last executing test programs: 2m37.53096364s ago: executing program 2 (id=83): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x7) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e6400"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x3f) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x884) 2m37.116004275s ago: executing program 2 (id=86): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$audio(0xffffffffffffff9c, 0x0, 0x149842, 0x0) write$dsp(r3, &(0x7f0000000040)='\x00', 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x20, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r5) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32=r6, @ANYBLOB="e76901e257bb217dfb405e9f01bcf4941a004acb3f5e8331f730490dbc20be88"], 0x1c}}, 0x2000040) 2m35.698357691s ago: executing program 2 (id=90): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000002fc0)=[{{&(0x7f0000000500)={0xa, 0x4e22, 0x3, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x1, 0x24000045) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0x4000000d, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@gettfilter={0x44, 0x2e, 0x100, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xb}, {0xf, 0x1}, {0x1, 0xffff}}, [{0x8, 0xb, 0xf38b}, {0x8, 0xb, 0xff}, {0x8}, {0x8, 0xb, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) r6 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r7 = socket$kcm(0xa, 0x2, 0x0) r8 = socket(0x2, 0x80805, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r7, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) writev(r6, &(0x7f0000000540)=[{&(0x7f0000001680)='0', 0x1}, {&(0x7f00000007c0)="89c718f606d7", 0x6}], 0x2) 2m35.011341258s ago: executing program 2 (id=93): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x79c, &(0x7f00000007c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) ftruncate(r0, 0x81ff) 2m33.113821889s ago: executing program 2 (id=99): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000340)=0x6) write(r0, 0x0, 0x0) 2m29.208394233s ago: executing program 2 (id=106): pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000840)=ANY=[]) 2m28.5765881s ago: executing program 32 (id=106): pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000840)=ANY=[]) 1m39.365071261s ago: executing program 5 (id=232): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=r6, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r7, 0x29, 0x1a, 0x0, &(0x7f0000000100)) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x4b564d07, 0xec000000, 0xcd}]}) 1m37.275768214s ago: executing program 1 (id=237): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000002, &(0x7f00000003c0)=ANY=[@ANYBLOB='volume=00000000000000001062,gid=', @ANYRESDEC=0x0, @ANYBLOB=',noadinicb,rootdir=00000000000000000004,gid=forget,unhide,noadinicb,iocharset=cp861,longad,\x00'], 0x1, 0xc32, &(0x7f0000000e00)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) 1m36.72016513s ago: executing program 1 (id=242): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) 1m35.960177629s ago: executing program 1 (id=245): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x13) 1m35.744385771s ago: executing program 1 (id=246): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x800714, &(0x7f00000000c0), 0xff, 0x4df, &(0x7f0000010a80)="$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") openat2(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c67808cf338674bd9bffbcafd468e306d7b4ef07ec3ad71e14dc00000000c2ab00c60e000000000000080000090100", "f28359738e229a4c66810000000000d300e6d6020000d2000000000000000001", [0x9, 0x40000000000000]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x68) 1m34.753860242s ago: executing program 1 (id=250): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) readv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}, {0x0}], 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r4, &(0x7f0000019380)={'#! ', './file0', [{0x20, '\x15\xe6\x8e\\\xfe\x15^\xca\xbb\x88B\xeb\x90FAv\xdc\xbc\x1eiU\b\xc2D\xdb\xca\x9d\xb4oL\xe92\x7f+\f\x0e\xfd\xceTC\x1f;u\x84E\x04\xe3B19xO\xc2\xd4.Mp\xf4\x80{e\x87\xc4V\xe0\x99\x99\x8b\x93I\x8a\xb3\xce*\x9b\xd0X\aA0S\x02k\xdb\x12\v\x9c\x10nY\x85\x92\xf6\x93\xc4%\x0f\x80.\x8d\x9b\x15\x8e\xf4LWr\x14\x9eKh\x97L\xb4\x03\xe9=\x8e\xff\xf0\xb1al\xb6\xc9\xa1/L\x8c7\xa0\x8eD\x1f,\x93`\xc0h\xacjGx\xb8\x9cv\x99bA\xc5]\b\xf8\xa5\x9b\x1c\xeeKB\xdd\xe8\xbboT\x90\x84k\xae\xb5\xfa\xd9\x0f\xd4T<\x0f\xdb\xec\x05HcN\xae;\x87\x00\x00\x00\x00\b\x92\xa7\xdf\x1dS\x00\x8b\x81\xf4\x84X*\xa6e\x922|FO\v\xa6\x17jG\xe3]'}]}, 0xe4) close(r4) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000080)=ANY=[@ANYRES32]) 1m34.243981808s ago: executing program 0 (id=251): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 1m33.960065061s ago: executing program 0 (id=253): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0xfff1, 0xd}}, [@qdisc_kind_options=@q_red={{0x8}, {0x10, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0x10, 0x8}}]}}]}, 0x3c}}, 0x0) 1m33.695447985s ago: executing program 0 (id=255): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xd0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) kcmp(r0, r0, 0x2, r2, r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a"], 0x34}}, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_PEC(r4, 0x708, 0xffffffff) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000100)={0x1, 0xfd, 0x1, &(0x7f0000000000)={0xb, "e89bc5d748e8290e3619f6201f98cad6d3bf3734cdb92f5963a07b61dedbd29410"}}) 1m33.568121726s ago: executing program 1 (id=256): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x13) 1m32.087279903s ago: executing program 33 (id=256): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x13) 1m32.061922123s ago: executing program 0 (id=258): ioctl$NILFS_IOCTL_SET_SUINFO(0xffffffffffffffff, 0x40186e8d, &(0x7f00000002c0)={&(0x7f00000001c0)=[{0x586, 0x0, 0x0, {0x3, 0x4}}], 0x1, 0x20, 0xd, 0x15d2}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000005c0)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_clone(0x2085000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m32.061603603s ago: executing program 5 (id=259): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prlimit64(r1, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r5, 0x800448d3, &(0x7f0000001940)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x80, 0x2, 0xb7aa, 0x8000, 0x6, "3a0e0d96317176c1bd8b649c1d8b959f8ddeab2f60bd751d2e89b24b9329b0e91a30957527ddf9b58dc3edacaade97b9a89ef8ada6ce89b2b66e21f5a0e9b98005655bedb1a269ff9c9a8300a3be701a19721c4e462517c69a71db99d4d97ebf06c984516f4f97f0a89afc0993373db7f6f87f5e8f977f1a2cf73633e26a5606"}) close_range(r0, 0xffffffffffffffff, 0x0) 1m30.003771446s ago: executing program 0 (id=266): mkdir(&(0x7f0000000080)='./file1\x00', 0x10) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYRES16, @ANYRES8, @ANYRES64, @ANYRESDEC, @ANYRES32, @ANYRESDEC, @ANYRESHEX, @ANYBLOB="3554bc6693aefa840194437396afe39b825e397df418a7aa95bdc96ce49ac72cabfc26565c5f36cf36f13cf27c0985ad59134968d0737e1c0dfdd4e2668827166833a9dda2701b16e171f2e236a5d50b8d55a1a8f2e4654e74e10a6e4fbecb3b7aa3489bcd7aa897c54359cd3b2445e5eb8111a2eda5a86473fe18feed824f6878d2d9817f521eb7d05bb0a5ed", @ANYRES16, @ANYRES8, @ANYRESDEC], 0x1, 0x5d0, &(0x7f0000000cc0)="$eJzs3U9rHOcdB/DvrGRZ64CzSewkdQsRKRQTE1u7MmkLharFFB2CCfSSq6jXscjaCfKmbHIoavELSQ/qKYdeSqD0kIOv7SFvQNBjodCj6EVlZmdXG1uWJUd/1s3ng5+d59Ezz2+e+XnmQTMSKMB31sr7ObORIitX3h2U7a3Npd7W5tLdUT3J2SSN6l9my+o/k5kHyUKGJd9LUtThiicd58vOF5e+vjm4PGw16lLtP7PfuIPZqEuW60kuH2G8h986XjE+wzLojVHwabDzdP85xsPPHGNsDqF4wv9FKzmXZL5eB0YXbuNkZ3f0puYGBAAAgGP04na2M8j5054HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPE/qv/9f1KUxqi+kGP39/7n6a6nr0+KFZxn01dHPAwAAAAAAAABO3Bvb2c4g50ftnaL6mf+bVeNC9flCPsn9dLOeqxlkNf30s552ktZEoLnBar+/3j7AyM6eIzsnc74AAAAAAAAA8H/qD1nZ/fk/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMgyKZGW6qcmFUb6Uxm2Q+yVy530byt1H9efbVaU8AAAAATsCL29nOIOdH7Z2ieuZ/tXrun88nuZd+1tJPL93cqt4FDJ/6G1ubS72tzaW7ZXk87i/+fahpVBEzfPew95EXqz0ujkes5Ff5da5kIe9lPWv5bVbTTzcLuVHVVlOkVb+9aI3mufd8l7/Reu9pc329mkkzt7NWze1qfpOP0sutNKpzqPbZ/4i/L7NT/Lx2wBzdqrdFUny/PrPp0KoycmackcU692U2Xto/E4e8Th49UjuN8TuoC8eQ83P1tsz5/FTnvDNx9b26fyaSt/t/eeNO796Hd27fvzI9p/SMHs3E0kQmXvtOZWKuzsZwFT3cavlmNfZ81nIzH+VWuvlx3kmnKkvVdjKvFw9wrzUOd6/98HJdeTkpmsPtlCjz+tJEXidXulbVN/mV3Sy9fPQr0uylujKTFLPjOU2DRzPRnsjEK/tn4o875effG8n6ndWPD3i8H9Xbcm0+O1Vr81x99c5WrW9eHWXfK3v2tau+C+O+xmN9F8d9T7tT5+rv4R6P1Kn6Xtuzbzju9Ym+vb7LAWDqnXvr3FzzX81/ND9vPmjeab47/8uzPzn7g7mceTj715k/N/7U+FnxVj7P73af/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGd3/9PPPlzt9brrKioqKuPKaa9MnIRr/bsfX7v/6Wdvr91d/aD7Qffe9cVO+53r7Z9ev3Z7rdddHH6e9iw5Lrs3/WnPBAAAAAAAAAAAgMM4iV8nPe1zBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Pmx8n7ObKRIe/HqYtne2lzqlWVU392zkWS23P43mXmQLGRY0poIVzzpOF92vrj09c3B5d1YjdH+M/uNO5iNumS5nuTyEcZ7+K3jFeMzLIPeGAWH0/a/AAAA///9DB2I") mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0) 1m29.191967595s ago: executing program 0 (id=267): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000f1000000"], 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$COMEDI_INSNLIST(0xffffffffffffffff, 0x8008640b, &(0x7f0000000100)={0x1, &(0x7f0000000300)=[{0xa000005, 0x0, 0x0, 0x10001, 0x642f}]}) sched_setscheduler(0x0, 0x1, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x8d, @empty, 0x7fff}, 0x1c) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0), 0x208e24b) r4 = socket$inet6(0x10, 0x2, 0x3ff) sendmsg(r4, 0x0, 0x0) write(r4, &(0x7f0000000040)="1c000000210025", 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, 0xffffffffffffffff, 0x0) 1m28.057347128s ago: executing program 5 (id=270): openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) syz_usb_connect$lan78xx(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb7, 0x9e, 0x69, 0x8, 0x2040, 0xd300, 0x16b3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) 1m26.110957289s ago: executing program 5 (id=272): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000140)={[{@nodelalloc}, {@dioread_lock}, {@jqfmt_vfsv1}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x7}}, {@bh}, {@auto_da_alloc}]}, 0x1, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x18b341, 0x0) 1m25.210294229s ago: executing program 5 (id=275): ioctl$NILFS_IOCTL_SET_SUINFO(0xffffffffffffffff, 0x40186e8d, &(0x7f00000002c0)={&(0x7f00000001c0)=[{0x586, 0x0, 0x0, {0x3, 0x4}}], 0x1, 0x20, 0xd, 0x15d2}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000005c0)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_clone(0x2085000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m22.760072707s ago: executing program 5 (id=278): socket$nl_netfilter(0x10, 0x3, 0xc) clock_adjtime(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x100, 0x0) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040e040203"], 0x7) 1m22.334494362s ago: executing program 34 (id=278): socket$nl_netfilter(0x10, 0x3, 0xc) clock_adjtime(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x100, 0x0) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040e040203"], 0x7) 1m13.796326607s ago: executing program 35 (id=267): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000f1000000"], 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$COMEDI_INSNLIST(0xffffffffffffffff, 0x8008640b, &(0x7f0000000100)={0x1, &(0x7f0000000300)=[{0xa000005, 0x0, 0x0, 0x10001, 0x642f}]}) sched_setscheduler(0x0, 0x1, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x8d, @empty, 0x7fff}, 0x1c) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0), 0x208e24b) r4 = socket$inet6(0x10, 0x2, 0x3ff) sendmsg(r4, 0x0, 0x0) write(r4, &(0x7f0000000040)="1c000000210025", 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, 0xffffffffffffffff, 0x0) 11.18707315s ago: executing program 3 (id=511): unshare(0x8040480) r0 = io_uring_setup(0x39c4, &(0x7f0000000180)={0x0, 0x95f5, 0x1000, 0x1, 0x2d6}) io_uring_setup(0x3a72, &(0x7f0000000080)={0x0, 0x9b51, 0x20, 0x3, 0x118, 0x0, r0}) 10.903594003s ago: executing program 3 (id=515): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0xb01, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r1, &(0x7f0000002900)=[{&(0x7f0000000100)="ec", 0x1}], 0x1) 7.729385387s ago: executing program 7 (id=522): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x10001}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x1007}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$eJzs3c9vFFUcAPDv7LalpWALMSoepIkxkCgtLWCI8QBXYxr8ES9erLQgoUDT1mjRhJLgxcR4McbEkwfxv1AiV0960YMXT4aEqOFo4prZ7vTnbH8s7Q4wn0+y7My8ebw3LN++t6/vzQRQWgPpH5WIAxExlUT0JfOLaR3RSBxYOO/ePx+fTV9J1Gpv/JVE0jiWnZ803nsbmbsj4ucfk9hfXVvuzNzVi2OTkxPTjf2h2UtTQzNzV49cuDR2fuL8xOWRF0dOnjh+4uTw0Zau69raQ2l1Puj7dPTtb7/+Nxn+7vfRJE7FK40Tl1/HdhmIgfq/SbI2qffkdhdWkGrj/8nyjzjpKLBCbEn2+XVGxJPRF9VY+vD64pPXCq0csKNqSUQNKKlE/ENJZf2A7Lv96u/BlUJ6JUA73D29MACwNv47FsYGo7s+NrD7XhLLh3WSiGhtZG6lPRHx0+3RG+duj96Y3rsz43BAvvnrEfHUsvjvylKSevz3R3f01+O/siL+037BmcZ7evz1FstfPVQs/qF9FuK/O6f9X4r/aBL/7yyL/3dbLH9gafO9nhXx39PqJQEAAAAAAEBp3TodES/kzf+pLM7/iZz5P70RcWobyh9Ytb/29/+VO9tQDJDj7umIl3Pn/1aiujD7t7/a+D3/3vp8gM7k3IXJiaMR8VhEHI7OXen+8DplHPls/1fN0gYa8/+yV1p++r50RuVOx66VecbHZsfu97qBiLvXI57Onf+bLLb/SU77n/48mNpkGfufu3mmWdrG8Q/slNo3EYdy2/+lu1Yk69+fY6jeHxjKegVrPfPR5983K7/V+HeLCbh/afu/e/3470+W369nZutlHJvrqDVLa7X/35W8Wb/lTLZc4cOx2dnp4Yie5NVqenTF8ZGt1xkeRVk8ZPGSxv/hZ9cf/8vr//dExPyqvzv5e+Wa4swT//X+0aw++v9QnDT+x7fU/jfdSOYjcpNGbvb/0Kz8zbX/x+tt/eHGEeN/sODLLEy7Vh7PCdCOvKR21xcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgWViNgTSWVwcbtSGRyM6I2Ix2N3ZfLKzOzz5668f3k8Tas//7+SPem3b2E/yZ7/379sf2TV/rGI2BcRX1R76vuDZ69Mjhd98QAAAAAAAAAAAAAAAAAAAPCA6G2y/j/1Z7Xo2gE7rqPoCgCFyYn/X4qoB9B+2n8oL/EP5SX+obzEP5SX+IfyEv9QXuIfykv8AwAAAADAI2XfwVu/JREx/1JP/ZXqaqR1FlozYKdViq4AUBi3+IHyMvUHyst3fCDZIL27aaaNcjbLnJo6u3FmAAAAAAAAAAAAACBz6ID1/1BW1v9DeVn/D+WVrf8/WHA9gPZr+Tt+0zW9wMNovZX8zcN9E+v/AQAAAAAAAAAAAIBtMTN39eLY5OTEdPs2fm089Cv3nJ6IaHN9so23iii02I1arXat/lE8IPV5yDeyqfCbz9WdHwU7s5Gt9dtcroJ+IAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGv8HwAA//+xpBxA") bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400005}, 0x94) 7.546999249s ago: executing program 6 (id=525): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000003c0)=[@in6={0xa, 0x4e24, 0x86a9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}], 0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000200), 0x4) listen(r0, 0x2) getpeername(r0, 0x0, &(0x7f0000000380)) 7.018562195s ago: executing program 7 (id=526): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x40000001, 0x7fff, 0x4, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f00000000c0)={0xc7, 0x0, 0x1}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r6, &(0x7f00000003c0)={0x0, &(0x7f00000004c0)=[@rdmsr={0x66, 0x18, {0x40000093}}], 0x18}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.455105181s ago: executing program 6 (id=529): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0x0, &(0x7f0000000180)='smaps_rollup\x00') fchdir(0xffffffffffffffff) r3 = inotify_init1(0x800) inotify_add_watch(r3, 0x0, 0x60000526) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000001010101000000000000000002001c"], 0x40}, 0x1, 0x0, 0x0, 0x4004410}, 0x0) 6.445805411s ago: executing program 3 (id=531): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r3, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r5 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x275a, 0x0) ftruncate(r6, 0x2000009) sendfile(r5, r6, 0x0, 0x7ffff000) getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000100)) syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x1010006, &(0x7f00000013c0)=ANY=[@ANYBLOB='quota,discard=0x000000000000aff9,iocharset=none,nointegrity,iocharset=cp1251,integrity,nodiscard,noquota,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c00c38b4986bd7086e58f5d7fd70ab0f8e8bb0e5f5b35be555a19034ea00aa5cc6053411b1c187a24d1f68a37ecec3d26f9ba8207f6ce22b0a47e28485c69c14dc952b0c5e5f1ffe29eb2ce10e7e2a59e32a5a7ea7d8a6fa0b5e90476f3fa2cb4fcba14a881906678b3f96174c0ea0e4edc3068e37fec09729df129bb3e5b9490df2879472cb2e2"], 0x24, 0x621a, &(0x7f0000001500)="$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") open(&(0x7f0000000040)='.