last executing test programs: 14.618440514s ago: executing program 1 (id=2323): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x35, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f00000008c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3f}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f0000000580)={'fscrypt:', @desc2}, &(0x7f00000005c0)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x29}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x52, 0x39, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566a945d7e924cc9136ff00112233445575778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000780)={'fscrypt:', @auto=[0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x62, 0x31, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x33, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) 14.052531964s ago: executing program 1 (id=2324): io_setup(0x4, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000002c0)=0x3) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r3, 0x0, 0x0) close(r3) 13.423867327s ago: executing program 4 (id=2325): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000001380)=[{{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}, {{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f00000002c0)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000540)=[{0x0}], 0x1}}], 0x3, 0x48000) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000840)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x4, 0xd5}, 0x90) 10.305770737s ago: executing program 1 (id=2341): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x0, 0x2882) r1 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x48f, &(0x7f00000000c0)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x100000000000000) 10.181849354s ago: executing program 1 (id=2333): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000240), 0x0) close(r0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, 0x0, 0x0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/usb_gadget/naa.6001405c935d7912\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/nexus\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='naa.6001405c935d7912\n', 0x16) socket$inet6_tcp(0xa, 0x1, 0x0) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) lsetxattr$system_posix_acl(&(0x7f00000001c0)='.\x00', &(0x7f0000000080)='system.posix_acl_default\x00', 0x0, 0x2c, 0x0) 10.065747548s ago: executing program 1 (id=2335): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5ce000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x3, 0x100}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r4, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) unshare(0x6a040000) 9.093878794s ago: executing program 1 (id=2337): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', 0x0, 0x800, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0x3}, {}, {0x8, 0x11}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x50) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) syz_clone3(&(0x7f0000000080)={0xa690b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x7ff}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842c", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42042, 0x59) write$tcp_mem(r2, &(0x7f0000000100)={0xd0, 0x20, 0x3, 0x20, 0x1000000000}, 0x48) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000007) write(0xffffffffffffffff, &(0x7f0000000040)="b89c9274cb36", 0x6) 7.674280235s ago: executing program 2 (id=2344): syz_open_dev$vim2m(&(0x7f0000000140), 0x800000, 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002080)="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", 0x2000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000f00000002000000bfef000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0xacb, r1}, 0x38) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./dummy\x00', 0x42, 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='p:mygroup/myevent ./dummy:0', 0x1b) write(r2, &(0x7f0000000400)='p:mygroup/myevent ./dummy:0x2', 0x1d) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0) write(r3, &(0x7f0000000400)='p:mygroup/_yevent ./dummy:0x2', 0x1d) 5.986919752s ago: executing program 2 (id=2348): getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000000), 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x400000, 0x1, 0x5, 0x4, 0x2, 0x0, 0x9, 0x2}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40010040) socket$kcm(0x2c, 0x3, 0x0) r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x100000, 0x0) pread64(r5, &(0x7f0000004dc0)=""/121, 0x79, 0x8) socket$packet(0x11, 0x2, 0x300) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x5, 0x40) ioctl$EVIOCSKEYCODE_V2(r6, 0x40284504, &(0x7f0000000000)={0xfe, 0x1f, 0x0, 0xc0, "d57ba4b0cef17e817d96b58200bd40ed0000240ec7dc1d0000000000004f24b3"}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 4.91319725s ago: executing program 3 (id=2349): openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timerfd_create(0x8, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, 0x0, 0x1) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="13000000010203", 0x7}, {&(0x7f0000000140)="e82ce69ab868c5", 0x7}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="8510000004000000950080000000000018000000000000000000000000000002950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x200000000000014f, 0xfffffffffffffc9e, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x19, 0x10, 0x8, 0x2, 0x0}}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) ioctl$FE_SET_FRONTEND_TUNE_MODE(0xffffffffffffffff, 0x6f51, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r2) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r4, @ANYBLOB="170900000000ffdbdf25010000000800c521725d28192c1800ac1414aa060002000100000008000a00010000fee2057d6eb26f90000800"], 0x44}}, 0x4) 4.827957307s ago: executing program 0 (id=2350): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x35, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f0000000580)={'fscrypt:', @desc2}, &(0x7f00000005c0)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x29}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x52, 0x39, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566a945d7e924cc9136ff00112233445575778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000780)={'fscrypt:', @auto=[0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x62, 0x31, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x33, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) 4.727790169s ago: executing program 3 (id=2351): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x815, &(0x7f0000000180)={[{@data_err_ignore}, {@resgid}, {@abort}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@nobarrier}]}, 0x9, 0x624, &(0x7f0000001340)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x22008041, &(0x7f0000000200)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x20) sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) shutdown(r4, 0x1) splice(r4, 0x0, r3, 0x0, 0x406f413, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) 4.71966855s ago: executing program 0 (id=2352): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd28, 0x255fdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x4}]}, 0x1c}}, 0x0) r2 = syz_io_uring_complete(0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) bind$packet(r8, &(0x7f00000004c0)={0x11, 0x300, r6, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) write(r8, &(0x7f0000000500)="080211000001080211000000080045", 0xf) eventfd2(0x7, 0x1) sendmsg$NL80211_CMD_DEL_INTERFACE(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000040)=r3) 4.681692989s ago: executing program 4 (id=2353): setpriority(0x0, 0xffffffffffffffff, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getrlimit(0x7, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10888) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r1, &(0x7f0000001180)={0x2020}, 0x2020) 4.263870067s ago: executing program 4 (id=2354): mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/target/core/rd_mcp_0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ed) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='rd_pages=1024\n', 0xe) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target/core/rd_mcp_0/ramdisk0/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1\n', 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000540)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000fea000/0x7000)=nil, 0x0}, 0x68) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000480)='usbip-vudc.0', 0xc) write(r2, &(0x7f00000004c0)='\n', 0x1) 4.263439978s ago: executing program 2 (id=2355): mmap(&(0x7f00009c6000/0x4000)=nil, 0x4000, 0x2000007, 0x28012, 0xffffffffffffffff, 0x2000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWOBJ={0x18, 0x12, 0xa, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_DATA={0x4}}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) keyctl$join(0x1, &(0x7f0000000600)={'syz', 0x3}) socket$key(0xf, 0x3, 0x2) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x11) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f00000006c0)='.\x00', 0x40001a2) r4 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x0, 0x8000000200007, 0x282b, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x1000000000, 0x83, 0x4, 0x10000006, 0x6, 0x0, 0x0, 0x0, 0xee00, 0xee00, 0x8, 0x1}}, {0x0, 0xa}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000100)=0x4, 0x8112) 4.078309116s ago: executing program 4 (id=2356): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/make-it-fail\x00', 0x1, 0x0) pipe(&(0x7f0000000000)) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0xa0000, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp6(0xa, 0x3, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip6_mr_vif\x00') socket(0x10, 0x3, 0x10) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000400)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x7}) 3.214745289s ago: executing program 0 (id=2357): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x66a, &(0x7f0000000000)={0x0, 0x8dd3, 0x10000, 0x42, 0x235}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x20000023896) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xa4}}, 0x4) socket$nl_rdma(0x10, 0x3, 0x14) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r3, &(0x7f0000003380)={0x2020}, 0x2020) 3.091858275s ago: executing program 2 (id=2358): socket$inet6_udp(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0xa, 0x5, 0x0) pipe(&(0x7f00000045c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0f000000040000000400000016"], 0x50) socket$inet(0x2, 0x3, 0x7f) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_crypto(0x10, 0x3, 0x15) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="190000000400000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000240), &(0x7f0000000340)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r3, r1, 0x25, 0x2, @val=@tracing={0x0, 0x2e5b}}, 0x20) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[], 0x0) 1.991053709s ago: executing program 4 (id=2359): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x30, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x1c, 0x20, 0xf4db158ec847dc81, 0x70bd2a, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1b}}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x44004) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.989305209s ago: executing program 3 (id=2360): socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) socket$inet6(0xa, 0x3, 0x9d) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xd, 0x200cc, 0x6, 0x5}, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="fc0000000301010200000000000000000a000004dc0002800c00028005000100840000002c00018014000300fe80000000000000000000000000002f14000400000000000000000000000000000000011400018008000100ac1e010108000200ac1414aa0c00028005000100060000001400018008000100ffffffff08000200000000001400018008000100ac1414bb080002000a0101022c000180140003000000000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001008800000006000340000400000c00028005000100060000000c00028005000100010000000c00198008000200", @ANYRES16=r0], 0xfc}, 0x1, 0x0, 0x0, 0x4050}, 0x40080c0) 1.801951289s ago: executing program 3 (id=2361): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x0, 0x2882) r1 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x48f, &(0x7f00000000c0)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x100000000000000) 1.774233685s ago: executing program 0 (id=2362): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2c, 0x3, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) syz_open_dev$vbi(0x0, 0x3, 0x2) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) 1.575029937s ago: executing program 2 (id=2363): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x35, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f0000000580)={'fscrypt:', @desc2}, &(0x7f00000005c0)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x29}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x52, 0x39, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566a945d7e924cc9136ff00112233445575778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000780)={'fscrypt:', @auto=[0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x62, 0x31, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x33, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) 1.574331147s ago: executing program 3 (id=2364): setpriority(0x0, 0xffffffffffffffff, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getrlimit(0x7, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10888) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r1, &(0x7f0000001180)={0x2020}, 0x2020) 651.651092ms ago: executing program 4 (id=2365): poll(0x0, 0x0, 0x1d) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000)=0x7d8, 0x0}, 0x20) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000040000000200000001"], 0x0, 0x34}, 0x28) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r5}, 0x18) socket$inet6(0xa, 0x3, 0x88) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) 650.683603ms ago: executing program 0 (id=2375): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='base=0x20000000 size=0x20000 type=write-back', 0x2c) ioctl(r0, 0x40104d06, &(0x7f0000000a00)="000002000000000000000200") sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x4000000, 0x0, 0x0}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r5, 0x40104d06, &(0x7f0000000a00)="00000200000000000000020006") ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)=0x99) 474.86346ms ago: executing program 3 (id=2366): mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/target/core/rd_mcp_0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ed) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='rd_pages=1024\n', 0xe) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target/core/rd_mcp_0/ramdisk0/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1\n', 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000540)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000fea000/0x7000)=nil, 0x0}, 0x68) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000480)='usbip-vudc.0', 0xc) write(r2, &(0x7f00000004c0)='\n', 0x1) 467.042331ms ago: executing program 2 (id=2367): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000480)={[{@nogrpid}, {@barrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nombcache}, {@quota}, {@nojournal_checksum}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x200c01, 0x0) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x7, 0x8000000200007, 0x282b, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x1000000000, 0x83, 0xd616, 0x10000006, 0x6, 0x0, 0x0, 0x0, 0xee00, 0xee00, 0x8, 0x1}}, {0x0, 0xa}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000100)=0x4, 0x80000000) 0s ago: executing program 0 (id=2368): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='rd_pages=64\n', 0xc) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0/ramdisk0/enable\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='1\n', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/usb_gadget/naa.6001405c935d7912\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/nexus\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='naa.60014', 0x9) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/lun/lun_0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) kernel console output (not intermixed with test programs): .234047][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.245814][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.253519][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.262071][ T4188] device bridge_slave_0 