last executing test programs: 7.456111555s ago: executing program 2 (id=1129): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x4000080) 7.044117681s ago: executing program 2 (id=1132): r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000003c0)={0x14, r0, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x400c9}, 0x20000000) 7.01028324s ago: executing program 4 (id=1133): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendto$packet(r0, &(0x7f0000000140)="a6bea8a120e5f8320c30e4500800a5e986f34c10", 0x14, 0x0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) 6.387176272s ago: executing program 1 (id=1137): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 6.374443343s ago: executing program 2 (id=1138): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x9003000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x0, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "d9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x43, 0x3}}, @common=@inet=@socket3={{0x28}, 0x51}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$unix(0x1, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6.2393783s ago: executing program 4 (id=1140): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @window, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 6.048726551s ago: executing program 1 (id=1141): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024001d0042c411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab98eb1d9cc98c2a4f837c", 0x4c}], 0x1}, 0x0) 5.878108516s ago: executing program 2 (id=1143): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) setsockopt(r2, 0x1, 0x10000000000009, &(0x7f0000000180)="00050002", 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x4, &(0x7f0000000040)=0x3e, 0x4) connect$inet6(r2, &(0x7f0000000380)={0xa, 0xfffe, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}, 0x1c) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)={0x38, 0x7, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_HANDLE={0xc}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) r3 = syz_open_procfs$pagemap(0x0, &(0x7f00000012c0)) preadv(r3, &(0x7f0000000400)=[{&(0x7f0000000040)=""/16, 0xffffff9b}, {&(0x7f0000000080)=""/195, 0xcd}], 0x2, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) r4 = io_uring_setup(0x4837, &(0x7f0000001240)={0x0, 0x2875, 0x0, 0xfffffffc}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='./file0/file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000680)={0x180, 0x1, 0xa, 0xc6260cd7d3089b6d, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xaa, 0x6, "a8591d5d43d777768865bd134b1c27f341544f5adde0f07db2e3bc2109533588769f218b9e6a1ce6b8aecf66f13abef7c7a86d9d610908b6f09fc1cbfc92810635d32b1d0f7e7f62fa3f03bf79790648c613f2fb6a576d8dee2b7c7625d75f332bd038b4245d5aa1331ce7e57d5a3a6ce87f2ce608bfe1508fe793ee7ec05b3cff6e3bfa1447791f6ef905455af1cdb86c0295a277da23404e796602a0faee357fcf60427f04"}, @NFTA_TABLE_USERDATA={0x84, 0x6, "f578f09fecc56d63f96e4ff6a448788101028b5ec2e9ac5562a898467c10334d0e81afbf58982927bdb0974fdcb5201e9b4ccb446b426ee68b3e86ff5988d8123c543a0f4c3daef9eee4a302de3c051ac45a9ec6403314ab12baabc122ade74df83d697c571a90f8c2e2ae7e6f8e6c2ba1c3595a77fb6bbb4b435aa3f375234a"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x5}]}, 0x180}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x88700a, 0x0) umount2(&(0x7f0000000100)='./file0/file0\x00', 0xb) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$FS_IOC_SETFSLABEL(r5, 0x8923, &(0x7f0000000000)="37c4a5e33a6081f2a3fcc30a2ea92ef80f6427c344d1178a1c43ca4fabd6ec67b9f27cd83b08959c0e471c4ae78b9cc4c7603c7a040782f3c379a03019e3bfd92533743c915077dd984784f531853d184c539dcac54ff2e955ba3fd1c00b016be57263b9695d15c56bbfcc195f2becfab2fc273ea8aee645f9062c6ac6c6c02f59935620d42a59a7e285c4e602b45acbf3e1bfd871d18e4f37b281b5e13b55a48e24a9981b78fe163a9de127f5b2c8ae0a12cbc189b6a1f44e298ff0acca36a0ecd21c85742bf68ca3ddf9884b543d868eac5217ad9b6e5c0f7bba6311f4b36020ec81e814f17062e2d5766abba3d757582a9b922b726173db7a852dc7983fcc") close_range(r4, 0xffffffffffffffff, 0x0) 4.933763379s ago: executing program 1 (id=1148): ptrace(0x4206, 0x0) tkill(0x0, 0x12) ptrace(0x4208, 0x0) 4.347453027s ago: executing program 1 (id=1149): r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000003c0)={0x14, r0, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x400c9}, 0x20000000) 4.341729017s ago: executing program 0 (id=1150): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) 3.906489881s ago: executing program 0 (id=1151): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 3.412535126s ago: executing program 1 (id=1152): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)={0x94, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x59, 0xe, {{{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1}, @void, @void, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x3}}, @val={0x76, 0x6}}}, @NL80211_ATTR_FTM_RESPONDER={0xc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x4}]}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x9}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x94}}, 0x0) 2.935521631s ago: executing program 0 (id=1154): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 2.804638131s ago: executing program 3 (id=1155): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f0000000001000000000000", 0x1c) 2.543854059s ago: executing program 0 (id=1156): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x4000080) 2.401070003s ago: executing program 1 (id=1157): r0 = memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x2) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$UHID_INPUT(r4, &(0x7f0000000540)={0x8, {"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", 0x1000}}, 0x1006) syz_mount_image$bcachefs(&(0x7f0000005d80), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1, 0x5dd5, &(0x7f000000ac40)="$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") close_range(r0, 0xffffffffffffffff, 0x0) 2.187919753s ago: executing program 3 (id=1158): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024001d0042c411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab98eb1d9cc98c2a4f837c", 0x4c}], 0x1}, 0x0) 1.910784655s ago: executing program 0 (id=1159): ptrace(0x4206, 0x0) tkill(0x0, 0x12) ptrace(0x4208, 0x0) 1.874896009s ago: executing program 4 (id=1160): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000003380)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r1, &(0x7f0000008dc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000540)="888303263a9e1cd1b50fc2efc626709c96bcab98beeaa9077149fd4ffeb7b7859b0a68c39e8881cab4fdf65d791358ed734acb07149c487b4f50c5f917139e9ddd44ad39181491d09461f20f51503283b41f6018eb59e878178075bbae9936080a53e68b3cabbb85ca082bf489fa6b1abd74c346ff049623fa21722d20463695f81a234de702e58d0b7a3fcd183be373c73e607e8cfe2b65abd2cc3b97daca65b674bbd651de2ace292d1db665ae1bd9575bfd33675399566e7c5c56d3d7232a307b496f311ca8d3d15ec4c824ed0f4a672c6855c86e0d8d2ec8291a82a3f15e2cce9e", 0xe3}, {&(0x7f0000000200)="c0ce26486d164b431db4444094be80f5dfee9ba9a65a4d50b8f83f2a9024e5586a614f02b063595a8172c55e67c5d085c9bf44d4ac2cb536f9dd56007c79", 0x3e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000006c0)="9de6d3750349c2f3847fa4a05f94adb3d21fc68c161aea97b382463136de885846c0513c1d9af3f721cad5a7a753816b79e9af459a7719536932401f194b7c3cdd1b9f5b281e875b96304c31f9aa021642552f18aa7d269bceb614a8895c589cebc5deea722bc9efaf97ab2f098d99b96210c991e8496eae1a0558cc759f3886cc735c0cea5119c10be69068addbd4986f7a7b503ff93af91dd3d173d20ea095e56d3b9bf62b6d547efc4b5cf94bd633ef418ece871a5bdb42ffb27661c222754bbb333c1e65ec05855be1243417f27d30c5e7", 0xd3}, {&(0x7f00000002c0)="468acdb4e4cf0427161e4b334f4c94ebd825850e7c132a1217aa3b5547f1dcc73efdc575d16f90985e478231fe76ee24fcfe9799497db0cbe5954acded7a24622c2463bae7529c05a6c81e33ee93869fd7c57feff17c9cd809b1be241edcede17e4643efc8c2baed1e2442f3a236fe60e4685d2971077e625dce6f0b6c216ffcebecd763c39e87eb641e7046dd68949acc02", 0x92}, {&(0x7f0000000880)="52a67f4b2e3245fb", 0x8}, {&(0x7f00000008c0)="910173d811a77377207b361dd63bd456ea8e58a1e55699c4fd0206e27161045d62989959f8fa93a3437f4a33e558ce924e3be64fd73c92b733b2c178599b60cf9f37b97362210516665be1e110544d2a87c7750450a6a73dea6172b7d97667050fb8309ed2a18f0b5f4895684e", 0x6d}], 0x4}}], 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000380)={r1, r0}) 1.848301095s ago: executing program 2 (id=1161): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) 1.661486117s ago: executing program 3 (id=1162): r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000003c0)={0x14, r0, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x400c9}, 0x20000000) 1.529495059s ago: executing program 0 (id=1163): syz_open_dev$vcsu(&(0x7f0000000280), 0x0, 0x0) prctl$PR_GET_TIMERSLACK(0x1e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prctl$PR_GET_TIMERSLACK(0x1e) unshare(0x400) r0 = open(&(0x7f0000000040)='.\x00', 0x1d5c660a71619b30, 0x83) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000100)={{r0}, 0x80000000, 0x1ff, 0x40800000}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000102505a1a440000102030109025c0002010000000904000001020d000005240600010524"], 0x0) ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x550c, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001e0001000000000000000000070000006f69ac8222"], 0x28}}, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) capset(0x0, &(0x7f0000000500)) symlinkat(0x0, 0xffffffffffffffff, 0x0) r4 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001b00)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x5}, {}, {0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES16], 0xac}}, 0x24000091) 1.480040101s ago: executing program 4 (id=1164): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 1.454843726s ago: executing program 3 (id=1165): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x9003000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x0, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "d9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x43, 0x3}}, @common=@inet=@socket3={{0x28}, 0x51}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = dup2(0xffffffffffffffff, r2) close_range(r3, 0xffffffffffffffff, 0x0) 1.175884517s ago: executing program 2 (id=1166): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 1.09136749s ago: executing program 4 (id=1167): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x56, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)={0x94, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x59, 0xe, {{{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1}, @void, @void, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x3}}, @val={0x76, 0x6}}}, @NL80211_ATTR_FTM_RESPONDER={0xc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x4}]}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x9}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x94}}, 0x0) 271.092092ms ago: executing program 3 (id=1169): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x4000080) 261.347312ms ago: executing program 4 (id=1170): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=1171): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) setsockopt(r2, 0x1, 0x10000000000009, &(0x7f0000000180)="00050002", 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x4, &(0x7f0000000040)=0x3e, 0x4) connect$inet6(r2, &(0x7f0000000380)={0xa, 0xfffe, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}, 0x1c) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)={0x38, 0x7, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_HANDLE={0xc}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) r3 = syz_open_procfs$pagemap(0x0, &(0x7f00000012c0)) preadv(r3, &(0x7f0000000400)=[{&(0x7f0000000040)=""/16, 0xffffff9b}, {&(0x7f0000000080)=""/195, 0xcd}], 0x2, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) r4 = io_uring_setup(0x4837, &(0x7f0000001240)={0x0, 0x2875, 0x0, 0xfffffffc}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='./file0/file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000680)={0x180, 0x1, 0xa, 0xc6260cd7d3089b6d, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xaa, 0x6, "a8591d5d43d777768865bd134b1c27f341544f5adde0f07db2e3bc2109533588769f218b9e6a1ce6b8aecf66f13abef7c7a86d9d610908b6f09fc1cbfc92810635d32b1d0f7e7f62fa3f03bf79790648c613f2fb6a576d8dee2b7c7625d75f332bd038b4245d5aa1331ce7e57d5a3a6ce87f2ce608bfe1508fe793ee7ec05b3cff6e3bfa1447791f6ef905455af1cdb86c0295a277da23404e796602a0faee357fcf60427f04"}, @NFTA_TABLE_USERDATA={0x84, 0x6, "f578f09fecc56d63f96e4ff6a448788101028b5ec2e9ac5562a898467c10334d0e81afbf58982927bdb0974fdcb5201e9b4ccb446b426ee68b3e86ff5988d8123c543a0f4c3daef9eee4a302de3c051ac45a9ec6403314ab12baabc122ade74df83d697c571a90f8c2e2ae7e6f8e6c2ba1c3595a77fb6bbb4b435aa3f375234a"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x5}]}, 0x180}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x88700a, 0x0) umount2(&(0x7f0000000100)='./file0/file0\x00', 0xb) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$FS_IOC_SETFSLABEL(r5, 0x8923, &(0x7f0000000000)="37c4a5e33a6081f2a3fcc30a2ea92ef80f6427c344d1178a1c43ca4fabd6ec67b9f27cd83b08959c0e471c4ae78b9cc4c7603c7a040782f3c379a03019e3bfd92533743c915077dd984784f531853d184c539dcac54ff2e955ba3fd1c00b016be57263b9695d15c56bbfcc195f2becfab2fc273ea8aee645f9062c6ac6c6c02f59935620d42a59a7e285c4e602b45acbf3e1bfd871d18e4f37b281b5e13b55a48e24a9981b78fe163a9de127f5b2c8ae0a12cbc189b6a1f44e298ff0acca36a0ecd21c85742bf68ca3ddf9884b543d868eac5217ad9b6e5c0f7bba6311f4b36020ec81e814f17062e2d5766abba3d757582a9b922b726173db7a852dc7983fcc") close_range(r4, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 224.0.0.2:0 - no destination available [ 624.584102][ T5236] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 624.634114][ T7178] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.745391][ T7178] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.783317][ T5236] usb 5-1: Using ep0 maxpacket: 8 [ 624.815027][ T5236] usb 5-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=32.a3 [ 624.824561][ T5236] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.832973][ T5236] usb 5-1: Product: syz [ 624.837455][ T5236] usb 5-1: Manufacturer: syz [ 624.842536][ T5236] usb 5-1: SerialNumber: syz [ 624.894047][ T5236] usb 5-1: config 0 descriptor?? [ 624.991974][ T7178] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.258361][ T8342] chnl_net:caif_netlink_parms(): no params data found [ 625.349966][ T5236] msi2500 5-1:0.0: Registered as swradio16 [ 625.356727][ T5236] msi2500 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 625.371303][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 625.384863][ T5236] usb 5-1: USB disconnect, device number 15 [ 625.451693][ T7178] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.499235][ T8381] program syz.0.684 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 625.694487][ T4551] Bluetooth: hci1: command tx timeout [ 625.927154][ T4551] Bluetooth: hci0: command tx timeout [ 626.056062][ T8328] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.064985][ T8328] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.072979][ T8328] bridge_slave_0: entered allmulticast mode [ 626.082821][ T8328] bridge_slave_0: entered promiscuous mode [ 626.314680][ T8328] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.322826][ T8328] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.330773][ T8328] bridge_slave_1: entered allmulticast mode [ 626.340547][ T8328] bridge_slave_1: entered promiscuous mode [ 626.411333][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 626.507571][ T7178] bridge_slave_1: left allmulticast mode [ 626.514430][ T7178] bridge_slave_1: left promiscuous mode [ 626.521211][ T7178] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.544072][ T7178] bridge_slave_0: left allmulticast mode [ 626.550028][ T7178] bridge_slave_0: left promiscuous mode [ 626.558755][ T7178] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.120961][ T7178] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 627.180711][ T7178] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 627.206807][ T7178] bond0 (unregistering): Released all slaves [ 627.386906][ T8394] netlink: 12 bytes leftover after parsing attributes in process `syz.4.688'. [ 627.439092][ T8328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 627.451334][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 627.583607][ T8342] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.591818][ T8342] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.599692][ T8342] bridge_slave_0: entered allmulticast mode [ 627.609369][ T8342] bridge_slave_0: entered promiscuous mode [ 627.643410][ T8328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 627.674699][ T8342] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.682900][ T8342] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.690810][ T8342] bridge_slave_1: entered allmulticast mode [ 627.701395][ T8342] bridge_slave_1: entered promiscuous mode [ 627.818214][ T4551] Bluetooth: hci1: command tx timeout [ 627.872709][ T8408] program syz.2.693 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 628.013694][ T4551] Bluetooth: hci0: command tx timeout [ 628.182045][ T44] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 628.370173][ T8328] team0: Port device team_slave_0 added [ 628.408331][ T8342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 628.418555][ T44] usb 1-1: config index 0 descriptor too short (expected 12336, got 27) [ 628.427628][ T44] usb 1-1: config 48 has too many interfaces: 48, using maximum allowed: 32 [ 628.436773][ T44] usb 1-1: config 48 has an invalid descriptor of length 48, skipping remainder of the config [ 628.447481][ T44] usb 1-1: config 48 has 0 interfaces, different from the descriptor's value: 48 [ 628.457086][ T44] usb 1-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 628.467230][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.494446][ T8328] team0: Port device team_slave_1 added [ 628.501415][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 628.522895][ T8342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 628.713949][ T7178] hsr_slave_0: left promiscuous mode [ 628.748705][ T7178] hsr_slave_1: left promiscuous mode [ 628.758441][ T7178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 628.773040][ T7178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 628.789146][ T44] usb 1-1: string descriptor 0 read error: -71 [ 628.790478][ T7178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 628.805779][ T7178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 628.814857][ T44] usb 1-1: USB disconnect, device number 12 [ 628.835874][ T7178] veth1_macvtap: left promiscuous mode [ 628.843244][ T7178] veth0_macvtap: left promiscuous mode [ 628.849363][ T7178] veth1_vlan: left promiscuous mode [ 628.855229][ T7178] veth0_vlan: left promiscuous mode [ 628.964421][ T8424] loop2: detected capacity change from 0 to 512 [ 629.045774][ T8424] EXT4-fs error (device loop2): ext4_orphan_get:1388: inode #15: comm syz.2.697: casefold flag without casefold feature [ 629.075068][ T8424] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.697: couldn't read orphan inode 15 (err -117) [ 629.102012][ T8424] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 629.221244][ T44] infiniband syz0: ib_query_port failed (-19) [ 629.531347][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 629.686899][ T7178] team0 (unregistering): Port device team_slave_1 removed [ 629.719837][ T7178] team0 (unregistering): Port device team_slave_0 removed [ 629.851708][ T4551] Bluetooth: hci1: command tx timeout [ 630.284534][ T8328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 630.293454][ T8328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 630.321694][ T8328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 630.408896][ T8342] team0: Port device team_slave_0 added [ 630.430701][ T8342] team0: Port device team_slave_1 added [ 630.571326][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 630.590295][ T7819] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 630.615395][ T8328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 630.622742][ T8328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 630.649442][ T8328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 630.902044][ T8342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 630.909274][ T8342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 630.940090][ T8342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 630.962335][ T7178] IPVS: stop unused estimator thread 0... [ 631.139910][ T8342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 631.148467][ T8342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 631.175162][ T8342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 631.317987][ T8432] FAULT_INJECTION: forcing a failure. [ 631.317987][ T8432] name failslab, interval 1, probability 0, space 0, times 0 [ 631.332277][ T8432] CPU: 1 UID: 0 PID: 8432 Comm: syz.2.700 Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 631.342892][ T8432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 631.353238][ T8432] Call Trace: [ 631.356744][ T8432] [ 631.359917][ T8432] dump_stack_lvl+0x216/0x2d0 [ 631.364964][ T8432] dump_stack+0x1e/0x30 [ 631.369449][ T8432] should_fail_ex+0x74e/0x800 [ 631.374527][ T8432] should_failslab+0x17f/0x210 [ 631.379707][ T8432] kmem_cache_alloc_node_noprof+0xeb/0xb80 [ 631.385885][ T8432] ? __alloc_skb+0x1e9/0x7b0 [ 631.390866][ T8432] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 631.397054][ T8432] __alloc_skb+0x1e9/0x7b0 [ 631.401877][ T8432] alloc_skb_with_frags+0xc8/0xd00 [ 631.407324][ T8432] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 631.413765][ T8432] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 631.419968][ T8432] sock_alloc_send_pskb+0xa81/0xbf0 [ 631.425548][ T8432] packet_sendmsg+0x7319/0xa370 [ 631.430776][ T8432] ? do_syscall_64+0xcd/0x1e0 [ 631.435824][ T8432] ? kmsan_get_metadata+0x13e/0x1c0 [ 631.441396][ T8432] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 631.447585][ T8432] ? aa_label_sk_perm+0x677/0x7b0 [ 631.452952][ T8432] ? filter_irq_stacks+0x60/0x1a0 [ 631.458373][ T8432] ? kmsan_get_metadata+0x13e/0x1c0 [ 631.464012][ T8432] ? __pfx_packet_sendmsg+0x10/0x10 [ 631.469569][ T8432] ? __pfx_packet_sendmsg+0x10/0x10 [ 631.475132][ T8432] __sock_sendmsg+0x30f/0x380 [ 631.480188][ T8432] __sys_sendto+0x67f/0x830 [ 631.485015][ T8432] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 631.491716][ T8432] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 631.498158][ T8432] ? ksys_write+0x404/0x4c0 [ 631.503060][ T8432] __x64_sys_sendto+0x125/0x1d0 [ 631.508254][ T8432] x64_sys_call+0x3373/0x3ba0 [ 631.513308][ T8432] do_syscall_64+0xcd/0x1e0 [ 631.518151][ T8432] ? clear_bhb_loop+0x25/0x80 [ 631.523230][ T8432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.529521][ T8432] RIP: 0033:0x7f40b8d7def9 [ 631.534230][ T8432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 631.554190][ T8432] RSP: 002b:00007f40b9c05038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 631.562981][ T8432] RAX: ffffffffffffffda RBX: 00007f40b8f35f80 RCX: 00007f40b8d7def9 [ 631.571261][ T8432] RDX: 000000000000000e RSI: 0000000020000840 RDI: 0000000000000004 [ 631.579534][ T8432] RBP: 00007f40b9c05090 R08: 0000000020000140 R09: 0000000000000014 [ 631.587915][ T8432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 631.590184][ T8430] loop4: detected capacity change from 0 to 4096 [ 631.596067][ T8432] R13: 0000000000000000 R14: 00007f40b8f35f80 R15: 00007ffe8811c3b8 [ 631.596207][ T8432] [ 631.621618][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 631.670609][ T8430] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 631.696166][ T8328] hsr_slave_0: entered promiscuous mode [ 631.724866][ T8430] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 631.750437][ T8328] hsr_slave_1: entered promiscuous mode [ 631.779975][ T8328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 631.788194][ T8328] Cannot create hsr debugfs directory [ 631.919400][ T8430] ntfs3: loop4: Failed to initialize $Extend/$ObjId. [ 632.168613][ T29] audit: type=1326 audit(1726947365.052:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8429 comm="syz.4.699" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb981d7def9 code=0x0 [ 632.400680][ T8342] hsr_slave_0: entered promiscuous mode [ 632.462614][ T8342] hsr_slave_1: entered promiscuous mode [ 632.473371][ T8342] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 632.481851][ T8342] Cannot create hsr debugfs directory [ 632.651321][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 632.953865][ T8440] program syz.0.703 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 633.521967][ T8452] FAULT_INJECTION: forcing a failure. [ 633.521967][ T8452] name failslab, interval 1, probability 0, space 0, times 0 [ 633.535126][ T8452] CPU: 0 UID: 0 PID: 8452 Comm: syz.0.706 Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 633.545737][ T8452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 633.556112][ T8452] Call Trace: [ 633.559593][ T8452] [ 633.562723][ T8452] dump_stack_lvl+0x216/0x2d0 [ 633.567720][ T8452] dump_stack+0x1e/0x30 [ 633.572164][ T8452] should_fail_ex+0x74e/0x800 [ 633.577200][ T8452] should_failslab+0x17f/0x210 [ 633.582288][ T8452] kmem_cache_alloc_noprof+0xe2/0xb20 [ 633.587961][ T8452] ? skb_clone+0x303/0x550 [ 633.592679][ T8452] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 633.598837][ T8452] skb_clone+0x303/0x550 [ 633.603384][ T8452] __netlink_deliver_tap+0x607/0xc90 [ 633.608993][ T8452] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 633.615124][ T8452] ? kmsan_get_metadata+0x13e/0x1c0 [ 633.620645][ T8452] netlink_sendskb+0x23f/0x270 [ 633.625715][ T8452] netlink_unicast+0x70c/0x1260 [ 633.630877][ T8452] netlink_ack+0xb04/0xe80 [ 633.635616][ T8452] netlink_rcv_skb+0x510/0x650 [ 633.640693][ T8452] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 633.646501][ T8452] ? __pfx_sock_diag_rcv+0x10/0x10 [ 633.651940][ T8452] sock_diag_rcv+0x34/0x40 [ 633.656677][ T8452] netlink_unicast+0xf52/0x1260 [ 633.661839][ T8452] netlink_sendmsg+0x10da/0x11e0 [ 633.667104][ T8452] ? __pfx_netlink_sendmsg+0x10/0x10 [ 633.672697][ T8452] ? __pfx_netlink_sendmsg+0x10/0x10 [ 633.678292][ T8452] __sock_sendmsg+0x30f/0x380 [ 633.683292][ T8452] ____sys_sendmsg+0x877/0xb60 [ 633.688374][ T8452] ___sys_sendmsg+0x28d/0x3c0 [ 633.691611][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 633.693254][ T8452] ? kmsan_get_metadata+0x13e/0x1c0 [ 633.705772][ T8452] ? __rcu_read_unlock+0x7b/0xe0 [ 633.711030][ T8452] ? __fget_files+0x4f5/0x5c0 [ 633.716058][ T8452] ? kmsan_get_metadata+0x13e/0x1c0 [ 633.721605][ T8452] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 633.727777][ T8452] __x64_sys_sendmsg+0x301/0x490 [ 633.733029][ T8452] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 633.739171][ T8452] x64_sys_call+0x2da0/0x3ba0 [ 633.744173][ T8452] do_syscall_64+0xcd/0x1e0 [ 633.748970][ T8452] ? clear_bhb_loop+0x25/0x80 [ 633.753980][ T8452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.760211][ T8452] RIP: 0033:0x7f759157def9 [ 633.764879][ T8452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 633.784889][ T8452] RSP: 002b:00007f7590fff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 633.793807][ T8452] RAX: ffffffffffffffda RBX: 00007f7591735f80 RCX: 00007f759157def9 [ 633.802045][ T8452] RDX: 0000000000040000 RSI: 0000000020000b40 RDI: 0000000000000003 [ 633.810264][ T8452] RBP: 00007f7590fff090 R08: 0000000000000000 R09: 0000000000000000 [ 633.818485][ T8452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 633.826892][ T8452] R13: 0000000000000000 R14: 00007f7591735f80 R15: 00007ffe5c22f638 [ 633.835130][ T8452] [ 634.516488][ T8342] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 634.560663][ T8457] loop4: detected capacity change from 0 to 512 [ 634.593206][ T8342] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 634.695460][ T8342] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 634.717690][ T8457] EXT4-fs error (device loop4): ext4_orphan_get:1388: inode #15: comm syz.4.708: casefold flag without casefold feature [ 634.731346][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 634.783677][ T8457] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.708: couldn't read orphan inode 15 (err -117) [ 634.853758][ T8457] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 634.877776][ T8342] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 635.074911][ T6481] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.248205][ T8328] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 635.338090][ T8328] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 635.402106][ T8328] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 635.533323][ T8328] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 635.771328][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 636.197103][ T8342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 636.409947][ T8342] 8021q: adding VLAN 0 to HW filter on device team0 [ 636.440630][ T2479] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.448550][ T2479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 636.621606][ T2479] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.629350][ T2479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 636.811783][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 637.024913][ T8328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 637.232127][ T8475] program syz.2.714 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 637.256985][ T8328] 8021q: adding VLAN 0 to HW filter on device team0 [ 637.354133][ T7178] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.362111][ T7178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 637.498030][ T7178] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.505987][ T7178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 637.851398][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 638.373093][ T8473] loop4: detected capacity change from 0 to 4096 [ 638.432540][ T8473] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 638.570958][ T8473] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 638.811291][ T8473] ntfs3: loop4: Failed to initialize $Extend/$ObjId. [ 638.891425][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 638.954689][ T29] audit: type=1326 audit(1726947371.862:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8472 comm="syz.4.713" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb981d7def9 code=0x0 [ 639.057527][ T8342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 639.524123][ T8342] veth0_vlan: entered promiscuous mode [ 639.570686][ T8328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 639.594697][ T8489] loop2: detected capacity change from 0 to 512 [ 639.604161][ T8489] EXT4-fs: Ignoring removed mblk_io_submit option [ 639.630656][ T8342] veth1_vlan: entered promiscuous mode [ 639.712808][ T8489] EXT4-fs (loop2): Test dummy encryption mode enabled [ 639.811956][ T8328] veth0_vlan: entered promiscuous mode [ 639.855078][ T8328] veth1_vlan: entered promiscuous mode [ 639.931373][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 639.967578][ T8328] veth0_macvtap: entered promiscuous mode [ 639.990856][ T8328] veth1_macvtap: entered promiscuous mode [ 640.084799][ T8328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.095767][ T8328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.097526][ T8489] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a064e01c, mo2=0102] [ 640.105841][ T8328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.105951][ T8328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.106035][ T8328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.106136][ T8328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.112256][ T8328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 640.253225][ T8328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.264716][ T8328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.274143][ T8489] System zones: 1-12 [ 640.274831][ T8328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.274877][ T8489] [ 640.274954][ T8328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.307879][ T8328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 640.337615][ T8489] EXT4-fs error (device loop2): ext4_orphan_get:1388: inode #15: comm syz.2.716: casefold flag without casefold feature [ 640.349970][ T8328] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.359589][ T8328] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.369784][ T8328] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.379039][ T8328] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.448337][ T8489] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.716: couldn't read orphan inode 15 (err -117) [ 640.463945][ T8489] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 640.711484][ T8342] veth0_macvtap: entered promiscuous mode [ 640.785313][ T8342] veth1_macvtap: entered promiscuous mode [ 640.971322][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 640.980570][ T8342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.991619][ T8342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.001825][ T8342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 641.012905][ T8342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.023115][ T8342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 641.034339][ T8342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.044522][ T8342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 641.056406][ T8342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.072554][ T8342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 641.269761][ T8342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.280755][ T8342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.290952][ T8342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.304073][ T8342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.314254][ T8342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.325300][ T8342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.341000][ T8342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 641.422762][ T8342] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.432427][ T8342] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.441706][ T8342] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.450811][ T8342] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.452259][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 641.642688][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 641.654422][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 641.664920][ T10] usb 1-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00 [ 641.678089][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.801702][ T8507] loop4: detected capacity change from 0 to 512 [ 641.869841][ T10] usb 1-1: config 0 descriptor?? [ 641.885832][ T8489] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))" [ 641.972501][ T8507] EXT4-fs error (device loop4): ext4_orphan_get:1388: inode #15: comm syz.4.720: casefold flag without casefold feature [ 642.000842][ T8507] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.720: couldn't read orphan inode 15 (err -117) [ 642.014641][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 642.069671][ T8507] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 642.198230][ T8489] EXT4-fs error (device loop2): ext4_add_entry:2437: inode #2: comm syz.2.716: Directory hole found for htree leaf block 0 [ 642.383237][ T8489] EXT4-fs error (device loop2): ext4_add_entry:2437: inode #2: comm syz.2.716: Directory hole found for htree leaf block 0 [ 642.422862][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 642.429685][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 642.502084][ T10] usb 1-1: USB disconnect, device number 13 [ 642.599964][ T6481] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.051406][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 643.084217][ T8522] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 643.084217][ T8522] The task syz.2.716 (8522) triggered the difference, watch for misbehavior. [ 644.027334][ T8534] program syz.4.723 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 644.091759][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 644.156735][ T7819] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.764781][ T8545] loop4: detected capacity change from 0 to 16 [ 644.845827][ T8545] erofs: (device loop4): erofs_superblock_csum_verify: invalid checksum 0xdba51d3d, 0xc32427af expected [ 645.131299][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 645.982765][ T3421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 645.990907][ T3421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.003821][ T3421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.012906][ T3421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.036408][ T5186] Bluetooth: hci4: command 0x0406 tx timeout [ 646.171372][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 647.099946][ T8566] loop3: detected capacity change from 0 to 16 [ 647.155159][ T8566] erofs: (device loop3): mounted with root inode @ nid 36. [ 647.211294][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 647.252260][ T7178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 647.260389][ T7178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 647.416892][ T6170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 647.425280][ T6170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.155721][ T8571] input: syz0 as /devices/virtual/input/input8 [ 648.251311][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 648.872231][ T8582] fuse: Bad value for 'fd' [ 649.030441][ T8562] loop2: detected capacity change from 0 to 4096 [ 649.048401][ T8587] program syz.3.733 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 649.117990][ T8562] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 649.291321][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 649.420933][ T8562] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 649.510859][ T8562] ntfs3: loop2: Failed to read $UpCase (-4). [ 649.598759][ T8590] loop1: detected capacity change from 0 to 512 [ 649.777731][ T8590] EXT4-fs (loop1): 1 truncate cleaned up [ 649.786274][ T8590] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 649.849599][ T8594] loop3: detected capacity change from 0 to 1024 [ 650.339720][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 650.479195][ T8600] netlink: 14 bytes leftover after parsing attributes in process `syz.4.737'. [ 650.536188][ T8342] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 650.724969][ T8600] loop4: detected capacity change from 0 to 256 [ 650.768898][ T8600] exfat: Deprecated parameter 'namecase' [ 650.787711][ T8600] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 650.913876][ T8600] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 650.934843][ T8608] netlink: 'syz.1.740': attribute type 1 has an invalid length. [ 651.179355][ T8612] netlink: 28 bytes leftover after parsing attributes in process `syz.3.743'. [ 651.371312][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 652.411368][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 652.837021][ T8622] loop1: detected capacity change from 0 to 16 [ 652.936810][ T8622] erofs: (device loop1): erofs_superblock_csum_verify: invalid checksum 0xdba51d3d, 0xc32427af expected [ 653.038968][ T8623] program syz.0.746 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 653.224396][ T8626] FAULT_INJECTION: forcing a failure. [ 653.224396][ T8626] name failslab, interval 1, probability 0, space 0, times 0 [ 653.237769][ T8626] CPU: 1 UID: 0 PID: 8626 Comm: syz.4.748 Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 653.248367][ T8626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 653.258720][ T8626] Call Trace: [ 653.262232][ T8626] [ 653.265386][ T8626] dump_stack_lvl+0x216/0x2d0 [ 653.270411][ T8626] dump_stack+0x1e/0x30 [ 653.274915][ T8626] should_fail_ex+0x74e/0x800 [ 653.280003][ T8626] should_failslab+0x17f/0x210 [ 653.285145][ T8626] __kmalloc_noprof+0x175/0xf30 [ 653.290326][ T8626] ? filter_irq_stacks+0x60/0x1a0 [ 653.295796][ T8626] ? genl_family_rcv_msg_attrs_parse+0x114/0x430 [ 653.302530][ T8626] ? kmsan_get_metadata+0x13e/0x1c0 [ 653.308094][ T8626] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 653.314292][ T8626] genl_family_rcv_msg_attrs_parse+0x114/0x430 [ 653.320880][ T8626] ? genl_rcv_msg+0xc4e/0x12c0 [ 653.326039][ T8626] genl_rcv_msg+0xc83/0x12c0 [ 653.331010][ T8626] ? filter_irq_stacks+0x60/0x1a0 [ 653.336513][ T8626] ? __pfx_netlbl_cipsov4_add+0x10/0x10 [ 653.342503][ T8626] ? kmsan_get_metadata+0x13e/0x1c0 [ 653.348091][ T8626] netlink_rcv_skb+0x375/0x650 [ 653.353229][ T8626] ? __pfx_genl_rcv_msg+0x10/0x10 [ 653.358634][ T8626] ? __pfx_genl_rcv+0x10/0x10 [ 653.363679][ T8626] genl_rcv+0x40/0x60 [ 653.368110][ T8626] netlink_unicast+0xf52/0x1260 [ 653.373326][ T8626] netlink_sendmsg+0x10da/0x11e0 [ 653.378634][ T8626] ? __pfx_netlink_sendmsg+0x10/0x10 [ 653.384273][ T8626] ? __pfx_netlink_sendmsg+0x10/0x10 [ 653.389913][ T8626] __sock_sendmsg+0x30f/0x380 [ 653.394971][ T8626] ____sys_sendmsg+0x877/0xb60 [ 653.400109][ T8626] ___sys_sendmsg+0x28d/0x3c0 [ 653.405120][ T8626] ? kmsan_get_metadata+0x13e/0x1c0 [ 653.410705][ T8626] ? __rcu_read_unlock+0x7b/0xe0 [ 653.416010][ T8626] ? __fget_files+0x4f5/0x5c0 [ 653.421097][ T8626] ? kmsan_get_metadata+0x13e/0x1c0 [ 653.426686][ T8626] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 653.432886][ T8626] __x64_sys_sendmsg+0x301/0x490 [ 653.438186][ T8626] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 653.444384][ T8626] x64_sys_call+0x2da0/0x3ba0 [ 653.449465][ T8626] do_syscall_64+0xcd/0x1e0 [ 653.454307][ T8626] ? clear_bhb_loop+0x25/0x80 [ 653.459369][ T8626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.465646][ T8626] RIP: 0033:0x7fb981d7def9 [ 653.470334][ T8626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 653.490318][ T8626] RSP: 002b:00007fb982b46038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 653.499125][ T8626] RAX: ffffffffffffffda RBX: 00007fb981f35f80 RCX: 00007fb981d7def9 [ 653.507410][ T8626] RDX: 0000000020048080 RSI: 0000000020000200 RDI: 0000000000000004 [ 653.515709][ T8626] RBP: 00007fb982b46090 R08: 0000000000000000 R09: 0000000000000000 [ 653.523978][ T8626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 653.532343][ T8626] R13: 0000000000000000 R14: 00007fb981f35f80 R15: 00007ffe8ca39888 [ 653.540627][ T8626] [ 653.544549][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 653.561903][ T10] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 653.802109][ T10] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 653.812081][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.886038][ T10] usb 4-1: config 0 descriptor?? [ 653.943913][ T10] cp210x 4-1:0.0: cp210x converter detected [ 654.572213][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 654.804982][ T10] cp210x 4-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 654.823569][ T10] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 654.934165][ T10] usb 4-1: cp210x converter now attached to ttyUSB0 [ 655.012142][ T10] usb 4-1: USB disconnect, device number 28 [ 655.603681][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 655.615115][ T10] cp210x 4-1:0.0: device disconnected [ 655.621363][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 655.753676][ T29] audit: type=1326 audit(1726947388.642:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8644 comm="syz.0.756" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f759157def9 code=0x0 [ 656.491551][ T5236] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 656.651320][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 656.701435][ T5236] usb 1-1: Using ep0 maxpacket: 32 [ 656.863601][ T5236] usb 1-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=20.43 [ 656.873388][ T5236] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.881888][ T5236] usb 1-1: Product: syz [ 656.885720][ T5231] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 656.886316][ T5236] usb 1-1: Manufacturer: syz [ 656.899088][ T5236] usb 1-1: SerialNumber: syz [ 657.030361][ T5236] usb 1-1: config 0 descriptor?? [ 657.070657][ T5236] ftdi_sio 1-1:0.0: Ignoring interface reserved for JTAG [ 657.093462][ T8658] program syz.3.761 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 657.231665][ T5231] usb 3-1: Using ep0 maxpacket: 8 [ 657.392293][ T5231] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 657.403433][ T5231] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 657.413096][ T5231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.449641][ T5231] usb 3-1: config 0 descriptor?? [ 657.456231][ T10] usb 1-1: USB disconnect, device number 14 [ 657.478089][ T5231] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 657.597238][ T8660] netlink: 'syz.1.762': attribute type 29 has an invalid length. [ 657.679021][ T8661] netlink: 'syz.1.762': attribute type 29 has an invalid length. [ 657.691303][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 657.710489][ T8638] coredump: 372(syz.4.753): interrupted: fatal signal pending [ 657.718995][ T8638] coredump: 372(syz.4.753): Error writing out the process memory [ 657.728083][ T8638] coredump: 372(syz.4.753): written to core: VMAs: 34, size 80642048; core: 8256138 bytes, pos 8712192 [ 658.606040][ T8670] loop3: detected capacity change from 0 to 16 [ 658.681304][ T8672] loop4: detected capacity change from 0 to 1024 [ 658.683535][ T8670] erofs: (device loop3): erofs_superblock_csum_verify: invalid checksum 0xdba51d3d, 0xc32427af expected [ 658.731339][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 659.325987][ T1230] ieee802154 phy0 wpan0: encryption failed: -22 [ 659.333332][ T1230] ieee802154 phy1 wpan1: encryption failed: -22 [ 659.580595][ T29] audit: type=1326 audit(1726947392.482:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8677 comm="syz.0.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f759157def9 code=0x7ffc0000 [ 659.605438][ T29] audit: type=1326 audit(1726947392.492:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8677 comm="syz.0.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f759157def9 code=0x7ffc0000 [ 659.628649][ T29] audit: type=1326 audit(1726947392.492:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8677 comm="syz.0.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f759157def9 code=0x7ffc0000 [ 659.663293][ T29] audit: type=1326 audit(1726947392.572:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8677 comm="syz.0.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f759157def9 code=0x7ffc0000 [ 659.687182][ T29] audit: type=1326 audit(1726947392.582:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8677 comm="syz.0.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f759157def9 code=0x7ffc0000 [ 659.711976][ T29] audit: type=1326 audit(1726947392.582:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8677 comm="syz.0.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f759157def9 code=0x7ffc0000 [ 659.771295][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 659.825502][ T5231] gspca_vc032x: reg_w err -110 [ 659.830810][ T5231] vc032x 3-1:0.0: probe with driver vc032x failed with error -110 [ 660.076692][ T29] audit: type=1326 audit(1726947392.902:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8677 comm="syz.0.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f759157def9 code=0x7ffc0000 [ 660.099513][ T29] audit: type=1326 audit(1726947392.902:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8677 comm="syz.0.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f759157def9 code=0x7ffc0000 [ 660.128630][ T29] audit: type=1326 audit(1726947392.922:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8677 comm="syz.0.