last executing test programs: 1m34.59675184s ago: executing program 4 (id=1043): socket$kcm(0x11, 0xa, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x90, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xd, 0x9, 0x0, 0x6, 0x588}, 0x2}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x1fc16}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) write$tun(r0, &(0x7f00000001c0)={@val={0x70}, @void, @eth={@broadcast, @remote, @val={@val={0x88a8, 0x1, 0x0, 0x1}, {0x88a8, 0x5, 0x0, 0x4}}, {@x25={0x805, {0x2, 0x8, 0x1}}}}}, 0x1d) 1m34.299146657s ago: executing program 4 (id=1049): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYRES16=r1], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) sendmsg$inet(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 1m31.660538453s ago: executing program 4 (id=1053): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x73a) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='10000', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) r3 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = getpgrp(0x0) syz_pidfd_open(r4, 0x0) r5 = fsmount(r3, 0x0, 0x0) fchdir(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) 1m31.501513716s ago: executing program 4 (id=1056): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000580)={[{@delalloc}, {}, {@nodioread_nolock}, {@norecovery}, {@dioread_nolock}, {@minixdf}, {@oldalloc}, {@sysvgroups}, {@i_version}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r0, 0x0, 0x3, 0x7c27) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4000000000, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9bf8bdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x6]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendfile(r2, r3, 0x0, 0xfffe82) 1m30.56155916s ago: executing program 4 (id=1066): r0 = inotify_init1(0x80000) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0xfffffffffffffffa) 1m28.167190099s ago: executing program 4 (id=1073): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf2501000000", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x7ffffffe, 0x4, {0x0, 0x0, 0x0, 0x0, {0x5, 0x3}, {0x4, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x62f5}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m27.844088167s ago: executing program 32 (id=1073): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf2501000000", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x7ffffffe, 0x4, {0x0, 0x0, 0x0, 0x0, {0x5, 0x3}, {0x4, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x62f5}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m21.169613703s ago: executing program 3 (id=1094): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r3, 0x8954, &(0x7f0000000380)={{0x2, 0x0, @multicast1}, {0x0, @link_local}, 0x0, {0x2, 0x0, @broadcast}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r6, @ANYBLOB="11002a00dd0b6162636465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000100)=r7) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x54, r8, 0x1, 0x0, 0x3, {0x22}, [{@nsim={{0xe}, {0xffffffffffffffc5, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r9 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r9, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) recvmmsg(r9, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r10, 0x890b, &(0x7f0000000100)="fdfd00010000000000000000020000000f0000006c61706230") r11 = socket(0xa, 0x4, 0xce2d) getsockopt$inet_udp_int(r11, 0x11, 0xa, &(0x7f00000001c0), &(0x7f0000000280)=0x4) 1m19.310921019s ago: executing program 3 (id=1100): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x3, @empty, 'veth0_vlan\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r1, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f00000000c0)) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'veth0_virt_wifi\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r3, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r3, 0x4004743a, &(0x7f00000000c0)) 1m19.076955316s ago: executing program 3 (id=1101): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c00098008800140000000010800"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 1m18.823176192s ago: executing program 3 (id=1103): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000580)={[{@delalloc}, {}, {@nodioread_nolock}, {@norecovery}, {@dioread_nolock}, {@minixdf}, {@oldalloc}, {@sysvgroups}, {@i_version}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r0, 0x0, 0x3, 0x7c27) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4000000000, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9bf8bdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x6]}) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) 1m17.556263993s ago: executing program 3 (id=1106): sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000091) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, 0x0, 0x4004014) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000380), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r0) sendmsg$NL802154_CMD_GET_INTERFACE(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004019}, 0x4004000) sendmsg$NFC_CMD_FW_DOWNLOAD(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44805}, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r3, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x50, r5, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x240048c5) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r3) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r6, 0x702, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x80}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x81) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000b00), r0) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x14, r6, 0x100, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) sendmsg$NL802154_CMD_SET_CHANNEL(r8, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x54, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1f}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x17}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x4}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xa}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1d}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x200400d4}, 0x80) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e80)={0xa4, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x21, 0x7, 'system_u:object_r:tmpfs_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:autofs_device_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'syzkaller0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x41}, 0x44004) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL802154_CMD_GET_INTERFACE(r3, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x20, r4, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r7, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4042000}, 0x40) 1m13.22714303s ago: executing program 3 (id=1118): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd29, 0x2002, {0x0, 0x0, 0x0, r6, {0xb, 0xfff2}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x7e, 0xffffffffffffffff, 0x3, 0xd155}, 0x5f}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) close(r4) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r3, 0x42}, 0x80, &(0x7f0000003300)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000025c1020000ff84125ce882cbf400930bf4533f00429c65112a", 0x26}, {&(0x7f00000022c0)="02db0b9ef1cafdab", 0x8}], 0x2}, 0x4005) 1m12.958240047s ago: executing program 33 (id=1118): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd29, 0x2002, {0x0, 0x0, 0x0, r6, {0xb, 0xfff2}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x7e, 0xffffffffffffffff, 0x3, 0xd155}, 0x5f}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) close(r4) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r3, 0x42}, 0x80, &(0x7f0000003300)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000025c1020000ff84125ce882cbf400930bf4533f00429c65112a", 0x26}, {&(0x7f00000022c0)="02db0b9ef1cafdab", 0x8}], 0x2}, 0x4005) 9.932404293s ago: executing program 2 (id=1509): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100001900000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac000000000000000000000000000000000000000000000004000000000000000000020000"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 9.107243784s ago: executing program 2 (id=1514): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='bic', 0x3) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00'}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8000, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000000340)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f00000002c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000200), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r3, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 8.915773568s ago: executing program 6 (id=1516): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x50, 0x2, 0x0, @rand_addr, @multicast1}, @address_request={0x11, 0x0, 0x0, 0x40}}}}}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0xf, 0x0, 0x1, 0xf, 0xfffe, 0x4209}, 0x20) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYBLOB="0108000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x0, 0xccd21cca, 0xfffffffffffffc75, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h'], 0x68}, 0x9}, 0x0) 8.785297672s ago: executing program 2 (id=1517): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller1\x00'}) sendmsg$nl_route_sched(r3, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0x3}, {0xffff, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8, 0xfff, 0x10000000, 0x7, 0xccb}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) write$tun(r1, &(0x7f00000001c0)={@val={0x70}, @void, @eth={@broadcast, @remote, @val={@val={0x88a8, 0x1, 0x0, 0x1}, {0x88a8, 0x5, 0x0, 0x4}}, {@x25={0x805, {0x2, 0x8, 0x1}}}}}, 0x1d) 8.603740816s ago: executing program 6 (id=1519): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4c78}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000008"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 8.383122502s ago: executing program 6 (id=1522): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'wg0\x00', 0x400}) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x280) 6.0193198s ago: executing program 6 (id=1525): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000580)={[{@delalloc}, {}, {@nodioread_nolock}, {@norecovery}, {@dioread_nolock}, {@minixdf}, {@oldalloc}, {@sysvgroups}, {@i_version}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4000000000, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9bf8bdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x6]}) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) 5.943080282s ago: executing program 0 (id=1527): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='bic', 0x3) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00'}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8000, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000000340)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f00000002c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000200), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r3, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 5.870117304s ago: executing program 2 (id=1528): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x808, &(0x7f00000004c0)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00000000000000000003,resv_level=000000006,coherency=full,localflocks,coherency=full,noacl,\x00'/136], 0x1, 0x4421, &(0x7f0000004500)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) write$P9_RREADDIR(r0, &(0x7f00000001c0)={0xb, 0x29, 0x3, {0xff}}, 0xb) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 5.559581112s ago: executing program 0 (id=1530): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000400)=[@window={0x3, 0xa, 0x2}, @mss={0x2, 0x9}, @timestamp, @timestamp, @window={0x3, 0xfff7, 0x300}, @sack_perm, @timestamp, @mss={0x2, 0x2}], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 5.359143567s ago: executing program 5 (id=1531): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000002380)=ANY=[@ANYBLOB="180200000020000000000000000000008500000027000000180100002020702500000000000020207b1af8ff00"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffff, 0x3}, 0x6) write(r1, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000140)=0x1, 0x4) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x0, 0x1}, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='coredump_filter\x00') write$ublk_bdev(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x2f, 0xe, 0x5, 0x80, 0x1, @dev={0xfe, 0x80, '\x00', 0x2c}, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x40, 0x20, 0x6, 0x2}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000240)={'L-', 0x400}, 0x16, 0x2) 5.253749679s ago: executing program 6 (id=1532): r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x10, @mcast2}, 0x1c) sendto$inet6(r0, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000001, 0x13, r1, 0x8cee000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000004c0)}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="8b", 0x1}], 0x1}}], 0x2, 0x4001) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x40) 4.998345846s ago: executing program 1 (id=1533): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000004c0)='ns/pid_for_children\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x24004000) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x40000002) ioctl$TUNSETFILTEREBPF(r0, 0xb701, 0x0) 4.787387351s ago: executing program 1 (id=1534): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r3, 0x8954, &(0x7f0000000380)={{0x2, 0x0, @multicast1}, {0x0, @link_local}, 0x0, {0x2, 0x0, @broadcast}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r6, @ANYBLOB="11002a00dd0b6162636465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000100)) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x54, r7, 0x1, 0x0, 0x3, {0x22}, [{@nsim={{0xe}, {0xffffffffffffffc5, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r8 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r8, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r8, 0x0) recvmmsg(r8, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r9, 0x890b, &(0x7f0000000100)="fdfd00010000000000000000020000000f0000006c61706230") r10 = socket(0xa, 0x4, 0xce2d) getsockopt$inet_udp_int(r10, 0x11, 0xa, &(0x7f00000001c0), &(0x7f0000000280)=0x4) 3.954603092s ago: executing program 5 (id=1535): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'wg0\x00', 0x400}) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x280) 3.934754952s ago: executing program 2 (id=1536): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2002, {0x0, 0x0, 0x0, r6, {0xb, 0x5}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x7f, 0x4, 0xc9d, 0xd155}, 0x5f}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) close(r4) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r6, 0x40}, 