entered promiscuous mode [ 66.271827][ T4187] team0: Port device team_slave_0 added [ 66.277791][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.284924][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.293400][ T4188] device bridge_slave_1 entered promiscuous mode [ 66.303262][ T4200] team0: Port device team_slave_0 added [ 66.309692][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.316939][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.343198][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.355056][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.362274][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.388538][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.409021][ T4187] team0: Port device team_slave_1 added [ 66.422042][ T4200] team0: Port device team_slave_1 added [ 66.450915][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.463413][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.510325][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.517320][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.549538][ T4200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.567934][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.575436][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.601705][ T4200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.613709][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.621022][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.647056][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.689512][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.696523][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.722551][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.736456][ T4188] team0: Port device team_slave_0 added [ 66.747536][ T4186] device hsr_slave_0 entered promiscuous mode [ 66.755307][ T4186] device hsr_slave_1 entered promiscuous mode [ 66.766144][ T4193] device hsr_slave_0 entered promiscuous mode [ 66.773348][ T4193] device hsr_slave_1 entered promiscuous mode [ 66.780227][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.788053][ T4193] Cannot create hsr debugfs directory [ 66.807176][ T4188] team0: Port device team_slave_1 added [ 66.824523][ T4200] device hsr_slave_0 entered promiscuous mode [ 66.831694][ T4200] device hsr_slave_1 entered promiscuous mode [ 66.838332][ T4200] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.846094][ T4200] Cannot create hsr debugfs directory [ 66.881993][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.888982][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.915264][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.958811][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.966205][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.992936][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.014587][ T4187] device hsr_slave_0 entered promiscuous mode [ 67.021749][ T4187] device hsr_slave_1 entered promiscuous mode [ 67.028841][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.036668][ T4187] Cannot create hsr debugfs directory [ 67.100943][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 67.107602][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 67.110118][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 67.139972][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 67.146227][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 67.177627][ T4188] device hsr_slave_0 entered promiscuous mode [ 67.184613][ T4188] device hsr_slave_1 entered promiscuous mode [ 67.192153][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.199939][ T4188] Cannot create hsr debugfs directory [ 67.420420][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.431320][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.448417][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.459236][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.510928][ T4200] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.521646][ T4200] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.536487][ T4200] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.546182][ T4200] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.613424][ T4193] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.623211][ T4193] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.642716][ T4193] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.671264][ T4193] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.695719][ T4187] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.709389][ T4187] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.722768][ T4187] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.750313][ T4187] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.807090][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.822164][ T4200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.847251][ T4188] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.856857][ T4188] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.868757][ T4188] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.879317][ T4188] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.910895][ T4200] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.921035][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.929416][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.942479][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.951167][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.958914][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.975048][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.984653][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.994918][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.002288][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.012545][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.043033][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.052539][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.062257][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.069350][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.078120][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.088757][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.097541][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.104756][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.114312][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.123138][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.132122][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.139226][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.147198][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.156331][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.165703][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.179976][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.189707][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.225330][ T4200] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.236684][ T4200] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.250637][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.260720][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.270310][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.278932][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.289070][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.297927][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.307927][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.316874][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.325667][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.335420][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.344103][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.356135][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.364779][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.373172][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.396790][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.408893][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.423953][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.456496][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.481916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.497264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.505945][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.515447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.523879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.532736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.554901][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.566789][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.582101][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.595797][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.602953][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.618071][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.626758][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.643680][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.662154][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.677766][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.694010][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.703118][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.710244][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.718132][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.730007][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.738834][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.747942][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.755074][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.763876][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.777745][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.826012][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.839465][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.848561][ T1278] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.855713][ T1278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.866247][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.875991][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.884383][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.892277][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.901842][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.911851][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.921063][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.929693][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.938440][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.947910][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.957348][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.966616][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.975573][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.984357][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.001138][ T4200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.017137][ T4187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.030847][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.048605][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.063852][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.076300][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.087073][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.102081][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.120620][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.129331][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.139120][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.148137][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.157317][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.171791][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.186056][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.194286][ T4230] Bluetooth: hci1: command 0x041b tx timeout [ 69.206741][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.210379][ T4230] Bluetooth: hci0: command 0x041b tx timeout [ 69.240626][ T4230] Bluetooth: hci3: command 0x041b tx timeout [ 69.246764][ T4230] Bluetooth: hci2: command 0x041b tx timeout [ 69.262302][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.270555][ T4230] Bluetooth: hci4: command 0x041b tx timeout [ 69.288038][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.296659][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.325113][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.355882][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.379350][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.389346][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.396655][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.411872][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.466487][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.477846][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.494721][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.501884][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.515451][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.529057][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.542885][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.553623][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.563834][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.617074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.628980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.648189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.657375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.668156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.677015][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.686361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.695255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.722845][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.747066][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.766330][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.781214][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.793617][ T4186] device veth0_vlan entered promiscuous mode [ 69.827565][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.836187][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.848283][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.857673][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.892937][ T4186] device veth1_vlan entered promiscuous mode [ 69.917337][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.926935][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.937916][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.947502][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.956376][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.964901][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.974344][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.984796][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.014460][ T4200] device veth0_vlan entered promiscuous mode [ 70.036380][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.045807][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.055454][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.065423][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.073780][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.089282][ T4187] device veth0_vlan entered promiscuous mode [ 70.111755][ T4200] device veth1_vlan entered promiscuous mode [ 70.118463][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.127870][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.136876][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.146125][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.155558][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.164815][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.173140][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.189391][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.204584][ T4187] device veth1_vlan entered promiscuous mode [ 70.225230][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.233824][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.242966][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.251362][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.264000][ T4186] device veth0_macvtap entered promiscuous mode [ 70.293182][ T4200] device veth0_macvtap entered promiscuous mode [ 70.300878][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.309090][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.323651][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.333156][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.342984][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.351951][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.360194][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.371006][ T4186] device veth1_macvtap entered promiscuous mode [ 70.389735][ T4200] device veth1_macvtap entered promiscuous mode [ 70.400880][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.409097][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.418094][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.427654][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.447803][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.462047][ T4193] device veth0_vlan entered promiscuous mode [ 70.483749][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.492229][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.500849][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.509718][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.519455][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.528457][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.537964][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.547418][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.564127][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.574247][ T4187] device veth0_macvtap entered promiscuous mode [ 70.599687][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.612626][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.625755][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.633556][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.642275][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.652424][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.663341][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.672234][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.686051][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.695427][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.704481][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.713740][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.726700][ T4193] device veth1_vlan entered promiscuous mode [ 70.736304][ T4187] device veth1_macvtap entered promiscuous mode [ 70.748061][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.756654][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.768148][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.780876][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.793894][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.827061][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.835391][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.843767][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.857024][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.877681][ T4200] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.888157][ T4200] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.897731][ T4200] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.906763][ T4200] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.941173][ T4188] device veth0_vlan entered promiscuous mode [ 70.997812][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.008513][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.020210][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.034056][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.045628][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.058670][ T4188] device veth1_vlan entered promiscuous mode [ 71.070518][ T4193] device veth0_macvtap entered promiscuous mode [ 71.078535][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.088095][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.097035][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.106749][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.115978][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.163844][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.174710][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.188615][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.197733][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.206311][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.219257][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.230177][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.241739][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.252597][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.263009][ T4227] Bluetooth: hci2: command 0x040f tx timeout [ 71.269193][ T4227] Bluetooth: hci3: command 0x040f tx timeout [ 71.275878][ T4227] Bluetooth: hci0: command 0x040f tx timeout [ 71.281402][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.283317][ T4227] Bluetooth: hci1: command 0x040f tx timeout [ 71.290657][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.304979][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.326888][ T4187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.337974][ T4187] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.348879][ T4227] Bluetooth: hci4: command 0x040f tx timeout [ 71.349683][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.361166][ T4187] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.361361][ T4187] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.381832][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.392649][ T4193] device veth1_macvtap entered promiscuous mode [ 71.436558][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.445558][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.455099][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.480163][ T4245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.488117][ T4245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.508680][ T4188] device veth0_macvtap entered promiscuous mode [ 71.535927][ T1278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.545211][ T1278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.552740][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.562032][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.570469][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.593694][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.603404][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.619835][ T4188] device veth1_macvtap entered promiscuous mode [ 71.629042][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.648189][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.658276][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.670334][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.680965][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.691592][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.704601][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.716188][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.728403][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.738697][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.758689][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.787488][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.801864][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.812148][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.828839][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.838748][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.849223][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.862418][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.892038][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.904834][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.916310][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.931562][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.941962][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.953221][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.966448][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.979411][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.002632][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.017400][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.027022][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.044946][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.057778][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.077047][ T4193] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.087060][ T4193] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.096738][ T4193] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.106184][ T4193] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.148694][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.160414][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.180351][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.193645][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.213679][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.227929][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.244030][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.257117][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.273462][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.287423][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.305027][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.327079][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.352574][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.366649][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.391831][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.473055][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.483562][ T520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.495522][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.507688][ T520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.574745][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.659060][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.888561][ T4274] tipc: Started in network mode [ 72.936984][ T4274] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 73.004407][ T4274] tipc: Enabled bearer , priority 10 [ 73.126237][ T4278] FAULT_INJECTION: forcing a failure. [ 73.126237][ T4278] name failslab, interval 1, probability 0, space 0, times 1 [ 73.146980][ T4278] CPU: 0 PID: 4278 Comm: syz.1.8 Not tainted syzkaller #0 [ 73.154167][ T4278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 73.164269][ T4278] Call Trace: [ 73.167573][ T4278] [ 73.170529][ T4278] dump_stack_lvl+0x188/0x250 [ 73.175265][ T4278] ? show_regs_print_info+0x20/0x20 [ 73.180493][ T4278] ? load_image+0x410/0x410 [ 73.185029][ T4278] ? __might_sleep+0xf0/0xf0 [ 73.189655][ T4278] ? __lock_acquire+0x7b50/0x7b50 [ 73.194726][ T4278] should_fail+0x383/0x4b0 [ 73.199177][ T4278] should_failslab+0x5/0x20 [ 73.203727][ T4278] slab_pre_alloc_hook+0x51/0xc0 [ 73.208698][ T4278] ? __d_alloc+0x27/0x6d0 [ 73.213061][ T4278] kmem_cache_alloc+0x3d/0x280 [ 73.217871][ T4278] __d_alloc+0x27/0x6d0 [ 73.222060][ T4278] ? d_alloc_pseudo+0xe/0x70 [ 73.226692][ T4278] d_alloc_pseudo+0x19/0x70 [ 73.231231][ T4278] alloc_file_pseudo+0xe0/0x200 [ 73.236113][ T4278] ? alloc_empty_file_noaccount+0x80/0x80 [ 73.241864][ T4278] ? _raw_spin_unlock+0x24/0x40 [ 73.246760][ T4278] ? alloc_fd+0x59e/0x650 [ 73.251129][ T4278] __anon_inode_getfd+0x26b/0x3d0 [ 73.256190][ T4278] ? anon_inode_getfd+0x40/0x40 [ 73.261085][ T4278] __se_sys_fsopen+0x294/0x320 [ 73.265888][ T4278] do_syscall_64+0x4c/0xa0 [ 73.270355][ T4278] ? clear_bhb_loop+0x30/0x80 [ 73.275064][ T4278] ? clear_bhb_loop+0x30/0x80 [ 73.279783][ T4278] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 73.285726][ T4278] RIP: 0033:0x7f3d0006b159 [ 73.290174][ T4278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.309899][ T4278] RSP: 002b:00007f3cfe2c3028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 73.318354][ T4278] RAX: ffffffffffffffda RBX: 00007f3d002f2fa0 RCX: 00007f3d0006b159 [ 73.326363][ T4278] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000040 [ 73.334387][ T4278] RBP: 00007f3d0010206b R08: 0000000000000000 R09: 0000000000000000 [ 73.342516][ T4278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.350547][ T4278] R13: 00007f3d002f3038 R14: 00007f3d002f2fa0 R15: 00007fff869e0e08 [ 73.358572][ T4278] [ 73.360464][ T4230] Bluetooth: hci1: command 0x0419 tx timeout [ 73.367848][ T4230] Bluetooth: hci0: command 0x0419 tx timeout [ 73.374613][ T4230] Bluetooth: hci3: command 0x0419 tx timeout [ 73.380894][ T4230] Bluetooth: hci2: command 0x0419 tx timeout [ 73.458933][ T4227] Bluetooth: hci4: command 0x0419 tx timeout [ 73.558987][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.831378][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.579955][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.684852][ T1325] tipc: Node number set to 4269801488 [ 74.733339][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.792757][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.011722][ T4273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.039818][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 75.059809][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 75.069806][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 75.079807][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 75.089808][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 75.099807][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 75.119819][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 75.129814][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 75.139808][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 75.149808][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 75.740773][ T1111] cfg80211: failed to load regulatory.db [ 75.756414][ T4273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.846419][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.994468][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.956022][ T4245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.990058][ T4245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.998980][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.128272][ T4321] loop0: detected capacity change from 0 to 512 [ 77.141620][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 77.154992][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 77.173662][ T4321] ======================================================= [ 77.173662][ T4321] WARNING: The mand mount option has been deprecated and [ 77.173662][ T4321] and is ignored by this kernel. Remove the mand [ 77.173662][ T4321] option from the mount to silence this warning. [ 77.173662][ T4321] ======================================================= [ 77.282673][ T4319] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 77.509340][ T4321] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 78.179160][ T4319] syz.2.16 (4319) used greatest stack depth: 17648 bytes left [ 78.214673][ T4334] device lo entered promiscuous mode [ 78.377345][ T4334] device tunl0 entered promiscuous mode [ 78.414054][ T4334] device gre0 entered promiscuous mode [ 79.155285][ T4334] device gretap0 entered promiscuous mode [ 79.195922][ T4334] device erspan0 entered promiscuous mode [ 79.205274][ T4356] input: syz0 as /devices/virtual/input/input5 [ 79.265910][ T4334] device ip_vti0 entered promiscuous mode [ 79.297382][ T4334] device ip6_vti0 entered promiscuous mode [ 79.349596][ T4334] device sit0 entered promiscuous mode [ 79.372535][ T4334] device ip6tnl0 entered promiscuous mode [ 79.533714][ T4334] device ip6gre0 entered promiscuous mode [ 79.594349][ T4334] device syz_tun entered promiscuous mode [ 79.613571][ T4334] device ip6gretap0 entered promiscuous mode [ 79.629636][ T4334] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.637959][ T4334] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.653273][ T4334] device bridge0 entered promiscuous mode [ 79.714925][ T4334] device vcan0 entered promiscuous mode [ 79.741650][ T4334] device bond0 entered promiscuous mode [ 79.747517][ T4334] device bond_slave_0 entered promiscuous mode [ 79.762391][ T4334] device bond_slave_1 entered promiscuous mode [ 79.817601][ T4334] device team0 entered promiscuous mode [ 79.829875][ T4334] device team_slave_0 entered promiscuous mode [ 79.836341][ T4334] device team_slave_1 entered promiscuous mode [ 79.884341][ T4334] device dummy0 entered promiscuous mode [ 79.923346][ T4334] device nlmon0 entered promiscuous mode [ 79.936375][ T4334] device caif0 entered promiscuous mode [ 79.954938][ T4334] device batadv0 entered promiscuous mode [ 80.125136][ T4334] device vxcan0 entered promiscuous mode [ 80.138341][ T4334] device vxcan1 entered promiscuous mode [ 80.154187][ T4334] device veth0 entered promiscuous mode [ 81.027712][ T4334] device veth1 entered promiscuous mode [ 81.089102][ T4334] device