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f759157def9 code=0x7ffc0000 [ 660.317914][ T8678] netlink: 28 bytes leftover after parsing attributes in process `syz.0.769'. [ 660.662545][ T5236] usb 3-1: USB disconnect, device number 17 [ 660.811312][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 661.154131][ T8685] loop1: detected capacity change from 0 to 2048 [ 661.163102][ T8689] program syz.0.773 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 661.282244][ T8685] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 661.726579][ T8342] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.861350][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 662.122406][ T8701] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 662.139398][ T8701] FAULT_INJECTION: forcing a failure. [ 662.139398][ T8701] name failslab, interval 1, probability 0, space 0, times 0 [ 662.160456][ T8701] CPU: 0 UID: 0 PID: 8701 Comm: syz.1.776 Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 662.171078][ T8701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 662.181429][ T8701] Call Trace: [ 662.184933][ T8701] [ 662.188097][ T8701] dump_stack_lvl+0x216/0x2d0 [ 662.193125][ T8701] dump_stack+0x1e/0x30 [ 662.197614][ T8701] should_fail_ex+0x74e/0x800 [ 662.202694][ T8701] should_failslab+0x17f/0x210 [ 662.207827][ T8701] kmem_cache_alloc_noprof+0xe2/0xb20 [ 662.213532][ T8701] ? skb_clone+0x303/0x550 [ 662.218371][ T8701] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 662.224573][ T8701] skb_clone+0x303/0x550 [ 662.229156][ T8701] __netlink_deliver_tap+0x607/0xc90 [ 662.234810][ T8701] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 662.240976][ T8701] ? kmsan_get_metadata+0x13e/0x1c0 [ 662.246556][ T8701] netlink_sendskb+0x23f/0x270 [ 662.251652][ T8701] netlink_unicast+0x70c/0x1260 [ 662.256855][ T8701] netlink_ack+0xb04/0xe80 [ 662.261643][ T8701] netlink_rcv_skb+0x510/0x650 [ 662.266774][ T8701] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 662.272604][ T8701] ? __pfx_rtnetlink_rcv+0x10/0x10 [ 662.278055][ T8701] rtnetlink_rcv+0x34/0x40 [ 662.282807][ T8701] netlink_unicast+0xf52/0x1260 [ 662.287991][ T8701] netlink_sendmsg+0x10da/0x11e0 [ 662.293333][ T8701] ? __pfx_netlink_sendmsg+0x10/0x10 [ 662.298970][ T8701] ? __pfx_netlink_sendmsg+0x10/0x10 [ 662.304617][ T8701] __sock_sendmsg+0x30f/0x380 [ 662.309633][ T8701] ____sys_sendmsg+0x877/0xb60 [ 662.314737][ T8701] ___sys_sendmsg+0x28d/0x3c0 [ 662.319740][ T8701] ? kmsan_get_metadata+0x13e/0x1c0 [ 662.325280][ T8701] ? __rcu_read_unlock+0x7b/0xe0 [ 662.330556][ T8701] ? __fget_files+0x4f5/0x5c0 [ 662.335629][ T8701] ? kmsan_get_metadata+0x13e/0x1c0 [ 662.341186][ T8701] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 662.347343][ T8701] __x64_sys_sendmsg+0x301/0x490 [ 662.352708][ T8701] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 662.358917][ T8701] x64_sys_call+0x2da0/0x3ba0 [ 662.364057][ T8701] do_syscall_64+0xcd/0x1e0 [ 662.368902][ T8701] ? clear_bhb_loop+0x25/0x80 [ 662.373976][ T8701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.380283][ T8701] RIP: 0033:0x7f2a0837def9 [ 662.384985][ T8701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 662.405033][ T8701] RSP: 002b:00007f2a09257038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 662.413813][ T8701] RAX: ffffffffffffffda RBX: 00007f2a08535f80 RCX: 00007f2a0837def9 [ 662.422110][ T8701] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 662.430391][ T8701] RBP: 00007f2a09257090 R08: 0000000000000000 R09: 0000000000000000 [ 662.438649][ T8701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 662.446896][ T8701] R13: 0000000000000000 R14: 00007f2a08535f80 R15: 00007fffbb166e38 [ 662.455171][ T8701] [ 662.883132][ T8708] loop3: detected capacity change from 0 to 1024 [ 662.901311][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 663.669827][ T8715] loop1: detected capacity change from 0 to 8 [ 663.764166][ T8715] squashfs: Unknown parameter '½FñÄâ$äÏ©çïdé-’ß;YD“<™3ñXß®³N‡qä4ÎSûÅ•ÆsÛµZþQPu•íµ2%l§W\YföáØÆ:?­x¶|:ãBÀ‡ýŸèE¥}Ce2ÖÎf«' [ 663.779867][ T1819] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 663.931340][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 664.007195][ T1819] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 664.016943][ T1819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.103181][ T1819] usb 1-1: config 0 descriptor?? [ 664.127962][ T1819] cp210x 1-1:0.0: cp210x converter detected [ 664.337701][ T8693] coredump: 379(syz.4.774): interrupted: fatal signal pending [ 664.345803][ T8693] coredump: 379(syz.4.774): written to core: VMAs: 34, size 80642048; core: 26294922 bytes, pos 35131392 [ 664.971300][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 665.712931][ T8724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.782'. [ 665.725003][ T1575] IPVS: starting estimator thread 0... [ 665.814240][ T8725] loop4: detected capacity change from 0 to 1024 [ 665.851941][ T8727] IPVS: using max 192 ests per chain, 9600 per kthread [ 665.889742][ T8725] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 665.980281][ T8725] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 666.006069][ T8725] EXT4-fs (loop4): orphan cleanup on readonly fs [ 666.012914][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 666.089733][ T8724] IPVS: rr: TCP [::]:0 - no destination available [ 666.139475][ T8725] EXT4-fs error (device loop4): ext4_map_blocks:705: inode #3: block 3: comm syz.4.783: lblock 3 mapped to illegal pblock 3 (length 1) [ 666.258055][ T8725] __quota_error: 48 callbacks suppressed [ 666.258205][ T8725] Quota error (device loop4): write_blk: dquota write failed [ 666.272950][ T8725] Quota error (device loop4): find_free_dqentry: Can't write quota data block 3 [ 666.283601][ T8725] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 666.294487][ T8725] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.783: Failed to acquire dquot type 0 [ 666.359478][ T8725] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #3: block 3: comm syz.4.783: lblock 3 mapped to illegal pblock 3 (length 1) [ 666.390393][ T1819] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 666.398818][ T1819] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 666.482813][ T1819] usb 1-1: cp210x converter now attached to ttyUSB0 [ 666.512549][ T8725] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 666.523334][ T8725] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.783: Failed to acquire dquot type 0 [ 666.542405][ T1819] usb 1-1: USB disconnect, device number 15 [ 666.629528][ T1819] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 666.639068][ T1819] cp210x 1-1:0.0: device disconnected [ 666.664753][ T8725] EXT4-fs error (device loop4): ext4_free_blocks:6589: comm syz.4.783: Freeing blocks not in datazone - block = 0, count = 4096 [ 666.799475][ T8735] loop3: detected capacity change from 0 to 512 [ 666.812936][ T8725] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #3: block 3: comm syz.4.783: lblock 3 mapped to illegal pblock 3 (length 1) [ 666.842776][ T8725] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 666.844187][ T8732] FAULT_INJECTION: forcing a failure. [ 666.844187][ T8732] name failslab, interval 1, probability 0, space 0, times 0 [ 666.853661][ T8725] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.783: Failed to acquire dquot type 0 [ 666.872780][ T8732] CPU: 0 UID: 0 PID: 8732 Comm: syz.2.786 Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 666.890114][ T8732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 666.900453][ T8732] Call Trace: [ 666.903952][ T8732] [ 666.907109][ T8732] dump_stack_lvl+0x216/0x2d0 [ 666.912134][ T8732] dump_stack+0x1e/0x30 [ 666.913247][ T8725] EXT4-fs (loop4): 1 orphan inode deleted [ 666.916514][ T8732] should_fail_ex+0x74e/0x800 [ 666.927322][ T8732] should_failslab+0x17f/0x210 [ 666.932453][ T8732] __kmalloc_node_track_caller_noprof+0x177/0xf90 [ 666.939236][ T8732] ? p9_client_create+0x2cd/0x1fe0 [ 666.944746][ T8732] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 666.950925][ T8732] ? p9_client_create+0x2cd/0x1fe0 [ 666.956423][ T8732] kstrdup+0x7e/0x110 [ 666.960758][ T8732] p9_client_create+0x2cd/0x1fe0 [ 666.966114][ T8732] ? kmsan_get_metadata+0x13e/0x1c0 [ 666.971675][ T8732] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 666.977880][ T8732] v9fs_session_init+0x1b9/0x28e0 [ 666.983288][ T8732] ? kmsan_get_metadata+0x13e/0x1c0 [ 666.988868][ T8732] ? kmsan_get_metadata+0x13e/0x1c0 [ 666.994435][ T8732] ? kmsan_get_metadata+0x13e/0x1c0 [ 667.000021][ T8732] ? __kmalloc_cache_noprof+0x543/0xb00 [ 667.005923][ T8732] ? v9fs_mount+0x83/0x12c0 [ 667.010770][ T8732] v9fs_mount+0xe2/0x12c0 [ 667.015430][ T8732] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 667.021878][ T8732] ? kmsan_get_metadata+0x13e/0x1c0 [ 667.027442][ T8732] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 667.033814][ T8732] legacy_get_tree+0x114/0x290 [ 667.039012][ T8732] ? __pfx_v9fs_mount+0x10/0x10 [ 667.039196][ T8732] vfs_get_tree+0xb1/0x5a0 [ 667.039422][ T8732] ? mount_capable+0x97/0x120 [ 667.039611][ T8732] do_new_mount+0x71f/0x15e0 [ 667.058702][ T8732] ? kmsan_get_metadata+0x13e/0x1c0 [ 667.064333][ T8732] path_mount+0x742/0x1f10 [ 667.069142][ T8732] ? user_path_at+0x32f/0x390 [ 667.071582][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 667.074082][ T8732] __se_sys_mount+0x722/0x810 [ 667.086194][ T8732] __x64_sys_mount+0xe4/0x150 [ 667.091284][ T8732] x64_sys_call+0x255a/0x3ba0 [ 667.096546][ T8732] do_syscall_64+0xcd/0x1e0 [ 667.101392][ T8732] ? clear_bhb_loop+0x25/0x80 [ 667.106448][ T8732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.112760][ T8732] RIP: 0033:0x7f40b8d7def9 [ 667.117484][ T8732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 667.137471][ T8732] RSP: 002b:00007f40b9c05038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 667.146277][ T8732] RAX: ffffffffffffffda RBX: 00007f40b8f35f80 RCX: 00007f40b8d7def9 [ 667.154569][ T8732] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 0000000000000000 [ 667.162839][ T8732] RBP: 00007f40b9c05090 R08: 0000000020000040 R09: 0000000000000000 [ 667.171105][ T8732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 667.179451][ T8732] R13: 0000000000000000 R14: 00007f40b8f35f80 R15: 00007ffe8811c3b8 [ 667.187736][ T8732] [ 667.190715][ T8449] coredump: 65(syz.2.704): written to core: VMAs: 43, size 99909632; core: 62154221 bytes, pos 99917824 [ 667.220114][ T8725] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 667.240280][ T8735] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e02d, mo2=0002] [ 667.302158][ T8735] System zones: 1-12 [ 667.344709][ T8735] EXT4-fs error (device loop3): __ext4_iget:4952: inode #11: block 393240: comm syz.3.789: invalid block [ 667.424027][ T8735] EXT4-fs (loop3): Remounting filesystem read-only [ 667.433060][ T8735] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 667.641302][ T8744] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 668.091310][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 668.131881][ T1819] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 668.200110][ T6481] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 668.778109][ T8752] loop2: detected capacity change from 0 to 2048 [ 669.044234][ T1819] usb 2-1: Using ep0 maxpacket: 16 [ 669.141347][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 669.144295][ T1819] usb 2-1: config 0 has an invalid interface number: 23 but max is 0 [ 669.157123][ T1819] usb 2-1: config 0 has no interface number 0 [ 669.163890][ T1819] usb 2-1: config 0 interface 23 altsetting 252 endpoint 0x88 has invalid wMaxPacketSize 0 [ 669.174678][ T1819] usb 2-1: config 0 interface 23 has no altsetting 0 [ 669.278441][ T8328] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.311655][ T1819] usb 2-1: New USB device found, idVendor=055d, idProduct=2020, bcdDevice= 1.54 [ 669.326154][ T1819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.336883][ T1819] usb 2-1: Product: syz [ 669.341581][ T1819] usb 2-1: Manufacturer: syz [ 669.346559][ T1819] usb 2-1: SerialNumber: syz [ 669.528143][ T1819] usb 2-1: config 0 descriptor?? [ 669.595938][ T1819] usb-storage 2-1:0.23: USB Mass Storage device detected [ 669.657033][ T1819] usb-storage 2-1:0.23: Quirks match for vid 055d pid 2020: 1 [ 669.836048][ T1819] usb 2-1: USB disconnect, device number 31 [ 669.972863][ T8760] loop4: detected capacity change from 0 to 1024 [ 670.172971][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 670.993510][ T8770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.799'. [ 671.026208][ T8771] netlink: 'syz.2.795': attribute type 11 has an invalid length. [ 671.211306][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 671.358028][ T8775] IPVS: rr: TCP [::]:0 - no destination available [ 671.949332][ T8782] loop4: detected capacity change from 0 to 512 [ 672.067955][ T8784] loop3: detected capacity change from 0 to 128 [ 672.251411][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 672.364454][ T8791] loop1: detected capacity change from 0 to 1024 [ 672.394757][ T8782] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.796: corrupted in-inode xattr: invalid ea_ino [ 672.439233][ T8782] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.796: couldn't read orphan inode 15 (err -117) [ 672.613220][ T8782] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 672.711838][ T1575] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 672.887355][ T8794] loop2: detected capacity change from 0 to 2048 [ 672.915368][ T1575] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 672.933313][ T1575] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.966297][ T1575] usb 4-1: config 0 descriptor?? [ 673.144612][ T6481] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 673.291454][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 673.402484][ T8801] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0002 with DS=0x9 [ 673.674882][ T1575] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 673.684759][ T1575] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 673.732201][ T1575] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 673.739503][ T1575] [drm] Initialized udl on minor 2 [ 673.937117][ T1575] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 673.945744][ T1575] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 674.331438][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 674.629825][ T8813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.811'. [ 674.834295][ T8784] xt_hashlimit: size too large, truncated to 1048576 [ 675.381372][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 676.080911][ T8824] loop2: detected capacity change from 0 to 2048 [ 676.181821][ T8831] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 676.341945][ T8828] loop1: detected capacity change from 0 to 1024 [ 676.411389][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 676.585800][ T8824] loop2: detected capacity change from 2048 to 0 [ 676.824620][ T8831] NILFS (loop2): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 676.837130][ T8831] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=2) [ 676.847208][ T8831] segctord: attempt to access beyond end of device [ 676.847208][ T8831] loop2: rw=395265, sector=2040, nr_sectors = 2 limit=0 [ 676.864044][ T8831] Buffer I/O error on dev loop2, logical block 1020, lost sync page write [ 676.873215][ T8831] NILFS (loop2): unable to write superblock: err=-5 [ 676.880275][ T8831] segctord: attempt to access beyond end of device [ 676.880275][ T8831] loop2: rw=395265, sector=2, nr_sectors = 2 limit=0 [ 676.900643][ T8831] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 676.909535][ T8831] NILFS (loop2): unable to write superblock: err=-5 [ 676.916756][ T8831] Remounting filesystem read-only [ 676.963651][ T2479] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 676.971625][ T2479] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 676.979563][ T2479] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 676.989311][ T2479] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 677.001746][ T2479] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 677.075778][ T5231] usb 4-1: USB disconnect, device number 29 [ 677.084017][ T2479] NILFS (loop2): discard dirty page: offset=0, ino=2 [ 677.091017][ T2479] NILFS (loop2): discard dirty block: blocknr=18, size=1024 [ 677.103029][ T2479] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 677.111950][ T5236] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 677.113055][ T5236] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 677.113675][ T5236] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 677.121394][ T2479] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 677.121535][ T2479] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 677.173187][ T8824] NILFS (loop2): mounting fs with errors [ 677.179213][ T8824] syz.2.815: attempt to access beyond end of device [ 677.179213][ T8824] loop2: rw=395265, sector=2, nr_sectors = 2 limit=0 [ 677.193130][ T8824] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 677.203845][ T8824] NILFS (loop2): unable to write superblock: err=-5 [ 677.204692][ T8836] loop4: detected capacity change from 0 to 512 [ 677.451281][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 677.509479][ T7819] syz-executor: attempt to access beyond end of device [ 677.509479][ T7819] loop2: rw=0, sector=36, nr_sectors = 2 limit=0 [ 677.523559][ T7819] Buffer I/O error on dev loop2, logical block 18, async page read [ 677.531941][ T7819] NILFS error (device loop2): nilfs_readdir: bad page in #2 [ 677.539517][ T7819] Remounting filesystem read-only [ 677.629975][ T8836] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e02d, mo2=0002] [ 677.650740][ T7819] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 677.661663][ T7819] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 677.661895][ T8836] System zones: [ 677.668542][ T7819] NILFS (loop2): discard dirty block: blocknr=35, size=1024 [ 677.668688][ T7819] NILFS (loop2): discard dirty block: blocknr=36, size=1024 [ 677.672422][ T8836] 1-12 [ 677.679766][ T7819] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 677.687601][ T8836] [ 677.708423][ T7819] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 677.720357][ T7819] NILFS (loop2): discard dirty page: offset=0, ino=5 [ 677.727972][ T7819] NILFS (loop2): discard dirty block: blocknr=41, size=1024 [ 677.737660][ T7819] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 677.748075][ T7819] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 677.758180][ T7819] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 677.780130][ T8836] EXT4-fs error (device loop4): __ext4_iget:4952: inode #11: block 393240: comm syz.4.819: invalid block [ 677.812751][ T8836] EXT4-fs (loop4): Remounting filesystem read-only [ 677.827209][ T8836] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 677.967478][ T29] audit: type=1326 audit(1726947410.882:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8845 comm="syz.3.826" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe8e977def9 code=0x0 [ 678.272915][ T7178] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.398272][ T8851] loop1: detected capacity change from 0 to 2048 [ 678.414931][ T7178] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.438288][ T6481] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 678.501699][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 678.578552][ T7178] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.885620][ T7178] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.282431][ T8857] IPVS: rr: TCP [::]:0 - no destination available [ 679.389633][ T7178] bridge_slave_1: left allmulticast mode [ 679.395700][ T7178] bridge_slave_1: left promiscuous mode [ 679.402735][ T7178] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.531305][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 679.545548][ T8856] loop4: detected capacity change from 0 to 2048 [ 679.670476][ T7178] bridge_slave_0: left allmulticast mode [ 679.678720][ T7178] bridge_slave_0: left promiscuous mode [ 679.688404][ T7178] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.105726][ T1575] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 680.119349][ T5254] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 680.334149][ T5186] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 680.344648][ T5186] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 680.355926][ T5186] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 680.370721][ T5186] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 680.392056][ T1575] usb 5-1: Using ep0 maxpacket: 32 [ 680.403982][ T7178] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 680.438675][ T5186] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 680.443728][ T1575] usb 5-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 680.449424][ T5186] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 680.455659][ T1575] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.470691][ T1575] usb 5-1: Product: syz [ 680.475228][ T1575] usb 5-1: Manufacturer: syz [ 680.481665][ T1575] usb 5-1: SerialNumber: syz [ 680.519926][ T8866] loop3: detected capacity change from 0 to 2048 [ 680.553417][ T1575] usb 5-1: config 0 descriptor?? [ 680.571477][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 680.613679][ T8870] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 680.616693][ T7178] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 680.675024][ T7178] bond0 (unregistering): Released all slaves [ 680.804101][ T5254] usb 2-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.05 [ 680.813887][ T5254] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.822716][ T5254] usb 2-1: Product: syz [ 680.827325][ T5254] usb 2-1: Manufacturer: syz [ 680.832543][ T5254] usb 2-1: SerialNumber: syz [ 680.942635][ T5254] usb 2-1: config 0 descriptor?? [ 680.994105][ T5254] go7007 2-1:0.0: probe with driver go7007 failed with error -12 [ 681.069183][ T8873] netlink: 20 bytes leftover after parsing attributes in process `syz.4.829'. [ 681.122615][ T8873] loop4: detected capacity change from 0 to 512 [ 681.167989][ T8873] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 681.188796][ T8864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.396883][ T8864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.448421][ T8864] netlink: 96 bytes leftover after parsing attributes in process `syz.1.831'. [ 681.499753][ T8873] EXT4-fs (loop4): 1 truncate cleaned up [ 681.511669][ T8873] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 681.582197][ T1575] usbtouchscreen 5-1:0.0: probe with driver usbtouchscreen failed with error -71 [ 681.589544][ T5231] usb 2-1: USB disconnect, device number 32 [ 681.603635][ T1575] usb 5-1: USB disconnect, device number 16 [ 681.621309][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 682.024179][ T8882] netlink: 44 bytes leftover after parsing attributes in process `syz.3.835'. [ 682.482875][ T7178] hsr_slave_0: left promiscuous mode [ 682.536035][ T7178] hsr_slave_1: left promiscuous mode [ 682.572920][ T5186] Bluetooth: hci3: command tx timeout [ 682.648166][ T7178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 682.656731][ T7178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 682.661341][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 682.703740][ T7178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 682.711636][ T7178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 682.832610][ T7178] veth1_macvtap: left promiscuous mode [ 682.840484][ T7178] veth0_macvtap: left promiscuous mode [ 682.846763][ T7178] veth1_vlan: left promiscuous mode [ 682.853219][ T7178] veth0_vlan: left promiscuous mode [ 682.899087][ T8900] loop1: detected capacity change from 0 to 512 [ 682.912616][ T8896] loop3: detected capacity change from 0 to 512 [ 682.921950][ T8896] ext4: Unknown parameter 'init_itable.nouid32' [ 682.923971][ T6481] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 682.944317][ T8896] fuse: Bad value for 'fd' [ 683.176919][ T8900] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e02d, mo2=0002] [ 683.193322][ T8900] System zones: 1-12 [ 683.269652][ T8900] EXT4-fs error (device loop1): __ext4_iget:4952: inode #11: block 393240: comm syz.1.839: invalid block [ 683.339388][ T8900] EXT4-fs (loop1): Remounting filesystem read-only [ 683.351904][ T8900] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 683.691294][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 683.842381][ T7178] team0 (unregistering): Port device team_slave_1 removed [ 683.865248][ T8907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.842'. [ 683.889397][ T7178] team0 (unregistering): Port device team_slave_0 removed [ 684.043198][ T8910] IPVS: rr: TCP [::]:0 - no destination available [ 684.219960][ T8868] chnl_net:caif_netlink_parms(): no params data found [ 684.661322][ T4551] Bluetooth: hci3: command tx timeout [ 684.672239][ T8342] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 684.731394][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 685.186565][ T8917] loop1: detected capacity change from 0 to 2048 [ 685.231978][ T8921] loop3: detected capacity change from 0 to 2048 [ 685.255573][ T8921] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 685.265775][ T8921] NILFS (loop3): mounting unchecked fs [ 685.271676][ T8921] NILFS (loop3): recovery required for readonly filesystem [ 685.279174][ T8921] NILFS (loop3): write access will be enabled during recovery [ 685.388409][ T8921] NILFS (loop3): recovery complete [ 685.391925][ T8926] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 685.541324][ T1575] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 685.683758][ T8868] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.697082][ T8868] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.707038][ T8868] bridge_slave_0: entered allmulticast mode [ 685.716740][ T8868] bridge_slave_0: entered promiscuous mode [ 685.755734][ T1575] usb 5-1: Using ep0 maxpacket: 16 [ 685.771352][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 685.800510][ T1575] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 685.813276][ T1575] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 685.823363][ T1575] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 685.848501][ T8868] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.860005][ T8868] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.868716][ T8868] bridge_slave_1: entered allmulticast mode [ 685.878489][ T8868] bridge_slave_1: entered promiscuous mode [ 685.953132][ T1575] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 685.962992][ T1575] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.971577][ T1575] usb 5-1: Product: syz [ 685.976047][ T1575] usb 5-1: Manufacturer: syz [ 685.980935][ T1575] usb 5-1: SerialNumber: syz [ 686.027698][ T1575] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 686.035081][ T1575] cdc_ncm 5-1:1.0: bind() failure [ 686.129009][ T8934] loop1: detected capacity change from 0 to 64 [ 686.181984][ T8868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 686.206616][ T8868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 686.350052][ T8868] team0: Port device team_slave_0 added [ 686.374059][ T8868] team0: Port device team_slave_1 added [ 686.497690][ T8932] loop3: detected capacity change from 0 to 2048 [ 686.509194][ T8932] nilfs2: Unknown parameter '‹¯ðø' [ 686.517931][ T8868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 686.527582][ T8868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 686.554560][ T8868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 686.588439][ T8868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 686.595846][ T8868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 686.624768][ T8868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 686.744990][ T4551] Bluetooth: hci3: command 0x040f tx timeout [ 686.811317][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 686.928141][ T8868] hsr_slave_0: entered promiscuous mode [ 687.027835][ T8868] hsr_slave_1: entered promiscuous mode [ 687.041929][ T1575] usb 5-1: USB disconnect, device number 17 [ 687.106059][ T8940] netlink: 384 bytes leftover after parsing attributes in process `syz.3.852'. [ 687.162070][ T8868] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 687.169931][ T8868] Cannot create hsr debugfs directory [ 687.851862][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 688.821364][ T5186] Bluetooth: hci3: command 0x040f tx timeout [ 688.891788][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 689.931391][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 690.891470][ T5186] Bluetooth: hci3: command 0x040f tx timeout [ 690.971453][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 692.011382][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 693.051324][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 694.091414][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 695.161294][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 696.171423][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 697.156259][ T8868] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 697.211309][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 697.411526][ T8868] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 697.450225][ T4551] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 697.541382][ T4551] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 697.551669][ T4551] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 697.566168][ T4551] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 697.643155][ T8868] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 697.656262][ T4551] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 697.667678][ T4551] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 697.693128][ T8868] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 697.846800][ T8973] FAULT_INJECTION: forcing a failure. [ 697.846800][ T8973] name failslab, interval 1, probability 0, space 0, times 0 [ 697.860135][ T8973] CPU: 0 UID: 0 PID: 8973 Comm: syz.3.863 Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 697.870774][ T8973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 697.877016][ T8963] loop4: detected capacity change from 0 to 2048 [ 697.881009][ T8973] Call Trace: [ 697.881067][ T8973] [ 697.881127][ T8973] dump_stack_lvl+0x216/0x2d0 [ 697.899208][ T8973] dump_stack+0x1e/0x30 [ 697.903710][ T8973] should_fail_ex+0x74e/0x800 [ 697.908819][ T8973] should_failslab+0x17f/0x210 [ 697.913969][ T8973] kmem_cache_alloc_noprof+0xe2/0xb20 [ 697.919693][ T8973] ? io_submit_one+0x1c1/0x3280 [ 697.924908][ T8973] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 697.931138][ T8973] io_submit_one+0x1c1/0x3280 [ 697.933438][ T8975] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 697.936069][ T8973] ? kmsan_get_metadata+0x13e/0x1c0 [ 697.952172][ T8973] ? kmsan_get_metadata+0x13e/0x1c0 [ 697.957745][ T8973] ? kmsan_get_metadata+0x13e/0x1c0 [ 697.963316][ T8973] ? kmsan_report+0x291/0x2d0 [ 697.968354][ T8973] __se_sys_io_submit+0x275/0x700 [ 697.973742][ T8973] __x64_sys_io_submit+0x96/0xe0 [ 697.979025][ T8973] x64_sys_call+0x2370/0x3ba0 [ 697.984078][ T8973] do_syscall_64+0xcd/0x1e0 [ 697.988968][ T8973] ? clear_bhb_loop+0x25/0x80 [ 697.994036][ T8973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.000319][ T8973] RIP: 0033:0x7fe8e977def9 [ 698.005028][ T8973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 698.025010][ T8973] RSP: 002b:00007fe8ea5fa038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 698.033801][ T8973] RAX: ffffffffffffffda RBX: 00007fe8e9935f80 RCX: 00007fe8e977def9 [ 698.042107][ T8973] RDX: 00000000200001c0 RSI: 0000000000000001 RDI: 00007fe8ea5d9000 [ 698.050375][ T8973] RBP: 00007fe8ea5fa090 R08: 0000000000000000 R09: 0000000000000000 [ 698.058629][ T8973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 698.066882][ T8973] R13: 0000000000000000 R14: 00007fe8e9935f80 R15: 00007ffd1b293c98 [ 698.075175][ T8973] [ 698.251278][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 699.043886][ T8868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 699.095215][ T8868] 8021q: adding VLAN 0 to HW filter on device team0 [ 699.133956][ T6170] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.141890][ T6170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 699.286543][ T6170] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.294459][ T6170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 699.303194][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 699.354307][ T8965] chnl_net:caif_netlink_parms(): no params data found [ 699.466770][ T5231] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 699.699228][ T8868] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 699.702969][ T4551] Bluetooth: hci5: command tx timeout [ 699.842481][ T5231] usb 2-1: Using ep0 maxpacket: 16 [ 699.869691][ T5231] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 699.880821][ T5231] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 699.890467][ T5231] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 700.074876][ T5231] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 700.084768][ T5231] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.093257][ T5231] usb 2-1: Product: syz [ 700.097804][ T5231] usb 2-1: Manufacturer: syz [ 700.102864][ T5231] usb 2-1: SerialNumber: syz [ 700.331486][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 700.480354][ T5231] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 700.487934][ T5231] cdc_ncm 2-1:1.0: bind() failure [ 700.760693][ T8965] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.768891][ T8965] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.777208][ T8965] bridge_slave_0: entered allmulticast mode [ 700.786765][ T8965] bridge_slave_0: entered promiscuous mode [ 700.941670][ T5254] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 700.974413][ T8965] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.982350][ T8965] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.990338][ T8965] bridge_slave_1: entered allmulticast mode [ 701.000125][ T8965] bridge_slave_1: entered promiscuous mode [ 701.095936][ T9000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.868'. [ 701.144503][ T5254] usb 4-1: Using ep0 maxpacket: 16 [ 701.161913][ T5254] usb 4-1: config index 0 descriptor too short (expected 58916, got 36) [ 701.172344][ T5254] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 701.180755][ T5254] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 701.191478][ T5254] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 701.203041][ T5254] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 701.213385][ T5254] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 701.222880][ T5254] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.246451][ T5254] usb 4-1: config 0 descriptor?? [ 701.320902][ T3527] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.371364][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 701.426521][ T8965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 701.454155][ T8965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 701.581558][ T1575] usb 2-1: USB disconnect, device number 33 [ 701.682693][ T3527] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.694415][ T5254] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0 [ 701.704207][ T5254] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0 [ 701.713777][ T5254] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0 [ 701.723043][ T5254] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0 [ 701.736176][ T5254] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0 [ 701.770748][ T5254] savu 0003:1E7D:2D5A.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 701.788598][ T4551] Bluetooth: hci5: command tx timeout [ 701.921491][ T8996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 701.947397][ T3527] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.962063][ T8996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 701.982763][ T8996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.029359][ T8965] team0: Port device team_slave_0 added [ 702.058351][ T8996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.109461][ T44] usb 4-1: USB disconnect, device number 30 [ 702.116157][ T3527] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.183846][ T8965] team0: Port device team_slave_1 added [ 702.201890][ T1819] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 702.271664][ T1575] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 702.384791][ T1819] usb 5-1: Using ep0 maxpacket: 16 [ 702.421316][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 702.470978][ T1819] usb 5-1: too many configurations: 211, using maximum allowed: 8 [ 702.482070][ T1575] usb 2-1: Using ep0 maxpacket: 16 [ 702.499404][ T1575] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 702.511250][ T1575] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 702.521668][ T1575] usb 2-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 702.531173][ T1575] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.555826][ T8965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 702.557768][ T1819] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 702.563290][ T8965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 702.571405][ T1819] usb 5-1: can't read configurations, error -61 [ 702.599016][ T8965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 702.623617][ T1575] usb 2-1: config 0 descriptor?? [ 702.724895][ T8965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 702.732438][ T8965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 702.758664][ C0] vkms_vblank_simulate: vblank timer overrun [ 702.765619][ T8965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 702.853761][ T1819] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 702.940625][ T8868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 702.954312][ T3527] bridge_slave_1: left allmulticast mode [ 702.960241][ T3527] bridge_slave_1: left promiscuous mode [ 702.967398][ T3527] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.000632][ T3527] bridge_slave_0: left allmulticast mode [ 703.009209][ T3527] bridge_slave_0: left promiscuous mode [ 703.017143][ T3527] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.225696][ T1575] hid-led 0003:1294:1320.0008: hidraw0: USB HID v0.00 Device [HID 1294:1320] on usb-dummy_hcd.1-1/input0 [ 703.242696][ T1575] hid-led 0003:1294:1320.0008: Riso Kagaku Webmail Notifier initialized [ 703.311874][ T1819] usb 5-1: Using ep0 maxpacket: 16 [ 703.322090][ T1819] usb 5-1: too many configurations: 211, using maximum allowed: 8 [ 703.395797][ T1575] usb 2-1: USB disconnect, device number 34 [ 703.451278][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 703.468376][ T44] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 703.480748][ T44] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 703.490169][ T1819] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 703.498265][ T1819] usb 5-1: can't read configurations, error -61 [ 703.500771][ T44] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 703.607676][ T1819] usb usb5-port1: attempt power cycle [ 703.676707][ T3527] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 703.704231][ T3527] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 703.726079][ T3527] bond0 (unregistering): Released all slaves [ 703.875067][ T4551] Bluetooth: hci5: command tx timeout [ 703.923567][ T8965] hsr_slave_0: entered promiscuous mode [ 703.937451][ T8965] hsr_slave_1: entered promiscuous mode [ 703.956912][ T8965] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 703.965017][ T8965] Cannot create hsr debugfs directory [ 704.011524][ T1819] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 704.034427][ T1819] usb 5-1: Using ep0 maxpacket: 16 [ 704.053553][ T1819] usb 5-1: too many configurations: 211, using maximum allowed: 8 [ 704.107064][ T1819] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 704.115548][ T1819] usb 5-1: can't read configurations, error -61 [ 704.307416][ T1819] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 704.344623][ T1819] usb 5-1: Using ep0 maxpacket: 16 [ 704.359386][ T1819] usb 5-1: too many configurations: 211, using maximum allowed: 8 [ 704.441611][ T1819] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 704.449572][ T1819] usb 5-1: can't read configurations, error -61 [ 704.466457][ T1819] usb usb5-port1: unable to enumerate USB device [ 704.491287][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 704.511404][ T3527] hsr_slave_0: left promiscuous mode [ 704.537970][ T3527] hsr_slave_1: left promiscuous mode [ 704.562759][ T3527] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 704.570628][ T3527] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 704.594872][ T3527] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 704.602856][ T3527] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 704.647751][ T3527] veth1_macvtap: left promiscuous mode [ 704.653788][ T3527] veth0_macvtap: left promiscuous mode [ 704.659762][ T3527] veth1_vlan: left promiscuous mode [ 704.665674][ T3527] veth0_vlan: left promiscuous mode [ 704.666002][ T44] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 705.328336][ T9020] loop1: detected capacity change from 0 to 2048 [ 705.531726][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 705.553006][ T9023] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 705.672153][ T3527] team0 (unregistering): Port device team_slave_1 removed [ 705.699319][ T3527] team0 (unregistering): Port device team_slave_0 removed [ 705.945566][ T4551] Bluetooth: hci5: command tx timeout [ 706.326775][ T8868] veth0_vlan: entered promiscuous mode [ 706.571278][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 706.585203][ T8868] veth1_vlan: entered promiscuous mode [ 706.747069][ T3527] IPVS: stop unused estimator thread 0... [ 706.890072][ T9030] loop1: detected capacity change from 0 to 1024 [ 706.894226][ T8868] veth0_macvtap: entered promiscuous mode [ 706.923443][ T8868] veth1_macvtap: entered promiscuous mode [ 706.984466][ T8868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 706.995502][ T8868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 707.008480][ T8868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 707.019881][ T8868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 707.030348][ T8868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 707.041312][ T8868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 707.058423][ T8868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 707.078342][ T8868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 707.089847][ T8868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 707.100034][ T8868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 707.112696][ T8868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 707.113129][ T44] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 707.129319][ T8868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 707.234779][ T8868] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.244292][ T8868] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.253505][ T8868] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.262719][ T8868] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.302893][ T44] usb 5-1: Using ep0 maxpacket: 16 [ 707.329812][ T44] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 707.340476][ T44] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 707.349977][ T44] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 707.466306][ T44] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 707.476012][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.485668][ T44] usb 5-1: Product: syz [ 707.490138][ T44] usb 5-1: Manufacturer: syz [ 707.495149][ T44] usb 5-1: SerialNumber: syz [ 707.597136][ T44] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 707.604545][ T44] cdc_ncm 5-1:1.0: bind() failure [ 707.611270][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 707.711248][ T8965] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 707.750975][ T8965] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 707.803466][ T8965] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 707.863155][ T8965] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 707.993507][ T9036] veth1_macvtap: left promiscuous mode [ 708.083529][ T9038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.879'. [ 708.246383][ T9040] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.881'. [ 708.651363][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 708.682235][ T1819] usb 5-1: USB disconnect, device number 23 [ 708.879570][ T8965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 708.933503][ T8965] 8021q: adding VLAN 0 to HW filter on device team0 [ 708.973510][ T2479] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.981375][ T2479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 709.171744][ T8965] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 709.183763][ T8965] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 709.219480][ T2479] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.227394][ T2479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 709.486222][ T9048] loop1: detected capacity change from 0 to 512 [ 709.591976][ T9048] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 709.682801][ T9048] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 709.696459][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 709.735102][ T9048] EXT4-fs (loop1): 1 truncate cleaned up [ 709.743627][ T9048] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 709.806988][ T9055] loop3: detected capacity change from 0 to 1024 [ 710.394820][ T8342] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 710.741333][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 711.776048][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 712.811494][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 713.572940][ T8965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 713.851271][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 714.253161][ T10] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 714.408340][ T8965] veth0_vlan: entered promiscuous mode [ 714.512099][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 714.581829][ T2497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 714.590030][ T2497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 714.628383][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 714.640041][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 714.643069][ T8965] veth1_vlan: entered promiscuous mode [ 714.649530][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 714.720177][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 714.730872][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.739454][ T10] usb 4-1: Product: syz [ 714.744507][ T10] usb 4-1: Manufacturer: syz [ 714.749395][ T10] usb 4-1: SerialNumber: syz [ 714.766666][ T3421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 714.775078][ T3421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 714.859411][ T8965] veth0_macvtap: entered promiscuous mode [ 714.886793][ T9090] loop1: detected capacity change from 0 to 128 [ 714.889819][ T10] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 714.893771][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 714.900502][ T10] cdc_ncm 4-1:1.0: bind() failure [ 714.935767][ T8965] veth1_macvtap: entered promiscuous mode [ 714.995991][ T9090] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 715.016482][ T9090] sysv_free_block: trying to free block not in datazone [ 715.025088][ T9090] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 715.170779][ T8965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 715.181981][ T8965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.198824][ T8965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 715.209726][ T8965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.220032][ T8965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 715.230891][ T8965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.241225][ T8965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 715.252157][ T8965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.267751][ T8965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 715.348632][ T8965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 715.359775][ T8965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.370013][ T8965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 715.382330][ T8965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.392745][ T8965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 715.405247][ T8965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.421460][ T8965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 715.434385][ T44] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 715.508578][ T8965] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.518118][ T8965] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.527646][ T8965] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.537693][ T8965] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.797969][ T44] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 715.811865][ T44] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 239, changing to 11 [ 715.828115][ T44] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 8311, setting to 1024 [ 715.846329][ T44] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 715.852369][ T29] audit: type=1326 audit(1726947448.712:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9094 comm="syz.2.