizations [ 193.695417][ T5532] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 193.749318][ T4563] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 194.157499][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.164011][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.500880][ T5547] process 'syz-executor.0' launched './file0' with NULL argv: empty string added [ 194.803324][ T5549] loop4: detected capacity change from 0 to 64 [ 195.151822][ T5550] loop3: detected capacity change from 0 to 136 [ 195.338954][ T5553] fuse: Unknown parameter 'fd0x000000000000000700000000000000000000' [ 195.746100][ T5557] overlayfs: conflicting lowerdir path [ 196.169257][ T5567] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 196.232910][ T5560] loop1: detected capacity change from 0 to 32768 [ 196.289155][ T5560] XFS: ikeep mount option is deprecated. [ 196.303698][ T5569] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 196.362014][ T5569] Dead loop on virtual device ipvlan1, fix it urgently! [ 196.386518][ T5569] syz-executor.0 (5569) used greatest stack depth: 7616 bytes left [ 196.395933][ T5560] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 196.406724][ T5560] XFS (loop1): Mounting V5 Filesystem [ 196.461825][ T5560] XFS (loop1): Ending clean mount [ 196.503665][ T5560] XFS (loop1): Quotacheck needed: Please wait. [ 196.514474][ T5565] loop4: detected capacity change from 0 to 32768 [ 196.540187][ T5565] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (5565) [ 196.563489][ T5565] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 196.574414][ T5565] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 196.583784][ T5565] BTRFS info (device loop4): setting nodatacow, compression disabled [ 196.605780][ T5560] XFS (loop1): Quotacheck: Done. [ 196.646212][ T5565] BTRFS info (device loop4): turning on flush-on-commit [ 196.653325][ T5565] BTRFS info (device loop4): enabling auto defrag [ 196.718420][ T5565] BTRFS info (device loop4): max_inline at 0 [ 196.743978][ T4709] XFS (loop1): Unmounting Filesystem [ 196.931464][ T5565] BTRFS info (device loop4): using free space tree [ 197.705847][ T5565] BTRFS info (device loop4): enabling ssd optimizations [ 197.871759][ T5609] loop0: detected capacity change from 0 to 4096 [ 198.018795][ T5612] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 198.051793][ T4445] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 198.330890][ T26] audit: type=1804 audit(1719030348.433:7): pid=5617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3543204385/syzkaller.YMIP8Y/164/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 199.073066][ T5631] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 201.858089][ T5659] loop0: detected capacity change from 0 to 64 [ 203.567601][ T5681] loop0: detected capacity change from 0 to 4096 [ 203.578103][ T5682] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 203.644694][ T5683] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 203.937465][ T26] audit: type=1804 audit(1719030354.023:8): pid=5687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3543204385/syzkaller.YMIP8Y/168/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 204.940683][ T5704] loop2: detected capacity change from 0 to 64 [ 205.612453][ T5710] loop4: detected capacity change from 0 to 2048 [ 205.653222][ T5691] loop3: detected capacity change from 0 to 40427 [ 205.733464][ T5710] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 205.749064][ T5691] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 205.763985][ T5691] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 205.800589][ T5710] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 205.810520][ T5691] F2FS-fs (loop3): Found nat_bits in checkpoint [ 205.841785][ T5710] EXT4-fs (loop4): Remounting filesystem read-only [ 206.052561][ T4445] EXT4-fs (loop4): unmounting filesystem. [ 206.066613][ T5691] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 206.080541][ T5691] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 207.551616][ T5732] loop2: detected capacity change from 0 to 512 [ 207.561271][ T5733] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 207.644470][ T5732] EXT4-fs (loop2): orphan cleanup on readonly fs [ 207.669466][ T5733] loop4: detected capacity change from 0 to 256 [ 208.588139][ T5732] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor.2: bg 0: block 248: padding at end of block bitmap is not set [ 208.669941][ T5732] Quota error (device loop2): write_blk: dquota write failed [ 208.701882][ T5732] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 208.750849][ T5732] EXT4-fs error (device loop2): ext4_acquire_dquot:6777: comm syz-executor.2: Failed to acquire dquot type 1 [ 208.777315][ T5732] EXT4-fs (loop2): 1 truncate cleaned up [ 208.790984][ T5732] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 209.015309][ T5747] 9pnet_fd: Insufficient options for proto=fd [ 209.042959][ T5748] loop1: detected capacity change from 0 to 256 [ 209.559870][ T5748] exfat: Deprecated parameter 'utf8' [ 209.579463][ T5748] exfat: Deprecated parameter 'namecase' [ 209.602813][ T5748] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x167cff41, utbl_chksum : 0xe619d30d) [ 209.653675][ T5106] EXT4-fs (loop2): unmounting filesystem. [ 209.665995][ T26] audit: type=1800 audit(1719030359.773:9): pid=5748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=1048628 res=0 errno=0 [ 210.022345][ T5760] loop1: detected capacity change from 0 to 64 [ 211.545260][ T5785] device ip6gretap0 entered promiscuous mode [ 211.579203][ T5785] device vlan2 entered promiscuous mode [ 211.697411][ T5785] device ip6gretap0 left promiscuous mode [ 211.839161][ T5789] loop3: detected capacity change from 0 to 2048 [ 211.880219][ T5789] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 211.899407][ T5789] UDF-fs: error (device loop3): udf_read_inode: (ino 1312) failed !bh [ 211.930963][ T5789] UDF-fs: Scanning with blocksize 512 failed [ 211.975589][ T5789] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 211.989349][ T5789] UDF-fs: Scanning with blocksize 1024 failed [ 212.001277][ T5789] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 212.050176][ T5789] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 212.061216][ T5789] UDF-fs: Scanning with blocksize 2048 failed [ 212.071151][ T5789] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 212.072451][ T5792] loop0: detected capacity change from 0 to 512 [ 212.118977][ T5789] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 212.128894][ T5789] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 212.140249][ T5789] UDF-fs: Scanning with blocksize 4096 failed [ 212.157542][ T5795] loop1: detected capacity change from 0 to 512 [ 212.165710][ T5792] EXT4-fs (loop0): orphan cleanup on readonly fs [ 212.178760][ T5789] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 212.222406][ T5792] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor.0: bg 0: block 248: padding at end of block bitmap is not set [ 212.238893][ T5792] Quota error (device loop0): write_blk: dquota write failed [ 212.249617][ T5792] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 212.262004][ T5795] EXT4-fs (loop1): orphan cleanup on readonly fs [ 212.271248][ T5792] EXT4-fs error (device loop0): ext4_acquire_dquot:6777: comm syz-executor.0: Failed to acquire dquot type 1 [ 212.289591][ T5795] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor.1: bg 0: block 248: padding at end of block bitmap is not set [ 212.314077][ T5792] EXT4-fs (loop0): 1 truncate cleaned up [ 212.346075][ T5792] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 212.357472][ T5795] Quota error (device loop1): write_blk: dquota write failed [ 212.388288][ T5795] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 212.404872][ T5795] EXT4-fs error (device loop1): ext4_acquire_dquot:6777: comm syz-executor.1: Failed to acquire dquot type 1 [ 212.491771][ T5795] EXT4-fs (loop1): 1 truncate