wg0 entered promiscuous mode [ 81.124128][ T4334] device wg1 entered promiscuous mode [ 81.166861][ T4334] device wg2 entered promiscuous mode [ 81.183563][ T4334] device veth0_to_bridge entered promiscuous mode [ 81.207401][ T4334] device veth1_to_bridge entered promiscuous mode [ 81.253585][ T4334] device veth0_to_bond entered promiscuous mode [ 81.268195][ T4334] device veth1_to_bond entered promiscuous mode [ 81.400561][ T4334] device veth0_to_team entered promiscuous mode [ 81.457111][ T4334] device veth1_to_team entered promiscuous mode [ 81.503321][ T4334] device veth0_to_batadv entered promiscuous mode [ 81.514189][ T4334] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.547831][ T4334] device batadv_slave_0 entered promiscuous mode [ 81.582315][ T4334] device veth1_to_batadv entered promiscuous mode [ 81.622791][ T4334] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.644242][ T4334] device batadv_slave_1 entered promiscuous mode [ 81.697402][ T4334] device xfrm0 entered promiscuous mode [ 81.727434][ T4334] device veth0_to_hsr entered promiscuous mode [ 81.772533][ T4334] device veth1_to_hsr entered promiscuous mode [ 81.820428][ T4334] device hsr0 entered promiscuous mode [ 81.849139][ T4334] device veth1_virt_wifi entered promiscuous mode [ 81.878019][ T4334] device veth0_virt_wifi entered promiscuous mode [ 81.887017][ T4334] device virt_wifi0 entered promiscuous mode [ 81.964263][ T4334] device vlan0 entered promiscuous mode [ 81.970245][ T4334] device vlan1 entered promiscuous mode [ 81.977573][ T4334] device macvlan0 entered promiscuous mode [ 82.003149][ T4334] device macvlan1 entered promiscuous mode [ 82.014397][ T4334] device ipvlan0 entered promiscuous mode [ 82.030041][ T4334] device ipvlan1 entered promiscuous mode [ 82.128679][ T4334] device macvtap0 entered promiscuous mode [ 82.159363][ T4334] device macsec0 entered promiscuous mode [ 82.190090][ T4334] device geneve0 entered promiscuous mode [ 82.218626][ T4334] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.233894][ T4334] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.242924][ T4334] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.252549][ T4334] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.262428][ T4334] device geneve1 entered promiscuous mode [ 82.289475][ T4334] device netdevsim0 entered promiscuous mode [ 82.314443][ T4334] device netdevsim1 entered promiscuous mode [ 82.342845][ T4334] device netdevsim2 entered promiscuous mode [ 82.365161][ T4334] device netdevsim3 entered promiscuous mode [ 82.373266][ T4334] device wlan0 entered promiscuous mode [ 82.396734][ T4334] device wlan1 entered promiscuous mode [ 82.463468][ T4394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.28'. [ 82.551734][ T4398] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 82.643885][ T4398] netlink: 32 bytes leftover after parsing attributes in process `syz.4.30'. [ 82.679686][ T4398] netlink: 32 bytes leftover after parsing attributes in process `syz.4.30'. [ 84.699014][ T4438] loop0: detected capacity change from 0 to 256 [ 87.463289][ T4463] netlink: 'syz.4.44': attribute type 1 has an invalid length. [ 87.508706][ T4462] netlink: 1319 bytes leftover after parsing attributes in process `syz.1.47'. [ 90.129081][ T4478] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 90.165972][ T4483] loop2: detected capacity change from 0 to 2048 [ 91.002484][ T4483] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 91.225936][ T4497] loop3: detected capacity change from 0 to 512 [ 91.274552][ T4499] loop4: detected capacity change from 0 to 512 [ 91.450775][ T4497] EXT4-fs error (device loop3): ext4_quota_enable:6444: comm syz.3.56: inode #524288: comm syz.3.56: iget: illegal inode # [ 91.510098][ T4497] EXT4-fs error (device loop3): ext4_quota_enable:6447: comm syz.3.56: Bad quota inode: 524288, type: 2 [ 91.589987][ T1108] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 91.850708][ T4497] EXT4-fs warning (device loop3): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-117, ino=524288). Please run e2fsck to fix. [ 92.306547][ T4497] EXT4-fs (loop3): mount failed [ 92.629990][ T1108] usb 3-1: not running at top speed; connect to a high speed hub [ 92.734435][ T1108] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.749451][ T4518] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 92.891092][ T1108] usb 3-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 92.910458][ T1108] usb 3-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 92.920558][ T4519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.56'. [ 92.940727][ T1108] usb 3-1: Product: syz [ 92.952828][ T1108] usb 3-1: Manufacturer: syz [ 92.983942][ T4497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.56'. [ 93.000684][ T4360] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 93.043077][ T1108] usb 3-1: Found UVC 1.00 device syz (225a:e1d4) [ 93.049714][ T1108] usb 3-1: No streaming interface found for terminal 2. [ 93.212381][ T1108] usb 3-1: USB disconnect, device number 2 [ 93.285070][ T4522] IPv6: NLM_F_CREATE should be specified when creating new route [ 93.359381][ T4522] IPVS: lc: FWM 3 0x00000003 - no destination available [ 93.430074][ T4360] usb 2-1: config 1 has an invalid interface number: 128 but max is 1 [ 93.449965][ T4360] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.483440][ T4360] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 93.506353][ T4360] usb 2-1: config 1 has no interface number 0 [ 93.532886][ T4360] usb 2-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 93.740726][ T4360] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 93.753949][ T4360] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.772623][ T4360] usb 2-1: Product: syz [ 93.782715][ T4360] usb 2-1: Manufacturer: syz [ 93.792970][ T4360] usb 2-1: SerialNumber: syz [ 93.891438][ T4360] cdc_wdm 2-1:1.128: skipping garbage [ 93.896901][ T4360] cdc_wdm: probe of 2-1:1.128 failed with error -22 [ 93.986071][ T4533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.66'. [ 94.077501][ T4537] netlink: 11834 bytes leftover after parsing attributes in process `syz.0.67'. [ 94.631317][ T7] usb 2-1: USB disconnect, device number 2 [ 95.093639][ T4539] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.237044][ T4539] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.329387][ T4539] bond0 (unregistering): Released all slaves [ 95.366163][ T4553] netlink: 'syz.1.70': attribute type 11 has an invalid length. [ 95.379731][ T4540] netlink: 'syz.0.67': attribute type 16 has an invalid length. [ 95.399428][ T4540] netlink: 'syz.0.67': attribute type 21 has an invalid length. [ 95.431123][ T4540] netlink: 'syz.0.67': attribute type 25 has an invalid length. [ 95.857200][ T4540] netlink: 'syz.0.67': attribute type 27 has an invalid length. [ 96.028650][ T4540] netlink: 'syz.0.67': attribute type 28 has an invalid length. [ 96.057031][ T4540] netlink: 'syz.0.67': attribute type 29 has an invalid length. [ 96.095722][ T4540] netlink: 'syz.0.67': attribute type 30 has an invalid length. [ 96.259175][ T4560] loop2: detected capacity change from 0 to 2048 [ 96.311260][ T4560] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 96.371563][ T4566] loop3: detected capacity change from 0 to 1024 [ 96.381899][ T4567] syzkaller0: create flow: hash 289445388 index 1 [ 96.396723][ T4560] netlink: 'syz.2.74': attribute type 16 has an invalid length. [ 96.408303][ T4564] loop0: detected capacity change from 0 to 4096 [ 96.415051][ T4560] netlink: 'syz.2.74': attribute type 17 has an invalid length. [ 96.423183][ T4560] netlink: 'syz.2.74': attribute type 27 has an invalid length. [ 96.450499][ T21] syzkaller0: tun_net_xmit 76 [ 96.456105][ T21] syzkaller0: tun_net_xmit 48 [ 96.486397][ T4565] syzkaller0: delete flow: hash 289445388 index 1 [ 96.568271][ T4568] loop4: detected capacity change from 0 to 128 [ 96.576981][ T4566] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 96.614830][ T4566] EXT4-fs (loop3): barriers disabled [ 96.643091][ T4566] JBD2: no valid journal superblock found [ 96.676550][ T4566] EXT4-fs (loop3): error loading journal [ 98.926166][ T4587] tipc: Failed to remove unknown binding: 66,0,0/0:3083387948/3083387950 [ 98.972133][ T4587] tipc: Failed to remove unknown binding: 66,0,0/0:3083387948/3083387949 [ 99.740547][ T4587] tipc: Failed to remove unknown binding: 66,0,0/0:3083387948/3083387950 [ 99.749323][ T4587] tipc: Failed to remove unknown binding: 66,0,0/0:3083387948/3083387949 [ 100.052681][ T4593] loop1: detected capacity change from 0 to 512 [ 100.590241][ T4593] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 100.808952][ T4607] loop0: detected capacity change from 0 to 128 [ 101.740844][ T4607] attempt to access beyond end of device [ 101.740844][ T4607] loop0: rw=2049, want=497, limit=128 [ 103.728701][ T4622] Zero length message leads to an empty skb [ 103.747029][ T4636] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 104.423327][ T4639] loop0: detected capacity change from 0 to 1024 [ 104.493785][ T4639] EXT4-fs (loop0): Encoding requested by superblock is unknown [ 105.129891][ T4651] netlink: 'syz.0.100': attribute type 11 has an invalid length. [ 105.949583][ T4658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.102'. [ 107.521579][ T4672] sched: RT throttling activated [ 108.451687][ T26] audit: type=1326 audit(1790872518.535:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4661 comm="syz.0.104" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89212ad159 code=0x7ffc0000 [ 108.509307][ T26] audit: type=1326 audit(1790872518.535:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4661 comm="syz.0.104" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89212ad159 code=0x7ffc0000 [ 108.544572][ T26] audit: type=1326 audit(1790872518.555:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4661 comm="syz.0.104" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f89212ad159 code=0x7ffc0000 [ 109.229297][ T4699] loop2: detected capacity change from 0 to 64 [ 109.289887][ T4261] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 111.661959][ T4261] usb 1-1: device descriptor read/all, error -71 [ 112.400090][ T4727] device syzkaller0 entered promiscuous mode [ 112.931036][ T4749] FAULT_INJECTION: forcing a failure. [ 112.931036][ T4749] name failslab, interval 1, probability 0, space 0, times 0 [ 113.002091][ T4749] CPU: 1 PID: 4749 Comm: syz.3.126 Not tainted syzkaller #0 [ 113.009452][ T4749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 113.019548][ T4749] Call Trace: [ 113.022863][ T4749] [ 113.025824][ T4749] dump_stack_lvl+0x188/0x250 [ 113.030552][ T4749] ? show_regs_print_info+0x20/0x20 [ 113.035792][ T4749] ? load_image+0x410/0x410 [ 113.040424][ T4749] ? __might_sleep+0xf0/0xf0 [ 113.045061][ T4749] ? __lock_acquire+0x7b50/0x7b50 [ 113.050147][ T4749] should_fail+0x383/0x4b0 [ 113.054617][ T4749] should_failslab+0x5/0x20 [ 113.059161][ T4749] slab_pre_alloc_hook+0x51/0xc0 [ 113.064229][ T4749] __kmalloc+0x6b/0x340 [ 113.068416][ T4749] ? security_sk_alloc+0x47/0x130 [ 113.073490][ T4749] security_sk_alloc+0x47/0x130 [ 113.078389][ T4749] sk_prot_alloc+0x101/0x210 [ 113.083015][ T4749] ? sk_alloc+0x1d/0x310 [ 113.087294][ T4749] sk_alloc+0x2f/0x310 [ 113.091401][ T4749] af_alg_accept+0x9f/0x4f0 [ 113.095939][ T4749] ? bpf_lsm_socket_accept+0x5/0x10 [ 113.101182][ T4749] ? alg_bind+0x550/0x550 [ 113.105553][ T4749] do_accept+0x50b/0x6f0 [ 113.109828][ T4749] ? alloc_fd+0x59e/0x650 [ 113.114216][ T4749] ? __ia32_sys_listen+0x60/0x60 [ 113.119198][ T4749] ? alloc_fd+0x59e/0x650 [ 113.123570][ T4749] __sys_accept4+0x103/0x170 [ 113.128199][ T4749] __x64_sys_accept4+0x96/0xb0 [ 113.133004][ T4749] do_syscall_64+0x4c/0xa0 [ 113.137456][ T4749] ? clear_bhb_loop+0x30/0x80 [ 113.142172][ T4749] ? clear_bhb_loop+0x30/0x80 [ 113.146887][ T4749] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 113.152819][ T4749] RIP: 0033:0x7f484f6d5159 [ 113.157271][ T4749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.176920][ T4749] RSP: 002b:00007f484d92d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 113.185384][ T4749] RAX: ffffffffffffffda RBX: 00007f484f95cfa0 RCX: 00007f484f6d5159 [ 113.193407][ T4749] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 113.201544][ T4749] RBP: 00007f484f76c06b R08: 0000000000000000 R09: 0000000000000000 [ 113.209719][ T4749] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000000 [ 113.217743][ T4749] R13: 00007f484f95d038 R14: 00007f484f95cfa0 R15: 00007fffe5da5c28 [ 113.225795][ T4749] [ 114.787044][ T4768] loop2: detected capacity change from 0 to 8 [ 114.835625][ T4768] unable to read fragment index table [ 115.279350][ T4773] loop2: detected capacity change from 0 to 1024 [ 115.401648][ T4773] EXT4-fs (loop2): Ignoring removed bh option [ 115.976308][ T4773] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,grpquota,bh,init_itable,. Quota mode: writeback. [ 116.640356][ T4797] netlink: 156 bytes leftover after parsing attributes in process `syz.3.140'. [ 118.073193][ T4813] netlink: 112 bytes leftover after parsing attributes in process `syz.4.144'. [ 118.139707][ T4816] process 'syz.1.145' launched '/dev/fd/3' with NULL argv: empty string added [ 118.289226][ T4793] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.296790][ T4793] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.654213][ T4828] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 119.673298][ T4828] binder: 4824:4828 ioctl c018620c 200000000080 returned -22 [ 119.881217][ T4793] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.939097][ T4793] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.419332][ T4793] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.428504][ T4793] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.437467][ T4793] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.447435][ T4793] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.890357][ T4837] loop3: detected capacity change from 0 to 256 [ 123.524698][ T4844] 0x000000000006-0x000000020000 : "" [ 123.670520][ T4837] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 123.682920][ T4837] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 124.341480][ T4844] ftl_cs: FTL header corrupt! [ 124.370641][ T4837] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 125.849877][ T26] audit: type=1326 audit(1790872535.925:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4867 comm="syz.4.161" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fca931a1159 code=0x0 [ 126.249910][ T4232] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 128.046646][ T4882] device syzkaller0 entered promiscuous mode [ 128.315838][ T4889] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 129.598021][ T4902] loop1: detected capacity change from 0 to 256 [ 129.681444][ T4902] exfat: Bad value for 'dmask' [ 129.847009][ T4899] loop1: detected capacity change from 0 to 2048 [ 129.887160][ T4853] loop1: p2 < > p3 < p5 > p4 [ 129.902378][ T4853] loop1: partition table partially beyond EOD, truncated [ 129.933044][ T4853] loop1: p2 start 4278190080 is beyond EOD, truncated [ 129.977792][ T4853] loop1: p4 size 8192 extends beyond EOD, truncated [ 130.012858][ T4853] loop1: p5 size 8192 extends beyond EOD, truncated [ 130.028692][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 130.065575][ T4899] loop1: p2 < > p3 < p5 > p4 [ 130.070774][ T4899] loop1: partition table partially beyond EOD, truncated [ 130.078001][ T4899] loop1: p2 start 4278190080 is beyond EOD, truncated [ 130.085845][ T4899] loop1: p4 size 8192 extends beyond EOD, truncated [ 130.094278][ T4899] loop1: p5 size 8192 extends beyond EOD, truncated [ 130.154405][ T4904] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 130.419400][ T4845] udevd[4845]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 130.435791][ T4849] udevd[4849]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 130.479492][ T4853] udevd[4853]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 130.676990][ T4849] udevd[4849]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 130.677850][ T4845] udevd[4845]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 130.712657][ T4853] udevd[4853]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 133.150242][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.156602][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.858083][ T4969] loop3: detected capacity change from 0 to 1024 [ 135.069666][ T4969] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 135.790644][ T4969] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2002c018, mo2=0102] [ 