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b497def9 code=0x7ffc0000 [ 715.864522][ T44] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 715.882574][ T29] audit: type=1326 audit(1726947448.712:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9094 comm="syz.2.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b497def9 code=0x7ffc0000 [ 715.891878][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.931304][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 715.945812][ T9095] loop2: detected capacity change from 0 to 512 [ 716.022248][ T44] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 716.031207][ T44] usb 2-1: invalid MIDI out EP 0 [ 716.202899][ T9095] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 716.300931][ T9095] netlink: 312 bytes leftover after parsing attributes in process `syz.2.893'. [ 716.335810][ T44] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 716.350101][ T5236] usb 4-1: USB disconnect, device number 31 [ 716.374037][ T44] usb 2-1: USB disconnect, device number 35 [ 716.425273][ T29] audit: type=1800 audit(1726947449.332:97): pid=9095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.893" name="file0" dev="loop2" ino=13 res=0 errno=0 [ 716.465914][ T9095] EXT4-fs error (device loop2): ext4_lookup:1813: inode #14: comm syz.2.893: unexpected EA_INODE flag [ 716.807801][ T8868] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 716.971327][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 716.979129][ T9100] loop4: detected capacity change from 0 to 4096 [ 717.015333][ T9100] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 717.092852][ T9100] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 717.247282][ T9100] ntfs3: loop4: Failed to initialize $Extend/$ObjId. [ 717.319518][ T29] audit: type=1326 audit(1726947450.222:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9098 comm="syz.4.894" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb981d7def9 code=0x0 [ 717.435110][ T9114] loop2: detected capacity change from 0 to 1024 [ 717.626040][ T9114] fuse: Unknown parameter 'grou00000000000000000000' [ 718.011262][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 719.051276][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 720.091581][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 720.158385][ T9111] coredump: 115(syz.3.896): interrupted: fatal signal pending [ 720.166333][ T9111] coredump: 115(syz.3.896): written to core: VMAs: 34, size 80642048; core: 19782282 bytes, pos 28614656 [ 720.816639][ T1230] ieee802154 phy0 wpan0: encryption failed: -22 [ 720.825025][ T1230] ieee802154 phy1 wpan1: encryption failed: -22 [ 721.132182][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 721.445770][ T3421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 721.455955][ T3421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 721.619269][ T2497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 721.627716][ T2497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.171349][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 722.321563][ T44] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 722.505770][ T44] usb 1-1: device descriptor read/64, error -71 [ 723.111584][ T44] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 723.211373][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 723.251731][ T44] usb 1-1: device descriptor read/64, error -71 [ 723.383000][ T44] usb usb1-port1: attempt power cycle [ 723.771846][ T44] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 723.829092][ T44] usb 1-1: device descriptor read/8, error -71 [ 724.112959][ T44] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 724.169893][ T44] usb 1-1: device descriptor read/8, error -71 [ 724.261291][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 724.302941][ T44] usb usb1-port1: unable to enumerate USB device [ 724.801765][ T9154] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 725.296730][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 726.058473][ T9173] @: renamed from vlan0 (while UP) [ 726.331867][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 727.371324][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 727.609799][ T9189] bridge0: port 3(syz_tun) entered blocking state [ 727.617179][ T9189] bridge0: port 3(syz_tun) entered disabled state [ 727.624855][ T9189] syz_tun: entered allmulticast mode [ 727.633894][ T9189] syz_tun: entered promiscuous mode [ 727.642096][ T9189] bridge0: port 3(syz_tun) entered blocking state [ 727.649248][ T9189] bridge0: port 3(syz_tun) entered forwarding state [ 728.413941][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 729.453924][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 730.491341][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 731.531265][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 732.267428][ T9209] loop4: detected capacity change from 0 to 4096 [ 732.433057][ T9219] bond1: entered promiscuous mode [ 732.442815][ T9219] 8021q: adding VLAN 0 to HW filter on device bond1 [ 732.571286][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 733.539786][ T9232] loop1: detected capacity change from 0 to 8 [ 733.611281][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 733.873157][ T9232] SQUASHFS error: Failed to read block 0x2fc: -5 [ 733.880035][ T9232] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 733.887898][ T9232] SQUASHFS error: Unable to read directory block [247:26] [ 734.636705][ T10] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 734.651381][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 734.881429][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 734.941475][ T10] usb 4-1: config 0 has no interfaces? [ 734.947558][ T10] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 734.959403][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.002832][ T10] usb 4-1: config 0 descriptor?? [ 735.259908][ T44] usb 4-1: USB disconnect, device number 32 [ 735.701291][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 736.311801][ T9256] loop3: detected capacity change from 0 to 1024 [ 736.380293][ T9256] hfsplus: Filesystem is marked locked, mounting read-only. [ 736.733890][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 737.408235][ T9261] loop4: detected capacity change from 0 to 512 [ 737.771273][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 738.273735][ T9261] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 738.514002][ T6481] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 738.639995][ T9276] usb usb1: usbfs: process 9276 (syz.3.949) did not claim interface 0 before use [ 738.811256][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 739.469977][ T9272] bridge0: port 3(syz_tun) entered disabled state [ 739.523770][ T9272] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.534458][ T9272] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.861268][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 740.129423][ T9272] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 740.182587][ T9272] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 740.885073][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 741.246797][ T9272] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.256578][ T9272] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.266389][ T9272] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.276041][ T9272] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.890332][ T9289] bridge_slave_0: left allmulticast mode [ 741.896288][ T9289] bridge_slave_0: left promiscuous mode [ 741.903309][ T9289] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.917154][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 742.018769][ T9289] bridge_slave_1: left allmulticast mode [ 742.024726][ T9289] bridge_slave_1: left promiscuous mode [ 742.031800][ T9289] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.211522][ T9289] bond0: (slave bond_slave_0): Releasing backup interface [ 742.348644][ T9289] bond0: (slave bond_slave_1): Releasing backup interface [ 742.959194][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 743.306579][ T5186] Bluetooth: hci0: command 0x0406 tx timeout [ 743.376485][ T9289] team0: Port device team_slave_0 removed [ 743.661620][ T9289] team0: Port device team_slave_1 removed [ 743.673230][ T9289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 743.681330][ T9289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 743.917556][ T9289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 743.925600][ T9289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 743.981567][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 745.014363][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 746.056685][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 746.642688][ T9324] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 747.080057][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 747.311159][ T9330] loop3: detected capacity change from 0 to 256 [ 747.428744][ T9330] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 747.560950][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 748.112680][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 748.443874][ T4551] Bluetooth: hci1: command 0x0406 tx timeout [ 748.723697][ T9355] netlink: 'syz.3.975': attribute type 10 has an invalid length. [ 749.145596][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 749.413919][ T9365] loop2: detected capacity change from 0 to 1024 [ 749.470056][ T9365] ext4: Unknown parameter 'uid>00000000000000000000' [ 749.547951][ T9367] mmap: syz.3.981 (9367): VmData 175878144 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 749.590249][ T9365] 9pnet_virtio: no channels available for device syz [ 750.097415][ T9374] netlink: 'syz.2.984': attribute type 29 has an invalid length. [ 750.178646][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 751.211874][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 751.530146][ T9385] loop4: detected capacity change from 0 to 8 [ 752.245071][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 753.278314][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 754.321691][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 755.355261][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 756.378865][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 757.412720][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 758.446575][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 758.522897][ T9421] loop4: detected capacity change from 0 to 1024 [ 758.555360][ T9421] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 758.920598][ T44] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 759.217770][ T44] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 759.227469][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.235927][ T44] usb 2-1: Product: syz [ 759.240381][ T44] usb 2-1: Manufacturer: syz [ 759.245395][ T44] usb 2-1: SerialNumber: syz [ 759.312384][ T44] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 759.490590][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 759.601842][ T5236] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 760.521971][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 760.730946][ T5236] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 760.742935][ T5236] ath9k_htc: Failed to initialize the device [ 761.163729][ T5236] usb 2-1: ath9k_htc: USB layer deinitialized [ 761.565077][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 762.378553][ T10] usb 2-1: USB disconnect, device number 36 [ 762.582990][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 763.617351][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 763.668230][ T9444] loop3: detected capacity change from 0 to 4096 [ 764.154307][ T9453] vlan0: entered promiscuous mode [ 764.661678][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 764.865677][ T9455] loop3: detected capacity change from 0 to 2048 [ 765.686264][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 766.720854][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 767.645989][ T1575] IPVS: starting estimator thread 0... [ 767.755685][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 768.790352][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 768.806961][ T9472] loop3: detected capacity change from 0 to 32768 [ 768.816895][ T9472] btrfs: Deprecated parameter 'usebackuproot' [ 768.823477][ T9472] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 769.826008][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 769.880996][ T9473] IPVS: using max 192 ests per chain, 9600 per kthread [ 770.860152][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 771.895335][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 772.454206][ T9487] loop1: detected capacity change from 0 to 4096 [ 772.477542][ T9487] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 772.930506][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 773.975595][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 774.894410][ T9495] loop3: detected capacity change from 0 to 32768 [ 775.010726][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 775.199094][ T9487] ntfs3: loop1: Failed to read $UpCase (-4). [ 775.559522][ T5186] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 775.572345][ T5186] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 775.609829][ T5189] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 775.638711][ T5186] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 775.724600][ T5186] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 775.743400][ T5186] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 776.036384][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 776.207160][ T9508] sch_tbf: burst 3936 is lower than device lo mtu (65550) ! [ 777.071692][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 777.636140][ T2479] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.850163][ T2479] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.005646][ T2479] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.094078][ T4551] Bluetooth: hci4: command tx timeout [ 778.107216][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 778.157802][ T2479] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.433420][ T2479] bridge_slave_1: left allmulticast mode [ 778.439725][ T2479] bridge_slave_1: left promiscuous mode [ 778.446914][ T2479] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.625568][ T2479] bridge_slave_0: left allmulticast mode [ 778.631627][ T2479] bridge_slave_0: left promiscuous mode [ 778.638776][ T2479] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.142829][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 779.560335][ T2479] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 779.609519][ T2479] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 779.675023][ T2479] bond0 (unregistering): Released all slaves [ 779.699742][ T2479] bond1 (unregistering): Released all slaves [ 779.754565][ T9501] chnl_net:caif_netlink_parms(): no params data found [ 780.144482][ T1575] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 780.168609][ T4551] Bluetooth: hci4: command tx timeout [ 780.178294][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 780.781082][ T1575] usb 4-1: Using ep0 maxpacket: 32 [ 780.815530][ T1575] usb 4-1: config 0 has no interfaces? [ 780.870465][ T1575] usb 4-1: New USB device found, idVendor=06cd, idProduct=0108, bcdDevice=f3.0c [ 780.880402][ T1575] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 780.883793][ T8] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz1 [ 780.888788][ T1575] usb 4-1: Product: syz [ 780.888916][ T1575] usb 4-1: Manufacturer: syz [ 780.889034][ T1575] usb 4-1: SerialNumber: syz [ 780.947433][ T1575] usb 4-1: config 0 descriptor?? [ 781.000260][ T2479] hsr_slave_0: left promiscuous mode [ 781.023599][ T2479] hsr_slave_1: left promiscuous mode [ 781.045546][ T2479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 781.053356][ T2479] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 781.076066][ T2479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 781.084339][ T2479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 781.136375][ T2479] veth1_macvtap: left promiscuous mode [ 781.142502][ T2479] veth0_macvtap: left promiscuous mode [ 781.148773][ T2479] veth1_vlan: left promiscuous mode [ 781.154731][ T2479] veth0_vlan: left promiscuous mode [ 781.214201][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 781.952985][ T1230] ieee802154 phy0 wpan0: encryption failed: -22 [ 781.959855][ T1230] ieee802154 phy1 wpan1: encryption failed: -22 [ 782.165993][ T8] usb 4-1: USB disconnect, device number 33 [ 782.174297][ T4551] Bluetooth: hci4: command tx timeout [ 782.216953][ T2479] team0 (unregistering): Port device team_slave_1 removed [ 782.250389][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 782.297826][ T2479] team0 (unregistering): Port device team_slave_0 removed [ 782.862250][ T9501] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.870247][ T9501] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.879596][ T9501] bridge_slave_0: entered allmulticast mode [ 782.889213][ T9501] bridge_slave_0: entered promiscuous mode [ 783.034584][ T9501] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.043245][ T9501] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.051425][ T9501] bridge_slave_1: entered allmulticast mode [ 783.061029][ T9501] bridge_slave_1: entered promiscuous mode [ 783.285753][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 783.678021][ T9543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 783.744384][ T9501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 783.778044][ T9501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 783.961682][ T9501] team0: Port device team_slave_0 added [ 783.991234][ T9501] team0: Port device team_slave_1 added [ 784.206303][ T9501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 784.213958][ T9501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 784.240564][ T9501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 784.263140][ T4551] Bluetooth: hci4: command tx timeout [ 784.331576][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 784.394405][ T9501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 784.402090][ T9501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 784.428873][ T9501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 784.794008][ T9501] hsr_slave_0: entered promiscuous mode [ 784.841121][ T9501] hsr_slave_1: entered promiscuous mode [ 785.360005][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 785.578561][ T9565] xt_socket: unknown flags 0x50 [ 786.328219][ T9501] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 786.402119][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 786.447847][ T9501] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 786.531004][ T9501] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 786.674001][ T9501] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 787.357462][ T9501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 787.439825][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 787.459166][ T9501] 8021q: adding VLAN 0 to HW filter on device team0 [ 787.497746][ T2479] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.505875][ T2479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 787.684765][ T9501] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 787.695798][ T9501] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 787.731219][ T2479] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.739108][ T2479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 788.475830][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 789.512150][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 790.538582][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 791.574733][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 792.621274][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 792.672176][ T9501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 792.809860][ T9501] veth0_vlan: entered promiscuous mode [ 792.847749][ T9501] veth1_vlan: entered promiscuous mode [ 792.947295][ T9501] veth0_macvtap: entered promiscuous mode [ 792.970087][ T9501] veth1_macvtap: entered promiscuous mode [ 793.294828][ T9501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 793.306265][ T9501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.316709][ T9501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 793.327673][ T9501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.344751][ T9501] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 793.658691][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 793.756619][ T9501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.767509][ T9501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.783043][ T9501] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 794.004391][ T9501] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.013811][ T9501] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.026221][ T9501] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.035337][ T9501] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.170023][ T9593] loop4: detected capacity change from 0 to 512 [ 794.276763][ T9593] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 794.694229][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 794.802751][ T9593] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 795.473366][ T6481] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 795.559645][ T9607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1075'. [ 795.720626][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 796.757504][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 796.802339][ T9623] netlink: 'syz.0.1080': attribute type 29 has an invalid length. [ 796.810795][ T9623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1080'. [ 797.322631][ T9627] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1082'. [ 797.333028][ T9627] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1082'. [ 797.452431][ T9627] bridge0: port 2(bridge_slave_1) entered listening state [ 797.512576][ T9627] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.794217][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 798.443854][ T9631] loop3: detected capacity change from 0 to 4096 [ 798.830944][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 799.857833][ T7178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 799.866183][ T7178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 799.874594][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 799.975592][ T2479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 799.984734][ T2479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 800.904602][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 801.388879][ T9678] loop1: detected capacity change from 0 to 512 [ 801.521214][ T9678] EXT4-fs error (device loop1): ext4_orphan_get:1388: inode #15: comm syz.1.1098: iget: bad extended attribute block 1 [ 801.616182][ T9678] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.1098: couldn't read orphan inode 15 (err -117) [ 801.678183][ T9678] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 801.951764][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 802.052546][ T8342] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 802.755985][ T9702] xt_socket: unknown flags 0x50 [ 802.988493][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 803.881903][ T9720] loop2: detected capacity change from 0 to 512 [ 804.015531][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 804.113178][ T9720] EXT4-fs error (device loop2): ext4_orphan_get:1388: inode #15: comm syz.2.1114: iget: bad extended attribute block 1 [ 804.138985][ T9720] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.1114: couldn't read orphan inode 15 (err -117) [ 804.164900][ T9720] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 804.481568][ T9501] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 804.695631][ T9737] xt_socket: unknown flags 0x50 [ 805.052564][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 805.473002][ T9755] loop1: detected capacity change from 0 to 8 [ 806.089667][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 806.513602][ T9775] xt_socket: unknown flags 0x50 [ 806.935762][ T9784] netlink: 'syz.1.1141': attribute type 29 has an invalid length. [ 806.944281][ T9784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1141'. [ 807.126735][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 808.241051][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 808.633289][ T9803] loop3: detected capacity change from 0 to 8 [ 809.281039][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 809.621020][ T9812] xt_socket: unknown flags 0x50 [ 810.318159][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 810.834769][ T9825] netlink: 'syz.3.1158': attribute type 29 has an invalid length. [ 810.843711][ T9825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1158'. [ 811.355670][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 811.435519][ T9836] xt_socket: unknown flags 0x50 [ 811.581880][ T3421] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.701442][ T3421] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.855095][ T3421] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.956797][ T3421] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.392957][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 812.418721][ T3421] bridge_slave_1: left allmulticast mode [ 812.425131][ T3421] bridge_slave_1: left promiscuous mode [ 812.432047][ T3421] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.749535][ T5186] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 812.762335][ T3421] bridge_slave_0: left allmulticast mode [ 812.768316][ T3421] bridge_slave_0: left promiscuous mode [ 812.775307][ T3421] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.796715][ T5186] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 812.833036][ T5186] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 813.430605][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 814.028439][ T2497] ===================================================== [ 814.035946][ T2497] BUG: KMSAN: uninit-value in netfs_clear_buffer+0x216/0x4e0 [ 814.043889][ T2497] netfs_clear_buffer+0x216/0x4e0 [ 814.049383][ T2497] netfs_free_request+0x51f/0x890 [ 814.054660][ T2497] netfs_put_request+0x161/0x360 [ 814.060121][ T2497] netfs_write_collection_worker+0x7337/0x7c20 [ 814.066550][ T2497] process_scheduled_works+0xae0/0x1c40 [ 814.072510][ T2497] worker_thread+0xea7/0x14f0 SYZFAIL: failed to recv rpc [ 814.078181][ T2497] kthread+0x3e2/0x540 [ 814.082620][ T2497] ret_from_fork+0x6d/0x90 [ 814.087273][ T2497] ret_from_fork_asm+0x1a/0x30 [ 814.090152][ T3421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 814.092526][ T2497] [ 814.103456][ T2497] Uninit was created at: [ 814.108228][ T2497] __kmalloc_cache_noprof+0x4f0/0xb00 [ 814.114941][ T2497] netfs_buffer_append_folio+0x2cf/0x8b0 [ 814.121389][ T2497] netfs_write_folio+0x1120/0x3050 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 814.126764][ T2497] netfs_writepages+0xe60/0x1670 [ 814.132602][ T2497] do_writepages+0x427/0xc30 [ 814.139922][ T2497] filemap_fdatawrite_wbc+0x1d8/0x270 [ 814.145631][ T2497] filemap_fdatawrite+0xbf/0xf0 [ 814.150951][ T2497] v9fs_dir_release+0x1f2/0x810 [ 814.156072][ T2497] __fput+0x32c/0x1120 [ 814.160534][ T2497] ____fput+0x25/0x30 [ 814.164745][ T2497] task_work_run+0x268/0x310 [ 814.169795][ T2497] do_exit+0xd88/0x4050 [ 814.174178][ T2497] do_group_exit+0x2fe/0x390 [ 814.179695][ T2497] get_signal+0x2dbd/0x3080 [ 814.184436][ T2497] arch_do_signal_or_restart+0x53/0xcb0 [ 814.190439][ T2497] syscall_exit_to_user_mode+0x5d/0x170 [ 814.196222][ T2497] do_syscall_64+0xda/0x1e0 [ 814.201083][ T2497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.207283][ T2497] [ 814.209860][ T2497] CPU: 0 UID: 0 PID: 2497 Comm: kworker/u8:8 Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 814.211716][ T5186] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 814.221607][ T2497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 814.221716][ T2497] Workqueue: events_unbound netfs_write_collection_worker [ 814.221892][ T2497] ===================================================== [ 814.221937][ T2497] Disabling lock debugging due to kernel taint [ 814.221993][ T2497] Kernel panic - not syncing: kmsan.panic set ... [ 814.222065][ T2497] CPU: 0 UID: 0 PID: 2497 Comm: kworker/u8:8 Tainted: G B 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 814.222237][ T2497] Tainted: [B]=BAD_PAGE [ 814.222285][ T2497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 814.222374][ T2497] Workqueue: events_unbound netfs_write_collection_worker [ 814.222533][ T2497] Call Trace: [ 814.222578][ T2497] [ 814.222622][ T2497] dump_stack_lvl+0x216/0x2d0 [ 814.222766][ T2497] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 814.222945][ T2497] dump_stack+0x1e/0x30 [ 814.223068][ T2497] panic+0x4e2/0xcf0 [ 814.223202][ T2497] ? kmsan_get_metadata+0xf1/0x1c0 [ 814.223382][ T2497] kmsan_report+0x2c7/0x2d0 [ 814.223547][ T2497] ? __msan_warning+0x95/0x120 [ 814.223689][ T2497] ? netfs_clear_buffer+0x216/0x4e0 [ 814.223818][ T2497] ? netfs_free_request+0x51f/0x890 [ 814.223953][ T2497] ? netfs_put_request+0x161/0x360 [ 814.224084][ T2497] ? netfs_write_collection_worker+0x7337/0x7c20 [ 814.224250][ T2497] ? process_scheduled_works+0xae0/0x1c40 [ 814.224415][ T2497] ? worker_thread+0xea7/0x14f0 [ 814.224572][ T2497] ? kthread+0x3e2/0x540 [ 814.224739][ T2497] ? ret_from_fork+0x6d/0x90 [ 814.224866][ T2497] ? ret_from_fork_asm+0x1a/0x30 [ 814.225057][ T2497] ? p9_fid_destroy+0xf2/0x2d0 [ 814.225177][ T2497] ? kfree+0x620/0xdb0 [ 814.225293][ T2497] ? p9_fid_destroy+0xf2/0x2d0 [ 814.225427][ T2497] ? p9_fid_destroy+0xf2/0x2d0 [ 814.225540][ T2497] ? kmsan_get_metadata+0x13e/0x1c0 [ 814.225702][ T2497] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 814.225874][ T2497] __msan_warning+0x95/0x120 [ 814.226014][ T2497] netfs_clear_buffer+0x216/0x4e0 [ 814.226165][ T2497] netfs_free_request+0x51f/0x890 [ 814.226302][ T2497] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 814.226473][ T2497] netfs_put_request+0x161/0x360 [ 814.226619][ T2497] netfs_write_collection_worker+0x7337/0x7c20 [ 814.226792][ T2497] ? kmsan_get_metadata+0x13e/0x1c0 [ 814.227009][ T2497] ? __pfx_netfs_write_collection_worker+0x10/0x10 [ 814.227181][ T2497] process_scheduled_works+0xae0/0x1c40 [ 814.227387][ T2497] worker_thread+0xea7/0x14f0 [ 814.227582][ T2497] kthread+0x3e2/0x540 [ 814.227756][ T2497] ? __pfx_worker_thread+0x10/0x10 [ 814.227929][ T2497] ? __pfx_kthread+0x10/0x10 [ 814.228102][ T2497] ret_from_fork+0x6d/0x90 [ 814.228234][ T2497] ? __pfx_kthread+0x10/0x10 [ 814.228409][ T2497] ret_from_fork_asm+0x1a/0x30 [ 814.228589][ T2497] [ 814.229152][ T2497] Kernel Offset: disabled