cleaned up [ 212.500789][ T5795] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 212.585062][ T5795] EXT4-fs error (device loop1): ext4_lookup:1859: inode #2: comm syz-executor.1: deleted inode referenced: 12 [ 213.631077][ T3581] EXT4-fs (loop0): unmounting filesystem. [ 213.947230][ T26] audit: type=1804 audit(1719030364.053:10): pid=5812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir4138244279/syzkaller.hSiRGT/33/file1" dev="sda1" ino=1951 res=1 errno=0 [ 214.650860][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 214.678620][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 215.536225][ T5816] loop0: detected capacity change from 0 to 4096 [ 215.756249][ T5816] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 215.809638][ T5816] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 216.041073][ T3581] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 216.422771][ T5835] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 216.632705][ T5838] loop3: detected capacity change from 0 to 256 [ 217.681073][ T5841] 9pnet_fd: Insufficient options for proto=fd [ 217.857576][ T4709] EXT4-fs (loop1): unmounting filesystem. [ 218.216224][ T3582] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 218.225301][ T3582] Bluetooth: hci5: Injecting HCI hardware error event [ 218.244759][ T3590] Bluetooth: hci5: hardware error 0x00 [ 218.950633][ T26] audit: type=1804 audit(1719030369.053:11): pid=5863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir4138244279/syzkaller.hSiRGT/37/file1" dev="sda1" ino=1965 res=1 errno=0 [ 219.004491][ T3582] Bluetooth: hci5: unexpected event for opcode 0x2005 [ 221.049273][ T3590] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 221.418654][ T5870] loop1: detected capacity change from 0 to 4096 [ 221.488621][ T5870] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 221.660912][ T5870] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 221.697952][ T5885] 9pnet_fd: Insufficient options for proto=fd [ 222.489002][ T26] audit: type=1326 audit(1719030372.593:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5866 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f147107d0a9 code=0x0 [ 223.386798][ T5916] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 224.231721][ T26] audit: type=1326 audit(1719030374.333:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6847d0a9 code=0x7ffc0000 [ 224.262130][ T26] audit: type=1326 audit(1719030374.333:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6847d0a9 code=0x7ffc0000 [ 224.291678][ T26] audit: type=1326 audit(1719030374.363:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7fed6847d0a9 code=0x7ffc0000 [ 224.320968][ T26] audit: type=1326 audit(1719030374.363:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6847d0a9 code=0x7ffc0000 [ 224.354828][ T26] audit: type=1326 audit(1719030374.363:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6847d0a9 code=0x7ffc0000 [ 224.382242][ T26] audit: type=1326 audit(1719030374.363:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fed6847d0a9 code=0x7ffc0000 [ 224.410919][ T26] audit: type=1326 audit(1719030374.363:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6847d0a9 code=0x7ffc0000 [ 224.439941][ T26] audit: type=1326 audit(1719030374.363:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6847d0a9 code=0x7ffc0000 [ 224.506845][ T26] audit: type=1326 audit(1719030374.363:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed6847d0a9 code=0x7ffc0000 [ 224.530464][ T26] audit: type=1326 audit(1719030374.373:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6847d0a9 code=0x7ffc0000 [ 224.931971][ T5928] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 225.001955][ T5928] loop1: detected capacity change from 0 to 256 [ 225.023251][ T5931] 9pnet_fd: Insufficient options for proto=fd [ 227.304343][ T3628] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 227.544433][ T3628] usb 5-1: Using ep0 maxpacket: 16 [ 227.666352][ T3628] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 228.363086][ T3628] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 228.377035][ T3628] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.413445][ T3628] usb 5-1: config 0 descriptor?? [ 228.649733][ T5969] 9pnet_fd: Insufficient options for proto=fd [ 228.862139][ T5953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.970644][ T5953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.515931][ T3628] hid (null): invalid report_size 540876853 [ 229.522460][ T3628] hid (null): invalid report_size 27745 [ 229.528358][ T3628] hid (null): invalid report_size 29285 [ 229.534079][ T3628] hid (null): unknown global tag 0x83 [ 229.539601][ T3628] hid (null): unknown global tag 0xc [ 229.545622][ T3628] hid (null): global environment stack underflow [ 229.554439][ T3628] hid-generic 0003:0158:0100.0002: unknown main item tag 0x1 [ 229.561887][ T3628] hid-generic 0003:0158:0100.0002: unexpected long global item [ 229.578373][ T3628] hid-generic: probe of 0003:0158:0100.0002 failed with error -22 [ 229.720980][ T5280] usb 5-1: USB disconnect, device number 7 [ 230.024658][ T41] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 230.054548][ T3628] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 230.394655][ T41] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 230.424767][ T3628] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 230.447459][ T3628] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.460023][ T41] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 230.554567][ T3628] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 230.563868][ T41] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 230.593363][ T3628] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 230.602423][ T41] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 230.623798][ T41] usb 1-1: SerialNumber: syz [ 230.629575][ T3628] usb 4-1: Manufacturer: syz [ 230.655914][ T3628] usb 4-1: config 0 descriptor?? [ 230.699160][ T3628] igorplugusb 4-1:0.0: incorrect number of endpoints [ 231.738374][ T41] usb 1-1: 0:2 : does not exist [ 231.834005][ T41] usb 1-1: USB disconnect, device number 5 [ 231.956373][ T4685] udevd[4685]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 232.043365][ T6012] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 232.152223][ T6015] 9pnet_fd: Insufficient options for proto=fd [ 232.213433][ T6012] loop1: detected capacity change from 0 to 256 [ 232.330663][ T4685] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 232.933078][ T6028] hub 9-0:1.0: USB hub found [ 232.941106][ T6028] hub 9-0:1.0: 8 ports detected [ 233.012756][ T6028] loop4: detected capacity change from 0 to 256 [ 233.598538][ T4685] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 233.665291][ T3894] usb 4-1: USB disconnect, device number 6 [ 235.254084][ T6053] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 235.730700][ T6059] loop2: detected capacity change from 0 to 512 [ 235.743203][ T6059] EXT4-fs: group quota file already specified [ 235.795271][ T4685] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 236.862714][ T6090] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 342.804200][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 342.811210][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6089/1:b..l [ 342.819986][ C1] (detected by 1, t=10502 jiffies, g=27537, q=244 ncpus=2) [ 342.827392][ C1] task:syz-executor.3 state:R running task stack:24808 pid:6089 ppid:4563 flags:0x00004006 [ 342.839504][ C1] Call Trace: [ 342.842818][ C1] [ 342.845776][ C1] __schedule+0x142d/0x4550 [ 342.850406][ C1] ? __sched_text_start+0x8/0x8 [ 342.855295][ C1] ? print_irqtrace_events+0x210/0x210 [ 342.860825][ C1] ? mark_lock+0x9a/0x340 [ 342.865203][ C1] ? preempt_schedule_irq+0xec/0x1c0 [ 342.870597][ C1] preempt_schedule_irq+0xf7/0x1c0 [ 342.875745][ C1] ? preempt_schedule_notrace+0x140/0x140 [ 342.881516][ C1] irqentry_exit+0x53/0x80 [ 342.885972][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 