0x80, &(0x7f0000003300)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000025c10200000002125ce882cbf400930bf4533f00429c65112a", 0x26}, {&(0x7f00000022c0)="02db0b9ef1cafdab", 0x8}], 0x2}, 0x4005) 3.799329195s ago: executing program 6 (id=1537): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100001900000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 3.248764309s ago: executing program 34 (id=1537): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100001900000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 3.23199384s ago: executing program 0 (id=1539): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000b00)={@desc={0x1, 0x0, @desc3}, 0x40, 0x0, '\x00', @b}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @adiantum, 0x4, @desc3}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x8004587d, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 3.20062631s ago: executing program 1 (id=1540): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x2, 0x0) ioctl(r1, 0x40480923, &(0x7f0000000380)="00000000000000000000000000000000050000000010000003000000030000000000000001000000000000000100000003000000030000000000000000000000020000000010") setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000001280), 0x4) getpid() write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) ioctl(r1, 0x40140921, &(0x7f0000000400)="000000000100000000000000000000000600") ioctl(r1, 0x40140921, &(0x7f0000000440)="010000000100000001000000010000000600") ioctl(r1, 0x40140921, &(0x7f0000000480)="020000000100000002000000020000000600") ioctl(r1, 0x400c0930, 0x0) nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0) read(r1, &(0x7f0000000700)=""/4096, 0x1000) 2.983429576s ago: executing program 5 (id=1541): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x50, 0x2, 0x0, @rand_addr, @multicast1}, @address_request={0x11, 0x0, 0x0, 0x40}}}}}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0xf, 0x0, 0x1, 0xf, 0xfffe, 0x4209}, 0x20) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYBLOB="0108000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x0, 0xccd21cca, 0xfffffffffffffc75, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h'], 0x68}, 0x9}, 0x0) 2.78812668s ago: executing program 0 (id=1542): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000580)={[{@delalloc}, {}, {@nodioread_nolock}, {@norecovery}, {@dioread_nolock}, {@minixdf}, {@oldalloc}, {@sysvgroups}, {@i_version}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4000000000, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9bf8bdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x6]}) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) 2.766698641s ago: executing program 2 (id=1543): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) setns(0xc9, 0x0) r1 = socket(0x8, 0x5, 0x5) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)="900100"/64) ioctl$sock_SIOCOUTQNSD(r1, 0x40106181, 0x0) 2.208243905s ago: executing program 35 (id=1543): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) setns(0xc9, 0x0) r1 = socket(0x8, 0x5, 0x5) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)="900100"/64) ioctl$sock_SIOCOUTQNSD(r1, 0x40106181, 0x0) 2.203737395s ago: executing program 1 (id=1545): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000002380)=ANY=[@ANYBLOB="180200000020000000000000000000008500000027000000180100002020702500000000000020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffff, 0x3}, 0x6) write(r1, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000140)=0x1, 0x4) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x0, 0x1}, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='coredump_filter\x00') write$ublk_bdev(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x2f, 0xe, 0x5, 0x80, 0x1, @dev={0xfe, 0x80, '\x00', 0x2c}, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x40, 0x20, 0x6, 0x2}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000240)={'L-', 0x400}, 0x16, 0x2) 2.198398535s ago: executing program 5 (id=1546): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x2, 0x0) ioctl(r1, 0x40480923, &(0x7f0000000380)="00000000000000000000000000000000050000000010000003000000030000000000000001000000000000000100000003000000030000000000000000000000020000000010") setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000001280), 0x4) getpid() write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) ioctl(r1, 0x40140921, &(0x7f0000000400)="000000000100000000000000000000000600") ioctl(r1, 0x40140921, &(0x7f0000000440)="010000000100000001000000010000000600") ioctl(r1, 0x40140921, &(0x7f0000000480)="020000000100000002000000020000000600") ioctl(r1, 0x400c0930, 0x0) nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0) read(r1, &(0x7f0000000700)=""/4096, 0x1000) 1.802787535s ago: executing program 0 (id=1547): r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x10, @mcast2}, 0x1c) sendto$inet6(r0, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000001, 0x13, r1, 0x8cee000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000004c0)}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="8b", 0x1}], 0x1}}], 0x2, 0x4001) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x40) 1.551637982s ago: executing program 5 (id=1548): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000026000000"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000640)="d9b9547ed3c0021a6fd6a67ab922", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.276241798s ago: executing program 5 (id=1549): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r3, 0x8954, &(0x7f0000000380)={{0x2, 0x0, @multicast1}, {0x0, @link_local}, 0x0, {0x2, 0x0, @broadcast}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r6, @ANYBLOB="11002a00dd0b6162636465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000100)) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x54, r7, 0x1, 0x0, 0x3, {0x22}, [{@nsim={{0xe}, {0xffffffffffffffc5, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r8 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r8, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r8, 0x0) recvmmsg(r8, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r9, 0x890b, &(0x7f0000000100)="fdfd00010000000000000000020000000f0000006c61706230") r10 = socket(0xa, 0x4, 0xce2d) getsockopt$inet_udp_int(r10, 0x11, 0xa, &(0x7f00000001c0), &(0x7f0000000280)=0x4) 810.32996ms ago: executing program 1 (id=1550): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'wg0\x00', 0x400}) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0x280) 738.003752ms ago: executing program 0 (id=1551): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000b00)={@desc={0x1, 0x0, @desc3}, 0x40, 0x0, '\x00', @b}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @adiantum, 0x4, @desc3}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x8004587d, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 61.452679ms ago: executing program 36 (id=1551): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000b00)={@desc={0x1, 0x0, @desc3}, 0x40, 0x0, '\x00', @b}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @adiantum, 0x4, @desc3}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x8004587d, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 0s ago: executing program 1 (id=1553): socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r0, &(0x7f0000000070)='syz0:127.0.0.1', 0xe) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1b5b, @loopback}}, 0x24) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff) mount$afs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0) kernel console output (not intermixed with test programs): 0][ T26] kauditd_printk_skb: 162 callbacks suppressed [ 128.540952][ T26] audit: type=1326 audit(1791601885.122:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.1.515" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cedd9e1d9 code=0x7ffc0000 [ 128.584092][ T5806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.516'. [ 128.635255][ T26] audit: type=1326 audit(1791601885.182:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.1.515" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cedd9e1d9 code=0x7ffc0000 [ 128.662914][ T5806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.516'. [ 128.720649][ T26] audit: type=1326 audit(1791601885.182:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.1.515" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cedd9e1d9 code=0x7ffc0000 [ 128.786305][ T26] audit: type=1326 audit(1791601885.182:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.1.515" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7f7cedd9e1d9 code=0x7ffc0000 [ 128.819761][ T26] audit: type=1326 audit(1791601885.182:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.1.515" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cedd9e1d9 code=0x7ffc0000 [ 128.919361][ T26] audit: type=1326 audit(1791601885.182:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.1.515" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cedd9e1d9 code=0x7ffc0000 [ 128.982625][ T26] audit: type=1326 audit(1791601885.182:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.1.515" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cedd9e1d9 code=0x7ffc0000 [ 129.057823][ T26] audit: type=1326 audit(1791601885.182:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.1.515" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cedd9e1d9 code=0x7ffc0000 [ 129.136972][ T26] audit: type=1326 audit(1791601885.182:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.1.515" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cedd9e1d9 code=0x7ffc0000 [ 129.200212][ T26] audit: type=1326 audit(1791601885.182:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.1.515" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7cedd9e1d9 code=0x7ffc0000 [ 130.478215][ T5858] device dummy0 left promiscuous mode [ 130.509704][ T5858] netlink: 'syz.0.530': attribute type 10 has an invalid length. [ 130.523237][ T5858] device dummy0 entered promiscuous mode [ 130.834710][ T5874] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 130.892984][ T5880] jffs2: notice: (5880) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 132.645203][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.651664][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.710701][ T5894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.740727][ T5894] __nla_validate_parse: 10 callbacks suppressed [ 132.740741][ T5894] netlink: 48 bytes leftover after parsing attributes in process `syz.3.543'. [ 132.790931][ T5895] device syzkaller0 entered promiscuous mode [ 132.816281][ T5895] tipc: Enabled bearer , priority 0 [ 132.851353][ T5893] tipc: Resetting bearer [ 132.914378][ T5893] tipc: Disabling bearer [ 132.967249][ T5903] netlink: 'syz.4.547': attribute type 1 has an invalid length. [ 132.992115][ T5904] FAULT_INJECTION: forcing a failure. [ 132.992115][ T5904] name failslab, interval 1, probability 0, space 0, times 1 [ 132.995444][ T5903] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.005152][ T5904] CPU: 0 PID: 5904 Comm: syz.1.545 Not tainted syzkaller #0 [ 133.005208][ T5904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 133.005225][ T5904] Call Trace: [ 133.005233][ T5904] [ 133.005242][ T5904] dump_stack_lvl+0x188/0x24e [ 133.005277][ T5904] ? __wake_up+0x12e/0x1a0 [ 133.044421][ T5904] ? show_regs_print_info+0x12/0x12 [ 133.049621][ T5904] ? load_image+0x410/0x410 [ 133.054129][ T5904] should_fail_ex+0x390/0x4c0 [ 133.058809][ T5904] should_failslab+0x5/0x20 [ 133.063298][ T5904] slab_pre_alloc_hook+0x59/0x300 [ 133.068315][ T5904] ? __lock_acquire+0x7ea0/0x7ea0 [ 133.073338][ T5904] kmem_cache_alloc+0x56/0x2f0 [ 133.078114][ T5904] ? __sigqueue_alloc+0x40c/0x520 [ 133.083135][ T5904] ? __sigqueue_alloc+0x32/0x520 [ 133.088065][ T5904] __sigqueue_alloc+0x40c/0x520 [ 133.092923][ T5904] __send_signal_locked+0x22f/0xde0 [ 133.098116][ T5904] do_notify_parent+0xb24/0xd10 [ 133.102966][ T5904] ? trace_signal_generate+0x260/0x260 [ 133.108429][ T5904] ? __lock_acquire+0x7ea0/0x7ea0 [ 133.113459][ T5904] release_task+0x121c/0x1680 [ 133.118135][ T5904] ? do_exit+0x18d7/0x2570 [ 133.122543][ T5904] ? delayed_put_task_struct+0x2f0/0x2f0 [ 133.128166][ T5904] ? _raw_write_lock_irq+0xb7/0xf0 [ 133.133267][ T5904] ? _raw_write_lock_irqsave+0x100/0x100 [ 133.138890][ T5904] ? _raw_write_unlock_irq+0x1f/0x40 [ 133.144173][ T5904] ? lockdep_hardirqs_on+0x94/0x140 [ 133.149365][ T5904] do_exit+0x18d7/0x2570 [ 133.153609][ T5904] ? put_task_struct+0x80/0x80 [ 133.158366][ T5904] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 133.164340][ T5904] ? lock_chain_count+0x20/0x20 [ 133.169180][ T5904] ? _raw_spin_lock_irq+0xb7/0xf0 [ 133.174197][ T5904] do_group_exit+0x229/0x2e0 [ 133.178778][ T5904] ? lockdep_hardirqs_on+0x94/0x140 [ 133.183970][ T5904] get_signal+0x1259/0x1340 [ 133.188475][ T5904] ? futex_wake+0x426/0x4f0 [ 133.192978][ T5904] arch_do_signal_or_restart+0xc4/0x1310 [ 133.198632][ T5904] ? __fget_files+0x28/0x460 [ 133.203218][ T5904] ? do_futex+0x2e2/0x320 [ 133.207538][ T5904] ? get_sigframe_size+0x10/0x10 [ 133.212467][ T5904] ? __ia32_sys_get_robust_list+0x100/0x100 [ 133.218359][ T5904] ? __fdget+0x18e/0x200 [ 133.222610][ T5904] ? exit_to_user_mode_loop+0x3b/0x110 [ 133.228074][ T5904] exit_to_user_mode_loop+0x70/0x110 [ 133.233356][ T5904] exit_to_user_mode_prepare+0xee/0x180 [ 133.238909][ T5904] syscall_exit_to_user_mode+0x16/0x40 [ 133.244362][ T5904] do_syscall_64+0x58/0xa0 [ 133.248767][ T5904] ? clear_bhb_loop+0x60/0xb0 [ 133.253432][ T5904] ? clear_bhb_loop+0x60/0xb0 [ 133.258101][ T5904] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 133.264000][ T5904] RIP: 0033:0x7f7cedd9e1d9 [ 133.268409][ T5904] Code: Unable to access opcode bytes at 0x7f7cedd9e1af. [ 133.275409][ T5904] RSP: 002b:00007f7ceec9a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 133.283833][ T5904] RAX: 0000000000000001 RBX: 00007f7cee025fa8 RCX: 00007f7cedd9e1d9 [ 133.291791][ T5904] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7cee025fac [ 133.299756][ T5904] RBP: 00007f7cee025fa0 R08: 00372c56dc0dc309 R09: 0000000000000000 [ 133.307715][ T5904] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 133.315675][ T5904] R13: 00007f7cee026038 R14: 00007ffd293529c0 R15: 00007ffd29352aa8 [ 133.323644][ T5904] [ 133.367463][ T5902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.546'. [ 133.381769][ T5902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.546'. [ 133.395801][ T5902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.546'. [ 133.407079][ T5902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.546'. [ 133.417678][ T5903] device dummy0 left promiscuous mode [ 133.449805][ T5903] bond1: (slave dummy0): Enslaving as a backup interface with an up link [ 133.482218][ T5906] netlink: 'syz.4.547': attribute type 10 has an invalid length. [ 133.490228][ T5906] netlink: 40 bytes leftover after parsing attributes in process `syz.4.547'. [ 133.502518][ T5906] device dummy0 entered promiscuous mode [ 133.514192][ T5906] bond1: (slave dummy0): Releasing backup interface [ 133.801648][ T5929] tmpfs: Unknown parameter 'usrquota))9c>Pcqt9`' [ 133.936945][ T5933] hub 1-0:1.0: USB hub found [ 133.943033][ T5933] hub 1-0:1.0: 1 port detected [ 136.205141][ T5940] FAULT_INJECTION: forcing a failure. [ 136.205141][ T5940] name failslab, interval 1, probability 0, space 0, times 0 [ 136.217780][ T5940] CPU: 0 PID: 5940 Comm: syz.4.558 Not tainted syzkaller #0 [ 136.225067][ T5940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 136.235123][ T5940] Call Trace: [ 136.238393][ T5940] [ 136.241315][ T5940] dump_stack_lvl+0x188/0x24e [ 136.245991][ T5940] ? __wake_up+0x12e/0x1a0 [ 136.250399][ T5940] ? show_regs_print_info+0x12/0x12 [ 136.255607][ T5940] ? load_image+0x410/0x410 [ 136.260105][ T5940] should_fail_ex+0x390/0x4c0 [ 136.264780][ T5940] should_failslab+0x5/0x20 [ 136.269270][ T5940] slab_pre_alloc_hook+0x59/0x300 [ 136.274286][ T5940] ? __lock_acquire+0x7ea0/0x7ea0 [ 136.279304][ T5940] kmem_cache_alloc+0x56/0x2f0 [ 136.284055][ T5940] ? __sigqueue_alloc+0x40c/0x520 [ 136.289085][ T5940] ? __sigqueue_alloc+0x32/0x520 [ 136.294017][ T5940] __sigqueue_alloc+0x40c/0x520 [ 136.298861][ T5940] __send_signal_locked+0x22f/0xde0 [ 136.304054][ T5940] do_notify_parent+0xb24/0xd10 [ 136.308900][ T5940] ? trace_signal_generate+0x260/0x260 [ 136.314355][ T5940] ? __lock_acquire+0x7ea0/0x7ea0 [ 136.319407][ T5940] release_task+0x121c/0x1680 [ 136.324095][ T5940] ? do_exit+0x18d7/0x2570 [ 136.328508][ T5940] ? delayed_put_task_struct+0x2f0/0x2f0 [ 136.334135][ T5940] ? _raw_write_lock_irq+0xb7/0xf0 [ 136.339246][ T5940] ? _raw_write_lock_irqsave+0x100/0x100 [ 136.344874][ T5940] ? _raw_write_unlock_irq+0x1f/0x40 [ 136.350161][ T5940] ? lockdep_hardirqs_on+0x94/0x140 [ 136.355368][ T5940] do_exit+0x18d7/0x2570 [ 136.359615][ T5940] ? put_task_struct+0x80/0x80 [ 136.364383][ T5940] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 136.370358][ T5940] ? lock_chain_count+0x20/0x20 [ 136.375215][ T5940] ? _raw_spin_lock_irq+0xb7/0xf0 [ 136.380233][ T5940] do_group_exit+0x229/0x2e0 [ 136.384820][ T5940] ? lockdep_hardirqs_on+0x94/0x140 [ 136.390012][ T5940] get_signal+0x1259/0x1340 [ 136.394514][ T5940] ? futex_wake+0x426/0x4f0 [ 136.399013][ T5940] arch_do_signal_or_restart+0xc4/0x1310 [ 136.404663][ T5940] ? __fget_files+0x28/0x460 [ 136.409268][ T5940] ? do_futex+0x2e2/0x320 [ 136.413598][ T5940] ? get_sigframe_size+0x10/0x10 [ 136.418544][ T5940] ? __ia32_sys_get_robust_list+0x100/0x100 [ 136.424431][ T5940] ? __fdget+0x18e/0x200 [ 136.428678][ T5940] ? exit_to_user_mode_loop+0x3b/0x110 [ 136.434139][ T5940] exit_to_user_mode_loop+0x70/0x110 [ 136.439420][ T5940] exit_to_user_mode_prepare+0xee/0x180 [ 136.444960][ T5940] syscall_exit_to_user_mode+0x16/0x40 [ 136.450435][ T5940] do_syscall_64+0x58/0xa0 [ 136.454852][ T5940] ? clear_bhb_loop+0x60/0xb0 [ 136.459535][ T5940] ? clear_bhb_loop+0x60/0xb0 [ 136.464212][ T5940] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 136.470123][ T5940] RIP: 0033:0x7f815079e1d9 [ 136.474538][ T5940] Code: Unable to access opcode bytes at 0x7f815079e1af. [ 136.481545][ T5940] RSP: 002b:00007f81515880e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 136.489948][ T5940] RAX: 0000000000000001 RBX: 00007f8150a25fa8 RCX: 00007f815079e1d9 [ 136.497909][ T5940] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8150a25fac [ 136.505868][ T5940] RBP: 00007f8150a25fa0 R08: 000815e54ef18528 R09: 0000000000000000 [ 136.513825][ T5940] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 136.521783][ T5940] R13: 00007f8150a26038 R14: 00007ffdca89b8b0 R15: 00007ffdca89b998 [ 136.529755][ T5940] [ 136.726017][ T5946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.561'. [ 136.750965][ T5946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.561'. [ 136.774982][ T5946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.561'. [ 136.785822][ T5946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.561'. [ 136.863278][ T5952] netlink: 'syz.3.564': attribute type 1 has an invalid length. [ 136.938392][ T5952] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.984634][ T5955] device dummy0 left promiscuous mode [ 137.050212][ T5955] bond1: (slave dummy0): Enslaving as a backup interface with an up link [ 137.122999][ T5962] netlink: 'syz.3.564': attribute type 10 has an invalid length. [ 137.133670][ T5962] device dummy0 entered promiscuous mode [ 137.143602][ T36] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 137.169738][ T5962] bond1: (slave dummy0): Removing an active aggregator [ 137.190794][ T5962] bond1: (slave dummy0): Releasing backup interface [ 138.081892][ T5989] device syzkaller0 entered promiscuous mode [ 138.239155][ T5991] tipc: Enabled bearer , priority 0 [ 138.586692][ T5987] tipc: Resetting bearer [ 138.644293][ T5987] tipc: Disabling bearer [ 138.933471][ T6001] __nla_validate_parse: 2 callbacks suppressed [ 138.933487][ T6001] netlink: 28 bytes leftover after parsing attributes in process `syz.4.581'. [ 139.192716][ T6016] netlink: 'syz.4.586': attribute type 1 has an invalid length. [ 139.274816][ T6016] 8021q: adding VLAN 0 to HW filter on device bond2 [ 139.339167][ T6017] device dummy0 left promiscuous mode [ 139.409742][ T6017] bond2: (slave dummy0): Enslaving as a backup interface with an up link [ 139.462886][ T6020] netlink: 'syz.4.586': attribute type 10 has an invalid length. [ 139.470681][ T6020] netlink: 40 bytes leftover after parsing attributes in process `syz.4.586'. [ 139.503552][ T52] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 139.562637][ T6020] device dummy0 entered promiscuous mode [ 139.576276][ T6020] bond2: (slave dummy0): Removing an active aggregator [ 139.592164][ T6020] bond2: (slave dummy0): Releasing backup interface [ 141.929570][ T6005] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 142.099455][ T26] kauditd_printk_skb: 74 callbacks suppressed [ 142.099469][ T26] audit: type=1326 audit(1791601898.682:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6053 comm="syz.4.596" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815079e1d9 code=0x7ffc0000 [ 142.135112][ T26] audit: type=1326 audit(1791601898.722:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6053 comm="syz.4.596" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815079e1d9 code=0x7ffc0000 [ 142.193418][ T26] audit: type=1326 audit(1791601898.722:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6053 comm="syz.4.596" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815079e1d9 code=0x7ffc0000 [ 142.226258][ T26] audit: type=1326 audit(1791601898.722:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6053 comm="syz.4.596" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815079e1d9 code=0x7ffc0000 [ 142.254205][ T26] audit: type=1326 audit(1791601898.722:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6053 comm="syz.4.596" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7f815079e1d9 code=0x7ffc0000 [ 142.278787][ T26] audit: type=1326 audit(1791601898.722:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6053 comm="syz.4.596" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815079e1d9 code=0x7ffc0000 [ 142.357448][ T26] audit: type=1326 audit(1791601898.722:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6053 comm="syz.4.596" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815079e1d9 code=0x7ffc0000 [ 142.391357][ T26] audit: type=1326 audit(1791601898.722:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6053 comm="syz.4.596" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815079e1d9 code=0x7ffc0000 [ 142.423589][ T26] audit: type=1326 audit(1791601898.722:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6053 comm="syz.4.596" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815079e1d9 code=0x7ffc0000 [ 142.447923][ T26] audit: type=1326 audit(1791601898.722:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6053 comm="syz.4.596" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f815079e1d9 code=0x7ffc0000 [ 142.472603][ T6065] netlink: 'syz.2.601': attribute type 1 has an invalid length. [ 142.509747][ T6065] 8021q: adding VLAN 0 to HW filter on device bond1 [ 142.526722][ T6065] device dummy0 left promiscuous mode [ 142.543736][ T6065] netlink: 'syz.2.601': attribute type 10 has an invalid length. [ 142.551510][ T6065] netlink: 40 bytes leftover after parsing attributes in process `syz.2.601'. [ 142.561492][ T6065] device dummy0 entered promiscuous mode [ 143.667772][ T6110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.622'. [ 143.699578][ T6110] netlink: 16 bytes leftover after parsing attributes in process `syz.4.622'. [ 143.712701][ T6115] netlink: 12 bytes leftover after parsing attributes in process `syz.2.624'. [ 144.364305][ T6143] device syzkaller0 entered promiscuous mode [ 144.398779][ T6145] netlink: 36 bytes leftover after parsing attributes in process `syz.4.638'. [ 144.570923][ T6153] tmpfs: Unknown parameter 'usrquota))9c>Pcqt9`' [ 144.703095][ T6157] hub 1-0:1.0: USB hub found [ 144.708348][ T6157] hub 1-0:1.0: 1 port detected [ 144.872631][ T4593] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 145.111479][ T4593] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.178112][ T4593] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 145.328807][ T4593] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 145.435927][ T4593] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 145.453482][ T4593] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.689495][ T4593] cxacru 3-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 145.701867][ T4593] cxacru: probe of 3-1:1.0 failed with error -22 [ 145.916452][ T6181] netlink: 36 bytes leftover after parsing attributes in process `syz.0.652'. [ 146.050975][ T129] usb 3-1: USB disconnect, device number 7 [ 146.132591][ T6189] tmpfs: Unknown parameter 'usrquota))9c>Pcqt9`' [ 146.256541][ T6190] hub 1-0:1.0: USB hub found [ 146.261844][ T6190] hub 1-0:1.0: 1 port detected [ 147.155750][ T6203] loop5: detected capacity change from 0 to 7 [ 147.191285][ T6012] Dev loop5: unable to read RDB block 7 [ 147.198283][ T6012] loop5: unable to read partition table [ 147.221070][ T6207] Invalid argument reading file caps for ./file0 [ 147.221108][ T6012] loop5: partition table beyond EOD, truncated [ 147.279144][ T6203] Dev loop5: unable to read RDB block 7 [ 147.298733][ T6203] loop5: unable to read partition table [ 147.333716][ T6203] loop5: partition table beyond EOD, truncated [ 147.382450][ T6203] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 147.561042][ T6216] netlink: 36 bytes leftover after parsing attributes in process `syz.0.666'. [ 147.697048][ T6221] netlink: 12 bytes leftover after parsing attributes in process `syz.4.668'. [ 147.723541][ T6226] ip_tables: iptables: counters copy to user failed while replacing table [ 147.746358][ T6228] bridge1: port 1(erspan0) entered blocking state [ 147.756616][ T6228] bridge1: port 1(erspan0) entered disabled state [ 147.769695][ T6228] device erspan0 entered promiscuous mode [ 147.782020][ T6228] bridge1: port 1(erspan0) entered blocking state [ 147.788852][ T6228] bridge1: port 1(erspan0) entered forwarding state [ 147.885157][ T6231] netlink: 'syz.2.672': attribute type 1 has an invalid length. [ 147.914060][ T6233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.673'. [ 147.925106][ T6231] 8021q: adding VLAN 0 to HW filter on device bond2 [ 147.955928][ T6231] device dummy0 left promiscuous mode [ 147.962537][ T4323] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 148.011728][ T6231] netlink: 'syz.2.672': attribute type 10 has an invalid length. [ 148.046344][ T6231] netlink: 40 bytes leftover after parsing attributes in process `syz.2.672'. [ 148.107395][ T6231] device dummy0 entered promiscuous mode [ 148.136254][ T6243] loop5: detected capacity change from 0 to 7 [ 148.157563][ T6243] Dev loop5: unable to read RDB block 7 [ 148.170902][ T6243] loop5: unable to read partition table [ 148.175424][ T4323] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.198683][ T4323] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 148.204026][ T6243] loop5: partition table beyond EOD, [ 148.219223][ T6247] Invalid argument reading file caps for ./file0 [ 148.229611][ T6243] truncated [ 148.241828][ T4323] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 148.265055][ T4323] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 148.270112][ T6243] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 148.274927][ T4323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.544352][ T4323] cxacru 1-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 148.566129][ T4323] cxacru: probe of 1-1:1.0 failed with error -22 [ 148.668817][ T6259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.734791][ T6259] netlink: 48 bytes leftover after parsing attributes in process `syz.2.681'. [ 148.735367][ T6267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.686'. [ 148.912926][ T4323] usb 1-1: USB disconnect, device number 6 [ 148.949190][ T6276] netlink: 'syz.1.688': attribute type 1 has an invalid length. [ 148.999438][ T6276] 8021q: adding VLAN 0 to HW filter on device bond1 [ 149.029201][ T6276] netlink: 'syz.1.688': attribute type 10 has an invalid length. [ 149.050325][ T6276] netlink: 40 bytes leftover after parsing attributes in process `syz.1.688'. [ 149.080435][ T6276] device dummy0 entered promiscuous mode [ 149.220080][ T6283] loop5: detected capacity change from 0 to 7 [ 149.234675][ T6283] Dev loop5: unable to read RDB block 7 [ 149.240289][ T6283] loop5: unable to read partition table [ 149.246935][ T6283] loop5: partition table beyond EOD, truncated [ 149.262725][ T6283] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 149.328579][ T6283] Invalid argument reading file caps for ./file0 [ 149.667170][ T6304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.698'. [ 149.786304][ T6310] device dummy0 left promiscuous mode [ 149.821929][ T6310] netlink: 'syz.2.700': attribute type 10 has an invalid length. [ 149.835921][ T6314] loop5: detected capacity change from 0 to 7 [ 149.842172][ T6310] netlink: 40 bytes leftover after parsing attributes in process `syz.2.700'. [ 149.864722][ T6310] device dummy0 entered promiscuous mode [ 149.868108][ T6314] Dev loop5: unable to read RDB block 7 [ 149.890334][ T6314] loop5: unable to read partition table [ 149.915448][ T6314] loop5: partition table beyond EOD, truncated [ 149.947058][ T6314] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 150.000719][ T6314] Invalid argument reading file caps for ./file0 [ 150.492856][ T129] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 150.737005][ T129] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.870639][ T129] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 151.061751][ T129] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 151.181829][ T129] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 151.253276][ T129] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.499794][ T129] cxacru 5-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 151.510835][ T129] cxacru: probe of 5-1:1.0 failed with error -22 [ 151.544393][ T6359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.713'. [ 151.749544][ T6370] loop5: detected capacity change from 0 to 7 [ 151.774685][ T6370] Dev loop5: unable to read RDB block 7 [ 151.780569][ T6370] loop5: unable to read partition table [ 151.805832][ T6372] device syzkaller0 entered promiscuous mode [ 151.809256][ T6370] loop5: partition table beyond EOD, truncated [ 151.833020][ T129] usb 5-1: USB disconnect, device number 3 [ 151.843653][ T6372] tipc: Enabled bearer , priority 0 [ 151.855019][ T6373] Invalid argument reading file caps for ./file0 [ 151.867055][ T6371] tipc: Resetting bearer [ 151.889712][ T6370] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 151.931300][ T6371] tipc: Disabling bearer [ 153.037395][ T6394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.725'. [ 153.051375][ T6392] ip_tables: iptables: counters copy to user failed while replacing table [ 153.737659][ T6429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.738'. [ 153.762521][ T4593] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 153.787068][ T6436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.740'. [ 153.979728][ T4593] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.064836][ T4593] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 154.194359][ T4593] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 154.364214][ T4593] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 154.481125][ T4593] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.802556][ T4593] cxacru 4-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 154.824058][ T4593] cxacru: probe of 4-1:1.0 failed with error -22 [ 155.268163][ T4322] usb 4-1: USB disconnect, device number 6 [ 155.398760][ T6479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.751'. [ 155.557608][ T6483] netlink: 12 bytes leftover after parsing attributes in process `syz.1.754'. [ 155.605910][ T6483] bridge0: port 3(batadv1) entered blocking state [ 155.665025][ T6483] bridge0: port 3(batadv1) entered disabled state [ 155.762162][ T6483] device batadv1 entered promiscuous mode [ 155.880917][ T6490] device dummy0 left promiscuous mode [ 156.009267][ T6493] netlink: 'syz.2.756': attribute type 10 has an invalid length. [ 156.173801][ T6493] netlink: 40 bytes leftover after parsing attributes in process `syz.2.756'. [ 156.324709][ T6493] device dummy0 entered promiscuous mode [ 156.335673][ T52] batman_adv: batadv1: IGMP Querier appeared [ 156.342270][ T52] batman_adv: batadv1: MLD Querier appeared [ 156.911533][ T6522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.764'. [ 157.412444][ T14] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 158.059198][ T6547] device dummy0 left promiscuous mode [ 158.123726][ T6547] netlink: 'syz.4.772': attribute type 10 has an invalid length. [ 158.184192][ T14] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.190946][ T6547] netlink: 40 bytes leftover after parsing attributes in process `syz.4.772'. [ 158.202574][ T14] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 158.217559][ T14] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 158.230858][ T6547] device dummy0 entered promiscuous mode [ 158.249428][ T14] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 158.286453][ T6552] device syzkaller0 entered promiscuous mode [ 158.293131][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.315982][ T6552] tipc: Enabled bearer , priority 0 [ 158.350053][ T6550] tipc: Resetting bearer [ 158.407158][ T6550] tipc: Disabling bearer [ 158.528948][ T6570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.778'. [ 158.541956][ T14] cxacru 3-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 158.563218][ T14] cxacru: probe of 3-1:1.0 failed with error -22 [ 158.937716][ T6585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.782'. [ 158.960905][ T4319] usb 3-1: USB disconnect, device number 8 [ 159.068689][ T6587] netlink: 52 bytes leftover after parsing attributes in process `syz.3.783'. [ 159.101334][ T6587] netlink: 52 bytes leftover after parsing attributes in process `syz.3.783'. [ 159.121680][ T6589] netlink: 36 bytes leftover after parsing attributes in process `syz.0.784'. [ 159.238795][ T6596] tmpfs: Unknown parameter 'usrquota))9c>Pcqt9`' [ 159.375251][ T6604] hub 1-0:1.0: USB hub found [ 159.380646][ T6604] hub 1-0:1.0: 1 port detected [ 160.139427][ T26] kauditd_printk_skb: 77 callbacks suppressed [ 160.139441][ T26] audit: type=1326 audit(1791601916.722:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.2.790" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07bfd9e1d9 code=0x7ffc0000 [ 160.290221][ T26] audit: type=1326 audit(1791601916.762:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.2.790" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07bfd9e1d9 code=0x7ffc0000 [ 160.382769][ T6614] device syzkaller0 entered promiscuous mode [ 160.410010][ T26] audit: type=1326 audit(1791601916.762:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.2.790" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07bfd9e1d9 code=0x7ffc0000 [ 160.441570][ T6621] tipc: Enabled bearer , priority 0 [ 160.448463][ T26] audit: type=1326 audit(1791601916.762:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.2.790" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7f07bfd9e1d9 code=0x7ffc0000 [ 160.488211][ T26] audit: type=1326 audit(1791601916.762:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.2.790" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07bfd9e1d9 code=0x7ffc0000 [ 160.512916][ T26] audit: type=1326 audit(1791601916.762:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.2.790" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07bfd9e1d9 code=0x7ffc0000 [ 160.537194][ T6613] tipc: Resetting bearer [ 160.549227][ T26] audit: type=1326 audit(1791601916.762:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.2.790" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07bfd9e1d9 code=0x7ffc0000 [ 160.580042][ T26] audit: type=1326 audit(1791601916.762:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.2.790" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f07bfd9e1d9 code=0x7ffc0000 [ 160.605454][ T6613] tipc: Disabling bearer [ 160.611765][ T26] audit: type=1326 audit(1791601916.762:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.2.790" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07bfd9e1d9 code=0x7ffc0000 [ 160.636180][ T26] audit: type=1326 audit(1791601916.762:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.2.790" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07bfd9e1d9 code=0x7ffc0000 [ 160.666395][ T6625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.796'. [ 160.676208][ T6627] netlink: 4 bytes leftover after parsing attributes in process `syz.0.795'. [ 160.733886][ T6630] ip_tables: iptables: counters copy to user failed while replacing table [ 161.274703][ T14] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 161.360978][ T6659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.410856][ T6664] device syzkaller0 entered promiscuous mode [ 161.433450][ T6659] netlink: 48 bytes leftover after parsing attributes in process `syz.4.806'. [ 161.447038][ T6664] tipc: Enabled bearer , priority 0 [ 161.464552][ T14] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.500497][ T14] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 161.532844][ T14] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 161.578658][ T14] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 161.595827][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.611443][ T6662] tipc: Resetting bearer [ 161.673659][ T6662] tipc: Disabling bearer [ 161.895879][ T6681] cxacru 4-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 161.915120][ T6681] cxacru 4-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 162.220430][ T4317] usb 4-1: USB disconnect, device number 7 [ 162.654390][ T6713] device syzkaller0 entered promiscuous mode [ 162.672687][ T6713] tipc: Enabled bearer , priority 0 [ 162.712780][ T6712] tipc: Resetting bearer [ 162.828122][ T6712] tipc: Disabling bearer [ 163.091695][ T6728] tmpfs: Unknown parameter 'usrquota))9c>Pcqt9`' [ 163.214889][ T6736] hub 1-0:1.0: USB hub found [ 163.220219][ T6736] hub 1-0:1.0: 1 port detected [ 164.147141][ T6747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.232042][ T6747] netlink: 48 bytes leftover after parsing attributes in process `syz.4.831'. [ 164.286363][ T6758] device dummy0 left promiscuous mode [ 164.331485][ T6758] netlink: 'syz.0.835': attribute type 10 has an invalid length. [ 164.391215][ T6758] netlink: 40 bytes leftover after parsing attributes in process `syz.0.835'. [ 164.434890][ T6758] device dummy0 entered promiscuous mode [ 164.644427][ T6769] device syzkaller0 entered promiscuous mode [ 164.654345][ T6769] tipc: Enabled bearer , priority 0 [ 164.680259][ T6768] tipc: Resetting bearer [ 164.717965][ T6768] tipc: Disabling bearer [ 165.117322][ T6793] ip_tables: iptables: counters copy to user failed while replacing table [ 165.633923][ T6811] device dummy0 left promiscuous mode [ 165.685967][ T6811] netlink: 'syz.4.848': attribute type 10 has an invalid length. [ 165.724023][ T6811] netlink: 40 bytes leftover after parsing attributes in process `syz.4.848'. [ 165.743105][ T6811] device dummy0 entered promiscuous mode [ 165.801917][ T6822] device syzkaller0 entered promiscuous mode [ 165.833493][ T6822] tipc: Enabled bearer , priority 0 [ 165.891226][ T6821] tipc: Resetting bearer [ 165.984767][ T6821] tipc: Disabling bearer [ 166.096652][ T6835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.128627][ T6835] netlink: 48 bytes leftover after parsing attributes in process `syz.0.854'. [ 166.411246][ T6847] ip_tables: iptables: counters copy to user failed while replacing table [ 167.051084][ T6882] netlink: 124 bytes leftover after parsing attributes in process `syz.2.865'. [ 167.778098][ T6913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.826944][ T6913] netlink: 48 bytes leftover after parsing attributes in process `syz.3.875'. [ 168.168638][ T6934] device syzkaller0 entered promiscuous mode [ 168.616803][ T6954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.671145][ T6961] netlink: 48 bytes leftover after parsing attributes in process `syz.4.884'. [ 169.079111][ T6987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.891'. [ 169.659839][ T7003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.744664][ T7003] netlink: 48 bytes leftover after parsing attributes in process `syz.3.895'. [ 170.563757][ T7057] netlink: 4 bytes leftover after parsing attributes in process `syz.4.906'. [ 171.210712][ T7086] device syzkaller0 entered promiscuous mode [ 173.622659][ T7140] device syzkaller0 entered promiscuous mode [ 173.663524][ T7151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.696590][ T7151] netlink: 48 bytes leftover after parsing attributes in process `syz.2.936'. [ 173.712595][ T7149] device syzkaller0 entered promiscuous mode [ 177.318150][ T7196] loop5: detected capacity change from 0 to 7 [ 177.347253][ T7196] Dev loop5: unable to read RDB block 7 [ 177.353213][ T7196] loop5: unable to read partition table [ 177.359039][ T7196] loop5: partition table beyond EOD, truncated [ 177.392506][ T7196] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 177.435421][ T7199] Invalid argument reading file caps for ./file0 [ 177.600082][ T7209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.640458][ T7209] netlink: 48 bytes leftover after parsing attributes in process `syz.2.950'. [ 178.392824][ T7245] ip_tables: iptables: counters copy to user failed while replacing table [ 179.229045][ T7274] ip_tables: iptables: counters copy to user failed while replacing table [ 179.736678][ T7297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.783389][ T7297] netlink: 48 bytes leftover after parsing attributes in process `syz.0.978'. [ 181.031471][ T7345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.050290][ T7345] netlink: 48 bytes leftover after parsing attributes in process `syz.1.999'. [ 181.480216][ T7370] device syzkaller0 entered promiscuous mode [ 181.516900][ T7374] netlink: 'syz.4.1010': attribute type 1 has an invalid length. [ 181.542999][ T7374] 8021q: adding VLAN 0 to HW filter on device bond3 [ 181.556940][ T7376] device dummy0 left promiscuous mode [ 181.585509][ T7376] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 183.326704][ T7374] netlink: 'syz.4.1010': attribute type 10 has an invalid length. [ 183.334678][ T7374] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1010'. [ 183.344189][ T7374] device dummy0 entered promiscuous mode [ 183.350670][ T7374] bond3: (slave dummy0): Releasing backup interface [ 183.475905][ T7405] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1018'. [ 183.533539][ T7408] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 183.765553][ T7422] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1025'. [ 184.101505][ T7440] autofs4:pid:7440:autofs_fill_super: called with bogus options [ 184.114599][ T7435] device syzkaller0 entered promiscuous mode [ 184.318689][ T7450] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1033'. [ 186.091304][ T7444] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1031'. [ 186.101608][ T7446] device dummy0 left promiscuous mode [ 186.127846][ T7453] netlink: 'syz.1.1031': attribute type 10 has an invalid length. [ 186.139544][ T7453] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1031'. [ 186.152828][ T7453] device dummy0 entered promiscuous mode [ 186.313944][ T7479] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1038'. [ 186.479917][ T7485] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 186.714030][ T4323] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 186.836815][ T7495] device syzkaller0 entered promiscuous mode [ 186.860602][ T7498] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1049'. [ 186.879972][ T7501] device dummy0 left promiscuous mode [ 186.932946][ T4323] usb 1-1: Using ep0 maxpacket: 8 [ 186.942241][ T4323] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.967560][ T4323] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 41728, setting to 64 [ 186.989122][ T4323] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 187.015375][ T4323] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 187.027084][ T4323] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.035376][ T4323] usb 1-1: Product: syz [ 187.052431][ T4323] usb 1-1: Manufacturer: syz [ 187.057203][ T4323] usb 1-1: SerialNumber: syz [ 187.080938][ T4323] cdc_ether 1-1:1.0: skipping garbage [ 187.098155][ T4323] usb 1-1: bad CDC descriptors [ 189.050966][ T129] usb 1-1: USB disconnect, device number 7 [ 189.272042][ T7498] netlink: 'syz.4.1049': attribute type 10 