135.809231][ T4969] System zones: 0-1, 3-12 [ 135.869674][ T4969] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,abort,resuid=0x0000000000000000,user_xattr,nodelalloc,max_dir_size_kb=0x00000000000007b1,debug,noinit_itable,nomblk_io_submit,nodelalloc,inode_readahead_blks=0x0000000000040000,,errors=continue. Quota mode: none. [ 135.952480][ T4984] using random self ethernet address [ 135.958175][ T4984] using random host ethernet address [ 136.028548][ T4984] using random self ethernet address [ 136.040256][ T4984] using random host ethernet address [ 136.137873][ T4987] loop0: detected capacity change from 0 to 512 [ 136.197401][ T4987] EXT4-fs (loop0): bad s_min_extra_isize: 544 [ 137.185267][ T26] audit: type=1800 audit(1790872547.265:6): pid=4996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.197" name="no_out_endpoint" dev="configfs" ino=34767 res=0 errno=0 [ 137.260658][ T26] audit: type=1800 audit(1790872547.295:7): pid=4996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.197" name="subclass" dev="configfs" ino=34770 res=0 errno=0 [ 137.359816][ T26] audit: type=1800 audit(1790872547.295:8): pid=4996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.197" name="protocol" dev="configfs" ino=34771 res=0 errno=0 [ 137.415267][ T5002] loop3: detected capacity change from 0 to 256 [ 138.302692][ T26] audit: type=1326 audit(1790872548.385:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5005 comm="syz.2.201" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6df0e5159 code=0x7ffc0000 [ 138.343238][ T5002] exFAT-fs (loop3): failed to read boot sector [ 138.349559][ T5002] exFAT-fs (loop3): failed to recognize exfat type [ 139.145177][ T26] audit: type=1326 audit(1790872548.425:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5005 comm="syz.2.201" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6df0e5159 code=0x7ffc0000 [ 139.169544][ T26] audit: type=1326 audit(1790872548.425:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5005 comm="syz.2.201" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6df0e5159 code=0x7ffc0000 [ 139.234655][ T26] audit: type=1326 audit(1790872548.425:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5005 comm="syz.2.201" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6df0e5159 code=0x7ffc0000 [ 139.344917][ T26] audit: type=1326 audit(1790872548.445:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5005 comm="syz.2.201" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc6df0e5159 code=0x7ffc0000 [ 139.408481][ T26] audit: type=1326 audit(1790872548.445:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5005 comm="syz.2.201" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6df0e5159 code=0x7ffc0000 [ 139.449847][ T26] audit: type=1326 audit(1790872548.445:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5005 comm="syz.2.201" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6df0e5159 code=0x7ffc0000 [ 139.478180][ T5017] device bond_slave_0 entered promiscuous mode [ 139.484800][ T5017] device bond_slave_1 entered promiscuous mode [ 139.520643][ T5017] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 139.573631][ T5017] bond1: (slave macvlan2): making interface the new active one [ 139.632484][ T5017] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 139.703558][ T5019] netlink: 14 bytes leftover after parsing attributes in process `syz.4.203'. [ 139.775619][ T5019] device bond_slave_0 left promiscuous mode [ 139.795357][ T5019] device bond_slave_1 left promiscuous mode [ 139.968513][ T5019] bond1: (slave macvlan2): Releasing active interface [ 140.011805][ T5019] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.046772][ T5019] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.051630][ T5025] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 140.098828][ T5019] bond0 (unregistering): Released all slaves [ 140.105643][ T5025] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 141.521992][ T5043] loop0: detected capacity change from 0 to 2048 [ 141.575819][ T5044] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 142.330343][ T5043] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 142.370412][ T5043] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 142.387410][ T5043] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 144.716902][ T5071] capability: warning: `syz.1.216' uses deprecated v2 capabilities in a way that may be insecure [ 144.880039][ T5067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.216'. [ 144.979936][ T5067] netlink: 12 bytes leftover after parsing attributes in process `syz.1.216'. [ 145.111328][ T5067] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.120738][ T5067] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.129902][ T5067] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.138641][ T5067] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.227115][ T5069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.216'. [ 145.250470][ T5069] netlink: 12 bytes leftover after parsing attributes in process `syz.1.216'. [ 146.206036][ T5093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.492221][ T4229] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 146.682938][ T4229] cp2112 0003:10C4:EA90.0001: error requesting version [ 146.724848][ T4229] cp2112: probe of 0003:10C4:EA90.0001 failed with error -5 [ 147.082254][ T5111] fido_id[5111]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 147.428951][ T5093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.490254][ T5093] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 147.585012][ T5122] loop3: detected capacity change from 0 to 256 [ 147.639311][ T5122] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 148.304291][ T5122] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 148.679993][ T5134] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 148.691998][ T5139] loop2: detected capacity change from 0 to 1024 [ 148.734898][ T5134] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 148.967531][ T5147] loop3: detected capacity change from 0 to 1024 [ 148.972799][ T5142] device syzkaller0 entered promiscuous mode [ 148.997907][ T5139] hfsplus: request for non-existent node 33423360 in B*Tree [ 149.041584][ T5151] loop1: detected capacity change from 0 to 8 [ 149.050183][ T5139] hfsplus: request for non-existent node 33423360 in B*Tree [ 149.107099][ T5147] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 149.115771][ T5155] hfsplus: request for non-existent node 33423360 in B*Tree [ 149.153881][ T5155] hfsplus: request for non-existent node 33423360 in B*Tree [ 149.251081][ T5147] EXT4-fs (loop3): orphan cleanup on readonly fs [ 149.284289][ T5139] hfsplus: request for non-existent node 33423360 in B*Tree [ 149.293720][ T5147] __quota_error: 65 callbacks suppressed [ 149.293737][ T5147] Quota error (device loop3): v2_read_file_info: Can't read info structure [ 149.308182][ T5139] hfsplus: request for non-existent node 33423360 in B*Tree [ 149.316051][ T5147] EXT4-fs warning (device loop3): ext4_enable_quotas:6488: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 149.316111][ T5147] EXT4-fs (loop3): Cannot turn on quotas: error -5 [ 149.357847][ T5147] EXT4-fs (loop3): 1 truncate cleaned up [ 149.363762][ T5147] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 149.412558][ T5147] EXT4-fs error (device loop3): ext4_search_dir:1551: inode #2: block 16: comm syz.3.236: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 149.458899][ T5147] EXT4-fs error (device loop3): ext4_search_dir:1551: inode #2: block 16: comm syz.3.236: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 149.487341][ T5139] hfsplus: request for non-existent node 33423360 in B*Tree [ 149.549874][ T5139] hfsplus: request for non-existent node 33423360 in B*Tree [ 149.610602][ T5155] hfsplus: request for non-existent node 33423360 in B*Tree [ 149.618212][ T5155] hfsplus: request for non-existent node 33423360 in B*Tree [ 149.850466][ T5147] EXT4-fs error (device loop3): ext4_search_dir:1551: inode #2: block 16: comm syz.3.236: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 149.873089][ T5164] hfsplus: request for non-existent node 33423360 in B*Tree [ 149.900667][ T5164] hfsplus: request for non-existent node 33423360 in B*Tree [ 150.820681][ T5181] netlink: 12 bytes leftover after parsing attributes in process `syz.4.246'. [ 151.233331][ T5186] tipc: Enabled bearer , priority 10 [ 152.163696][ T5205] netlink: 24 bytes leftover after parsing attributes in process `syz.0.254'. [ 152.361219][ T5217] netlink: 40 bytes leftover after parsing attributes in process `syz.2.256'. [ 152.391407][ T5219] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 152.684196][ T4300] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 153.075677][ T4300] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 153.104389][ T4300] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 154.337285][ T4300] usb 3-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 154.347123][ T4300] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.355565][ T4300] usb 3-1: Product: syz [ 154.360214][ T4300] usb 3-1: Manufacturer: syz [ 154.364865][ T4300] usb 3-1: SerialNumber: syz [ 154.595531][ T5257] Cannot find set identified by id 0 to match [ 155.396608][ T4300] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 155.613310][ T5264] unsupported nlmsg_type 40 [ 155.868398][ T23] usb 3-1: USB disconnect, device number 4 [ 155.941648][ T23] usblp0: removed [ 158.157827][ T5290] tipc: Started in network mode [ 158.205116][ T5290] tipc: Node identity 7f000001, cluster identity 4711 [ 158.244473][ T5290] tipc: New replicast peer: 127.0.0.1 [ 158.261048][ T5290] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 158.306326][ T5295] loop0: detected capacity change from 0 to 2048 [ 158.318866][ T5290] tipc: Enabled bearer , priority 10 [ 158.332638][ T5291] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 158.377283][ T5291] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 158.411628][ T5300] tipc: Disabling bearer [ 158.417217][ T5295] NILFS (loop0): invalid segment: Magic number mismatch [ 158.446908][ T5290] loop3: detected capacity change from 0 to 256 [ 158.471065][ T5295] NILFS (loop0): trying rollback from an earlier position [ 158.554200][ T5295] NILFS (loop0): recovery complete [ 158.588384][ T5290] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 158.623843][ T5302] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 158.684880][ T5295] NILFS (loop0): nilfs_sufile_do_free: segment 9 is already clean [ 159.110000][ T5316] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 159.129583][ T5315] netlink: 'syz.2.284': attribute type 3 has an invalid length. [ 159.150321][ T5316] Cannot find map_set index 2 as target [ 160.062300][ T5316] Set syz1 is full, maxelem 2076 reached [ 160.137580][ T5325] netlink: 14 bytes leftover after parsing attributes in process `syz.3.287'. [ 164.358854][ T5390] loop3: detected capacity change from 0 to 256 [ 164.418565][ T26] audit: type=1800 audit(1790872574.495:81): pid=5388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.304" name="memory_backed" dev="configfs" ino=35804 res=0 errno=0 [ 164.498051][ T26] audit: type=1800 audit(1790872574.495:82): pid=5388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.304" name="zone_nr_conv" dev="configfs" ino=35805 res=0 errno=0 [ 164.758299][ T26] audit: type=1800 audit(1790872574.535:83): pid=5388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.304" name="power" dev="configfs" ino=35806 res=0 errno=0 [ 166.114428][ T5404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.312'. [ 167.587523][ T5426] netlink: 68 bytes leftover after parsing attributes in process `syz.4.319'. [ 168.643486][ T5442] loop2: detected capacity change from 0 to 8 [ 168.782784][ T5450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.325'. [ 168.880566][ T5450] af_packet: tpacket_rcv: packet too big, clamped from 64521 to 3956. macoff=92 [ 168.931945][ T5456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.327'. [ 170.490920][ T5479] netlink: 12 bytes leftover after parsing attributes in process `syz.3.333'. [ 174.675652][ T5536] ip_tables: iptables: counters copy to user failed while replacing table [ 174.751732][ T26] audit: type=1326 audit(1790872584.835:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5534 comm="syz.4.348" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fca931a1159 code=0x0 [ 174.988859][ T5544] device syzkaller0 entered promiscuous mode [ 179.799094][ T26] audit: type=1800 audit(1790872589.875:85): pid=5573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.358" name="memory_backed" dev="configfs" ino=37182 res=0 errno=0 [ 179.823805][ T5571] netlink: 16 bytes leftover after parsing attributes in process `syz.0.357'. [ 179.869911][ T26] audit: type=1800 audit(1790872589.915:86): pid=5573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.358" name="zone_nr_conv" dev="configfs" ino=37183 res=0 errno=0 [ 179.900058][ T5571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.357'. [ 179.909346][ T5571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.357'. [ 179.959804][ T26] audit: type=1800 audit(1790872589.915:87): pid=5573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.358" name="power" dev="configfs" ino=37184 res=0 errno=0 [ 180.013982][ T5571] netlink: 108 bytes leftover after parsing attributes in process `syz.0.357'. [ 180.351991][ T5571] netlink: 16 bytes leftover after parsing attributes in process `syz.0.357'. [ 180.921836][ T5571] netlink: 16 bytes leftover after parsing attributes in process `syz.0.357'. [ 181.811048][ T5593] netlink: 'syz.3.362': attribute type 2 has an invalid length. [ 181.869658][ T5597] mmap: syz.4.364 (5597) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 182.163590][ T5599] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.172562][ T5599] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.181547][ T5599] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.190389][ T5599] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.311630][ T5599] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 182.521945][ T5617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.369'. [ 182.601591][ T5619] fuse: blksize only supported for fuseblk [ 183.789963][ T5629] netlink: 'syz.4.372': attribute type 3 has an invalid length. [ 183.812899][ T5629] netlink: 'syz.4.372': attribute type 3 has an invalid length. [ 184.600400][ T5629] netlink: 'syz.4.372': attribute type 1 has an invalid length. [ 184.629900][ T5629] netlink: 'syz.4.372': attribute type 1 has an invalid length. [ 184.732069][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.741364][ T5629] netlink: 'syz.4.372': attribute type 1 has an invalid length. [ 184.788434][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.820826][ T5629] netlink: 'syz.4.372': attribute type 3 has an invalid length. [ 184.847883][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 184.910747][ T5641] netlink: 'syz.4.372': attribute type 1 has an invalid length. [ 184.918555][ T5641] netlink: 'syz.4.372': attribute type 3 has an invalid length. [ 184.949559][ T5629] netlink: 'syz.4.372': attribute type 3 has an invalid length. [ 187.752809][ T5668] overlayfs: failed to clone upperpath [ 188.207907][ T5675] netlink: 12 bytes leftover after parsing attributes in process `syz.2.385'. [ 188.722887][ T5687] netlink: 16 bytes leftover after parsing attributes in process `syz.4.389'. [ 188.821761][ T5687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.389'. [ 189.188302][ T5687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.389'. [ 189.410298][ T5687] netlink: 108 bytes leftover after parsing attributes in process `syz.4.389'. [ 189.419398][ T5687] netlink: 16 bytes leftover after parsing attributes in process `syz.4.389'. [ 189.430050][ T5687] netlink: 16 bytes leftover after parsing attributes in process `syz.4.389'. [ 189.939387][ T5711] ipt_REJECT: TCP_RESET invalid for non-tcp [ 191.309392][ T5725] overlayfs: failed to clone upperpath [ 191.705118][ T4350] Bluetooth: hci3: command 0x0406 tx timeout [ 192.078726][ T4350] Bluetooth: hci1: command 0x0406 tx timeout [ 192.088073][ T4350] Bluetooth: hci0: command 0x0406 tx timeout [ 192.099990][ T4350] Bluetooth: hci2: command 0x0406 tx timeout [ 192.241084][ T5728] netlink: 20 bytes leftover after parsing attributes in process `syz.4.401'. [ 193.813071][ T5742] ODEBUG: Out of memory. ODEBUG disabled [ 194.430234][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.436574][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.612812][ T5773] loop0: detected capacity change from 0 to 512 [ 195.756480][ T5773] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 195.794226][ T5773] System zones: 1-12 [ 195.839454][ T5773] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.413: missing EA_INODE flag [ 195.856096][ T5773] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.413: error while reading EA inode 12 err=-117 [ 195.869239][ T5773] EXT4-fs (loop0): 1 orphan inode deleted [ 195.875192][ T5773] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 199.262025][ T5813] netlink: 156 bytes leftover after parsing attributes in process `syz.4.426'. [ 201.504634][ T5853] netlink: 'syz.3.438': attribute type 13 has an invalid length. [ 201.565876][ T5853] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 201.654058][ T5853] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 201.675107][ T5853] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 201.975656][ T5853] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready [ 202.087294][ T5853] IPv6: ADDRCONF(NETDEV_CHANGE): nr1: link becomes ready [ 202.197402][ T5853] IPv6: ADDRCONF(NETDEV_CHANGE): nr2: link becomes ready [ 202.308106][ T5853] IPv6: ADDRCONF(NETDEV_CHANGE): nr3: link becomes ready [ 202.345289][ T5853] IPv6: ADDRCONF(NETDEV_CHANGE): nr4: link becomes ready [ 202.463004][ T5853] IPv6: ADDRCONF(NETDEV_CHANGE): lapb0: link becomes ready [ 203.740329][ T5853] IPv6: ADDRCONF(NETDEV_CHANGE): lapb1: link becomes ready [ 203.770671][ T5853] IPv6: ADDRCONF(NETDEV_CHANGE): lapb2: link becomes ready [ 203.779189][ T5853] IPv6: ADDRCONF(NETDEV_CHANGE): lapb3: link becomes ready [ 203.796741][ T5853] IPv6: ADDRCONF(NETDEV_CHANGE): lapb4: link becomes ready [ 203.810555][ T5853] IPv6: ADDRCONF(NETDEV_CHANGE): lapb5: link becomes ready [ 203.820916][ T5861] device syzkaller0 entered promiscuous mode [ 204.073999][ T26] audit: type=1326 audit(1790872614.105:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5872 comm="syz.0.444" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f89212ad159 code=0x0 [ 205.139655][ T5895] device syzkaller0 entered promiscuous mode [ 207.538392][ T5936] netlink: 25 bytes leftover after parsing attributes in process `syz.2.462'. [ 207.559295][ T5936] device gretap0 entered promiscuous mode [ 207.609071][ T5936] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.462'. [ 207.656248][ T5936] 0XD: renamed from gretap0 [ 207.671872][ T5936] device 00XD left promiscuous mode [ 211.852971][ T5969] overlayfs: failed to clone upperpath [ 213.773138][ T5982] ip_tables: iptables: counters copy to user failed while replacing table [ 214.715656][ T5992] autofs4:pid:5992:autofs_fill_super: called with bogus options [ 218.024700][ T6026] loop0: detected capacity change from 0 to 736 [ 218.785228][ T6048] sctp: [Deprecated]: syz.3.501 (pid 6048) Use of struct sctp_assoc_value in delayed_ack socket option. [ 218.785228][ T6048] Use struct sctp_sack_info instead [ 219.355732][ T6052] xt_recent: Unsupported userspace flags (000000c5) [ 219.437697][ T6060] sctp: [Deprecated]: syz.1.505 (pid 6060) Use of struct sctp_assoc_value in delayed_ack socket option. [ 219.437697][ T6060] Use struct sctp_sack_info instead [ 219.457750][ T6061] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 219.778629][ T6060] sctp: [Deprecated]: syz.1.505 (pid 6060) Use of struct sctp_assoc_value in delayed_ack socket option. [ 219.778629][ T6060] Use struct sctp_sack_info instead [ 220.457057][ T6067] netlink: 56 bytes leftover after parsing attributes in process `syz.3.507'. [ 220.498003][ T6067] 9pnet: Insufficient options for proto=fd [ 224.064767][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 225.530831][ T6150] netlink: 56 bytes leftover after parsing attributes in process `syz.2.530'. [ 225.619474][ T6155] futex_wake_op: syz.4.532 tries to shift op by 144; fix this program [ 226.675402][ T6150] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.682923][ T6150] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.020026][ T4229] Bluetooth: hci4: command 0x0406 tx timeout [ 227.373927][ T6150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.841867][ T6150] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.850919][ T6150] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.860991][ T6150] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.870058][ T6150] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.049834][ T6159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.533'. [ 228.064913][ T6159] device hsr_slave_0 left promiscuous mode [ 228.094351][ T6159] device hsr_slave_1 left promiscuous mode [ 229.167125][ T6186] overlayfs: failed to clone lowerpath [ 229.200649][ T6186] overlayfs: failed to clone lowerpath [ 229.256469][ T6186] tipc: New replicast peer: 127.0.0.1 [ 229.295049][ T6186] tipc: Enabled bearer , priority 10 [ 229.324431][ T6198] netlink: 64 bytes leftover after parsing attributes in process `syz.3.541'. [ 229.367579][ T6199] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1500) ! [ 229.415726][ T6199] device syzkaller0 entered promiscuous mode [ 229.424907][ T6201] netlink: 'syz.2.546': attribute type 4 has an invalid length. [ 229.437532][ T6201] netlink: 17 bytes leftover after parsing attributes in process `syz.2.546'. [ 230.459793][ T4300] tipc: Node number set to 2130706433 [ 230.766092][ T6216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.552'. [ 230.781020][ T6216] device hsr_slave_0 left promiscuous mode [ 230.795592][ T6216] device hsr_slave_1 left promiscuous mode [ 231.248057][ T6218] 9pnet_virtio: no channels available for device syz [ 233.454404][ T6251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.562'. [ 238.773205][ T6313] ip_tables: iptables: counters copy to user failed while replacing table [ 239.356751][ T6326] autofs4:pid:6326:autofs_fill_super: called with bogus options [ 241.633628][ T6354] device syzkaller0 entered promiscuous mode [ 243.729407][ T6374] xt_hashlimit: max too large, truncated to 1048576 [ 243.849999][ T4231] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 245.250824][ T4231] usb 1-1: Using ep0 maxpacket: 8 [ 245.292333][ T6394] netlink: 12 bytes leftover after parsing attributes in process `syz.4.606'. [ 245.394591][ T4231] usb 1-1: config 0 has no interfaces? [ 245.401456][ T4231] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 245.628845][ T4231] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.651359][ T4231] usb 1-1: config 0 descriptor?? [ 246.255301][ T4300] usb 1-1: USB disconnect, device number 4 [ 247.716206][ T6436] 0x000000000006-0x000000020000 : "" [ 248.273947][ T6436] ftl_cs: FTL header corrupt! [ 251.580842][ T6463] loop0: detected capacity change from 0 to 256 [ 253.104734][ T4273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.116558][ T4273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.125572][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 256.069654][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.076127][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.098871][ T6496] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 4 (only 8 groups) [ 257.328768][ T6510] ip_tables: iptables: counters copy to user failed while replacing table [ 257.491119][ T6516] CIFS: VFS: Unknown vers= option specified: -B]ąRB ,gWy 2"/>4Z ҄FYcIGQB*0⑒V&SmZ)`sAk!Owz"RLL|ZuWG4&޺[G [ 258.440056][ T1278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.115031][ T1278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.770472][ T6565] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 261.889927][ T6574] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 261.934105][ T6571] overlayfs: unrecognized mount option "subj_role=workdir" or missing value [ 263.378243][ T6588] xs_local_setup_socket: unhandled error (91) connecting to /var/run/gssproxy.sock [ 263.869395][ T6610] futex_wake_op: syz.1.668 tries to shift op by 144; fix this program [ 264.505619][ T6613] netlink: 32 bytes leftover after parsing attributes in process `syz.4.669'. [ 264.551921][ T6613] netlink: 32 bytes leftover after parsing attributes in process `syz.4.669'. [ 264.644115][ T6617] overlayfs: unrecognized mount option "subj_role=workdir" or missing value [ 270.450601][ T6673] xt_CT: You must specify a L4 protocol and not use inversions on it [ 270.493394][ T6686] overlayfs: failed to clone upperpath [ 270.507822][ T6691] device wlan0 entered promiscuous mode [ 272.990958][ T6721] tipc: Started in network mode [ 272.995886][ T6721] tipc: Node identity 4, cluster identity 4711 [ 273.084533][ T6721] tipc: Node number set to 4 [ 273.093007][ T6721] tipc: Enabled bearer , priority 0 [ 273.146389][ T6721] tipc: Disabling bearer [ 273.586462][ T6735] tipc: Enabling of bearer rejected, failed to enable media [ 280.380367][ T6813] device syzkaller0 entered promiscuous mode [ 286.078291][ T6883] tipc: Enabled bearer , priority 0 [ 286.596388][ T6896] tipc: Enabling of bearer rejected, failed to enable media [ 287.031858][ T6914] ip6t_REJECT: ECHOREPLY is not supported [ 290.799604][ T6952] tipc: Enabling of bearer rejected, failed to enable media [ 291.862020][ T6973] tipc: Enabling of bearer rejected, failed to enable media [ 293.197278][ T7004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.778'. [ 293.300992][ T7004] team0: Port device team_slave_0 removed [ 294.302262][ T7020] "syz.4.782" (7020) uses obsolete ecb(arc4) skcipher [ 295.681494][ T7041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.791'. [ 296.673336][ T7047] syz.1.792 uses obsolete (PF_INET,SOCK_PACKET) [ 297.328836][ T7057] tipc: Started in network mode [ 297.334232][ T7057] tipc: Node identity 42f3cb941e63, cluster identity 4711 [ 298.168495][ T7057] tipc: Enabled bearer , priority 0 [ 298.196973][ T7063] device syzkaller0 entered promiscuous mode [ 298.475031][ T7057] tipc: Resetting bearer [ 298.910955][ T7055] tipc: Resetting bearer [ 300.089273][ T7055] tipc: Disabling bearer [ 300.139617][ T7084] IPVS: Error connecting to the multicast addr [ 300.159635][ T7] tipc: Node number set to 1552993172 [ 300.188160][ T7088] tipc: Enabling of bearer rejected, already enabled [ 300.348580][ T7102] netlink: 4 bytes leftover after parsing attributes in process `syz.2.805'. [ 304.550599][ T7143] netlink: 'syz.2.818': attribute type 2 has an invalid length. [ 311.018298][ T7206] device syzkaller0 entered promiscuous mode [ 312.040113][ T7224] bond0 speed is unknown, defaulting to 1000 [ 312.046716][ T7224] bond0 speed is unknown, defaulting to 1000 [ 313.052487][ T7224] bond0 speed is unknown, defaulting to 1000 [ 313.074174][ T7224] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 314.264965][ T7226] nvmet_rdma: address family 255 not supported [ 314.318526][ T7224] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 315.760435][ T7224] bond0 speed is unknown, defaulting to 1000 [ 315.922802][ T7224] bond0 speed is unknown, defaulting to 1000 [ 315.947345][ T7224] bond0 speed is unknown, defaulting to 1000 [ 316.000666][ T7224] bond0 speed is unknown, defaulting to 1000 [ 316.007840][ T7224] bond0 speed is unknown, defaulting to 1000 [ 317.060062][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.069250][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.142246][ T7295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.864'. [ 317.304589][ T7295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.864'. [ 317.894604][ T7308] netlink: 'syz.3.868': attribute type 10 has an invalid length. [ 318.692200][ T7308] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.699836][ T7308] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.541758][ T7488] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.551059][ T7488] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.560417][ T7488] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.569406][ T7488] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.825357][ T7492] netlink: 84 bytes leftover after parsing attributes in process `syz.0.907'. [ 331.689182][ T7509] device syzkaller0 entered promiscuous mode [ 332.103474][ T7522] IPVS: Error connecting to the multicast addr [ 335.985809][ T7570] overlayfs: failed to clone upperpath [ 336.196215][ T7574] device syzkaller0 entered promiscuous mode [ 340.158543][ T7620] netlink: 'syz.0.938': attribute type 1 has an invalid length. [ 344.862854][ T7691] netlink: 'syz.3.954': attribute type 12 has an invalid length. [ 344.901709][ T7694] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4186] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7694] [ 346.047802][ T7724] netlink: 'syz.3.959': attribute type 1 has an invalid length. [ 347.210726][ T7740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.961'. [ 347.224347][ T7740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.961'. [ 347.234814][ T7740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.961'. [ 347.245842][ T7740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.961'. [ 349.210459][ T7753] device syzkaller0 entered promiscuous mode [ 349.233520][ T7753] TC_ACT_REPEAT abuse ? [ 351.786212][ T7786] Invalid option length (409) for dns_resolver key [ 357.156537][ T7848] Invalid option length (409) for dns_resolver key [ 357.739991][ T7852] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 360.282185][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 361.188570][ T7919] netlink: 'syz.4.1008': attribute type 12 has an invalid length. [ 361.541025][ T7936] xt_HMARK: spi-set and port-set can't be combined [ 362.280697][ T7944] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 366.036640][ T7997] netlink: 'syz.1.1023': attribute type 12 has an invalid length. [ 367.685124][ T8020] tipc: Enabling of bearer rejected, failed to enable media [ 370.877772][ T8042] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.886776][ T8042] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.896007][ T8042] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.905007][ T8042] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.113761][ T8085] netlink: 'syz.2.1044': attribute type 12 has an invalid length. [ 375.565095][ T8072] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1040'. [ 378.035940][ T8137] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1061'. [ 378.052008][ T8139] futex_wake_op: syz.4.1059 tries to shift op by 144; fix this program [ 379.368223][ T8140] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1061'. [ 383.720439][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.726828][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.966774][ T8198] futex_wake_op: syz.3.1077 tries to shift op by 144; fix this program [ 390.679371][ T8254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.039903][ T8369] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 399.039903][ T8369] program syz.0.1123 not setting count and/or reply_len properly [ 399.140564][ T8377] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1127'. [ 399.280153][ T8372] tipc: Enabling of bearer rejected, already enabled [ 400.710563][ T8392] tipc: Enabling of bearer rejected, failed to enable media [ 404.661381][ T8448] tipc: Enabled bearer , priority 0 [ 404.679671][ T8448] tipc: Disabling bearer [ 404.955489][ T1108] Process accounting resumed [ 405.295601][ T8460] tipc: Enabling of bearer rejected, already enabled [ 405.958701][ T8466] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1149'. [ 405.970688][ T8466] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1149'. [ 413.582967][ T26] audit: type=1326 audit(1790872816.527:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8532 comm="syz.2.1159" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6df0e5159 code=0x7fc00000 [ 413.708963][ T26] audit: type=1326 audit(1790872816.555:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8532 comm="syz.2.1159" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fc6df0e5159 code=0x7fc00000 [ 413.875655][ T26] audit: type=1326 audit(1790872816.767:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8532 comm="syz.2.1159" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6df0e5159 code=0x7fc00000 [ 414.007762][ T26] audit: type=1326 audit(1790872816.767:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8532 comm="syz.2.1159" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc6df0e5159 code=0x7fc00000 [ 414.119152][ T26] audit: type=1326 audit(1790872816.776:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8532 comm="syz.2.1159" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6df0e5159 code=0x7fc00000 [ 