342.892019][ C1] RIP: 0010:lock_acquire+0xf3/0x5a0 [ 342.897269][ C1] Code: 0d 0f 86 e4 02 00 00 89 db 48 89 d8 48 c1 e8 06 48 8d 3c c5 28 8a 73 8e be 08 00 00 00 e8 45 ae 77 00 48 0f a3 1d 35 23 09 0d <73> 0d e8 36 e4 08 00 84 c0 0f 84 b9 02 00 00 48 c7 c0 e4 be 73 8e [ 342.916913][ C1] RSP: 0018:ffffc90004def5c0 EFLAGS: 00000257 [ 342.923009][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff816a66eb [ 342.931003][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8e738a28 [ 342.939004][ C1] RBP: ffffc90004def708 R08: dffffc0000000000 R09: fffffbfff1ce7146 [ 342.947001][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff920009bdec0 [ 342.955001][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88807e346780 [ 342.963025][ C1] ? lock_acquire+0xeb/0x5a0 [ 342.967686][ C1] ? read_lock_is_recursive+0x10/0x10 [ 342.973118][ C1] ? filemap_map_pages+0x277/0x12c0 [ 342.978405][ C1] filemap_map_pages+0x294/0x12c0 [ 342.983455][ C1] ? filemap_map_pages+0x277/0x12c0 [ 342.988692][ C1] ? count_memcg_event_mm+0x90/0x410 [ 342.994054][ C1] ? filemap_read_folio+0x780/0x780 [ 342.999273][ C1] ? count_memcg_event_mm+0x90/0x410 [ 343.004602][ C1] handle_mm_fault+0x33e2/0x5340 [ 343.009571][ C1] ? follow_page_pte+0x39c/0x1880 [ 343.014648][ C1] ? numa_migrate_prep+0x250/0x250 [ 343.019808][ C1] ? follow_page_mask+0xb8a/0x1420 [ 343.025016][ C1] ? check_vma_flags+0x440/0x4d0 [ 343.030083][ C1] __get_user_pages+0x4f3/0x1190 [ 343.035074][ C1] ? populate_vma_page_range+0x2b0/0x2b0 [ 343.040776][ C1] populate_vma_page_range+0x217/0x2b0 [ 343.046284][ C1] __mm_populate+0x275/0x440 [ 343.050917][ C1] ? check_vma_flags+0x4d0/0x4d0 [ 343.055888][ C1] ? do_raw_spin_unlock+0x137/0x8a0 [ 343.061124][ C1] vm_mmap_pgoff+0x22b/0x2d0 [ 343.065805][ C1] ? account_locked_vm+0xe0/0xe0 [ 343.070779][ C1] ? syscall_enter_from_user_mode+0x2e/0x230 [ 343.076912][ C1] ? ksys_mmap_pgoff+0xd8/0x6d0 [ 343.081884][ C1] do_syscall_64+0x3b/0xb0 [ 343.086343][ C1] ? clear_bhb_loop+0x45/0xa0 [ 343.091325][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 343.097249][ C1] RIP: 0033:0x7f30a387d0a9 [ 343.101693][ C1] RSP: 002b:00007f30a23d50c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 343.110135][ C1] RAX: ffffffffffffffda RBX: 00007f30a39b4050 RCX: 00007f30a387d0a9 [ 343.118226][ C1] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000000020000000 [ 343.126222][ C1] RBP: 00007f30a38ec074 R08: ffffffffffffffff R09: 0000000000000000 [ 343.134215][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 343.142205][ C1] R13: 0000000000000004 R14: 00007f30a39b4050 R15: 00007ffe58e76218 [ 343.150254][ C1] [ 343.153299][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10274 jiffies! g27537 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 343.165748][ C1] rcu: Possible timer handling issue on cpu=1 timer-softirq=12473 [ 343.173742][ C1] rcu: rcu_preempt kthread starved for 10280 jiffies! g27537 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 343.185152][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 343.195154][ C1] rcu: RCU grace-period kthread stack dump: [ 343.201072][ C1] task:rcu_preempt state:I stack:26712 pid:16 ppid:2 flags:0x00004000 [ 343.210321][ C1] Call Trace: [ 343.213621][ C1] [ 343.216580][ C1] __schedule+0x142d/0x4550 [ 343.221136][ C1] ? _raw_spin_unlock+0x40/0x40 [ 343.226047][ C1] ? __sched_text_start+0x8/0x8 [ 343.230939][ C1] ? lockdep_softirqs_off+0x420/0x420 [ 343.236348][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 343.242284][ C1] ? _raw_spin_unlock+0x40/0x40 [ 343.247175][ C1] schedule+0xbf/0x180 [ 343.251279][ C1] schedule_timeout+0x1b9/0x300 [ 343.256168][ C1] ? console_conditional_schedule+0x40/0x40 [ 343.262095][ C1] ? update_process_times+0x1b0/0x1b0 [ 343.267629][ C1] ? prepare_to_swait_event+0x329/0x350 [ 343.273226][ C1] rcu_gp_fqs_loop+0x2d2/0x1150 [ 343.278113][ C1] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 343.284269][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 