\x00', 0x101480, 0x24) syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000f00)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[@ANYBLOB='dmode=00000000000000000007777,noadinicb,gid=', @ANYRESDEC=0x0, @ANYBLOB=',uid=forget,uid=', @ANYRESDEC=0x0, @ANYBLOB=',umask=000 0000000000000000002,longad,gid=forget,shortad+unhide,\x00'], 0xfc, 0xc44, &(0x7f0000000200)="$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") read$FUSE(0xffffffffffffffff, 0x0, 0x0) 6.417020521s ago: executing program 7 (id=532): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40d80, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) 4.807747629s ago: executing program 8 (id=534): ioctl$NILFS_IOCTL_SET_SUINFO(0xffffffffffffffff, 0x40186e8d, &(0x7f00000002c0)={&(0x7f00000001c0)=[{0x586, 0x0, 0x0, {0x3, 0x4}}], 0x1, 0x20, 0xd, 0x15d2}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000005c0)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000100"], 0x50) syz_clone(0x2085000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.806211579s ago: executing program 3 (id=535): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118) r3 = fanotify_init(0x81, 0x40000) fanotify_mark(r3, 0x105, 0x40001032, r2, 0x0) read$FUSE(r3, &(0x7f0000002300)={0x2020}, 0x2020) 4.65589171s ago: executing program 6 (id=536): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x10001}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x1007}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400005}, 0x94) 4.65546123s ago: executing program 7 (id=537): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000002fc0)=[{{&(0x7f0000000500)={0xa, 0x4e22, 0x3, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x1, 0x24000045) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@gettfilter={0x44, 0x2e, 0x100, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xb}, {0xf, 0x1}, {0x1, 0xffff}}, [{0x8, 0xb, 0xf38b}, {0x8, 0xb, 0xff}, {0x8}, {0x8, 0xb, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) r6 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r7 = socket$kcm(0xa, 0x2, 0x0) r8 = socket(0x2, 0x80805, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r7, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r9, 0x0, 0x485, 0x0, 0x0) writev(r6, &(0x7f0000000540)=[{&(0x7f0000001680)='0', 0x1}, {&(0x7f00000007c0)="89c718f606d7", 0x6}], 0x2) 4.206621475s ago: executing program 4 (id=538): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfc, "2af01c3d0040fbffffffffffffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000280)={0xff7f, 0x214, 0x3, 0x40, 0x16, "000000001f00f5994c5419f9f7180000000400"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000700)=0x10) 3.307254895s ago: executing program 4 (id=539): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8, 0x7}]}, 0x10) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000386dd6a000000004d110000000000000000000000ffffac14140bff0200000000000000000000000000014e234e20004d90"], 0x0) 3.142998076s ago: executing program 6 (id=540): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) 3.107071597s ago: executing program 4 (id=541): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0xb01, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r1, &(0x7f0000002900)=[{&(0x7f0000000100)="ec", 0x1}], 0x1) 3.046612047s ago: executing program 3 (id=542): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r4 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa, 0x8813, r4, 0xa9d51000) 3.026960597s ago: executing program 7 (id=543): prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) brk(0x600000000000) mlockall(0x3) 2.81236783s ago: executing program 8 (id=544): syz_open_dev$video(&(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb", 0x42}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b2849", 0x3e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb7", 0xc6}, {0x0}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b", 0x41}], 0x5}}], 0x1, 0x20000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.700066291s ago: executing program 6 (id=545): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) r5 = fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=r6, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r7, 0x29, 0x1a, 0x0, &(0x7f0000000100)) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x4b564d07, 0xec000000, 0xcd}]}) 2.566282682s ago: executing program 8 (id=546): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f", 0x1c}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb", 0x49}, {0x0}, {0x0}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6c", 0x3f}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}], 0x2, 0x20000044) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.308195336s ago: executing program 4 (id=547): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0x0, &(0x7f0000000180)='smaps_rollup\x00') fchdir(0xffffffffffffffff) r3 = inotify_init1(0x800) inotify_add_watch(r3, 0x0, 0x60000526) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000001010101000000000000000002001c"], 0x40}, 0x1, 0x0, 0x0, 0x4004410}, 0x0) 2.203026427s ago: executing program 8 (id=548): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000600)="447df50ce4033a7b5ad00b83244c00b711803e7cca2504a2600da98efff9e7d67f87b17ffd582b04d632ebd866f28678899ae0d6306cd39420b7b7f78deaaf2908c2a5726f2c", 0x46}, {&(0x7f00000006c0)="080c0434", 0x4}, {&(0x7f0000000780)="4274aa814c8f6ea8d8db43178dd2f41ef596a3ca465412910e05cba0f5d97e67886d55be18cac95a1aa093479596c3613670aaf2a3b1edc465bedfdb5156035719c0baa8bb8bf2a825ec04f424dda801fea000f41edc43511e9c8bf89656071e91ae4c356d6a9ca608af6b83cc9f3d9ae37c2bfab2e5708062c659e44272215dba2195d826f9fd", 0x87}], 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="ac1414bb0000000000000000140000000000000000000000020000000600000000000000d8000000000000000000000007000000072b52000000000a0101020a010100ac14141b640101020a010102ac1414bbac14143ee000000200000000071731ac14143cac1e0101e0000002ac1414aaffffffff442cdf11ac1e010100000005ffffffff00000002ac1414bb00000006ffffffff000000000000000000000003441435230a01010200000001ffffffff00000007444477937f00000100000007ac1e000100000008ac14143200"], 0x1a0}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33050910"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.143993778s ago: executing program 8 (id=549): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2b}}}]}, 0x38}}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x3, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x488d8}, 0x20004804) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.143481478s ago: executing program 4 (id=550): lremovexattr(0x0, &(0x7f0000002280)=@known='trusted.overlay.upper\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={&(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000039c0)=[{&(0x7f0000000600)="447df50ce4033a7b5ad00b83244c00b711803e7cca2504a2600da98efff9e7d67f87b17ffd582b04d632ebd866f28678899ae0d6306cd39420b7b7f78deaaf2908c2a5726f2c50c9eb720e93d3e5b49fae5ab325f9ef326cf8bad0db853cbb8235b0c803c417ede8f7b85eaad8aea5b2fe9813fee217a97a980d39d7a1efef815bf2bfe6823e664dc7dcd285d91c9e4ab6ee36a00b300ffd69f9eb", 0x9b}, {&(0x7f00000006c0)="080c0434", 0x4}, {&(0x7f0000000780)="4274aa814c8f6ea8d8db43178dd2f41ef596a3ca465412910e05cba0f5d97e67886d55be18cac95a1aa093479596c3613670aaf2a3b1edc465bedfdb5156035719c0baa8bb8bf2a825ec04f424dda801fea000f41edc43511e9c8bf89656071e91ae4c356d6a9ca608af6b83cc9f3d9ae37c2bfab2e5708062c659e44272215dba2195d826f9fd3b46efe6524229e48a311e4aab2a2e5f89", 0x98}], 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYBLOB="ac1414bb0000000000000000140000000000000000000000020000000600000000000000d8000000000000000000000007000000072b52000000000a0101020a010100ac14141b640101020a010102ac1414bbac14143ee000000200000000071731ac14143cac1e0101e0000002ac1414aaffffffff442cdf11ac1e010100000005ffffffff00000002ac1414bb00000006ffffffff000000000000000000000003441435230a01010200000001ffffffff00000007444477937f00000100000007ac1e000100000008ac14143200000005e0000002000000f77f000001000002"], 0x1a0}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.026303999s ago: executing program 6 (id=551): pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setpipe(r0, 0x407, 0x0) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x840, 0x0, 0x0, 0x4}}, 0x50) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x11, 0x0) 806.116352ms ago: executing program 7 (id=552): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000009c0)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 644.020203ms ago: executing program 4 (id=553): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000002fc0)=[{{&(0x7f0000000500)={0xa, 0x4e22, 0x3, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x1, 0x24000045) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@gettfilter={0x44, 0x2e, 0x100, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xb}, {0xf, 0x1}, {0x1, 0xffff}}, [{0x8, 0xb, 0xf38b}, {0x8, 0xb, 0xff}, {0x8}, {0x8, 0xb, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) r6 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r7 = socket$kcm(0xa, 0x2, 0x0) r8 = socket(0x2, 0x80805, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r7, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r9, 0x0, 0x485, 0x0, 0x0) writev(r6, &(0x7f0000000540)=[{&(0x7f0000001680)='0', 0x1}, {&(0x7f00000007c0)="89c718f606d7", 0x6}], 0x2) 8.84354ms ago: executing program 8 (id=554): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x9}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = socket$inet6(0xa, 0x805, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'veth0\x00', &(0x7f0000000080)=@ethtool_cmd={0x4e, 0x40, 0x3, 0x2, 0x6, 0x4c, 0x4, 0xb, 0x6, 0x0, 0x9, 0x10001, 0xaff0, 0xa8, 0xa8, 0x5, [0xb, 0x8]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600"/1827], &(0x7f0000000140)='GPL\x00'}, 0x94) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r4, r3}) setsockopt$sock_attach_bpf(r4, 0x1, 0x7, &(0x7f0000000000), 0x4) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/wireless\x00') pread64(r5, &(0x7f00000000c0)=""/144, 0x90, 0x2f) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r6, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/229], 0x119) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) write$UHID_SET_REPORT_REPLY(r6, &(0x7f0000000300)=ANY=[@ANYBLOB], 0xc) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 0s ago: executing program 3 (id=555): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x5, 0xb2, 0xa8}, 0x39}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x2) close(r2) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030028590214000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) kernel console output (not intermixed with test programs): blems! [ 88.630694][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.641778][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.654534][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.668287][ T4273] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.683349][ T4273] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.692593][ T4273] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.706576][ T4273] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.726824][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.740701][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.752161][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.764026][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.775553][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.786513][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.796567][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.808774][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.821813][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.832185][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.844222][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.854799][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.865599][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.883368][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.894296][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.904428][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.915091][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.926465][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.944661][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.961080][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.971901][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.982235][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.982956][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.000660][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.010658][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.025260][ T4274] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.038438][ T4274] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.048395][ T4274] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.057564][ T4274] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.127848][ T4283] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.136743][ T4283] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.158830][ T4283] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.172688][ T4283] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.418422][ T4328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.426298][ T4328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.461998][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.517991][ T2961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.537332][ T2961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.553008][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.576701][ T2961] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.593291][ T2961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.622951][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.645782][ T4328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.651014][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.669122][ T4328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.678675][ T4312] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 89.696548][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.708527][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.722796][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.732093][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.756124][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.775593][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.883278][ T4312] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 89.903774][ T4312] usb 1-1: config 0 has no interface number 0 [ 89.942632][ T4312] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 89.969024][ T4312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.979214][ T4312] usb 1-1: Product: syz [ 89.984206][ T4312] usb 1-1: Manufacturer: syz [ 90.002668][ T4312] usb 1-1: SerialNumber: syz [ 90.066394][ T4312] usb 1-1: config 0 descriptor?? [ 90.068486][ T4375] loop2: detected capacity change from 0 to 1024 [ 90.094645][ T4377] device syzkaller0 entered promiscuous mode [ 90.212226][ T4375] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002] [ 90.283614][ T4375] System zones: 0-1, 3-36 [ 90.427692][ T4312] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 90.454384][ T4312] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 90.465248][ T4312] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 90.473925][ T4312] usb 1-1: media controller created [ 90.496484][ T4375] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.3: bad orphan inode 134217728 [ 90.519804][ T4375] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 91.251785][ T4312] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 91.338271][ T4312] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 91.430110][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 91.480180][ T4312] usb 1-1: USB disconnect, device number 2 [ 91.770245][ T4404] loop0: detected capacity change from 0 to 256 [ 91.801838][ T4404] ======================================================= [ 91.801838][ T4404] WARNING: The mand mount option has been deprecated and [ 91.801838][ T4404] and is ignored by this kernel. Remove the mand [ 91.801838][ T4404] option from the mount to silence this warning. [ 91.801838][ T4404] ======================================================= [ 91.875701][ T4406] syz.3.15 uses obsolete (PF_INET,SOCK_PACKET) [ 91.924703][ T22] cfg80211: failed to load regulatory.db [ 91.984007][ T4409] loop4: detected capacity change from 0 to 8 [ 92.496335][ T4427] loop2: detected capacity change from 0 to 1024 [ 92.555012][ T4427] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002] [ 92.567372][ T4427] System zones: 0-1, 3-36 [ 92.585040][ T4427] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.24: bad orphan inode 134217728 [ 92.691084][ T4427] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 92.802385][ T26] audit: type=1326 audit(1778138640.538:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4407 comm="syz.4.17" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d4c39cdd9 code=0x7fc00000 [ 92.860238][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 92.873451][ T4317] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 93.526005][ T4441] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.805301][ T4317] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 93.825217][ T4317] usb 1-1: config 0 has no interface number 0 [ 93.871522][ T4317] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 93.887087][ T4317] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.895264][ T4317] usb 1-1: Product: syz [ 93.914580][ T4317] usb 1-1: Manufacturer: syz [ 93.947052][ T4317] usb 1-1: SerialNumber: syz [ 93.977845][ T4317] usb 1-1: config 0 descriptor?? [ 93.999534][ T4441] kvm [4439]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x80000000 [ 94.019379][ T4454] netlink: 36 bytes leftover after parsing attributes in process `syz.1.31'. [ 94.035604][ T4441] kvm [4439]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 94.294493][ T4317] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 