has an invalid length. [ 189.279986][ T7498] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1049'. [ 189.289237][ T7498] device dummy0 entered promiscuous mode [ 189.517002][ T7521] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1055'. [ 189.599280][ T7525] loop4: detected capacity change from 0 to 1024 [ 189.657503][ T7525] EXT4-fs: Ignoring removed oldalloc option [ 189.696652][ T7525] EXT4-fs: Ignoring removed i_version option [ 189.705637][ T7527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1057'. [ 189.726679][ T7525] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 189.741693][ T7527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1057'. [ 189.761586][ T7527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1057'. [ 189.777547][ T7527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1057'. [ 189.823593][ T7525] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 190.040215][ T7543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.075107][ T7525] loop4: detected capacity change from 1024 to 0 [ 190.091696][ T7545] syz.4.1056: attempt to access beyond end of device [ 190.091696][ T7545] loop4: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 190.142702][ T7545] syz.4.1056: attempt to access beyond end of device [ 190.142702][ T7545] loop4: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 190.159973][ T7545] syz.4.1056: attempt to access beyond end of device [ 190.159973][ T7545] loop4: rw=524288, sector=18, nr_sectors = 2 limit=0 [ 190.174104][ T7545] syz.4.1056: attempt to access beyond end of device [ 190.174104][ T7545] loop4: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 190.189416][ T7545] syz.4.1056: attempt to access beyond end of device [ 190.189416][ T7545] loop4: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 190.203635][ T7545] syz.4.1056: attempt to access beyond end of device [ 190.203635][ T7545] loop4: rw=524288, sector=24, nr_sectors = 2 limit=0 [ 190.218329][ T7545] syz.4.1056: attempt to access beyond end of device [ 190.218329][ T7545] loop4: rw=524288, sector=26, nr_sectors = 2 limit=0 [ 190.234388][ T7545] syz.4.1056: attempt to access beyond end of device [ 190.234388][ T7545] loop4: rw=12288, sector=16, nr_sectors = 2 limit=0 [ 190.262814][ T7545] EXT4-fs error (device loop4): ext4_get_inode_loc:4658: inode #15: block 8: comm syz.4.1056: unable to read itable block [ 190.286464][ T7545] syz.4.1056: attempt to access beyond end of device [ 190.286464][ T7545] loop4: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 190.309478][ T7545] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 190.319987][ T7545] EXT4-fs (loop4): I/O error while writing superblock [ 190.340979][ T26] kauditd_printk_skb: 157 callbacks suppressed [ 190.340996][ T26] audit: type=1800 audit(1791601946.912:936): pid=7545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1056" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 190.444299][ T4282] syz-executor: attempt to access beyond end of device [ 190.444299][ T4282] loop4: rw=12288, sector=32, nr_sectors = 2 limit=0 [ 190.469260][ T4282] EXT4-fs error (device loop4): ext4_check_bdev_write_error:218: comm syz-executor: Error while async write back metadata [ 190.498746][ T4282] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 190.507699][ T4282] EXT4-fs (loop4): I/O error while writing superblock [ 190.543831][ T9] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4643: inode #15: block 8: comm kworker/u4:0: unable to read itable block [ 190.566808][ T9] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 190.588864][ T9] EXT4-fs (loop4): I/O error while writing superblock [ 190.639705][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 190.671449][ T4282] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 190.694350][ T4282] EXT4-fs (loop4): I/O error while writing superblock [ 190.719102][ T7532] Buffer I/O error on dev loop4, logical block 64, lost sync page write [ 190.924963][ T7554] md/raid:md0: device ram2 operational as raid disk 2 [ 190.939654][ T7554] md/raid:md0: device ram1 operational as raid disk 1 [ 190.947026][ T7554] md/raid:md0: device ram0 operational as raid disk 0 [ 190.979534][ T7554] md/raid:md0: raid level 5 active with 3 out of 3 devices, algorithm 2 [ 191.007082][ T7554] md0: detected capacity change from 0 to 16384 [ 191.043189][ T4289] Bluetooth: hci1: command 0x0406 tx timeout [ 191.043213][ T4281] Bluetooth: hci2: command 0x0406 tx timeout [ 191.158098][ T7560] __nla_validate_parse: 1 callbacks suppressed [ 191.158114][ T7560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1068'. [ 191.522413][ C0] net_ratelimit: 63 callbacks suppressed [ 192.509277][ T7546] device syzkaller0 entered promiscuous mode [ 193.535546][ T4289] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 193.549017][ T4289] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 193.566002][ T4289] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 193.607801][ T4289] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 193.616205][ T4289] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 193.629036][ T4289] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 194.089878][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.096247][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.832002][ T4590] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.903881][ T4590] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.993566][ T7590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.008545][ T7596] tmpfs: Unknown parameter 'usrquota))9c>Pcqt9`' [ 195.051105][ T7595] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1077'. [ 195.053122][ T7598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1079'. [ 195.073170][ T4590] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.175300][ T7599] hub 1-0:1.0: USB hub found [ 195.180731][ T7599] hub 1-0:1.0: 1 port detected [ 195.209488][ T4590] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.693570][ T4289] Bluetooth: hci4: command 0x0409 tx timeout [ 195.823377][ T4590] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.841524][ T4590] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.048620][ T4590] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.064449][ T7606] loop3: detected capacity change from 0 to 64 [ 196.112325][ T4590] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.598931][ T4590] tipc: Left network mode [ 196.642534][ C1] net_ratelimit: 62 callbacks suppressed [ 196.929908][ T7618] device syzkaller0 entered promiscuous mode [ 196.964641][ T7580] chnl_net:caif_netlink_parms(): no params data found [ 197.769286][ T4289] Bluetooth: hci4: command 0x041b tx timeout [ 199.435078][ T7655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1089'. [ 199.796378][ T7662] tmpfs: Unknown parameter 'usrquota))9c>Pcqt9`' [ 199.842898][ T4289] Bluetooth: hci4: command 0x040f tx timeout [ 199.972463][ T7668] hub 1-0:1.0: USB hub found [ 199.977829][ T7668] hub 1-0:1.0: 1 port detected [ 200.966082][ T7685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.022742][ T7677] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1094'. [ 201.083517][ T7580] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.090870][ T7580] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.113539][ T7580] device bridge_slave_0 entered promiscuous mode [ 201.144559][ T7580] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.170516][ T7580] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.196860][ T7580] device bridge_slave_1 entered promiscuous mode [ 201.222091][ T4590] bridge1: port 1(erspan0) entered disabled state [ 201.268043][ T4590] device erspan0 left promiscuous mode [ 201.281429][ T4590] bridge1: port 1(erspan0) entered disabled state [ 201.431641][ T7697] netem: change failed [ 201.449939][ T7580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.477428][ T7580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.699381][ T7580] team0: Port device team_slave_0 added [ 201.758263][ T7580] team0: Port device team_slave_1 added [ 201.763919][ C0] net_ratelimit: 72 callbacks suppressed [ 201.933542][ T4289] Bluetooth: hci4: command 0x0419 tx timeout [ 202.044665][ T7709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1101'. [ 202.304064][ T7580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.338143][ T7580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.447729][ T7580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.473469][ T7723] loop3: detected capacity change from 0 to 1024 [ 202.503385][ T7699] loop1: detected capacity change from 0 to 32768 [ 202.524499][ T7723] EXT4-fs: Ignoring removed oldalloc option [ 202.547469][ T7723] EXT4-fs: Ignoring removed i_version option [ 202.587927][ T7723] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 202.762306][ T7580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.783786][ T7723] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 202.786593][ T7580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.889418][ T7723] loop3: detected capacity change from 1024 to 0 [ 202.900253][ T7742] bio_check_eod: 12 callbacks suppressed [ 202.900267][ T7742] syz.3.1103: attempt to access beyond end of device [ 202.900267][ T7742] loop3: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 202.920900][ T7742] syz.3.1103: attempt to access beyond end of device [ 202.920900][ T7742] loop3: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 202.959161][ T7580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.974214][ T7742] syz.3.1103: attempt to access beyond end of device [ 202.974214][ T7742] loop3: rw=524288, sector=18, nr_sectors = 2 limit=0 [ 203.026476][ T7742] syz.3.1103: attempt to access beyond end of device [ 203.026476][ T7742] loop3: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 203.087484][ T7742] syz.3.1103: attempt to access beyond end of device [ 203.087484][ T7742] loop3: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 203.134560][ T7716] device syzkaller0 entered promiscuous mode [ 203.150762][ T7742] syz.3.1103: attempt to access beyond end of device [ 203.150762][ T7742] loop3: rw=524288, sector=24, nr_sectors = 2 limit=0 [ 203.203250][ T7742] syz.3.1103: attempt to access beyond end of device [ 203.203250][ T7742] loop3: rw=524288, sector=26, nr_sectors = 2 limit=0 [ 203.242878][ T7742] syz.3.1103: attempt to access beyond end of device [ 203.242878][ T7742] loop3: rw=12288, sector=16, nr_sectors = 2 limit=0 [ 203.287084][ T7742] EXT4-fs error (device loop3): ext4_get_inode_loc:4658: inode #15: block 8: comm syz.3.1103: unable to read itable block [ 203.341469][ T7742] syz.3.1103: attempt to access beyond end of device [ 203.341469][ T7742] loop3: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 203.380709][ T7742] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 203.392328][ T7742] EXT4-fs (loop3): I/O error while writing superblock [ 203.407468][ T26] audit: type=1800 audit(1791601959.992:937): pid=7742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1103" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 203.486797][ T4277] syz-executor: attempt to access beyond end of device [ 203.486797][ T4277] loop3: rw=12288, sector=32, nr_sectors = 2 limit=0 [ 203.502893][ T4277] EXT4-fs error (device loop3): ext4_check_bdev_write_error:218: comm syz-executor: Error while async write back metadata [ 203.531758][ T4277] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 203.540513][ T4277] EXT4-fs (loop3): I/O error while writing superblock [ 203.591735][ T4551] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:4643: inode #15: block 8: comm kworker/u4:7: unable to read itable block [ 203.624574][ T4551] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 203.640604][ T4551] EXT4-fs (loop3): I/O error while writing superblock [ 203.665859][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 203.700353][ T4277] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 203.716399][ T4277] EXT4-fs (loop3): I/O error while writing superblock [ 203.724022][ T7732] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 205.662108][ T7765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.683477][ T7765] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1109'. [ 206.882515][ C0] net_ratelimit: 76 callbacks suppressed [ 206.995899][ T7772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1112'. [ 207.587977][ T7580] device hsr_slave_0 entered promiscuous mode [ 207.607685][ T7580] device hsr_slave_1 entered promiscuous mode [ 207.622916][ T7580] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 207.631961][ T7580] Cannot create hsr debugfs directory [ 207.668532][ T4590] device hsr_slave_0 left promiscuous mode [ 207.683383][ T4590] device hsr_slave_1 left promiscuous mode [ 207.690773][ T4590] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.700943][ T4590] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.723279][ T4590] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.730693][ T4590] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.783441][ T4590] device bridge_slave_1 left promiscuous mode [ 207.791123][ T4590] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.855290][ T4590] device bridge_slave_0 left promiscuous mode [ 207.873374][ T4590] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.011886][ T4590] device veth1_macvtap left promiscuous mode [ 208.026468][ T4590] device veth0_macvtap left promiscuous mode [ 208.039340][ T4590] device veth1_vlan left promiscuous mode [ 208.063776][ T4590] device veth0_vlan left promiscuous mode [ 208.589902][ T4590] bond3 (unregistering): Released all slaves [ 208.596851][ T4281] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 208.610822][ T4281] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 208.622291][ T4281] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 208.631386][ T4281] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 208.640004][ T4281] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 208.648317][ T4281] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 208.828852][ T7798] loop0: detected capacity change from 0 to 32768 [ 208.837593][ T7798] (syz.0.1121,7798,1):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "obj_role=)F@#^t][\*dPMf kʉo>bc$9]bVf" or missing value [ 208.854963][ T7798] (syz.0.1121,7798,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 208.974919][ T4590] bond2 (unregistering): Released all slaves [ 208.984412][ T7803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1122'. [ 209.273882][ T4590] bond1 (unregistering): Released all slaves [ 210.037690][ T4590] team0 (unregistering): Port device team_slave_1 removed [ 210.097863][ T4590] team0 (unregistering): Port device team_slave_0 removed [ 210.158399][ T4590] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.225183][ T4590] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.607655][ T4590] bond0 (unregistering): Released all slaves [ 210.661919][ T7779] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1115'. [ 