343.289481][ C1] ? rcu_gp_init+0x15f0/0x15f0 [ 343.294267][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 343.300211][ C1] ? finish_swait+0xcf/0x1e0 [ 343.304822][ C1] rcu_gp_kthread+0xa3/0x3b0 [ 343.309428][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 343.314551][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 343.320497][ C1] ? __kthread_parkme+0x168/0x1c0 [ 343.325612][ C1] kthread+0x28d/0x320 [ 343.329684][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 343.334800][ C1] ? kthread_blkcg+0xd0/0xd0 [ 343.339386][ C1] ret_from_fork+0x1f/0x30 [ 343.343827][ C1] [ 343.346843][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 343.353161][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.1.94-syzkaller #0 [ 343.360786][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 343.370835][ C1] RIP: 0010:acpi_idle_do_entry+0x10f/0x340 [ 343.376645][ C1] Code: 43 f5 f6 48 83 e3 08 0f 85 0b 01 00 00 4c 8d 74 24 20 e8 a4 02 fc f6 0f 1f 44 00 00 e8 fa 3f f5 f6 0f 00 2d e3 10 b2 00 fb f4 <4c> 89 f3 48 c1 eb 03 42 80 3c 3b 00 74 08 4c 89 f7 e8 ab c0 4c f7 [ 343.396338][ C1] RSP: 0018:ffffc90000177b80 EFLAGS: 000002d3 [ 343.402403][ C1] RAX: ffffffff8a955356 RBX: 0000000000000000 RCX: ffff888012731dc0 [ 343.410371][ C1] RDX: 0000000000000000 RSI: ffffffff8aec0240 RDI: ffffffff8b3d4660 [ 343.418341][ C1] RBP: ffffc90000177c10 R08: ffffffff8a955338 R09: ffffed10024e63b9 [ 343.426325][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff9200002ef70 [ 343.434322][ C1] R13: ffff888140f0b004 R14: ffffc90000177ba0 R15: dffffc0000000000 [ 343.442313][ C1] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 343.451257][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 343.457854][ C1] CR2: 0000559e67c8c030 CR3: 000000007a7a3000 CR4: 00000000003506e0 [ 343.465831][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 343.473819][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 343.481803][ C1] Call Trace: [ 343.485083][ C1] [ 343.487928][ C1] ? rcu_check_gp_kthread_starvation+0x1b8/0x220 [ 343.494360][ C1] ? print_other_cpu_stall+0x150c/0x1640 [ 343.500012][ C1] ? print_cpu_stall+0x5f0/0x5f0 [ 343.504951][ C1] ? __lock_acquire+0x1f80/0x1f80 [ 343.509984][ C1] ? do_raw_spin_unlock+0x137/0x8a0 [ 343.515197][ C1] ? rcu_sched_clock_irq+0xaf6/0x1200 [ 343.520582][ C1] ? rcutree_dead_cpu+0x20/0x20 [ 343.525444][ C1] ? hrtimer_run_queues+0x163/0x450 [ 343.530739][ C1] ? update_process_times+0x147/0x1b0 [ 343.536135][ C1] ? tick_sched_timer+0x386/0x550 [ 343.541215][ C1] ? tick_setup_sched_timer+0x2f0/0x2f0 [ 343.546761][ C1] ? __hrtimer_run_queues+0x5a7/0xe50 [ 343.552164][ C1] ? hrtimer_interrupt+0x980/0x980 [ 343.557290][ C1] ? ktime_get_update_offsets_now+0x407/0x420 [ 343.563428][ C1] ? hrtimer_interrupt+0x392/0x980 [ 343.568593][ C1] ? __sysvec_apic_timer_interrupt+0x156/0x580 [ 343.574792][ C1] ? sysvec_apic_timer_interrupt+0x8c/0xb0 [ 343.580624][ C1] [ 343.583550][ C1] [ 343.586478][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 343.592639][ C1] ? acpi_idle_do_entry+0xe8/0x340 [ 343.597749][ C1] ? acpi_idle_do_entry+0x106/0x340 [ 343.603123][ C1] ? acpi_idle_do_entry+0x10f/0x340 [ 343.608340][ C1] ? acpi_idle_enter_bm+0x5e0/0x5e0 [ 343.613557][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 343.619569][ C1] ? __sched_clock_gtod_offset+0xe0/0xe0 [ 343.625218][ C1] acpi_idle_enter+0x352/0x4f0 [ 343.629987][ C1] cpuidle_enter_state+0x516/0xf80 [ 343.635183][ C1] ? cpuidle_enter_s2idle+0x6b0/0x6b0 [ 343.640567][ C1] ? tick_nohz_idle_stop_tick+0x238/0xad0 [ 343.646310][ C1] cpuidle_enter+0x59/0x90 [ 343.650891][ C1] do_idle+0x3ce/0x680 [ 343.655042][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 343.660256][ C1] ? asm_sysvec_call_function_single+0x16/0x20 [ 343.666439][ C1] ? schedule_idle+0x57/0x90 [ 343.671057][ C1] cpu_startup_entry+0x3d/0x60 [ 343.675838][ C1] start_secondary+0xe4/0xf0 [ 343.680430][ C1] secondary_startup_64_no_verify+0xcf/0xdb [ 343.686341][ C1]