94.320843][ T4317] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 94.344032][ T4317] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 94.360947][ T4317] usb 1-1: media controller created [ 94.403192][ T4317] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 94.507436][ T4317] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 94.631733][ T4317] usb 1-1: USB disconnect, device number 3 [ 95.112826][ T952] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 95.268046][ T4475] loop0: detected capacity change from 0 to 1024 [ 95.443193][ T4475] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002] [ 95.481394][ T4475] System zones: 0-1, 3-36 [ 95.513614][ T952] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 95.522287][ T952] usb 4-1: config 0 has no interface number 0 [ 95.528492][ T952] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 95.539365][ T952] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 95.550607][ T952] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 95.562019][ T952] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 95.562080][ T4475] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.38: bad orphan inode 134217728 [ 95.575093][ T952] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 95.575145][ T952] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.617237][ T22] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 95.825843][ T22] usb 5-1: unable to get BOS descriptor or descriptor too short [ 95.879916][ T22] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.012459][ T22] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x8E has invalid wMaxPacketSize 0 [ 96.166758][ T22] usb 5-1: config 1 interface 0 has no altsetting 0 [ 96.182976][ T4475] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 96.215586][ T22] usb 5-1: string descriptor 0 read error: -22 [ 96.242025][ T22] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 96.282022][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.362153][ T952] usb 4-1: config 0 descriptor?? [ 96.374116][ T4470] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 96.409670][ T4470] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 96.420537][ T952] ldusb 4-1:0.55: Interrupt in endpoint not found [ 96.509548][ T4281] EXT4-fs (loop0): unmounting filesystem. [ 96.654343][ T4320] usb 4-1: USB disconnect, device number 2 [ 96.715707][ T22] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 97.060336][ T4500] loop1: detected capacity change from 0 to 32768 [ 97.076174][ T26] audit: type=1326 audit(1778138644.528:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4485 comm="syz.1.42" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a559cdd9 code=0x7ffc0000 [ 97.116474][ T4339] usb 5-1: USB disconnect, device number 2 [ 97.212095][ T26] audit: type=1326 audit(1778138644.528:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4485 comm="syz.1.42" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a559cdd9 code=0x7ffc0000 [ 97.367131][ T26] audit: type=1326 audit(1778138644.528:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4485 comm="syz.1.42" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7ff2a559cdd9 code=0x7ffc0000 [ 97.399569][ T4369] udevd[4369]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 97.492298][ T26] audit: type=1326 audit(1778138644.538:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4485 comm="syz.1.42" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a559cdd9 code=0x7ffc0000 [ 97.567526][ T26] audit: type=1326 audit(1778138644.538:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4485 comm="syz.1.42" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a559cdd9 code=0x7ffc0000 [ 97.633483][ T26] audit: type=1326 audit(1778138644.538:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4485 comm="syz.1.42" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff2a559cdd9 code=0x7ffc0000 [ 97.714831][ T4504] kvm [4503]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x1020 [ 97.743568][ T26] audit: type=1326 audit(1778138644.538:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4485 comm="syz.1.42" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a559cdd9 code=0x7ffc0000 [ 97.767086][ T4504] kvm [4503]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xe241 [ 97.878520][ T26] audit: type=1326 audit(1778138644.538:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4485 comm="syz.1.42" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a559cdd9 code=0x7ffc0000 [ 98.038658][ T26] audit: type=1326 audit(1778138644.538:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4485 comm="syz.1.42" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7ff2a559cdd9 code=0x7ffc0000 [ 98.200714][ T26] audit: type=1326 audit(1778138644.538:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4485 comm="syz.1.42" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a559cdd9 code=0x7ffc0000 [ 98.235581][ T26] audit: type=1326 audit(1778138644.538:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4485 comm="syz.1.42" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a559cdd9 code=0x7ffc0000 [ 98.387015][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 98.406987][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 98.416983][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 98.426983][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 98.437046][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 98.446993][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 98.477012][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 98.486997][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 98.496984][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 98.506983][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 98.715606][ T26] audit: type=1326 audit(1778138644.538:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4485 comm="syz.1.42" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7ff2a559cdd9 code=0x7ffc0000 [ 98.777756][ T26] audit: type=1326 audit(1778138644.538:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4485 comm="syz.1.42" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a559cdd9 code=0x7ffc0000 [ 98.883490][ T26] audit: type=1326 audit(1778138644.538:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4485 comm="syz.1.42" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a559cdd9 code=0x7ffc0000 [ 98.926711][ T4525] loop2: detected capacity change from 0 to 1024 [ 98.938680][ T26] audit: type=1326 audit(1778138644.538:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4485 comm="syz.1.42" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7ff2a559cdd9 code=0x7ffc0000 [ 99.059498][ T26] audit: type=1326 audit(1778138644.538:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4485 comm="syz.1.42" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a559cdd9 code=0x7ffc0000 [ 99.180245][ T26] audit: type=1326 audit(1778138644.538:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4485 comm="syz.1.42" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a559cdd9 code=0x7ffc0000 [ 99.192161][ T4525] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002] [ 99.318668][ T4525] System zones: 0-1, 3-36 [ 99.748863][ T4525] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.54: bad orphan inode 134217728 [ 99.831952][ T4525] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 100.079596][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 100.403564][ T4550] device syzkaller0 entered promiscuous mode [ 100.517755][ T4550] syz.0.61 (4550) used greatest stack depth: 19664 bytes left [ 100.637162][ T4339] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 100.839530][ T4339] usb 3-1: unable to get BOS descriptor or descriptor too short [ 100.862450][ T4339] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.914749][ T4339] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x8E has invalid wMaxPacketSize 0 [ 100.993283][ T4339] usb 3-1: config 1 interface 0 has no altsetting 0 [ 101.156697][ T4547] loop4: detected capacity change from 0 to 32768 [ 101.254944][ T4552] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 101.799370][ T4567] Bluetooth: MGMT ver 1.22 [ 101.851001][ T4567] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 102.559707][ T4570] loop0: detected capacity change from 0 to 32768 [ 102.683390][ T4574] loop1: detected capacity change from 0 to 256 [ 102.720796][ T4574] exfat: Deprecated parameter 'utf8' [ 102.726695][ T4574] exfat: Deprecated parameter 'namecase' [ 102.767604][ T4574] exfat: Deprecated parameter 'namecase' [ 102.810092][ T4574] exfat: Deprecated parameter 'utf8' [ 102.829146][ T4576] loop3: detected capacity change from 0 to 1024 [ 102.952353][ T4574] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 102.995009][ T4576] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002] [ 103.005480][ T4576] System zones: 0-1, 3-36 [ 103.014181][ T4576] EXT4-fs error (device loop3): ext4_orphan_get:1431: comm syz.3.70: bad orphan inode 134217728 [ 103.027708][ T4576] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 103.217063][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 103.427722][ T4339] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 103.436852][ T4339] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.487173][ T4339] usb 3-1: can't set config #1, error -71 [ 103.512092][ T4339] usb 3-1: USB disconnect, device number 2 [ 103.603213][ T4588] device syzkaller0 entered promiscuous mode [ 105.619225][ T26] kauditd_printk_skb: 164 callbacks suppressed [ 105.619248][ T26] audit: type=1326 audit(1778138653.268:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4608 comm="syz.3.81" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1739cdd9 code=0x7ffc0000 [ 105.807520][ T4612] loop3: detected capacity change from 0 to 32768 [ 105.826698][ T26] audit: type=1326 audit(1778138653.268:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4608 comm="syz.3.81" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1739cdd9 code=0x7ffc0000 [ 105.859858][ T4614] loop0: detected capacity change from 0 to 1024 [ 105.860098][ T26] audit: type=1326 audit(1778138653.268:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4608 comm="syz.3.81" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7faa1739cdd9 code=0x7ffc0000 [ 105.918948][ T4614] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002] [ 105.937324][ T4614] System zones: 0-1, 3-36 [ 105.957391][ T4614] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.82: bad orphan inode 134217728 [ 105.968556][ T4614] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 106.004956][ T4618] netlink: 12 bytes leftover after parsing attributes in process `syz.2.83'. [ 106.044040][ T26] audit: type=1326 audit(1778138653.268:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4608 comm="syz.3.81" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1739cdd9 code=0x7ffc0000 [ 106.080092][ T26] audit: type=1326 audit(1778138653.268:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4608 comm="syz.3.81" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1739cdd9 code=0x7ffc0000 [ 106.207593][ T26] audit: type=1326 audit(1778138653.268:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4608 comm="syz.3.81" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faa1739cdd9 code=0x7ffc0000 [ 106.235282][ T26] audit: type=1326 audit(1778138653.268:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4608 comm="syz.3.81" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1739cdd9 code=0x7ffc0000 [ 106.288193][ T4281] EXT4-fs (loop0): unmounting filesystem. [ 106.324699][ T4624] loop4: detected capacity change from 0 to 256 [ 106.331570][ T26] audit: type=1326 audit(1778138653.268:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4608 comm="syz.3.81" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1739cdd9 code=0x7ffc0000 [ 106.357141][ T4339] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 106.404057][ T4624] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 106.458535][ T26] audit: type=1326 audit(1778138653.268:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4608 comm="syz.3.81" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7faa1739cdd9 code=0x7ffc0000 [ 106.694160][ T26] audit: type=1326 audit(1778138653.268:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4608 comm="syz.3.81" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1739cdd9 code=0x7ffc0000 [ 106.737328][ T4339] usb 2-1: unable to get BOS descriptor or descriptor too short [ 106.754790][ T4339] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.766136][ T4630] loop0: detected capacity change from 0 to 512 [ 106.810041][ T4339] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x8E has invalid wMaxPacketSize 0 [ 107.226606][ T4630] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 107.239015][ T4339] usb 2-1: config 1 interface 0 has no altsetting 0 [ 107.709347][ T4630] EXT4-fs (loop0): orphan cleanup on readonly fs [ 107.749732][ T4630] EXT4-fs warning (device loop0): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 107.887395][ T4630] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 107.969291][ T4630] EXT4-fs error (device loop0): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 108.000668][ T4638] device syzkaller0 entered promiscuous mode [ 108.052968][ T4630] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #12: comm syz.0.88: corrupted inode contents [ 108.085196][ T4642] Zero length message leads to an empty skb [ 108.116141][ T4630] EXT4-fs error (device loop0): ext4_dirty_inode:6156: inode #12: comm syz.0.88: mark_inode_dirty error [ 108.190091][ T4630] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #12: comm syz.0.88: corrupted inode contents [ 108.224768][ T4630] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #12: comm syz.0.88: mark_inode_dirty error [ 108.251110][ T4630] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #12: comm syz.0.88: corrupted inode contents [ 108.273352][ T4630] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 108.285254][ T4630] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #12: comm syz.0.88: corrupted inode contents [ 108.323356][ T4630] EXT4-fs error (device loop0): ext4_truncate:4325: inode #12: comm syz.0.88: mark_inode_dirty error [ 108.350019][ T4630] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 108.386723][ T4630] EXT4-fs (loop0): 1 truncate cleaned up [ 108.399747][ T4630] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 108.484471][ T4630] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 108.553657][ T4630] EXT4-fs warning (device loop0): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 108.606392][ T4650] loop2: detected capacity change from 0 to 2048 [ 108.620096][ T4652] EXT4-fs error (device loop0): ext4_lookup:1858: inode #15: comm syz.0.88: iget: bad i_size value: 360287970189639690 [ 108.808881][ T4650] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 108.859653][ T4281] EXT4-fs (loop0): unmounting filesystem. [ 110.263988][ T4274] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 110.277037][ C1] sched: RT throttling activated [ 110.560685][ T4665] loop4: detected capacity change from 0 to 1024 [ 111.964029][ T4658] EXT4-fs (loop2): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 3 with error 28 [ 111.976911][ T4658] EXT4-fs (loop2): This should not happen!! Data will be lost [ 111.976911][ T4658] [ 111.986774][ T4658] EXT4-fs (loop2): Total free blocks count 0 [ 111.992919][ T4658] EXT4-fs (loop2): Free/Dirty block details [ 111.999021][ T4658] EXT4-fs (loop2): free_blocks=2415919520 [ 112.004901][ T4658] EXT4-fs (loop2): dirty_blocks=32976 [ 112.010469][ T4658] EXT4-fs (loop2): Block reservation details [ 112.016606][ T4658] EXT4-fs (loop2): i_reserved_data_blocks=2061 [ 113.106029][ T26] kauditd_printk_skb: 45 callbacks suppressed [ 113.106045][ T26] audit: type=1326 audit(1778138660.838:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4661 comm="syz.0.96" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f938d59cdd9 code=0x7ffc0000 [ 113.159758][ T4665] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002] [ 113.226133][ T4665] System zones: 0-1, 3-36 [ 113.239469][ T26] audit: type=1326 audit(1778138660.838:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4661 comm="syz.0.96" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f938d59cdd9 code=0x7ffc0000 [ 113.263740][ T26] audit: type=1326 audit(1778138660.838:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4661 comm="syz.0.96" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f938d59cdd9 code=0x7ffc0000 [ 113.287635][ T26] audit: type=1326 audit(1778138660.838:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4661 comm="syz.0.96" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f938d59cdd9 code=0x7ffc0000 [ 113.313680][ T26] audit: type=1326 audit(1778138660.838:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4661 comm="syz.0.96" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f938d59cdd9 code=0x7ffc0000 [ 113.344888][ T4665] EXT4-fs: error -4 creating inode table initialization thread [ 113.367380][ T26] audit: type=1326 audit(1778138660.878:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4661 comm="syz.0.96" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f938d59cdd9 code=0x7ffc0000 [ 113.402177][ T4665] EXT4-fs (loop4): mount failed [ 113.461845][ T26] audit: type=1326 audit(1778138660.878:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4661 comm="syz.0.96" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f938d59cdd9 code=0x7ffc0000 [ 113.487903][ T26] audit: type=1326 audit(1778138660.878:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4661 comm="syz.0.96" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f938d59cdd9 code=0x7ffc0000 [ 113.515005][ T4666] loop0: detected capacity change from 0 to 32768 [ 113.543689][ T4339] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 113.555001][ T4339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.567785][ T26] audit: type=1326 audit(1778138660.878:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4661 comm="syz.0.96" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f938d59cdd9 code=0x7ffc0000 [ 113.592431][ T26] audit: type=1326 audit(1778138660.878:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4661 comm="syz.0.96" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f938d59cdd9 code=0x7ffc0000 [ 113.622570][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 113.628862][ T4339] usb 2-1: can't set config #1, error -71 [ 113.777712][ T4339] usb 2-1: USB disconnect, device number 2 [ 114.108189][ T4682] device syzkaller0 entered promiscuous mode [ 114.364628][ T2915] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.850927][ T2915] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.790745][ T2915] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.045558][ T2915] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.464831][ T4713] process 'syz.0.114' launched './file0' with NULL argv: empty string added [ 117.023522][ T4710] loop3: detected capacity change from 0 to 32768 [ 117.666387][ T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 117.683929][ T48] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 117.693637][ T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 117.709735][ T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 117.717765][ T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 117.725981][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 117.829045][ T4725] device syzkaller0 entered promiscuous mode [ 119.798112][ T4282] Bluetooth: hci2: command 0x0409 tx timeout [ 120.223457][ T4761] loop4: detected capacity change from 0 to 1024 [ 120.241191][ T4719] chnl_net:caif_netlink_parms(): no params data found [ 120.417406][ T4761] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 120.458372][ T26] kauditd_printk_skb: 96 callbacks suppressed [ 120.458387][ T26] audit: type=1326 audit(1778138668.198:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4762 comm="syz.3.126" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1739cdd9 code=0x7ffc0000 [ 120.659376][ T4764] loop3: detected capacity change from 0 to 32768 [ 120.925654][ T26] audit: type=1326 audit(1778138668.198:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4762 comm="syz.3.126" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1739cdd9 code=0x7ffc0000 [ 120.958092][ T26] audit: type=1326 audit(1778138668.198:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4762 comm="syz.3.126" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7faa1739cdd9 code=0x7ffc0000 [ 121.088117][ T26] audit: type=1326 audit(1778138668.198:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4762 comm="syz.3.126" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1739cdd9 code=0x7ffc0000 [ 121.113628][ T26] audit: type=1326 audit(1778138668.198:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4762 comm="syz.3.126" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1739cdd9 code=0x7ffc0000 [ 121.148662][ T26] audit: type=1326 audit(1778138668.228:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4762 comm="syz.3.126" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faa1739cdd9 code=0x7ffc0000 [ 121.172903][ T26] audit: type=1326 audit(1778138668.228:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4762 comm="syz.3.126" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1739cdd9 code=0x7ffc0000 [ 121.197087][ T26] audit: type=1326 audit(1778138668.228:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4762 comm="syz.3.126" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1739cdd9 code=0x7ffc0000 [ 121.222176][ T26] audit: type=1326 audit(1778138668.228:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4762 comm="syz.3.126" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7faa1739cdd9 code=0x7ffc0000 [ 121.246910][ T26] audit: type=1326 audit(1778138668.228:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4762 comm="syz.3.126" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1739cdd9 code=0x7ffc0000 [ 123.044298][ T4278] Bluetooth: hci2: command 0x041b tx timeout [ 123.176605][ T4779] loop1: detected capacity change from 0 to 32768 [ 123.201579][ T4719] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.217101][ T4719] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.282596][ T4719] device bridge_slave_0 entered promiscuous mode [ 123.683889][ T4719] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.691620][ T4719] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.286781][ T4719] device bridge_slave_1 entered promiscuous mode [ 124.581801][ T4804] loop1: detected capacity change from 0 to 256 [ 124.637912][ T4804] exfat: Deprecated parameter 'utf8' [ 124.643615][ T4804] exfat: Deprecated parameter 'codepage' [ 124.687054][ T4804] exfat: Bad value for 'codepage' [ 124.744763][ T4719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.787661][ T4719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.908694][ T4804] overlayfs: conflicting lowerdir path [ 125.127253][ T4278] Bluetooth: hci2: command 0x040f tx timeout [ 125.160757][ T4719] team0: Port device team_slave_0 added [ 125.246289][ T4719] team0: Port device team_slave_1 added [ 126.234576][ T4817] loop3: detected capacity change from 0 to 32768 [ 126.250454][ T26] kauditd_printk_skb: 77 callbacks suppressed [ 126.250472][ T26] audit: type=1326 audit(1778138673.088:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4812 comm="syz.3.139" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1739cdd9 code=0x7ffc0000 [ 126.460470][ T26] audit: type=1326 audit(1778138673.088:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4812 comm="syz.3.139" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1739cdd9 code=0x7ffc0000 [ 126.497886][ T26] audit: type=1326 audit(1778138673.088:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4812 comm="syz.3.139" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7faa1739cdd9 code=0x7ffc0000 [ 126.700113][ T26] audit: type=1326 audit(1778138673.088:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4812 comm="syz.3.139" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1739cdd9 code=0x7ffc0000 [ 126.786503][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.826821][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.164497][ T26] audit: type=1326 audit(1778138673.088:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4812 comm="syz.3.139" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1739cdd9 code=0x7ffc0000 [ 127.208223][ T4278] Bluetooth: hci2: command 0x0419 tx timeout [ 127.328042][ T4719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.419419][ T26] audit: type=1326 audit(1778138673.088:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4812 comm="syz.3.139" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faa1739cdd9 code=0x7ffc0000 [ 127.443595][ T26] audit: type=1326 audit(1778138673.098:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4812 comm="syz.3.139" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1739cdd9 code=0x7ffc0000 [ 127.468543][ T26] audit: type=1326 audit(1778138673.098:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4812 comm="syz.3.139" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1739cdd9 code=0x7ffc0000 [ 127.492909][ T26] audit: type=1326 audit(1778138673.098:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4812 comm="syz.3.139" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7faa1739cdd9 code=0x7ffc0000 [ 127.517074][ T26] audit: type=1326 audit(1778138673.098:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4812 comm="syz.3.139" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1739cdd9 code=0x7ffc0000 [ 127.896364][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.925676][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.019779][ T4838] loop1: detected capacity change from 0 to 32768 [ 129.313799][ T4719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.475766][ T4719] device hsr_slave_0 entered promiscuous mode [ 130.707443][ T4719] device hsr_slave_1 entered promiscuous mode [ 130.738021][ T4719] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.667060][ T26] kauditd_printk_skb: 61 callbacks suppressed [ 131.667079][ T26] audit: type=1326 audit(1778138678.548:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4856 comm="syz.4.150" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d4c39cdd9 code=0x7ffc0000 [ 131.709225][ T4866] loop4: detected capacity change from 0 to 32768 [ 131.717283][ T4719] Cannot create hsr debugfs directory [ 131.887242][ T26] audit: type=1326 audit(1778138678.548:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4856 comm="syz.4.150" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d4c39cdd9 code=0x7ffc0000 [ 131.913562][ T26] audit: type=1326 audit(1778138678.548:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4856 comm="syz.4.150" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f3d4c39cdd9 code=0x7ffc0000 [ 131.950452][ T26] audit: type=1326 audit(1778138678.558:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4856 comm="syz.4.150" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d4c39cdd9 code=0x7ffc0000 [ 132.052080][ T26] audit: type=1326 audit(1778138678.558:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4856 comm="syz.4.150" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d4c39cdd9 code=0x7ffc0000 [ 132.177532][ T26] audit: type=1326 audit(1778138678.558:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4856 comm="syz.4.150" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3d4c39cdd9 code=0x7ffc0000 [ 132.274094][ T26] audit: type=1326 audit(1778138678.558:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4856 comm="syz.4.150" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d4c39cdd9 code=0x7ffc0000 [ 132.616020][ T2915] device hsr_slave_0 left promiscuous mode [ 133.245457][ T26] audit: type=1326 audit(1778138678.558:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4856 comm="syz.4.150" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d4c39cdd9 code=0x7ffc0000 [ 133.296334][ T2915] device hsr_slave_1 left promiscuous mode [ 133.313256][ T2915] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.351587][ T2915] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.403286][ T26] audit: type=1326 audit(1778138678.568:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4856 comm="syz.4.150" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f3d4c39cdd9 code=0x7ffc0000 [ 133.436622][ T2915] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.645345][ T2915] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.866473][ T4892] loop4: detected capacity change from 0 to 32768 [ 135.577114][ T26] audit: type=1326 audit(1778138678.568:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4856 comm="syz.4.150" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d4c39cdd9 code=0x7ffc0000 [ 135.623820][ T2915] device bridge_slave_1 left promiscuous mode [ 135.648291][ T2915] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.887884][ T2915] device bridge_slave_0 left promiscuous mode [ 135.894269][ T2915] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.133721][ T2915] device veth1_macvtap left promiscuous mode [ 136.154297][ T2915] device veth0_macvtap left promiscuous mode [ 136.186466][ T2915] device veth1_vlan left promiscuous mode [ 136.211968][ T2915] device veth0_vlan left promiscuous mode [ 137.320183][ T4316] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 137.416697][ T2915] team0 (unregistering): Port device team_slave_1 removed [ 137.475244][ T2915] team0 (unregistering): Port device team_slave_0 removed [ 137.508814][ T4316] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 137.527930][ T4316] usb 2-1: config 0 has no interface number 0 [ 137.543743][ T2915] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.557898][ T4316] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 137.575932][ T4316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.584434][ T4316] usb 2-1: Product: syz [ 137.597161][ T4316] usb 2-1: Manufacturer: syz [ 137.601909][ T4316] usb 2-1: SerialNumber: syz [ 137.628645][ T4316] usb 2-1: config 0 descriptor?? [ 137.655739][ T2915] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.841747][ T4316] dvb_usb_ec168: probe of 2-1:0.1 failed with error -71 [ 137.859812][ T4316] usb 2-1: USB disconnect, device number 3 [ 138.000031][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.007296][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.188139][ T2915] bond0 (unregistering): Released all slaves [ 139.433653][ T4719] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 139.478602][ T4719] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 139.519508][ T4719] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 139.544012][ T4719] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 139.988677][ T4719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.009165][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 140.912616][ T26] kauditd_printk_skb: 58 callbacks suppressed [ 140.912636][ T26] audit: type=1326 audit(1778138687.828:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4946 comm="syz.0.168" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f938d59cdd9 code=0x7ffc0000 [ 140.966380][ T4952] loop0: detected capacity change from 0 to 32768 [ 140.989037][ T26] audit: type=1326 audit(1778138687.828:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4946 comm="syz.0.168" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f938d59cdd9 code=0x7ffc0000 [ 141.035716][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 141.094624][ T4719] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.113838][ T26] audit: type=1326 audit(1778138687.828:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4946 comm="syz.0.168" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f938d59cdd9 code=0x7ffc0000 [ 141.196561][ T26] audit: type=1326 audit(1778138687.828:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4946 comm="syz.0.168" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f938d59cdd9 code=0x7ffc0000 [ 141.238940][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 141.267967][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 141.284258][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.291511][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.306743][ T26] audit: type=1326 audit(1778138687.828:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4946 comm="syz.0.168" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f938d59cdd9 code=0x7ffc0000 [ 141.349183][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 141.382744][ T26] audit: type=1326 audit(1778138687.838:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4946 comm="syz.0.168" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f938d59cdd9 code=0x7ffc0000 [ 141.411859][ T26] audit: type=1326 audit(1778138687.838:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4946 comm="syz.0.168" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f938d59cdd9 code=0x7ffc0000 [ 141.438718][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 141.452446][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 141.473654][ T26] audit: type=1326 audit(1778138687.838:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4946 comm="syz.0.168" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f938d59cdd9 code=0x7ffc0000 [ 141.506088][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.513638][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.543594][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 141.566334][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 141.590298][ T26] audit: type=1326 audit(1778138687.838:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4946 comm="syz.0.168" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f938d59cdd9 code=0x7ffc0000 [ 141.633812][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 141.669441][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 141.690938][ T4968] loop4: detected capacity change from 0 to 2048 [ 141.703712][ T26] audit: type=1326 audit(1778138687.838:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4946 comm="syz.0.168" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f938d59cdd9 code=0x7ffc0000 [ 141.736601][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 141.773699][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 141.820204][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 141.865770][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 141.907047][ T4972] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 141.916391][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 142.001881][ T4719] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 142.048394][ T4719] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 142.088579][ T4968] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 142.110405][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 142.121305][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 142.180386][ T4968] Remounting filesystem read-only [ 142.205138][ T4968] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 142.247511][ T4968] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 142.290837][ T4968] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 142.328898][ T4968] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 142.363069][ T4968] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 142.389577][ T4968] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 142.489073][ T4968] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 142.801102][ T4968] syz.4.175 (4968) used greatest stack depth: 19472 bytes left [ 143.387292][ T4999] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 144.688501][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 144.696196][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 144.754809][ T4719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.779975][ T5008] device syzkaller0 entered promiscuous mode [ 145.242174][ T5015] loop4: detected capacity change from 0 to 4096 [ 145.383038][ T5015] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 146.323818][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 146.382165][ T5022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.483028][ C0] Unknown status report in ack skb [ 147.068381][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 147.078370][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 147.136800][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 147.162787][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 147.201433][ T4719] device veth0_vlan entered promiscuous mode [ 147.243686][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 147.258477][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 147.273058][ T4719] device veth1_vlan entered promiscuous mode [ 147.382205][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 147.408674][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 147.479733][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 147.761005][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 148.095910][ T4719] device veth0_macvtap entered promiscuous mode [ 148.297844][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 148.358681][ T4719] device veth1_macvtap entered promiscuous mode [ 148.415536][ T4719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.620502][ T5057] loop4: detected capacity change from 0 to 32768 [ 148.776358][ T4719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.802733][ T4719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.814693][ T4719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.826568][ T5057] XFS (loop4): Mounting V5 Filesystem [ 148.833467][ T4719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.845646][ T4719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.856071][ T4719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.870972][ T4719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.886884][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.042374][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 149.057600][ T5057] XFS (loop4): Ending clean mount [ 149.073832][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 149.129350][ T5057] XFS (loop4): Quotacheck needed: Please wait. [ 149.142095][ T4719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.178666][ T4719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.237139][ T4719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.317052][ T4719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.366992][ T4719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.391478][ T5057] XFS (loop4): Quotacheck: Done. [ 149.505038][ T4719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.556166][ T4719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.604925][ T4719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.690115][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.831885][ T4283] XFS (loop4): Unmounting Filesystem [ 149.915486][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 149.934936][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 149.993309][ T4719] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.022755][ T4719] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.053678][ T4719] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.090261][ T4719] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.544411][ T4389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.574566][ T4389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.607513][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 150.718557][ T2961] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.758798][ T2961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.791896][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 152.748554][ T5142] netlink: 'syz.1.208': attribute type 1 has an invalid length. [ 152.857327][ T14] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 153.077103][ T14] usb 6-1: Using ep0 maxpacket: 16 [ 153.084369][ T14] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 154.004719][ T14] usb 6-1: config 0 has no interface number 0 [ 154.011246][ T14] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 154.021818][ T14] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 154.054399][ T14] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 154.092750][ T14] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.569633][ T5157] binder: 5153:5157 ioctl 541b 0 returned -22 [ 154.944586][ T14] usb 6-1: Product: syz [ 154.964079][ T14] usb 6-1: Manufacturer: syz [ 154.995007][ T14] usb 6-1: SerialNumber: syz [ 155.185910][ T14] usb 6-1: config 0 descriptor?? [ 155.215948][ T5139] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 155.241827][ T5139] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 155.781504][ T14] asix: probe of 6-1:0.34 failed with error -71 [ 155.830346][ T14] usb 6-1: USB disconnect, device number 2 [ 162.389811][ T5208] loop3: detected capacity change from 0 to 64 [ 162.518279][ T26] kauditd_printk_skb: 31 callbacks suppressed [ 162.518295][ T26] audit: type=1800 audit(1778138710.258:610): pid=5208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.223" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 162.558520][ T4278] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 162.567325][ T4278] Bluetooth: hci1: Injecting HCI hardware error event [ 162.575558][ T4282] Bluetooth: hci1: hardware error 0x00 [ 164.717225][ T4282] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 166.253235][ T5265] loop1: detected capacity change from 0 to 2048 [ 166.359641][ T5265] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 167.307149][ T4339] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 167.499909][ T4339] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 167.527323][ T4339] usb 1-1: config 0 has no interface number 0 [ 167.553870][ T4339] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 167.617007][ T4339] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 167.668333][ T4339] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 167.735045][ T4339] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 167.783268][ T5303] loop1: detected capacity change from 0 to 512 [ 167.815845][ T4339] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 167.882110][ T4339] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.892240][ T5303] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.246: inode has both inline data and extents flags [ 167.962608][ T4339] usb 1-1: config 0 descriptor?? [ 168.005455][ T5303] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.246: couldn't read orphan inode 15 (err -117) [ 168.033690][ T5291] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 168.047303][ T5291] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 168.062982][ T5303] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 168.075879][ T4339] ldusb 1-1:0.55: Interrupt in endpoint not found [ 168.277570][ T5303] loop1: detected capacity change from 512 to 64 [ 168.314905][ T4339] usb 1-1: USB disconnect, device number 4 [ 168.464471][ T4272] syz-executor: attempt to access beyond end of device [ 168.464471][ T4272] loop1: rw=14337, sector=72, nr_sectors = 2 limit=64 [ 169.012732][ T4272] Buffer I/O error on dev loop1, logical block 36, lost sync page write [ 169.049540][ T4272] EXT4-fs error (device loop1): ext4_handle_dirty_dirblock:440: inode #2: block 36: comm syz-executor: IO error syncing itable block [ 169.159999][ T4272] EXT4-fs error (device loop1) in ext4_delete_entry:2800: IO failure [ 169.664504][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 169.811843][ T4328] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.852315][ T4328] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.178628][ T4328] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.388253][ T4328] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.663565][ T5356] loop4: detected capacity change from 0 to 512 [ 171.946079][ T5356] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 171.984113][ T5356] ext4 filesystem being mounted at /43/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 172.066796][ T4278] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 172.080816][ T4278] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 172.089455][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 172.098194][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 172.117232][ T4278] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 172.125496][ T4278] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 172.709061][ T5369] EXT4-fs error (device loop4): ext4_get_first_dir_block:3583: inode #12: comm syz.4.261: Attempting to read directory block (0) that is past i_size (3) [ 172.805273][ T5369] EXT4-fs (loop4): Remounting filesystem read-only [ 173.141980][ T5358] chnl_net:caif_netlink_parms(): no params data found [ 173.191644][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 173.939328][ T5386] loop0: detected capacity change from 0 to 1024 [ 173.951711][ T5386] hfsplus: unable to parse mount options [ 173.999103][ T4678] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 174.157332][ T4278] Bluetooth: hci0: command 0x0409 tx timeout [ 174.365839][ T5358] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.561209][ T5358] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.616047][ T5358] device bridge_slave_0 entered promiscuous mode [ 174.625348][ T5358] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.640181][ T5358] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.650928][ T5358] device bridge_slave_1 entered promiscuous mode [ 174.860903][ T5358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.876438][ T5358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.506031][ T5358] team0: Port device team_slave_0 added [ 175.576600][ T5358] team0: Port device team_slave_1 added [ 175.707223][ T4328] device hsr_slave_0 left promiscuous mode [ 175.738554][ T4328] device hsr_slave_1 left promiscuous mode [ 175.780833][ T4328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.798469][ T952] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 175.818385][ T4328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.877985][ T4328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.885471][ T4328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.937243][ T4328] device bridge_slave_1 left promiscuous mode [ 175.943566][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.997271][ T952] usb 6-1: Using ep0 maxpacket: 8 [ 176.015577][ T952] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 176.069144][ T4328] device bridge_slave_0 left promiscuous mode [ 176.075757][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.094117][ T952] usb 6-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 176.114336][ T952] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.133100][ T952] usb 6-1: Product: syz [ 176.143273][ T952] usb 6-1: Manufacturer: syz [ 176.153910][ T952] usb 6-1: SerialNumber: syz [ 176.182704][ T952] usb 6-1: config 0 descriptor?? [ 176.247316][ T4278] Bluetooth: hci0: command 0x041b tx timeout [ 176.351351][ T4328] device veth1_macvtap left promiscuous mode [ 176.370865][ T4328] device veth0_macvtap left promiscuous mode [ 176.399906][ T4328] device veth1_vlan left promiscuous mode [ 176.435267][ T4328] device veth0_vlan left promiscuous mode [ 176.558523][ T952] msi2500 6-1:0.0: Registered as swradio24 [ 176.586977][ T952] msi2500 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 176.644902][ T952] usb 6-1: USB disconnect, device number 3 [ 177.422596][ T5427] loop5: detected capacity change from 0 to 1024 [ 177.474884][ T5427] EXT4-fs: Ignoring removed bh option [ 177.702752][ T5427] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 177.969257][ T5427] EXT4-fs error (device loop5): ext4_find_dest_de:2115: inode #12: block 7: comm syz.5.272: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 178.003602][ T5427] EXT4-fs (loop5): Remounting filesystem read-only [ 178.134190][ T4719] EXT4-fs error (device loop5): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /7/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 178.247813][ T4719] EXT4-fs (loop5): Remounting filesystem read-only [ 178.264546][ T4719] EXT4-fs error (device loop5): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /7/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 178.317926][ T4278] Bluetooth: hci0: command 0x040f tx timeout [ 178.326751][ T4719] EXT4-fs (loop5): Remounting filesystem read-only [ 178.334784][ T4719] EXT4-fs error (device loop5): empty_inline_dir:1895: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 178.422291][ T4719] EXT4-fs (loop5): Remounting filesystem read-only [ 178.429304][ T4719] EXT4-fs warning (device loop5): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 178.516754][ T4719] EXT4-fs error (device loop5): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /7/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 178.541781][ T4719] EXT4-fs (loop5): Remounting filesystem read-only [ 178.554138][ T4719] EXT4-fs error (device loop5): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /7/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 178.583930][ T4719] EXT4-fs (loop5): Remounting filesystem read-only [ 178.591121][ T4719] EXT4-fs error (device loop5): empty_inline_dir:1895: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 178.621736][ T4719] EXT4-fs (loop5): Remounting filesystem read-only [ 178.633012][ T4719] EXT4-fs warning (device loop5): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 178.659168][ T4719] EXT4-fs error (device loop5): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /7/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 178.705870][ T4719] EXT4-fs (loop5): Remounting filesystem read-only [ 178.715443][ T4719] EXT4-fs error (device loop5): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /7/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 178.742546][ T4719] EXT4-fs (loop5): Remounting filesystem read-only [ 178.757364][ T4719] EXT4-fs error (device loop5): empty_inline_dir:1895: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 178.797410][ T4719] EXT4-fs warning (device loop5): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 178.833007][ T4719] EXT4-fs warning (device loop5): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 178.885257][ T4719] EXT4-fs warning (device loop5): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 178.925099][ T4719] EXT4-fs warning (device loop5): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 178.946128][ T4719] EXT4-fs warning (device loop5): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 178.963810][ T4328] team0 (unregistering): Port device team_slave_1 removed [ 178.963848][ T4719] EXT4-fs warning (device loop5): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 179.022242][ T4719] EXT4-fs warning (device loop5): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 179.045829][ T4719] EXT4-fs warning (device loop5): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 179.098640][ T4328] team0 (unregistering): Port device team_slave_0 removed [ 179.193436][ T4328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.257269][ T4328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.667939][ T4328] bond0 (unregistering): Released all slaves [ 179.774281][ T5434] netlink: 'syz.3.273': attribute type 39 has an invalid length. [ 179.936718][ T5358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.965771][ T5358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.398390][ T4278] Bluetooth: hci0: command 0x0419 tx timeout [ 180.598270][ T5358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.696283][ T5358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.719944][ T5358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.787124][ T5358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.907425][ T5358] device hsr_slave_0 entered promiscuous mode [ 180.924626][ T5358] device hsr_slave_1 entered promiscuous mode [ 180.948517][ T5358] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.956153][ T5358] Cannot create hsr debugfs directory [ 181.100651][ T5449] netlink: 'syz.4.281': attribute type 1 has an invalid length. [ 181.321777][ T5455] bond1: (slave gretap1): making interface the new active one [ 181.340844][ T5455] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 181.353657][ T5456] device macvlan2 entered promiscuous mode [ 181.507582][ T5456] device bond1 entered promiscuous mode [ 181.582391][ T5456] device gretap1 entered promiscuous mode [ 181.721706][ T5456] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 181.862758][ T5456] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 181.971142][ T5456] device bond1 left promiscuous mode [ 181.997099][ T5456] device gretap1 left promiscuous mode [ 182.451919][ T4282] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 182.470914][ T4282] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 182.481888][ T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 182.492087][ T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 182.500093][ T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 182.507738][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 182.533084][ T4328] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.601484][ T5358] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 182.660064][ T4328] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.675725][ T5358] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 182.699954][ T5358] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 182.775715][ T4328] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.829087][ T5358] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 182.900500][ T4328] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.298139][ T5358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.417448][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 183.437715][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 183.447829][ T5467] chnl_net:caif_netlink_parms(): no params data found [ 183.466057][ T5358] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.562284][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 183.572225][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 183.594855][ T2961] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.602124][ T2961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.618027][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 184.030448][ T5467] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.053475][ T5467] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.089029][ T5467] device bridge_slave_0 entered promiscuous mode [ 184.127734][ T5467] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.175130][ T5467] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.207299][ T5467] device bridge_slave_1 entered promiscuous mode [ 184.250205][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 184.259428][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 184.268458][ T2961] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.276101][ T2961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.285236][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 184.297479][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 184.307508][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 184.318527][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 184.339846][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 184.357505][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 184.366467][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 184.376707][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 184.397386][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 184.417517][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 184.443289][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 184.470283][ T5358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 184.556032][ T5467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.566370][ T4278] Bluetooth: hci2: command 0x0409 tx timeout [ 184.680352][ T5467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.789577][ T5467] team0: Port device team_slave_0 added [ 184.853860][ T5467] team0: Port device team_slave_1 added [ 184.994587][ T5467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.002561][ T5467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.077034][ T5467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.312192][ T5467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.319798][ T5467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.353386][ T5467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.390085][ T5467] device hsr_slave_0 entered promiscuous mode [ 186.408401][ T5467] device hsr_slave_1 entered promiscuous mode [ 186.427453][ T5467] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 186.435172][ T5467] Cannot create hsr debugfs directory [ 186.495437][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 186.510427][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 186.585185][ T5358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.637106][ T4278] Bluetooth: hci2: command 0x041b tx timeout [ 187.095720][ T4328] device hsr_slave_0 left promiscuous mode [ 187.115230][ T4328] device hsr_slave_1 left promiscuous mode [ 187.125315][ T4328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.145396][ T4328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.187411][ T4328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.194909][ T4328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.231151][ T4328] device bridge_slave_1 left promiscuous mode [ 187.247801][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.263242][ T4328] device bridge_slave_0 left promiscuous mode [ 187.278237][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.384175][ T4328] device veth1_macvtap left promiscuous mode [ 187.397524][ T4328] device veth0_macvtap left promiscuous mode [ 187.403738][ T4328] device veth1_vlan left promiscuous mode [ 187.433648][ T4328] device veth0_vlan left promiscuous mode [ 188.717046][ T4278] Bluetooth: hci2: command 0x040f tx timeout [ 189.595850][ T4328] team0 (unregistering): Port device team_slave_1 removed [ 189.927680][ T4328] team0 (unregistering): Port device team_slave_0 removed [ 190.797145][ T4278] Bluetooth: hci2: command 0x0419 tx timeout [ 191.031118][ T4328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.191357][ T48] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 191.203174][ T4328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.211148][ T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 191.220107][ T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 191.229790][ T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 191.238511][ T48] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 191.245808][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 191.281816][ T5578] loop3: detected capacity change from 0 to 512 [ 191.314040][ T5578] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 191.335182][ T5578] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 191.344757][ T5578] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 191.385463][ T5578] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 191.404733][ T5578] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 191.413197][ T5578] System zones: 0-2, 18-18, 34-35 [ 191.514100][ T5578] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 191.708113][ T5578] EXT4-fs (loop3): re-mounted. Quota mode: none. [ 192.538495][ T4328] bond0 (unregistering): Released all slaves [ 192.790663][ T5467] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 192.870012][ T5467] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 192.956581][ T5467] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 193.011692][ T5467] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 193.067237][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 193.088699][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 193.120123][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 193.202428][ T5358] device veth0_vlan entered promiscuous mode [ 193.281415][ T4278] Bluetooth: hci3: command 0x0409 tx timeout [ 193.314888][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 193.324401][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 193.333548][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 193.342175][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 193.498977][ T5358] device veth1_vlan entered promiscuous mode [ 193.668101][ T5467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.727468][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 193.746214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 193.836768][ T5467] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.907549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 193.916047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 194.024246][ T5574] chnl_net:caif_netlink_parms(): no params data found [ 194.338848][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 194.543563][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 194.675373][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 194.827973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 194.952147][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.959390][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.022603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 195.062269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 195.127624][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.134949][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.175241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 195.191268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 195.210398][ T5358] device veth0_macvtap entered promiscuous mode [ 195.251520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 195.261349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 195.271537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 195.292598][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 195.303057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 195.312652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 195.328728][ T5358] device veth1_macvtap entered promiscuous mode [ 195.356884][ T5467] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 195.357274][ T4278] Bluetooth: hci3: command 0x041b tx timeout [ 195.374728][ T5467] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 195.479170][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 195.495965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 195.525061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 195.551801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 195.673382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 195.703931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 195.864192][ T4328] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.524722][ T5574] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.584343][ T5638] loop3: detected capacity change from 0 to 1024 [ 196.595465][ T5574] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.607033][ T5574] device bridge_slave_0 entered promiscuous mode [ 196.669473][ T5638] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002] [ 196.724681][ T5638] System zones: 0-1, 3-36 [ 196.749286][ T4328] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.818205][ T5638] EXT4-fs error (device loop3): ext4_orphan_get:1431: comm syz.3.313: bad orphan inode 134217728 [ 196.857872][ T5638] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 196.900849][ T5358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.919818][ T5358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.931553][ T5358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.942876][ T5358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.953420][ T5358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.972018][ T5650] loop4: detected capacity change from 0 to 64 [ 196.978393][ T5358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.019089][ T5358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.045845][ T2915] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 197.070425][ T2915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 197.094246][ T5574] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.108676][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 197.137622][ T5574] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.156744][ T5574] device bridge_slave_1 entered promiscuous mode [ 197.329179][ T4328] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.399676][ T5358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.437195][ T4278] Bluetooth: hci3: command 0x040f tx timeout [ 197.443418][ T5358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.537290][ T5358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.630914][ T5358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.678409][ T5358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.695595][ T5358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.744830][ T5358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.877401][ T2915] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 197.894531][ T2915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 197.943324][ T4328] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.979996][ T5358] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.001567][ T5358] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.034688][ T5358] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.073555][ T5358] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.144985][ T5467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.193539][ T5574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.213038][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 198.223176][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 198.251436][ T5574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.386397][ T5574] team0: Port device team_slave_0 added [ 198.435082][ T5574] team0: Port device team_slave_1 added [ 198.502679][ T4610] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.532360][ T4610] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.602515][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 198.635405][ T5574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.667455][ T5574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.757020][ T5574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.790323][ T5574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.817881][ T5574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.854769][ T5574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.016216][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.026983][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.034648][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 199.187598][ T5574] device hsr_slave_0 entered promiscuous mode [ 199.227476][ T5574] device hsr_slave_1 entered promiscuous mode [ 199.241683][ T5574] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 199.270199][ T5574] Cannot create hsr debugfs directory [ 199.441442][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.448422][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.517231][ T48] Bluetooth: hci3: command 0x0419 tx timeout [ 199.770106][ T5692] loop6: detected capacity change from 0 to 1024 [ 199.812569][ T5692] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002] [ 199.842063][ T5692] System zones: 0-1, 3-36 [ 200.109660][ T5692] EXT4-fs error (device loop6): ext4_orphan_get:1431: comm syz.6.322: bad orphan inode 134217728 [ 200.364917][ T5692] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 200.935641][ T5358] EXT4-fs (loop6): unmounting filesystem. [ 201.095764][ T2915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 201.117904][ T2915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 201.159678][ T5707] netlink: 'syz.6.325': attribute type 12 has an invalid