210.676305][ T7780] device dummy0 left promiscuous mode [ 210.715862][ T7781] netlink: 'syz.1.1115': attribute type 10 has an invalid length. [ 210.738565][ T7781] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1115'. [ 210.740195][ T4281] Bluetooth: hci2: command 0x0409 tx timeout [ 210.782585][ T7781] device dummy0 entered promiscuous mode [ 211.118732][ T7813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.174822][ T7813] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1126'. [ 212.167511][ C1] net_ratelimit: 76 callbacks suppressed [ 212.805624][ T4281] Bluetooth: hci2: command 0x041b tx timeout [ 213.449088][ T7835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1128'. [ 213.543061][ T7840] md: couldn't update array info. -22 [ 213.560618][ T7840] md: could not open device unknown-block(1,0). [ 213.571352][ T7840] md: md_import_device returned -16 [ 213.579399][ T7840] md: could not open device unknown-block(1,1). [ 213.590233][ T7840] md: md_import_device returned -16 [ 213.601351][ T7840] md: could not open device unknown-block(1,2). [ 213.612288][ T7840] md: md_import_device returned -16 [ 213.837576][ T7843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1131'. [ 214.058018][ T4590] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.095826][ T4590] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.134665][ T7849] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1133'. [ 214.204390][ T4590] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.223032][ T4590] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.287316][ T7855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1134'. [ 214.374047][ T7855] 8021q: adding VLAN 0 to HW filter on device bond2 [ 214.460157][ T7856] device dummy0 left promiscuous mode [ 214.524979][ T7856] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 214.553849][ T4590] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.567957][ T4590] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.586633][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 214.611658][ T7860] netlink: 'syz.1.1134': attribute type 10 has an invalid length. [ 214.627691][ T7860] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1134'. [ 214.641342][ T7860] device dummy0 entered promiscuous mode [ 214.651328][ T7871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.664674][ T7860] bond2: (slave dummy0): Releasing backup interface [ 214.674448][ T7871] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1135'. [ 214.731391][ T4590] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.778002][ T4590] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.859876][ T7580] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 214.882422][ T4281] Bluetooth: hci2: command 0x040f tx timeout [ 214.929169][ T7800] chnl_net:caif_netlink_parms(): no params data found [ 214.971054][ T7580] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 215.080585][ T7580] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 215.120864][ T7580] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 215.435407][ T7800] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.472708][ T7800] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.504266][ T7800] device bridge_slave_0 entered promiscuous mode [ 215.606642][ T7800] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.618770][ T7800] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.654057][ T7800] device bridge_slave_1 entered promiscuous mode [ 215.794518][ T7898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1140'. [ 215.862171][ T7800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.907955][ T7800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.102427][ T4590] tipc: Left network mode [ 216.132978][ T7906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1142'. [ 216.150572][ T7800] team0: Port device team_slave_0 added [ 216.324966][ T7800] team0: Port device team_slave_1 added [ 216.534982][ T7800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.541982][ T7800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.665616][ T7800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.827470][ T7800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.841495][ T7800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.948640][ T7800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.969886][ T4281] Bluetooth: hci2: command 0x0419 tx timeout [ 217.015832][ T7580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.160687][ T7580] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.349938][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 217.362433][ C1] net_ratelimit: 39 callbacks suppressed [ 217.370223][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 217.583029][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 217.603145][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 217.632809][ T4716] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.639911][ T4716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.723050][ T7800] device hsr_slave_0 entered promiscuous mode [ 217.746613][ T7800] device hsr_slave_1 entered promiscuous mode [ 217.831596][ T7950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.897171][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 217.913584][ T7942] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1149'. [ 217.926182][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 217.983036][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 218.023144][ T4716] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.030268][ T4716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.063233][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 218.190003][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 218.332266][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 218.355144][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 218.375175][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 218.398552][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 218.439393][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 218.461807][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 218.481251][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 218.512558][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 218.521972][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 218.565703][ T7580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 218.856926][ T7963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.915678][ T7963] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1152'. [ 219.220393][ T7971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1153'. [ 219.246011][ T4590] device hsr_slave_0 left promiscuous mode [ 219.264581][ T4590] device hsr_slave_1 left promiscuous mode [ 219.320933][ T4590] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.344244][ T4590] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.390224][ T4590] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.422567][ T4590] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.483606][ T4590] device bridge_slave_1 left promiscuous mode [ 219.495894][ T4590] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.542276][ T26] audit: type=1326 audit(1791601976.122:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7978 comm="syz.2.1155" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07bfd9e1d9 code=0x7ffc0000 [ 219.567918][ T4590] device bridge_slave_0 left promiscuous mode [ 219.582972][ T4590] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.611476][ T26] audit: type=1326 audit(1791601976.162:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7978 comm="syz.2.1155" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07bfd9e1d9 code=0x7ffc0000 [ 219.688007][ T4590] device veth1_macvtap left promiscuous mode [ 219.694596][ T4590] device veth0_macvtap left promiscuous mode [ 219.700732][ T26] audit: type=1326 audit(1791601976.162:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7978 comm="syz.2.1155" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07bfd9e1d9 code=0x7ffc0000 [ 219.725772][ T4590] device veth1_vlan left promiscuous mode [ 219.735860][ T4590] device veth0_vlan left promiscuous mode [ 219.782770][ T26] audit: type=1326 audit(1791601976.122:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7978 comm="syz.2.1155" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07bfd9e1d9 code=0x7ffc0000 [ 219.872318][ T26] audit: type=1326 audit(1791601976.182:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7978 comm="syz.2.1155" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7f07bfd9e1d9 code=0x7ffc0000 [ 219.908902][ T26] audit: type=1326 audit(1791601976.182:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7978 comm="syz.2.1155" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07bfd9e1d9 code=0x7ffc0000 [ 219.942009][ T26] audit: type=1326 audit(1791601976.182:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7978 comm="syz.2.1155" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07bfd9e1d9 code=0x7ffc0000 [ 219.972933][ T26] audit: type=1326 audit(1791601976.182:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7978 comm="syz.2.1155" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07bfd9e1d9 code=0x7ffc0000 [ 220.006869][ T26] audit: type=1326 audit(1791601976.182:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7978 comm="syz.2.1155" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f07bfd9e1d9 code=0x7ffc0000 [ 220.035650][ T26] audit: type=1326 audit(1791601976.182:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7978 comm="syz.2.1155" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07bfd9e1d9 code=0x7ffc0000 [ 220.539038][ T4590] bond1 (unregistering): Released all slaves [ 221.012637][ T4324] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 221.214998][ T4324] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.232848][ T4324] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 221.252247][ T4324] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 221.275057][ T4324] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 221.289690][ T4324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.381207][ T4590] team0 (unregistering): Port device team_slave_1 removed [ 221.435990][ T4590] team0 (unregistering): Port device team_slave_0 removed [ 221.500572][ T4590] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.572591][ T4590] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.822846][ T4324] usb 3-1: USB disconnect, device number 9 [ 222.010117][ T4590] bond0 (unregistering): Released all slaves [ 222.211091][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 222.230818][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 222.311927][ T7580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.448491][ T8019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.523215][ T8019] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1161'. [ 222.555656][ T8026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1163'. [ 222.564675][ C0] net_ratelimit: 42 callbacks suppressed [ 222.702561][ T7800] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 222.759635][ T7800] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 222.852860][ T7800] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 222.902967][ T7800] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 222.938010][ T8032] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1165'. [ 223.310021][ T7800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.411714][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 223.430452][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 223.448430][ T7800] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.513469][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 223.543031][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 223.591634][ T4716] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.598793][ T4716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.652169][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 223.693767][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 223.717541][ T4716] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.724736][ T4716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.804380][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 223.843518][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 223.880368][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 223.919679][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 223.959822][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 224.010836][ T8063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1172'. [ 224.063124][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 224.078458][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 224.121302][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 224.144778][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 224.169067][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 224.247710][ T7580] device veth0_vlan entered promiscuous mode [ 224.292884][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 224.313898][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 224.332840][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 224.351635][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 224.371170][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 224.387813][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 224.407449][ T7800] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 224.433594][ T7800] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 224.470320][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 224.483466][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 224.505061][ T7580] device veth1_vlan entered promiscuous mode [ 224.533836][ T8078] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1176'. [ 224.619565][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 224.630226][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 224.653668][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 224.672754][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 224.697678][ T7580] device veth0_macvtap entered promiscuous mode [ 224.725211][ T7580] device veth1_macvtap entered promiscuous mode [ 224.775731][ T7580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.805720][ T6681] cxacru 4-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 224.816621][ T8015] cxacru 3-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 224.824967][ T7580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.894773][ T7580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.906067][ T7580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.906084][ T7580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.936801][ T7580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.977676][ T7580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.996440][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 