414.144000][ T26] audit: type=1326 audit(1790872816.776:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8532 comm="syz.2.1159" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6df0e5159 code=0x7fc00000 [ 414.173653][ T26] audit: type=1326 audit(1790872816.776:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8532 comm="syz.2.1159" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6df0e5159 code=0x7fc00000 [ 414.457423][ T26] audit: type=1326 audit(1790872816.776:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8532 comm="syz.2.1159" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6df0e5159 code=0x7fc00000 [ 414.979396][ T26] audit: type=1326 audit(1790872816.776:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8532 comm="syz.2.1159" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6df0e5159 code=0x7fc00000 [ 415.299913][ T26] audit: type=1326 audit(1790872816.776:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8532 comm="syz.2.1159" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6df0e5159 code=0x7fc00000 [ 419.751538][ T8627] tipc: Started in network mode [ 419.756802][ T8627] tipc: Node identity 4, cluster identity 4711 [ 419.763185][ T8627] tipc: Node number set to 4 [ 419.780622][ T8627] tipc: Enabled bearer , priority 0 [ 419.816273][ T8627] tipc: Resetting bearer [ 420.044227][ T8627] tipc: Disabling bearer [ 421.797941][ T8649] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 422.314630][ T26] kauditd_printk_skb: 58 callbacks suppressed [ 422.314646][ T26] audit: type=1800 audit(1790872824.398:157): pid=8667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1196" name="in_ports" dev="configfs" ino=44464 res=0 errno=0 [ 426.003881][ T8698] 8021q: adding VLAN 0 to HW filter on device bond1 [ 426.229706][ T8698] team0: Port device bond1 added [ 426.279075][ T144] team0: Failed to send port change of device bond1 via netlink (err -105) [ 433.997288][ T8780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1239'. [ 434.662935][ T8805] "syz.2.1232" (8805) uses obsolete ecb(arc4) skcipher [ 435.974391][ T8819] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1236'. [ 447.816810][ T8936] "syz.3.1264" (8936) uses obsolete ecb(arc4) skcipher [ 450.036984][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 450.043344][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 452.474310][ T8978] tipc: Enabling of bearer rejected, failed to enable media [ 454.918060][ T9014] tipc: Enabling of bearer rejected, failed to enable media [ 457.607671][ T9050] siw: device registration error -23 [ 465.985241][ T9143] device syzkaller0 entered promiscuous mode [ 467.899247][ T9172] tipc: Enabling of bearer rejected, failed to enable media [ 468.747254][ T9179] overlayfs: failed to clone upperpath [ 470.315976][ T9203] overlayfs: failed to clone lowerpath [ 474.912892][ T9269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1341'. [ 475.735446][ T9269] team0: Port device team_slave_0 removed [ 476.823129][ T9288] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1349'. [ 476.836456][ T9288] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1349'. [ 479.349766][ T9319] netlink: 'syz.1.1356': attribute type 1 has an invalid length. [ 483.666164][ T9363] overlayfs: failed to clone lowerpath [ 484.993624][ T9371] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.003122][ T9371] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.011951][ T9371] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.020785][ T9371] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.014393][ T9371] team0: Port device vxlan0 added [ 486.147958][ T7] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 487.710064][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 487.725268][ T9396] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1380'. [ 487.739462][ T7] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 487.768282][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.957307][ T7] usb 1-1: config 0 descriptor?? [ 488.145040][ T9411] overlayfs: failed to clone lowerpath [ 488.597222][ T7] pwc: Askey VC010 type 2 USB webcam detected. [ 489.745912][ T7] pwc: recv_control_msg error -32 req 02 val 2b00 [ 490.732357][ T7] pwc: recv_control_msg error -71 req 02 val 2700 [ 490.894641][ T7] pwc: recv_control_msg error -71 req 02 val 2c00 [ 490.916448][ T7] pwc: recv_control_msg error -71 req 04 val 1000 [ 490.947505][ T7] pwc: recv_control_msg error -71 req 04 val 1300 [ 491.791843][ T7] pwc: recv_control_msg error -71 req 04 val 1400 [ 491.826802][ T7] pwc: recv_control_msg error -71 req 02 val 2000 [ 491.859465][ T7] pwc: recv_control_msg error -71 req 02 val 2100 [ 491.891792][ T7] pwc: recv_control_msg error -71 req 04 val 1500 [ 491.935211][ T7] pwc: recv_control_msg error -71 req 02 val 2500 [ 491.967983][ T7] pwc: recv_control_msg error -71 req 02 val 2400 [ 492.214303][ T7] pwc: recv_control_msg error -71 req 02 val 2600 [ 493.257842][ T7] pwc: recv_control_msg error -71 req 02 val 2900 [ 493.300688][ T7] pwc: recv_control_msg error -71 req 02 val 2800 [ 493.333296][ T7] pwc: recv_control_msg error -71 req 04 val 1100 [ 493.365760][ T7] pwc: recv_control_msg error -71 req 04 val 1200 [ 493.478804][ T7] pwc: Registered as video103. [ 493.488587][ T7] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 493.524661][ T7] usb 1-1: USB disconnect, device number 5 [ 496.215758][ T9483] overlayfs: failed to clone lowerpath [ 505.245378][ T9598] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1432'. [ 505.258005][ T9598] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1432'. [ 517.222753][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 517.229190][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 528.069340][ T9837] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1496'. [ 528.079785][ T9837] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1496'. [ 528.607494][ T9840] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1500'. [ 528.642705][ T9840] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1500'. [ 538.648773][ T9926] device syzkaller0 entered promiscuous mode [ 538.694809][ T9926] tipc: Enabled bearer , priority 0 [ 538.810537][ T9923] tipc: Resetting bearer [ 539.641313][ T9923] tipc: Disabling bearer [ 541.594308][ T9947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1528'. [ 541.645927][ T9947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1528'. [ 552.869340][T10071] ALSA: mixer_oss: invalid OSS volume '' [ 553.700509][T10074] autofs4:pid:10074:autofs_fill_super: called with bogus options [ 556.039921][T10116] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 559.728807][T10151] device syzkaller0 entered promiscuous mode [ 574.625330][T10328] UBIFS error (pid: 10328): cannot open "(null)", error -22 [ 581.190564][T10407] netlink: 'syz.4.1656': attribute type 15 has an invalid length. [ 582.202579][T10407] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 582.211519][T10407] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 582.220457][T10407] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 582.229660][T10407] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 582.243547][T10407] netlink: 'syz.4.1656': attribute type 15 has an invalid length. [ 583.825829][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 583.833352][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 589.887410][T10462] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 599.636304][T10567] device lo left promiscuous mode [ 599.644788][T10567] device tunl0 left promiscuous mode [ 599.651250][T10567] device gre0 left promiscuous mode [ 599.659016][T10567] device gretap0 left promiscuous mode [ 599.666726][T10567] device erspan0 left promiscuous mode [ 599.673600][T10567] device ip_vti0 left promiscuous mode [ 599.680086][T10567] device ip6_vti0 left promiscuous mode [ 599.686972][T10567] device sit0 left promiscuous mode [ 599.696330][T10567] device ip6tnl0 left promiscuous mode [ 599.703094][T10567] device ip6gre0 left promiscuous mode [ 599.709886][T10567] device ip6gretap0 left promiscuous mode [ 599.717887][T10567] device bridge0 left promiscuous mode [ 599.724705][T10567] device vcan0 left promiscuous mode [ 599.730726][T10567] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 599.738071][T10567] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 599.745737][T10567] device bond0 left promiscuous mode [ 599.753069][T10567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 599.760736][T10567] device team0 left promiscuous mode [ 599.766902][T10567] 8021q: adding VLAN 0 to HW filter on device team0 [ 599.774939][T10567] device dummy0 left promiscuous mode [ 599.781819][T10567] device nlmon0 left promiscuous mode [ 600.068832][T10567] device caif0 left promiscuous mode [ 600.074881][T10567] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 600.109657][T10572] se_dev->se_dev_ptr already set for storage object [ 602.107083][T10601] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4193] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[10601] [ 607.788244][T10634] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 608.811405][T10653] SET target dimension over the limit! [ 610.735645][T10663] tc action pedit 'at' offset 19 out of bounds [ 610.741956][T10663] tc action pedit 'at' offset 19 out of bounds [ 610.748209][T10663] tc action pedit 'at' offset 19 out of bounds [ 610.754454][T10663] tc action pedit 'at' offset 19 out of bounds [ 610.760676][T10663] tc action pedit 'at' offset 19 out of bounds [ 610.766861][T10663] tc action pedit 'at' offset 19 out of bounds [ 610.773057][T10663] tc action pedit 'at' offset 19 out of bounds [ 610.779237][T10663] tc action pedit 'at' offset 19 out of bounds [ 610.785428][T10663] tc action pedit 'at' offset 19 out of bounds [ 610.791630][T10663] tc action pedit 'at' offset 19 out of bounds [ 610.797832][T10663] 0: reclassify loop, rule prio 0, protocol 800 [ 620.366924][T10756] UBIFS error (pid: 10756): cannot open "(null)", error -22 [ 621.374289][T10772] se_dev->se_dev_ptr already set for storage object [ 624.693795][T10816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1770'. [ 625.221856][T10818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1770'. [ 625.257534][T10818] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 627.787267][T10847] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1778'. [ 631.278203][T10873] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 631.285734][T10873] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 632.039340][T10873] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 632.047050][T10873] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 633.436630][T10898] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1791'. [ 639.644723][T10960] device syzkaller0 entered promiscuous mode [ 639.658107][T10960] tipc: Enabled bearer , priority 0 [ 639.696207][T10960] tipc: Resetting bearer [ 639.705426][T10959] tipc: Resetting bearer [ 639.764353][T10959] tipc: Disabling bearer [ 645.145653][T11022] netlink: 'syz.2.1828': attribute type 16 has an invalid length. [ 645.169159][T11022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1828'. [ 645.246422][T11022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 649.403828][ T26] audit: type=1804 audit(1790873034.118:158): pid=11075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1846" name="bus" dev="ramfs" ino=48936 res=1 errno=0 [ 649.856284][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 649.871366][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 650.057113][ T26] audit: type=1804 audit(1790873034.607:159): pid=11079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1846" name="bus" dev="ramfs" ino=48936 res=1 errno=0 [ 656.783531][T11146] IPVS: Error connecting to the multicast addr [ 661.737078][T11197] virtio-fs: tag not found [ 671.366544][T11257] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 674.291827][ T4232] Bluetooth: hci4: command 0x0405 tx timeout [ 683.032543][T11340] binder: 11320:11340 ioctl c0306201 0 returned -14 [ 685.092966][T11351] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4200] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11351] [ 685.220631][ T150] block nbd0: Attempted send on invalid socket [ 685.228321][ T150] blk_update_request: I/O error, dev nbd0, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 685.241293][ T150] gfs2: error 10 reading superblock [ 685.607952][T11356] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 690.788612][T11383] UBIFS error (pid: 11383): cannot open "(null)", error -22 [ 692.575096][T11395] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4186] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11395] [ 693.790594][T11408] ip_tables: iptables: counters copy to user failed while replacing table [ 695.352014][T11422] tc action pedit unable to extract header offset for header type (0x4) [ 695.360536][T11422] tc action pedit unable to extract header offset for header type (0x4) [ 695.368903][T11422] tc action pedit unable to extract header offset for header type (0x4) [ 695.377330][T11422] tc action pedit unable to extract header offset for header type (0x4) [ 695.385736][T11422] tc action pedit unable to extract header offset for header type (0x4) [ 695.394175][T11422] tc action pedit unable to extract header offset for header type (0x4) [ 695.402578][T11422] tc action pedit unable to extract header offset for header type (0x4) [ 695.411008][T11422] tc action pedit unable to extract header offset for header type (0x4) [ 695.419418][T11422] tc action pedit unable to extract header offset for header type (0x4) [ 695.427813][T11422] tc action pedit unable to extract header offset for header type (0x4) [ 695.436230][T11422] 0: reclassify loop, rule prio 0, protocol 800 [ 695.443127][ C0] tc action pedit offset must be on 32 bit boundaries [ 695.450496][ C0] tc action pedit offset must be on 32 bit boundaries [ 695.457330][ C0] tc action pedit offset must be on 32 bit boundaries [ 695.464117][ C0] tc action pedit offset must be on 32 bit boundaries [ 695.470942][ C0] tc action pedit offset must be on 32 bit boundaries [ 695.477733][ C0] tc action pedit offset must be on 32 bit boundaries [ 695.484575][ C0] tc action pedit offset must be on 32 bit boundaries [ 695.491547][ C0] tc action pedit offset must be on 32 bit boundaries [ 695.498341][ C0] tc action pedit offset must be on 32 bit boundaries [ 695.505180][ C0] tc action pedit offset must be on 32 bit boundaries [ 695.512040][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 696.335230][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 699.659537][T11463] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 700.210558][T11467] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4187] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11467] [ 702.125663][T11486] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1970'. [ 706.232291][ T26] audit: type=1800 audit(1790873086.555:160): pid=11536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1988" name="zone_nr_conv" dev="configfs" ino=50160 res=0 errno=0 [ 707.136674][ T26] audit: type=1800 audit(1790873087.386:161): pid=11540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1988" name="power" dev="configfs" ino=50513 res=0 errno=0 [ 709.039861][T11555] overlayfs: failed to clone lowerpath [ 709.892890][T11582] udevd[11582]: error opening ATTR{/sys/devices/platform/usbip-vudc.0/gadget/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 710.043285][T11586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1999'. [ 715.676996][T11647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2017'. [ 716.442302][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 716.481246][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 728.829643][T11788] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2061'. [ 729.198697][T11792] No such timeout policy "syz1" [ 732.028349][T11821] 9pnet: Insufficient options for proto=fd [ 738.539024][T11870] mtrr: base(0x20000000) is not aligned on a size(0x0000) boundary [ 738.801243][T11878] se_dev->se_dev_ptr already set for storage object [ 739.372199][T11891] udevd[11891]: error opening ATTR{/sys/devices/platform/usbip-vudc.0/gadget/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 739.408808][T11889] udevd[11889]: error opening ATTR{/sys/devices/platform/usbip-vudc.0/gadget/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 740.339539][T11904] tipc: Enabling of bearer rejected, already enabled [ 744.375196][T11954] No such timeout policy "syz1" [ 745.229332][T11962] udevd[11962]: error opening ATTR{/sys/devices/platform/usbip-vudc.0/gadget/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 745.828194][T11982] overlayfs: failed to clone upperpath [ 750.060581][T12037] overlayfs: failed to clone upperpath [ 750.066688][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880604c1000: rx timeout, send abort [ 750.127136][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880604c1000: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 752.430560][T12041] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2137'. [ 752.646323][T12068] netlink: 'syz.2.2144': attribute type 21 has an invalid length. [ 752.654486][T12068] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2144'. [ 752.663715][T12068] netlink: 'syz.2.2144': attribute type 4 has an invalid length. [ 752.671643][T12068] netlink: 'syz.2.2144': attribute type 3 has an invalid length. [ 752.679595][T12068] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2144'. [ 753.955367][T12107] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 755.190683][T12123] bond0: (slave veth1_to_bond): Device is not bonding slave [ 755.198202][T12123] bond0: option active_slave: invalid value (veth1_to_bond) [ 757.571587][T12143] se_dev->se_dev_ptr already set for storage object [ 758.252572][T12156] udevd[12156]: error opening ATTR{/sys/devices/platform/usbip-vudc.0/gadget/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 758.306100][T12153] udevd[12153]: error opening ATTR{/sys/devices/platform/usbip-vudc.0/gadget/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 758.940599][T12170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2177'. [ 761.209435][T12203] se_dev->se_dev_ptr already set for storage object [ 762.339186][T12215] overlayfs: failed to clone upperpath [ 766.415730][T12257] se_dev->se_dev_ptr already set for storage object [ 766.751615][T12264] udevd[12264]: error opening ATTR{/sys/devices/platform/usbip-vudc.0/gadget/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 767.082485][T12265] udevd[12265]: error opening ATTR{/sys/devices/platform/usbip-vudc.0/gadget/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 775.177075][T12376] netlink: 'syz.3.2239': attribute type 10 has an invalid length. [ 775.225401][T12378] se_dev->se_dev_ptr already set for storage object [ 776.322286][T12392] udevd[12392]: error opening ATTR{/sys/devices/platform/usbip-vudc.0/gadget/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 776.421899][T12397] device bridge0 entered promiscuous mode [ 782.326779][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 782.333255][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 785.653138][T12527] atomic_op ffff888027373998 conn xmit_atomic 0000000000000000 [ 789.503255][T12560] 8021q: adding VLAN 0 to HW filter on device bond1 [ 789.627411][T12564] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 789.636871][T12564] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 789.738988][ T9] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 789.752820][ T9080] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 789.854652][ T9098] bond1: (slave macvlan2): link status up again after 0 ms [ 789.862628][ T9098] bond1: (slave macvlan2): failed to get link speed/duplex [ 789.916156][ T9098] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 790.027823][ T9098] bond1: (slave macvlan2): failed to get link speed/duplex [ 790.147803][ T9098] bond1: (slave macvlan2): failed to get link speed/duplex [ 790.266276][ T9100] bond1: (slave macvlan2): failed to get link speed/duplex [ 790.407242][ T9098] bond1: (slave macvlan2): failed to get link speed/duplex [ 790.539328][ T9080] bond1: (slave macvlan2): failed to get link speed/duplex [ 790.789361][ T9] bond1: (slave macvlan2): failed to get link speed/duplex [ 791.002873][ T9] bond1: (slave macvlan2): failed to get link speed/duplex [ 795.220707][ T9] net_ratelimit: 23 callbacks suppressed [ 795.220728][ T9] bond1: (slave macvlan2): failed to get link speed/duplex [ 795.638070][ T9] bond1: (slave macvlan2): failed to get link speed/duplex [ 795.844767][ T9] bond1: (slave macvlan2): failed to get link speed/duplex [ 796.404755][ T9] bond1: (slave macvlan2): failed to get link speed/duplex [ 796.581138][ T9] bond1: (slave macvlan2): failed to get link speed/duplex [ 796.849139][T12668] IPVS: Error connecting to the multicast addr [ 797.003656][ T9] bond1: (slave macvlan2): failed to get link speed/duplex [ 797.188029][ T9096] bond1: (slave macvlan2): failed to get link speed/duplex [ 797.568081][ T9080] bond1: (slave macvlan2): failed to get link speed/duplex [ 797.720386][ T9080] bond1: (slave macvlan2): failed to get link speed/duplex [ 797.924460][ T9096] bond1: (slave macvlan2): failed to get link speed/duplex [ 800.762989][ T9098] net_ratelimit: 12 callbacks suppressed [ 800.763010][ T9098] bond1: (slave macvlan2): failed to get link speed/duplex [ 801.319998][ T9] bond1: (slave macvlan2): failed to get link speed/duplex [ 801.683088][ T9100] bond1: (slave macvlan2): failed to get link speed/duplex [ 801.802163][ T9] bond1: (slave macvlan2): failed to get link speed/duplex [ 802.896328][ T9098] bond1: (slave macvlan2): failed to get link speed/duplex [ 803.026185][ T9098] bond1: (slave macvlan2): failed to get link speed/duplex [ 803.188628][ T9100] bond1: (slave macvlan2): failed to get link speed/duplex [ 803.883638][ T9100] bond1: (slave macvlan2): failed to get link speed/duplex [ 804.066064][ T9] bond1: (slave macvlan2): failed to get link speed/duplex [ 804.208032][ T9100] bond1: (slave macvlan2): failed to get link speed/duplex [ 805.115546][T12766] bond0 speed is unknown, defaulting to 1000 [ 806.405393][ T9] net_ratelimit: 2 callbacks suppressed [ 806.405411][ T9] bond1: (slave macvlan2): failed to get link speed/duplex [ 806.616726][ T9] bond1: (slave macvlan2): failed to get link speed/duplex [ 806.752256][ T9080] bond1: (slave macvlan2): failed to get link speed/duplex [ 806.940167][ T9100] bond1: (slave macvlan2): failed to get link speed/duplex [ 808.084631][ T9100] bond1: (slave macvlan2): failed to get link speed/duplex [ 808.293998][ T9080] bond1: (slave macvlan2): failed to get link speed/duplex [ 809.332006][ T9100] bond1: (slave macvlan2): failed to get link speed/duplex [ 809.461219][ T9080] bond1: (slave macvlan2): failed to get link speed/duplex [ 809.590818][ T9100] bond1: (slave macvlan2): failed to get link speed/duplex [ 809.932424][ T9] bond1: (slave macvlan2): failed to get link speed/duplex [ 811.875984][ T9098] net_ratelimit: 9 callbacks suppressed [ 811.876086][ T9098] bond1: (slave macvlan2): failed to get link speed/duplex [ 812.450051][ T9098] bond1: (slave macvlan2): failed to get link speed/duplex [ 812.569044][ T9100] bond1: (slave macvlan2): failed to get link speed/duplex [ 813.143587][ T9100] bond1: (slave macvlan2): failed to get link speed/duplex [ 813.876889][ T9080] bond1: (slave macvlan2): failed to get link speed/duplex [ 814.055867][ T9080] bond1: (slave macvlan2): failed to get link speed/duplex [ 814.207325][ T9094] bond1: (slave macvlan2): failed to get link speed/duplex [ 814.323893][ T9094] bond1: (slave macvlan2): failed to get link speed/duplex [ 814.452686][T12875] se_dev->se_dev_ptr already set for storage object [ 814.505676][T12876] [ 814.508071][T12876] ====================================================== [ 814.515090][T12876] WARNING: possible circular locking dependency detected [ 814.522240][T12876] syzkaller #0 Not tainted [ 814.526686][T12876] ------------------------------------------------------ [ 814.533810][T12876] syz.0.2368/12876 is trying to acquire lock: [ 814.539931][T12876] ffff888145e32ee0 (&sb->s_type->i_mutex_key#23){++++}-{3:3}, at: configfs_depend_item_unlocked+0x14f/0x430 [ 814.551698][T12876] [ 814.551698][T12876] but task is already holding lock: [ 814.559091][T12876] ffffffff8cf20cc8 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf5/0x550 [ 814.568440][T12876] [ 814.568440][T12876] which lock already depends on the new lock. [ 814.568440][T12876] [ 814.578870][T12876] [ 814.578870][T12876] the existing dependency chain (in reverse order) is: [ 814.587909][T12876] [ 814.587909][T12876] -> #3 (tpg_instances_lock){+.+.}-{3:3}: [ 814.595852][T12876] __mutex_lock_common+0x1e5/0x2400 [ 814.601710][T12876] mutex_lock_nested+0x17/0x20 [ 814.607038][T12876] tcm_alloc_inst+0x61/0x190 [ 814.612181][T12876] usb_get_function_instance+0xd9/0x2e0 [ 814.618363][T12876] function_make+0x118/0x350 [ 814.623509][T12876] configfs_mkdir+0x511/0x9e0 [ 814.628736][T12876] vfs_mkdir+0x386/0x570 [ 814.633636][T12876] do_mkdirat+0x1dd/0x5c0 [ 814.638523][T12876] __x64_sys_mkdirat+0x85/0x90 [ 814.643882][T12876] do_syscall_64+0x4c/0xa0 [ 814.648877][T12876] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 814.655321][T12876] [ 814.655321][T12876] -> #2 (func_lock){+.+.}-{3:3}: [ 814.662480][T12876] __mutex_lock_common+0x1e5/0x2400 [ 814.668360][T12876] mutex_lock_nested+0x17/0x20 [ 814.673689][T12876] usb_get_function_instance+0x2a/0x2e0 [ 814.679800][T12876] function_make+0x118/0x350 [ 814.685036][T12876] configfs_mkdir+0x511/0x9e0 [ 814.690365][T12876] vfs_mkdir+0x386/0x570 [ 814.695161][T12876] do_mkdirat+0x1dd/0x5c0 [ 814.700159][T12876] __x64_sys_mkdirat+0x85/0x90 [ 814.705476][T12876] do_syscall_64+0x4c/0xa0 [ 814.710440][T12876] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 814.716985][T12876] [ 814.716985][T12876] -> #1 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 814.725271][T12876] __mutex_lock_common+0x1e5/0x2400 [ 814.731023][T12876] mutex_lock_nested+0x17/0x20 [ 814.736347][T12876] uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 814.743273][T12876] configfs_symlink+0x5a4/0x13b0 [ 814.748749][T12876] vfs_symlink+0x245/0x3d0 [ 814.753734][T12876] do_symlinkat+0x1ab/0x6b0 [ 814.758804][T12876] __x64_sys_symlink+0x7a/0x90 [ 814.764107][T12876] do_syscall_64+0x4c/0xa0 [ 814.769072][T12876] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 814.775522][T12876] [ 814.775522][T12876] -> #0 (&sb->s_type->i_mutex_key#23){++++}-{3:3}: [ 814.784214][T12876] __lock_acquire+0x2c66/0x7b50 [ 814.789737][T12876] lock_acquire+0x19e/0x400 [ 814.794815][T12876] down_write+0x38/0x60 [ 814.799520][T12876] configfs_depend_item_unlocked+0x14f/0x430 [ 814.806062][T12876] usbg_make_tpg+0x1dd/0x550 [ 814.811208][T12876] target_fabric_make_tpg+0xa0/0x6d0 [ 814.817145][T12876] configfs_mkdir+0x511/0x9e0 [ 814.822375][T12876] vfs_mkdir+0x386/0x570 [ 814.827167][T12876] do_mkdirat+0x1dd/0x5c0 [ 814.832090][T12876] __x64_sys_mkdirat+0x85/0x90 [ 814.837389][T12876] do_syscall_64+0x4c/0xa0 [ 814.842336][T12876] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 814.848792][T12876] [ 814.848792][T12876] other info that might help us debug this: [ 814.848792][T12876] [ 814.859020][T12876] Chain exists of: [ 814.859020][T12876] &sb->s_type->i_mutex_key#23 --> func_lock --> tpg_instances_lock [ 814.859020][T12876] [ 814.872841][T12876] Possible unsafe locking scenario: [ 814.872841][T12876] [ 814.880307][T12876] CPU0 CPU1 [ 814.885671][T12876] ---- ---- [ 814.891043][T12876] lock(tpg_instances_lock); [ 814.895761][T12876] lock(func_lock); [ 814.902453][T12876] lock(tpg_instances_lock); [ 814.909656][T12876] lock(&sb->s_type->i_mutex_key#23); [ 814.915123][T12876] [ 814.915123][T12876] *** DEADLOCK *** [ 814.915123][T12876] [ 814.923368][T12876] 4 locks held by syz.0.2368/12876: [ 814.928566][T12876] #0: ffff888141184460 (sb_writers#17){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 814.937867][T12876] #1: ffff888060c37900 (&sb->s_type->i_mutex_key#7/1){+.+.}-{3:3}, at: filename_create+0x20b/0x450 [ 814.948760][T12876] #2: ffffffff8cc24710 (&subsys->su_mutex){+.+.}-{3:3}, at: configfs_mkdir+0x4b5/0x9e0 [ 814.958527][T12876] #3: ffffffff8cf20cc8 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf5/0x550 [ 814.968192][T12876] [ 814.968192][T12876] stack backtrace: [ 814.974100][T12876] CPU: 1 PID: 12876 Comm: syz.0.2368 Not tainted syzkaller #0 [ 814.981663][T12876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 814.991814][T12876] Call Trace: [ 814.995100][T12876] [ 814.998030][T12876] dump_stack_lvl+0x188/0x250 [ 815.002744][T12876] ? load_image+0x410/0x410 [ 815.007266][T12876] ? show_regs_print_info+0x20/0x20 [ 815.012478][T12876] ? print_circular_bug+0x12b/0x1a0 [ 815.017687][T12876] check_noncircular+0x296/0x330 [ 815.022633][T12876] ? add_chain_block+0x9b0/0x9b0 [ 815.027572][T12876] ? lockdep_lock+0xf1/0x1f0 [ 815.032169][T12876] ? mark_lock+0x94/0x320 [ 815.036497][T12876] ? mark_lock+0x94/0x320 [ 815.040822][T12876] ? _find_first_zero_bit+0xd1/0xf0 [ 815.046173][T12876] __lock_acquire+0x2c66/0x7b50 [ 815.051039][T12876] ? verify_lock_unused+0x140/0x140 [ 815.056238][T12876] ? __mutex_trylock_common+0x15c/0x260 [ 815.062047][T12876] ? rcu_lock_release+0x20/0x20 [ 815.067143][T12876] lock_acquire+0x19e/0x400 [ 815.071796][T12876] ? configfs_depend_item_unlocked+0x14f/0x430 [ 815.078290][T12876] ? __might_sleep+0xf0/0xf0 [ 815.082967][T12876] ? __kasan_kmalloc+0xc6/0xe0 [ 815.087847][T12876] ? read_lock_is_recursive+0x10/0x10 [ 815.093248][T12876] ? mutex_lock_io_nested+0x60/0x60 [ 815.098570][T12876] down_write+0x38/0x60 [ 815.102830][T12876] ? configfs_depend_item_unlocked+0x14f/0x430 [ 815.109102][T12876] configfs_depend_item_unlocked+0x14f/0x430 [ 815.115127][T12876] usbg_make_tpg+0x1dd/0x550 [ 815.119763][T12876] ? mutex_lock_io_nested+0x60/0x60 [ 815.124980][T12876] ? usbg_drop_tport+0x20/0x20 [ 815.129765][T12876] ? vscnprintf+0x80/0x80 [ 815.134272][T12876] target_fabric_make_tpg+0xa0/0x6d0 [ 815.139568][T12876] ? target_fabric_release_wwn+0xa0/0xa0 [ 815.145225][T12876] configfs_mkdir+0x511/0x9e0 [ 815.149920][T12876] vfs_mkdir+0x386/0x570 [ 815.154354][T12876] do_mkdirat+0x1dd/0x5c0 [ 815.158719][T12876] ? vfs_mkdir+0x570/0x570 [ 815.163218][T12876] __x64_sys_mkdirat+0x85/0x90 [ 815.168019][T12876] do_syscall_64+0x4c/0xa0 [ 815.172450][T12876] ? clear_bhb_loop+0x30/0x80 [ 815.177338][T12876] ? clear_bhb_loop+0x30/0x80 [ 815.182215][T12876] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 815.188166][T12876] RIP: 0033:0x7f89212ad159 [ 815.192591][T12876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 815.212784][T12876] RSP: 002b:00007f891f4e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 815.221217][T12876] RAX: ffffffffffffffda RBX: 00007f8921535090 RCX: 00007f89212ad159 [ 815.229205][T12876] RDX: 00000000000001ff RSI: 0000200000000380 RDI: ffffffffffffff9c [ 815.237192][T12876] RBP: 00007f892134406b R08: 0000000000000000 R09: 0000000000000000 [ 815.245235][T12876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 815.253224][T12876] R13: 00007f8921535128 R14: 00007f8921535090 R15: 00007fff6cfd2d98 [ 815.261322][T12876] [ 815.264569][ T9] bond1: (slave macvlan2): failed to get link speed/duplex [ 815.429029][ T9100] bond1: (slave macvlan2): failed to get link speed/duplex [ 817.378366][ T9080] net_ratelimit: 15 callbacks suppressed [ 817.378388][ T9080] bond1: (slave macvlan2): failed to get link speed/duplex [ 817.508363][ T9096] bond1: (slave macvlan2): failed to get link speed/duplex [ 817.627446][ T9096] bond1: (slave macvlan2): failed to get link speed/duplex [ 817.746648][ T9096] bond1: (slave macvlan2): failed to get link speed/duplex [ 817.865818][ T9080] bond1: (slave macvlan2): failed to get link speed/duplex [ 817.984962][ T9096] bond1: (slave macvlan2): failed to get link speed/duplex [ 818.114961][ T9080] bond1: (slave macvlan2): failed to get link speed/duplex [ 818.245358][ T9080] bond1: (slave macvlan2): failed to get link speed/duplex [ 818.364033][ T9080] bond1: (slave macvlan2): failed to get link speed/duplex [ 818.483626][ T9096] bond1: (slave macvlan2): failed to get link speed/duplex [ 822.826771][ T9080] net_ratelimit: 35 callbacks suppressed [ 822.826790][ T9080] bond1: (slave macvlan2): failed to get link speed/duplex [ 822.956766][ T9080] bond1: (slave macvlan2): failed to get link speed/duplex [ 823.076356][ T9096] bond1: (slave macvlan2): failed to get link speed/duplex [ 823.196024][ T9096] bond1: (slave macvlan2): failed to get link speed/duplex [ 823.314684][ T9096] bond1: (slave macvlan2): failed to get link speed/duplex [ 823.433397][ T9096] bond1: (slave macvlan2): failed to get link speed/duplex [ 823.552991][ T9096] bond1: (slave macvlan2): failed to get link speed/duplex [ 823.671737][ T9080] bond1: (slave macvlan2): failed to get link speed/duplex [ 823.790851][ T9096] bond1: (slave macvlan2): failed to get link speed/duplex [ 823.909977][ T9] bond1: (slave macvlan2): failed to get link speed/duplex