length. [ 201.194030][ T5707] netlink: 'syz.6.325': attribute type 29 has an invalid length. [ 201.204890][ T5707] netlink: 148 bytes leftover after parsing attributes in process `syz.6.325'. [ 201.222421][ T5707] netlink: 'syz.6.325': attribute type 3 has an invalid length. [ 201.231871][ T5707] netlink: 'syz.6.325': attribute type 2 has an invalid length. [ 201.245970][ T5707] netlink: 35 bytes leftover after parsing attributes in process `syz.6.325'. [ 201.516120][ T5467] device veth0_vlan entered promiscuous mode [ 201.546357][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 201.563452][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 201.668512][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 201.679429][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 201.692786][ T5574] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 201.722635][ T5467] device veth1_vlan entered promiscuous mode [ 201.763552][ T5574] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 201.807748][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 201.828415][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 202.041406][ T5574] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 202.063865][ T5574] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 202.266393][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 202.292653][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 203.100767][ T5467] device veth0_macvtap entered promiscuous mode [ 203.120493][ T5467] device veth1_macvtap entered promiscuous mode [ 203.267337][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 203.276083][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 203.325561][ T4328] device hsr_slave_0 left promiscuous mode [ 203.347704][ T4328] device hsr_slave_1 left promiscuous mode [ 203.370751][ T4328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.382679][ T4328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.404616][ T4328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.413052][ T4328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.456840][ T4328] device bridge_slave_1 left promiscuous mode [ 203.480049][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.502317][ T5739] loop6: detected capacity change from 0 to 1024 [ 203.510899][ T4328] device bridge_slave_0 left promiscuous mode [ 203.536698][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.592195][ T5739] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002] [ 203.610107][ T5739] System zones: 0-1, 3-36 [ 203.639857][ T4328] device veth1_macvtap left promiscuous mode [ 203.649191][ T5739] EXT4-fs error (device loop6): ext4_orphan_get:1431: comm syz.6.334: bad orphan inode 134217728 [ 203.680481][ T4328] device veth0_macvtap left promiscuous mode [ 203.686839][ T4328] device veth1_vlan left promiscuous mode [ 203.695012][ T5739] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 203.740995][ T4328] device veth0_vlan left promiscuous mode [ 203.983801][ T5358] EXT4-fs (loop6): unmounting filesystem. [ 205.337524][ T26] audit: type=1326 audit(1778138752.238:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5756 comm="syz.6.335" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431319cdd9 code=0x7ffc0000 [ 205.389571][ T5760] loop6: detected capacity change from 0 to 32768 [ 205.428459][ T26] audit: type=1326 audit(1778138752.238:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5756 comm="syz.6.335" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431319cdd9 code=0x7ffc0000 [ 205.454387][ T26] audit: type=1326 audit(1778138752.248:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5756 comm="syz.6.335" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f431319cdd9 code=0x7ffc0000 [ 205.478579][ T26] audit: type=1326 audit(1778138752.248:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5756 comm="syz.6.335" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431319cdd9 code=0x7ffc0000 [ 205.504155][ T26] audit: type=1326 audit(1778138752.248:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5756 comm="syz.6.335" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431319cdd9 code=0x7ffc0000 [ 205.528758][ T26] audit: type=1326 audit(1778138752.248:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5756 comm="syz.6.335" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f431319cdd9 code=0x7ffc0000 [ 205.590254][ T26] audit: type=1326 audit(1778138752.248:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5756 comm="syz.6.335" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431319cdd9 code=0x7ffc0000 [ 205.716769][ T26] audit: type=1326 audit(1778138752.248:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5756 comm="syz.6.335" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431319cdd9 code=0x7ffc0000 [ 205.811607][ T26] audit: type=1326 audit(1778138752.248:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5756 comm="syz.6.335" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f431319cdd9 code=0x7ffc0000 [ 205.894897][ T26] audit: type=1326 audit(1778138752.248:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5756 comm="syz.6.335" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431319cdd9 code=0x7ffc0000 [ 206.603659][ T4328] team0 (unregistering): Port device team_slave_1 removed [ 206.690134][ T4328] team0 (unregistering): Port device team_slave_0 removed [ 206.734086][ T4328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.785258][ T4328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.128393][ T4328] bond0 (unregistering): Released all slaves [ 207.269477][ T5467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.289405][ T5467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.357464][ T48] Bluetooth: hci4: command 0x0406 tx timeout [ 207.440648][ T5467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.451736][ T5467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.461916][ T5467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.472710][ T5467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.486391][ T5467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.507045][ T2915] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 207.526448][ T2915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 207.543257][ T5467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.565466][ T5467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.575735][ T5467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.597004][ T5467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.614760][ T5467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.633679][ T5467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.835370][ T5467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.024699][ T5443] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 209.040477][ T5443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 209.058723][ T5467] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.081797][ T5784] loop6: detected capacity change from 0 to 4096 [ 209.170387][ T5784] EXT4-fs: inline encryption not supported [ 209.215062][ T5467] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.217784][ T5784] EXT4-fs: Ignoring removed mblk_io_submit option [ 209.272339][ T5467] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.299330][ T5467] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.318162][ T5784] EXT4-fs: Ignoring removed bh option [ 209.495600][ T5784] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 209.558223][ T5784] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 209.580286][ T5784] System zones: 0-5 [ 209.585603][ T5574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.623399][ T5784] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 209.704159][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 209.723994][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 209.786149][ T5574] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.863950][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 209.897867][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 209.954075][ T2961] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.961367][ T2961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.058015][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 210.795792][ T5255] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.829153][ T5358] EXT4-fs (loop6): unmounting filesystem. [ 210.857023][ T5255] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.899770][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 210.936700][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 210.987522][ T2961] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.994722][ T2961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.081498][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 211.118389][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 211.152140][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 211.201201][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 211.234029][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 211.285423][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 211.343715][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 211.384752][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 211.412796][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 211.435837][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 211.474332][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 211.489255][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 211.592817][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.625932][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.667456][ T5443] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 213.136128][ T5832] loop7: detected capacity change from 0 to 32768 [ 213.155685][ T26] kauditd_printk_skb: 24 callbacks suppressed [ 213.155703][ T26] audit: type=1326 audit(1778138759.998:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5828 comm="syz.7.279" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3ff9cdd9 code=0x7ffc0000 [ 213.307328][ T26] audit: type=1326 audit(1778138759.998:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5828 comm="syz.7.279" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3ff9cdd9 code=0x7ffc0000 [ 213.428423][ T5834] loop6: detected capacity change from 0 to 2048 [ 213.586395][ T5834] loop6: p1 p3 p4 [ 213.586395][ T5834] p1: [ 213.639694][ T26] audit: type=1326 audit(1778138759.998:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5828 comm="syz.7.279" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f7c3ff9cdd9 code=0x7ffc0000 [ 213.669082][ T5834] loop6: p1 size 67110656 extends beyond EOD, truncated [ 213.705413][ T5843] xt_hashlimit: size too large, truncated to 1048576 [ 213.747715][ T5834] loop6: p3 size 134217728 extends beyond EOD, truncated [ 213.828024][ T5834] loop6: p4 size 4278190080 extends beyond EOD, truncated [ 213.861549][ T26] audit: type=1326 audit(1778138759.998:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5828 comm="syz.7.279" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3ff9cdd9 code=0x7ffc0000 [ 213.893274][ T5834] loop6: p5 size 67110656 extends beyond EOD, truncated [ 213.937726][ T5834] loop6: p6 size 134217728 extends beyond EOD, truncated [ 213.996812][ T3639] loop6: p1 p3 p4 [ 213.996812][ T3639] p1: [ 214.019468][ T26] audit: type=1326 audit(1778138759.998:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5828 comm="syz.7.279" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3ff9cdd9 code=0x7ffc0000 [ 214.049719][ T3639] loop6: p1 size 67110656 extends beyond EOD, truncated [ 214.081964][ T3639] loop6: p3 size 134217728 extends beyond EOD, truncated [ 214.134081][ T3639] loop6: p4 size 4278190080 extends beyond EOD, truncated [ 214.164032][ T26] audit: type=1326 audit(1778138759.998:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5828 comm="syz.7.279" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7c3ff9cdd9 code=0x7ffc0000 [ 214.195061][ T3639] loop6: p5 size 67110656 extends beyond EOD, truncated [ 214.221494][ T3639] loop6: p6 size 134217728 extends beyond EOD, truncated [ 214.312477][ T26] audit: type=1326 audit(1778138759.998:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5828 comm="syz.7.279" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3ff9cdd9 code=0x7ffc0000 [ 214.493268][ T26] audit: type=1326 audit(1778138759.998:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5828 comm="syz.7.279" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3ff9cdd9 code=0x7ffc0000 [ 214.534395][ T4678] udevd[4678]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 214.534699][ T4384] udevd[4384]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 214.558833][ T4354] udevd[4354]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 214.573066][ T4400] udevd[4400]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 214.586579][ T4494] udevd[4494]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory [ 214.633291][ T5443] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 214.653503][ T5443] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 214.695319][ T26] audit: type=1326 audit(1778138760.008:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5828 comm="syz.7.279" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f7c3ff9cdd9 code=0x7ffc0000 [ 214.730519][ T5860] device syzkaller0 entered promiscuous mode [ 214.763144][ T4384] udevd[4384]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 214.764296][ T4678] udevd[4678]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 214.782189][ T4354] udevd[4354]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 214.793232][ T4494] udevd[4494]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 214.801479][ T4400] udevd[4400]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory [ 214.828370][ T5574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.888161][ T26] audit: type=1326 audit(1778138760.008:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5828 comm="syz.7.279" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3ff9cdd9 code=0x7ffc0000 [ 215.667147][ T4339] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 215.857215][ T4339] usb 7-1: Using ep0 maxpacket: 8 [ 215.864631][ T4339] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.896041][ T4339] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 215.914992][ T4339] usb 7-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 215.924681][ T4339] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.934269][ T4339] usb 7-1: Product: syz [ 215.939073][ T4339] usb 7-1: Manufacturer: syz [ 215.943794][ T4339] usb 7-1: SerialNumber: syz [ 215.951804][ T4339] usb 7-1: config 0 descriptor?? [ 216.161979][ T4339] usb 7-1: USB disconnect, device number 2 [ 216.179737][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 216.241126][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 216.496875][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 216.520533][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 216.592248][ T5574] device veth0_vlan entered promiscuous mode [ 216.622649][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 216.644366][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 216.710449][ T5574] device veth1_vlan entered promiscuous mode [ 216.747790][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 216.836253][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 216.856299][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 216.906475][ T5574] device veth0_macvtap entered promiscuous mode [ 216.932194][ T5574] device veth1_macvtap entered promiscuous mode [ 216.996792][ T5574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.046408][ T5574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.094574][ T5574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.123606][ T5574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.155933][ T5574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.173287][ T5574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.186118][ T5574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.201338][ T5574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.234935][ T5574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.265654][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 217.300672][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 217.317933][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 217.347625][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 217.390001][ T5574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.427058][ T5574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.454816][ T5574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.457549][ T22] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 217.487190][ T5574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.525149][ T5574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.546260][ T5574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.592417][ T5574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.623979][ T5574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.656447][ T5574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.730133][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 217.751090][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 217.822349][ T5924] netlink: 44 bytes leftover after parsing attributes in process `syz.4.373'. [ 218.233556][ T5574] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.242737][ T48] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 218.247788][ T5574] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.251594][ T48] Bluetooth: hci4: Injecting HCI hardware error event [ 218.268956][ T4278] Bluetooth: hci4: hardware error 0x00 [ 218.327053][ T22] usb 8-1: Using ep0 maxpacket: 8 [ 218.387632][ T22] usb 8-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 218.426969][ T22] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.428061][ T5574] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.465558][ T22] usb 8-1: Product: syz [ 218.475348][ T5574] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.475974][ T22] usb 8-1: Manufacturer: syz [ 218.523681][ T22] usb 8-1: SerialNumber: syz [ 218.557969][ T22] usb 8-1: config 0 descriptor?? [ 218.603920][ T22] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 218.889424][ T4388] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.921000][ T4388] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.980316][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 219.019316][ T5939] netlink: 'syz.6.377': attribute type 1 has an invalid length. [ 219.040865][ T4328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.064192][ T4328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.113068][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 220.717560][ T4278] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 220.786378][ T22] gspca_sonixj: reg_w1 err -71 [ 220.851109][ T22] sonixj: probe of 8-1:0.0 failed with error -71 [ 220.941423][ T22] usb 8-1: USB disconnect, device number 2 [ 221.117155][ T4278] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 221.126602][ T4278] Bluetooth: hci0: Injecting HCI hardware error event [ 221.137718][ T48] Bluetooth: hci0: hardware error 0x00 [ 222.035842][ T5994] loop6: detected capacity change from 0 to 32768 [ 222.044262][ T26] kauditd_printk_skb: 24 callbacks suppressed [ 222.044278][ T26] audit: type=1326 audit(2000000004.820:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.6.387" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431319cdd9 code=0x7ffc0000 [ 223.363158][ T48] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 223.516103][ T5998] netlink: 'syz.8.390': attribute type 1 has an invalid length. [ 223.593154][ T5998] bridge0: port 3(gretap1) entered blocking state [ 223.666273][ T26] audit: type=1326 audit(2000000004.820:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.6.387" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431319cdd9 code=0x7ffc0000 [ 223.691607][ T5998] bridge0: port 3(gretap1) entered disabled state [ 223.824772][ T26] audit: type=1326 audit(2000000004.820:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.6.387" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f431319cdd9 code=0x7ffc0000 [ 224.309564][ T6004] binder: 6002:6004 ioctl 541b 0 returned -22 [ 224.656551][ T26] audit: type=1326 audit(2000000004.820:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.6.387" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431319cdd9 code=0x7ffc0000 [ 224.680690][ T26] audit: type=1326 audit(2000000004.820:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.6.387" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431319cdd9 code=0x7ffc0000 [ 224.704763][ T26] audit: type=1326 audit(2000000004.820:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.6.387" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f431319cdd9 code=0x7ffc0000 [ 224.732886][ T26] audit: type=1326 audit(2000000004.820:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.6.387" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431319cdd9 code=0x7ffc0000 [ 224.739855][ T5998] device gretap1 entered promiscuous mode [ 224.759670][ T26] audit: type=1326 audit(2000000004.820:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.6.387" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431319cdd9 code=0x7ffc0000 [ 224.791308][ T26] audit: type=1326 audit(2000000004.820:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.6.387" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f431319cdd9 code=0x7ffc0000 [ 224.816977][ T26] audit: type=1326 audit(2000000004.820:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.6.387" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431319cdd9 code=0x7ffc0000 [ 226.937067][ T22] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 227.917050][ T22] usb 9-1: Using ep0 maxpacket: 8 [ 227.924129][ T22] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.951685][ T22] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 228.008348][ T6020] loop6: detected capacity change from 0 to 4096 [ 228.033010][ T22] usb 9-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 228.067955][ T22] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.079005][ T22] usb 9-1: Product: syz [ 228.083374][ T22] usb 9-1: Manufacturer: syz [ 228.088410][ T22] usb 9-1: SerialNumber: syz [ 228.108474][ T22] usb 9-1: config 0 descriptor?? [ 228.181246][ T6020] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 228.334275][ T22] usb 9-1: USB disconnect, device number 2 [ 228.653839][ T5358] EXT4-fs (loop6): unmounting filesystem. [ 230.258908][ T6080] tap0: tun_chr_ioctl cmd 1074025677 [ 230.283348][ T6080] tap0: linktype set to 778 [ 230.614787][ T6092] loop8: detected capacity change from 0 to 1024 [ 230.830306][ T6092] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002] [ 230.878866][ T6092] System zones: 0-1, 3-36 [ 230.925031][ T6092] EXT4-fs error (device loop8): ext4_orphan_get:1431: comm syz.8.416: bad orphan inode 134217728 [ 230.953282][ T6092] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 231.297317][ T5574] EXT4-fs (loop8): unmounting filesystem. [ 233.513404][ T6134] loop8: detected capacity change from 0 to 512 [ 234.991734][ T6157] loop3: detected capacity change from 0 to 256 [ 235.019861][ T6157] FAT-fs (loop3): "posix" option is obsolete, not supported now [ 235.781963][ T6172] loop7: detected capacity change from 0 to 4096 [ 235.920276][ T6172] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 238.303089][ T5467] EXT4-fs (loop7): unmounting filesystem. [ 238.510823][ T6208] loop7: detected capacity change from 0 to 512 [ 238.543440][ T6208] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 239.810766][ T6233] loop8: detected capacity change from 0 to 32768 [ 242.171400][ T6253] netlink: 'syz.4.463': attribute type 1 has an invalid length. [ 242.459768][ T6256] device macvlan2 entered promiscuous mode [ 242.532435][ T6256] device bond2 entered promiscuous mode [ 242.570455][ T6256] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 242.603789][ T6256] device bond2 left promiscuous mode [ 243.348261][ T6283] loop7: detected capacity change from 0 to 1764 [ 243.474529][ T6283] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 245.247776][ T6292] loop3: detected capacity change from 0 to 32768 [ 246.147150][ T6315] netlink: 4 bytes leftover after parsing attributes in process `syz.3.480'. [ 246.391175][ T6322] loop6: detected capacity change from 0 to 1024 [ 246.437515][ T6322] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002] [ 246.447278][ T6322] System zones: 0-1, 3-36 [ 246.473183][ T6322] EXT4-fs error (device loop6): ext4_orphan_get:1431: comm syz.6.482: bad orphan inode 134217728 [ 246.544807][ T6322] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 246.684332][ T5358] EXT4-fs (loop6): unmounting filesystem. [ 246.938938][ T6337] netlink: 'syz.7.487': attribute type 1 has an invalid length. [ 247.247540][ T6337] device macvlan2 entered promiscuous mode [ 247.832465][ T6345] loop6: detected capacity change from 0 to 32768 [ 248.615054][ T6354] device syzkaller0 entered promiscuous mode [ 248.820918][ T6359] fuse: Bad value for 'fd' [ 248.854385][ T6359] 9pnet_fd: Insufficient options for proto=fd [ 249.521684][ T6378] binder: 6374:6378 ioctl c0285840 200000000000 returned -22 [ 250.767729][ T6385] loop6: detected capacity change from 0 to 32768 [ 251.380803][ T6389] loop8: detected capacity change from 0 to 16 [ 251.511802][ T6389] erofs: (device loop8): mounted with root inode @ nid 36. [ 251.771446][ T6395] device syzkaller0 entered promiscuous mode [ 252.857227][ T4339] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 253.127507][ T6435] loop8: detected capacity change from 0 to 32768 [ 254.041003][ T4339] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.130683][ T4339] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 254.162221][ T6440] loop6: detected capacity change from 0 to 4096 [ 254.242175][ T6440] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 254.313818][ T4339] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 255.121799][ T4339] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.130901][ T4339] usb 4-1: Product: syz [ 255.151354][ T4339] usb 4-1: Manufacturer: syz [ 255.162375][ T4339] usb 4-1: SerialNumber: syz [ 255.175083][ T4339] usb 4-1: config 0 descriptor?? [ 255.287413][ T5358] EXT4-fs (loop6): unmounting filesystem. [ 255.794734][ T6464] loop7: detected capacity change from 0 to 1024 [ 255.912860][ T6464] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002] [ 255.970554][ T6464] System zones: 0-1, 3-36 [ 255.998333][ T6464] EXT4-fs error (device loop7): ext4_orphan_get:1431: comm syz.7.522: bad orphan inode 134217728 [ 256.057299][ T6464] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 256.339398][ T5467] EXT4-fs (loop7): unmounting filesystem. [ 256.875518][ T4339] usb 4-1: USB disconnect, device number 3 [ 257.890188][ T6513] loop3: detected capacity change from 0 to 32768 [ 259.327430][ T6524] loop6: detected capacity change from 0 to 1024 [ 259.446177][ T6524] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002] [ 259.513086][ T6530] device syzkaller0 entered promiscuous mode [ 259.523366][ T6524] System zones: 0-1, 3-36 [ 259.572797][ T6524] EXT4-fs error (device loop6): ext4_orphan_get:1431: comm syz.6.536: bad orphan inode 134217728 [ 259.665055][ T6524] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 260.176788][ T5358] EXT4-fs (loop6): unmounting filesystem. [ 260.505768][ T6550] __vm_enough_memory: pid: 6550, comm: syz.7.543, no enough memory for the allocation [ 260.887455][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.895457][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.379961][ T6591] ------------[ cut here ]------------ [ 263.385692][ T6591] WARNING: CPU: 1 PID: 6591 at arch/x86/kvm/x86.c:11263 kvm_arch_vcpu_ioctl_run+0x1ebc/0x23b0 [ 263.397140][ T6591] Modules linked in: [ 263.401383][ T6591] CPU: 1 PID: 6591 Comm: syz.7.552 Not tainted syzkaller #0 [ 263.408773][ T6591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 263.419215][ T6591] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1ebc/0x23b0 [ 263.425872][ T6591] Code: e8 29 72 c3 00 e9 30 ef ff ff 44 89 f9 80 e1 07 38 c1 0f 8c bd e5 ff ff 4c 89 ff e8 ee 71 c3 00 e9 b0 e5 ff ff e8 d4 65 72 00 <0f> 0b e9 da fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 90 eb [ 263.446747][ T6591] RSP: 0018:ffffc90005427c48 EFLAGS: 00010283 [ 263.453196][ T6591] RAX: ffffffff81100f7c RBX: ffff888078bacf80 RCX: 0000000000080000 [ 263.461273][ T6591] RDX: ffffc90016587000 RSI: 00000000000003ca RDI: 00000000000003cb [ 263.470050][ T6591] RBP: ffff8880292c5000 R08: dffffc0000000000 R09: 1ffffffff215f26b [ 263.478302][ T6591] R10: dffffc0000000000 R11: fffffbfff215f26c R12: ffff888078bad274 [ 263.486325][ T6591] R13: ffff888078bad058 R14: dffffc0000000000 R15: 0000000000000000 [ 263.494490][ T6591] FS: 00007f7c40efa6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 263.503529][ T6591] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 263.510237][ T6591] CR2: 000000110c2c1ec3 CR3: 000000007e687000 CR4: 00000000003526e0 [ 263.518319][ T6591] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 263.526783][ T6591] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 263.534858][ T6591] Call Trace: [ 263.538413][ T6591] [ 263.541571][ T6591] ? mutex_lock_nested+0x10/0x10 [ 263.546681][ T6591] ? kvm_arch_vcpu_ioctl_run+0x139/0x23b0 [ 263.552530][ T6591] kvm_vcpu_ioctl+0x8f7/0xc10 [ 263.557312][ T6591] ? xa_release+0x50/0x50 [ 263.561711][ T6591] ? __fget_files+0x28/0x4b0 [ 263.566372][ T6591] ? __fget_files+0x28/0x4b0 [ 263.571357][ T6591] ? bpf_lsm_file_ioctl+0x5/0x10 [ 263.576361][ T6591] ? security_file_ioctl+0x7c/0xa0 [ 263.581679][ T6591] ? xa_release+0x50/0x50 [ 263.586238][ T6591] __se_sys_ioctl+0xfa/0x170 [ 263.590940][ T6591] do_syscall_64+0x4c/0xa0 [ 263.595418][ T6591] ? clear_bhb_loop+0x60/0xb0 [ 263.600623][ T6591] ? clear_bhb_loop+0x60/0xb0 [ 263.605529][ T6591] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 263.611520][ T6591] RIP: 0033:0x7f7c3ff9cdd9 [ 263.615999][ T6591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.636747][ T6591] RSP: 002b:00007f7c40efa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 263.645443][ T6591] RAX: ffffffffffffffda RBX: 00007f7c40215fa0 RCX: 00007f7c3ff9cdd9 [ 263.653952][ T6591] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 263.662101][ T6591] RBP: 00007f7c40032d69 R08: 0000000000000000 R09: 0000000000000000 [ 263.670614][ T6591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.678697][ T6591] R13: 00007f7c40216038 R14: 00007f7c40215fa0 R15: 00007ffd8221b378 [ 263.686979][ T6591] [ 263.690068][ T6591] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 263.697482][ T6591] CPU: 1 PID: 6591 Comm: syz.7.552 Not tainted syzkaller #0 [ 263.704822][ T6591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 263.715285][ T6591] Call Trace: [ 263.719143][ T6591] [ 263.722138][ T6591] dump_stack_lvl+0x188/0x24e [ 263.726890][ T6591] ? memcpy+0x3c/0x60 [ 263.731027][ T6591] ? show_regs_print_info+0x12/0x12 [ 263.736293][ T6591] ? load_image+0x400/0x400 [ 263.740954][ T6591] panic+0x2e5/0x730 [ 263.745345][ T6591] ? bpf_jit_dump+0xd0/0xd0 [ 263.749921][ T6591] __warn+0x2f8/0x4f0 [ 263.753958][ T6591] ? kvm_arch_vcpu_ioctl_run+0x1ebc/0x23b0 [ 263.759839][ T6591] ? kvm_arch_vcpu_ioctl_run+0x1ebc/0x23b0 [ 263.765713][ T6591] report_bug+0x2ba/0x4f0 [ 263.770205][ T6591] ? kvm_arch_vcpu_ioctl_run+0x1ebc/0x23b0 [ 263.776075][ T6591] handle_bug+0x3a/0x70 [ 263.780293][ T6591] exc_invalid_op+0x16/0x40 [ 263.784924][ T6591] asm_exc_invalid_op+0x16/0x20 [ 263.789831][ T6591] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1ebc/0x23b0 [ 263.796305][ T6591] Code: e8 29 72 c3 00 e9 30 ef ff ff 44 89 f9 80 e1 07 38 c1 0f 8c bd e5 ff ff 4c 89 ff e8 ee 71 c3 00 e9 b0 e5 ff ff e8 d4 65 72 00 <0f> 0b e9 da fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 90 eb [ 263.815963][ T6591] RSP: 0018:ffffc90005427c48 EFLAGS: 00010283 [ 263.822087][ T6591] RAX: ffffffff81100f7c RBX: ffff888078bacf80 RCX: 0000000000080000 [ 263.830109][ T6591] RDX: ffffc90016587000 RSI: 00000000000003ca RDI: 00000000000003cb [ 263.838133][ T6591] RBP: ffff8880292c5000 R08: dffffc0000000000 R09: 1ffffffff215f26b [ 263.846526][ T6591] R10: dffffc0000000000 R11: fffffbfff215f26c R12: ffff888078bad274 [ 263.854725][ T6591] R13: ffff888078bad058 R14: dffffc0000000000 R15: 0000000000000000 [ 263.862763][ T6591] ? kvm_arch_vcpu_ioctl_run+0x1ebc/0x23b0 [ 263.868647][ T6591] ? kvm_arch_vcpu_ioctl_run+0x1ebc/0x23b0 [ 263.874597][ T6591] ? mutex_lock_nested+0x10/0x10 [ 263.879612][ T6591] ? kvm_arch_vcpu_ioctl_run+0x139/0x23b0 [ 263.885406][ T6591] kvm_vcpu_ioctl+0x8f7/0xc10 [ 263.890168][ T6591] ? xa_release+0x50/0x50 [ 263.894658][ T6591] ? __fget_files+0x28/0x4b0 [ 263.899314][ T6591] ? __fget_files+0x28/0x4b0 [ 263.903980][ T6591] ? bpf_lsm_file_ioctl+0x5/0x10 [ 263.908979][ T6591] ? security_file_ioctl+0x7c/0xa0 [ 263.914169][ T6591] ? xa_release+0x50/0x50 [ 263.918548][ T6591] __se_sys_ioctl+0xfa/0x170 [ 263.923197][ T6591] do_syscall_64+0x4c/0xa0 [ 263.928278][ T6591] ? clear_bhb_loop+0x60/0xb0 [ 263.933015][ T6591] ? clear_bhb_loop+0x60/0xb0 [ 263.937762][ T6591] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 263.943722][ T6591] RIP: 0033:0x7f7c3ff9cdd9 [ 263.948557][ T6591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.968399][ T6591] RSP: 002b:00007f7c40efa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 263.976878][ T6591] RAX: ffffffffffffffda RBX: 00007f7c40215fa0 RCX: 00007f7c3ff9cdd9 [ 263.984909][ T6591] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 263.992927][ T6591] RBP: 00007f7c40032d69 R08: 0000000000000000 R09: 0000000000000000 [ 264.000949][ T6591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 264.009162][ T6591] R13: 00007f7c40216038 R14: 00007f7c40215fa0 R15: 00007ffd8221b378 [ 264.017298][ T6591] [ 264.021051][ T6591] Kernel Offset: disabled [ 264.025658][ T6591] Rebooting in 86400 seconds..