225.011183][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 225.027594][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 225.063195][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 225.084548][ T7580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.128013][ T7580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.146183][ T7580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.157232][ T7580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.168825][ T7580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.182143][ T7580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.202994][ T7580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.226128][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 225.237971][ T8098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.248050][ T4324] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 225.266077][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 225.277127][ T8098] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1180'. [ 225.298936][ T7580] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.317958][ T7580] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.346392][ T7580] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.355973][ T7580] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.427395][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 225.444579][ T4324] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.460950][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 225.468086][ T4324] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 225.489504][ T4324] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 225.513014][ T7800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.537400][ T4324] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 225.557035][ T4324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.709050][ T4339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.729523][ T4339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.779656][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 225.833363][ T4324] cxacru_cm: 72 callbacks suppressed [ 225.833379][ T4324] cxacru 3-1:1.0: invalid response length to cm 0x90: 56 [ 225.881988][ T8115] cxacru 3-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 225.930648][ T8115] cxacru 3-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 225.950904][ T4590] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.960883][ T26] audit: type=1326 audit(1791601982.542:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8116 comm="syz.0.1182" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116859e1d9 code=0x7ffc0000 [ 225.998005][ T4590] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.056716][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 226.081841][ T26] audit: type=1326 audit(1791601982.582:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8116 comm="syz.0.1182" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116859e1d9 code=0x7ffc0000 [ 226.113736][ T8121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1183'. [ 226.213409][ T26] audit: type=1326 audit(1791601982.582:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8116 comm="syz.0.1182" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116859e1d9 code=0x7ffc0000 [ 226.318261][ T26] audit: type=1326 audit(1791601982.582:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8116 comm="syz.0.1182" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116859e1d9 code=0x7ffc0000 [ 226.355543][ T4319] usb 3-1: USB disconnect, device number 10 [ 226.392621][ T26] audit: type=1326 audit(1791601982.582:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8116 comm="syz.0.1182" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7f116859e1d9 code=0x7ffc0000 [ 226.469144][ T26] audit: type=1326 audit(1791601982.582:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8116 comm="syz.0.1182" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116859e1d9 code=0x7ffc0000 [ 226.530590][ T26] audit: type=1326 audit(1791601982.582:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8116 comm="syz.0.1182" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116859e1d9 code=0x7ffc0000 [ 226.632973][ T26] audit: type=1326 audit(1791601982.582:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8116 comm="syz.0.1182" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116859e1d9 code=0x7ffc0000 [ 226.673658][ T8138] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1186'. [ 226.682426][ T26] audit: type=1326 audit(1791601982.582:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8116 comm="syz.0.1182" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116859e1d9 code=0x7ffc0000 [ 226.789939][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 226.825318][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 226.859549][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 226.874153][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 226.907633][ T7800] device veth0_vlan entered promiscuous mode [ 226.918897][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 226.953232][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 226.967408][ T7800] device veth1_vlan entered promiscuous mode [ 227.048048][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 227.061808][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 227.083633][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 227.102881][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 227.114280][ T7800] device veth0_macvtap entered promiscuous mode [ 227.173623][ T7800] device veth1_macvtap entered promiscuous mode [ 227.225448][ T7800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.285112][ T7800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.326474][ T7800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.352399][ T7800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.362231][ T7800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.362247][ T7800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.409882][ T7800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.432498][ T7800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.455806][ T7800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.505890][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 227.517274][ T8160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.540759][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 227.573049][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 227.602928][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 227.631650][ T8160] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1191'. [ 227.664207][ T8143] loop1: detected capacity change from 0 to 32768 [ 227.671772][ T8143] (syz.1.1188,8143,1):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "obj_role=)F@#^t][\*dPMf kʉo>bc$9]bVf" or missing value [ 227.688417][ C1] net_ratelimit: 65 callbacks suppressed [ 227.708287][ T7800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.729858][ T8143] (syz.1.1188,8143,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 227.737803][ T7800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.763252][ T7800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.800352][ T8169] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1193'. [ 227.807325][ T7800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.838898][ T7800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.872454][ T7800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.892442][ T7800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.912595][ T7800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.940369][ T7800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.972677][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 227.991394][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 228.003564][ T7800] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.012278][ T7800] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.078971][ T7800] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.093163][ T8175] md: couldn't update array info. -22 [ 228.105443][ T7800] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.130295][ T8175] md: could not open device unknown-block(1,0). [ 228.175010][ T8175] md: md_import_device returned -16 [ 228.181012][ T8180] md: could not open device unknown-block(1,1). [ 228.197893][ T8180] md: md_import_device returned -16 [ 228.238895][ T8175] md: could not open device unknown-block(1,2). [ 228.263270][ T8175] md: md_import_device returned -16 [ 228.470045][ T4591] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.485522][ T4591] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.550584][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 228.643536][ T4591] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.662592][ T4591] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.682171][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 229.096438][ T8215] loop5: detected capacity change from 0 to 64 [ 229.308888][ T8223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1205'. [ 229.635195][ T8230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.661861][ T8230] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1207'. [ 229.748414][ T8217] loop1: detected capacity change from 0 to 32768 [ 229.770790][ T8217] (syz.1.1204,8217,1):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "obj_role=)F@#^t][\*dPMf kʉo>bc$9]bVf" or missing value [ 229.787215][ T8217] (syz.1.1204,8217,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 229.975909][ T8235] md: couldn't update array info. -22 [ 230.009823][ T8235] md: could not open device unknown-block(1,0). [ 230.036197][ T8235] md: md_import_device returned -16 [ 230.061860][ T8238] md: could not open device unknown-block(1,1). [ 230.086259][ T8238] md: md_import_device returned -16 [ 230.122122][ T8235] md: could not open device unknown-block(1,2). [ 230.163056][ T8235] md: md_import_device returned -16 [ 230.666842][ T8267] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1216'. [ 231.291846][ T8293] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1223'. [ 231.304363][ T8290] loop5: detected capacity change from 0 to 64 [ 231.627770][ T8300] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1224'. [ 231.645332][ T8276] loop6: detected capacity change from 0 to 32768 [ 231.672320][ T8276] (syz.6.1219,8276,1):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "obj_role=)F@#^t][\*dPMf kʉo>bc$9]bVf" or missing value [ 231.699941][ T8300] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1224'. [ 231.757652][ T8276] (syz.6.1219,8276,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 232.268873][ T8314] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1230'. [ 232.657770][ T26] kauditd_printk_skb: 80 callbacks suppressed [ 232.657783][ T26] audit: type=1326 audit(1791601989.242:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8334 comm="syz.1.1235" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cedd9e1d9 code=0x7ffc0000 [ 232.752485][ T22] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 232.760160][ T26] audit: type=1326 audit(1791601989.242:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8334 comm="syz.1.1235" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cedd9e1d9 code=0x7ffc0000 [ 232.831190][ T8345] net_ratelimit: 92 callbacks suppressed [ 232.831207][ T8345] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 232.848630][ T8345] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1237'. [ 232.850442][ T26] audit: type=1326 audit(1791601989.242:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8334 comm="syz.1.1235" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cedd9e1d9 code=0x7ffc0000 [ 232.859021][ T8345] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1237'. [ 232.902910][ T26] audit: type=1326 audit(1791601989.242:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8334 comm="syz.1.1235" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cedd9e1d9 code=0x7ffc0000 [ 232.950113][ T26] audit: type=1326 audit(1791601989.242:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8334 comm="syz.1.1235" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7f7cedd9e1d9 code=0x7ffc0000 [ 232.998626][ T26] audit: type=1326 audit(1791601989.242:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8334 comm="syz.1.1235" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cedd9e1d9 code=0x7ffc0000 [ 233.035524][ T22] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.062998][ T22] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 233.097746][ T22] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 233.120728][ T26] audit: type=1326 audit(1791601989.242:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8334 comm="syz.1.1235" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cedd9e1d9 code=0x7ffc0000 [ 233.162219][ T22] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 233.199432][ T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.220878][ T26] audit: type=1326 audit(1791601989.242:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8334 comm="syz.1.1235" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cedd9e1d9 code=0x7ffc0000 [ 233.321092][ T26] audit: type=1326 audit(1791601989.242:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8334 comm="syz.1.1235" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cedd9e1d9 code=0x7ffc0000 [ 233.405869][ T26] audit: type=1326 audit(1791601989.242:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8334 comm="syz.1.1235" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7cedd9e1d9 code=0x7ffc0000 [ 233.495267][ T8356] loop0: detected capacity change from 0 to 64 [ 233.801570][ T8366] overlayfs: failed to resolve './file0': -2 [ 233.891814][ T4318] usb 6-1: USB disconnect, device number 2 [ 234.055793][ T8372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1244'. [ 234.079649][ T8359] loop6: detected capacity change from 0 to 32768 [ 234.129973][ T8359] (syz.6.1240,8359,1):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "obj_role=)F@#^t][\*dPMf kʉo>bc$9]bVf" or missing value [ 234.201653][ T8359] (syz.6.1240,8359,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 234.575787][ T8387] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1248'. [ 234.603194][ T8394] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1248'. [ 234.841135][ T8405] loop6: detected capacity change from 0 to 1024 [ 234.882662][ T8405] EXT4-fs: Ignoring removed oldalloc option [ 234.888618][ T8405] EXT4-fs: Ignoring removed i_version option [ 234.905726][ T8411] loop1: detected capacity change from 0 to 64 [ 234.969391][ T8405] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 235.061879][ T8411] netem: change failed [ 235.069538][ T8413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1256'. [ 235.135810][ T8405] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 235.270539][ T8429] tipc: Enabling of bearer rejected, failed to enable media [ 235.498243][ T7800] EXT4-fs (loop6): unmounting filesystem. [ 235.830507][ T8444] overlayfs: failed to resolve './file0': -2 [ 235.918712][ T8446] loop5: detected capacity change from 0 to 64 [ 236.192503][ T32] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 236.205419][ T8457] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1265'. [ 236.251438][ T8457] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1265'. [ 236.404098][ T32] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 236.442478][ T32] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 236.482806][ T32] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 236.516325][ T32] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 236.526686][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.547648][ T8469] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1268'. [ 236.559859][ T8463] loop5: detected capacity change from 0 to 1024 [ 236.609863][ T8474] loop0: detected capacity change from 0 to 64 [ 236.630882][ T8463] EXT4-fs: Ignoring removed oldalloc option [ 236.691340][ T8463] EXT4-fs: Ignoring removed i_version option [ 236.729930][ T8463] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 236.813190][ T8463] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 237.111226][ T8495] tipc: Enabling of bearer rejected, failed to enable media [ 237.155521][ T7580] EXT4-fs (loop5): unmounting filesystem. [ 237.335072][ T32] usb 2-1: USB disconnect, device number 6 [ 237.811616][ T8515] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1279'. [ 237.859356][ T8517] overlayfs: failed to resolve './file0': -2 [ 237.879052][ T8519] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1279'. [ 238.002448][ C0] net_ratelimit: 63 callbacks suppressed [ 238.141898][ T8529] loop5: detected capacity change from 0 to 1024 [ 238.200748][ T8531] loop6: detected capacity change from 0 to 64 [ 238.221410][ T8529] EXT4-fs: Ignoring removed oldalloc option [ 238.258021][ T8529] EXT4-fs: Ignoring removed i_version option [ 238.278355][ T8529] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 238.292257][ T8535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1283'. [ 238.375047][ T8529] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 238.542681][ T26] kauditd_printk_skb: 92 callbacks suppressed [ 238.542694][ T26] audit: type=1800 audit(1791601995.122:1208): pid=8529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1285" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 238.649182][ T8556] tipc: Enabling of bearer rejected, failed to enable media [ 238.723101][ T7580] EXT4-fs (loop5): unmounting filesystem. [ 239.239724][ T8574] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1294'. [ 239.273926][ T8574] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1294'. [ 239.325458][ T8577] loop5: detected capacity change from 0 to 64 [ 239.488974][ T8587] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1297'. [ 239.748191][ T8596] loop0: detected capacity change from 0 to 64 [ 240.179155][ T8608] loop2: detected capacity change from 0 to 1024 [ 240.217057][ T8608] EXT4-fs: Ignoring removed oldalloc option [ 240.252620][ T8608] EXT4-fs: Ignoring removed i_version option [ 240.282688][ T8608] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 240.417735][ T8608] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 240.436755][ T26] audit: type=1800 audit(1791601997.022:1209): pid=8608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1301" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 240.540821][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 240.733945][ T8632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1309'. [ 240.996390][ T8641] loop2: detected capacity change from 0 to 64 [ 242.111963][ T8670] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1316'. [ 242.296740][ T8677] tmpfs: Unknown parameter 'usrquota))9c>Pcqt9`' [ 242.393636][ T8679] hub 1-0:1.0: USB hub found [ 242.399259][ T8679] hub 1-0:1.0: 1 port detected [ 243.287289][ C1] net_ratelimit: 64 callbacks suppressed [ 244.521644][ T8694] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1322'. [ 245.145035][ T8723] tipc: Cannot configure node identity twice [ 245.165658][ T8723] tipc: Enabled bearer , priority 0 [ 245.275681][ T8728] loop0: detected capacity change from 0 to 64 [ 245.394209][ T8734] md: couldn't update array info. -22 [ 245.443117][ T8734] md: could not open device unknown-block(1,0). [ 245.449454][ T8734] md: md_import_device returned -16 [ 245.471693][ T8737] tipc: Enabling of bearer rejected, failed to enable media [ 245.491792][ T8734] md: could not open device unknown-block(1,1). [ 245.521646][ T8734] md: md_import_device returned -16 [ 245.583587][ T8740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1335'. [ 246.283414][ T3653] tipc: Node number set to 779965711 [ 246.749809][ T8789] tmpfs: Unknown parameter 'usrquota))9c>Pcqt9`' [ 246.865964][ T8793] hub 1-0:1.0: USB hub found [ 246.871348][ T8793] hub 1-0:1.0: 1 port detected [ 247.368851][ T8794] md: couldn't update array info. -22 [ 247.491665][ T8794] md: could not open device unknown-block(1,0). [ 247.562987][ T8794] md: md_import_device returned -16 [ 247.580321][ T8794] md: could not open device unknown-block(1,2). [ 247.586724][ T8794] md: md_import_device returned -16 [ 247.701158][ T8799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1347'. [ 248.013244][ T8820] tipc: Enabling of bearer rejected, failed to enable media [ 248.484063][ T4591] net_ratelimit: 62 callbacks suppressed [ 248.492616][ T26] audit: type=1326 audit(1791602005.072:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8831 comm="syz.6.1353" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070679e1d9 code=0x7ffc0000 [ 248.578779][ T26] audit: type=1326 audit(1791602005.092:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8831 comm="syz.6.1353" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070679e1d9 code=0x7ffc0000 [ 248.639473][ T8813] loop1: detected capacity change from 0 to 32768 [ 248.670876][ T8813] (syz.1.1348,8813,1):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "obj_role=)F@#^t][\*dPMf kʉo>bc$9]bVf" or missing value [ 248.696772][ T26] audit: type=1326 audit(1791602005.092:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8831 comm="syz.6.1353" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070679e1d9 code=0x7ffc0000 [ 248.782662][ T8813] (syz.1.1348,8813,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 248.817234][ T8842] overlayfs: failed to resolve './file0': -2 [ 248.842486][ T26] audit: type=1326 audit(1791602005.092:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8831 comm="syz.6.1353" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7f070679e1d9 code=0x7ffc0000 [ 248.911914][ T26] audit: type=1326 audit(1791602005.092:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8831 comm="syz.6.1353" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070679e1d9 code=0x7ffc0000 [ 248.936033][ C1] vkms_vblank_simulate: vblank timer overrun [ 249.002507][ T26] audit: type=1326 audit(1791602005.092:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8831 comm="syz.6.1353" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070679e1d9 code=0x7ffc0000 [ 249.097436][ T26] audit: type=1326 audit(1791602005.092:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8831 comm="syz.6.1353" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070679e1d9 code=0x7ffc0000 [ 249.121545][ C1] vkms_vblank_simulate: vblank timer overrun [ 249.182425][ T26] audit: type=1326 audit(1791602005.092:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8831 comm="syz.6.1353" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f070679e1d9 code=0x7ffc0000 [ 249.206388][ C1] vkms_vblank_simulate: vblank timer overrun [ 249.252755][ T26] audit: type=1326 audit(1791602005.092:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8831 comm="syz.6.1353" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070679e1d9 code=0x7ffc0000 [ 249.352514][ T26] audit: type=1326 audit(1791602005.092:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8831 comm="syz.6.1353" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070679e1d9 code=0x7ffc0000 [ 250.792299][ T8898] overlayfs: failed to resolve './file0': -2 [ 250.932640][ T8884] loop6: detected capacity change from 0 to 32768 [ 250.952736][ T8884] (syz.6.1369,8884,0):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "obj_role=)F@#^t][\*dPMf kʉo>bc$9]bVf" or missing value [ 250.982490][ T8884] (syz.6.1369,8884,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 251.136766][ T8889] loop0: detected capacity change from 0 to 32768 [ 251.271642][ T8889] JBD2: Ignoring recovery information on journal [ 251.445787][ T8889] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 251.679788][ T8927] loop5: detected capacity change from 0 to 128 [ 251.792097][ T8927] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 251.837463][ T8927] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 251.969725][ T8927] syz.5.1377 (pid 8927) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 252.025206][ T8889] syz.0.1370 (8889) used greatest stack depth: 18592 bytes left [ 252.189157][ T4271] ocfs2: Unmounting device (7,0) on (node local) [ 252.503509][ T8941] fscrypt (loop5, inode 12): Error allocating 'adiantum(xchacha12,aes)' transform: -4 [ 252.523171][ T8927] fscrypt (loop5, inode 12): Error allocating 'adiantum(xchacha12,aes)' transform: -4 [ 252.672277][ T7580] EXT4-fs (loop5): unmounting filesystem. [ 252.762805][ T8959] overlayfs: failed to resolve './file0': -2 [ 252.861439][ T8967] tmpfs: Unknown parameter 'usrquota))9c>Pcqt9`' [ 252.968946][ T8970] hub 1-0:1.0: USB hub found [ 252.975792][ T8970] hub 1-0:1.0: 1 port detected [ 253.605097][ T4591] net_ratelimit: 55 callbacks suppressed [ 254.031455][ T8981] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 254.093225][ T8987] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1391'. [ 254.138261][ T8981] netlink: 'syz.6.1390': attribute type 10 has an invalid length. [ 254.157159][ T8981] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1390'. [ 254.167018][ T8981] device dummy0 entered promiscuous mode [ 254.561595][ T9003] overlayfs: failed to resolve './file0': -2 [ 254.789023][ T9012] tmpfs: Unknown parameter 'usrquota))9c>Pcqt9`' [ 254.899543][ T9016] hub 1-0:1.0: USB hub found [ 254.904989][ T9016] hub 1-0:1.0: 1 port detected [ 255.526574][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.533351][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.858796][ T8999] loop6: detected capacity change from 0 to 32768 [ 255.938632][ T8999] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 scanned by syz.6.1397 (8999) [ 255.973813][ T9035] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 255.985594][ T9032] VIDIOC_TRY_EXT_CTRLS: error -22: which=0x0, count=3, error_idx=0, request_fd=-1, name=De-Emphasis, id/size=0xa10901/3, id/val=0x0/0x0, id/val=0x0/0x0 [ 256.015931][ T9035] device dummy0 left promiscuous mode [ 256.078244][ T9041] netlink: 'syz.2.1407': attribute type 10 has an invalid length. [ 256.102586][ T9041] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1407'. [ 256.136205][ T9041] device dummy0 entered promiscuous mode [ 256.181515][ T8999] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 256.241173][ T8999] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 256.269942][ T8999] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_LZO (0x8) [ 256.292333][ T8999] BTRFS info (device loop6): use lzo compression, level 0 [ 256.299579][ T8999] BTRFS info (device loop6): using free space tree [ 256.542073][ T9069] md: couldn't update array info. -22 [ 256.606625][ T9069] md: could not open device unknown-block(1,0). [ 256.613178][ T8999] BTRFS info (device loop6): enabling ssd optimizations [ 256.702513][ T9069] md: md_import_device returned -16 [ 256.713197][ T9075] md: could not open device unknown-block(1,2). [ 256.743921][ T9075] md: md_import_device returned -16 [ 256.938675][ T9087] loop1: detected capacity change from 0 to 128 [ 257.004353][ T9089] tmpfs: Unknown parameter 'usrquota))9c>Pcqt9`' [ 257.119640][ T9094] hub 1-0:1.0: USB hub found [ 257.125248][ T9094] hub 1-0:1.0: 1 port detected [ 257.309550][ T9087] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 257.499871][ T9087] ext4 filesystem being mounted at /272/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 257.852284][ T9087] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)" [ 258.049436][ T4280] EXT4-fs (loop1): unmounting filesystem. [ 258.176469][ T7800] BTRFS info (device loop6): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 258.882407][ C1] net_ratelimit: 47 callbacks suppressed [ 259.013301][ T9146] loop0: detected capacity change from 0 to 128 [ 259.054570][ T9146] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 259.135209][ T9146] ext4 filesystem being mounted at /303/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 259.220000][ T9151] loop5: detected capacity change from 0 to 64 [ 259.348052][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 259.777426][ T9140] loop6: detected capacity change from 0 to 32768 [ 260.674239][ T9202] loop1: detected capacity change from 0 to 64 [ 260.761793][ T9202] netem: change failed [ 260.947431][ T9211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1449'. [ 261.979435][ T9242] device syzkaller0 entered promiscuous mode [ 262.414170][ T9261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1462'. [ 263.291850][ T9294] loop1: detected capacity change from 0 to 64 [ 264.252481][ C1] net_ratelimit: 54 callbacks suppressed [ 264.571398][ T9276] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1464'. [ 264.589292][ T9294] netem: change failed [ 264.663674][ T9298] md: couldn't update array info. -22 [ 264.669911][ T9298] md: could not open device unknown-block(1,0). [ 264.677004][ T9298] md: md_import_device returned -16 [ 264.715779][ T9298] md: could not open device unknown-block(1,1). [ 264.722143][ T9298] md: md_import_device returned -16 [ 264.763289][ T9298] md: could not open device unknown-block(1,2). [ 264.769622][ T9298] md: md_import_device returned -16 [ 265.062334][ T9317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1475'. [ 265.595598][ T9338] loop0: detected capacity change from 0 to 64 [ 265.755421][ T9340] device syzkaller0 entered promiscuous mode [ 265.793597][ T9345] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1484'. [ 265.836750][ T9349] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1484'. [ 266.376377][ T9377] jffs2: notice: (9377) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 266.430044][ T9130] input: syz0 as /devices/virtual/misc/uhid/0005:0576:0306.0001/input/input5 [ 266.519216][ T9130] hid-generic 0005:0576:0306.0001: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 266.822795][ T9124] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 267.062971][ T9124] usb 1-1: Using ep0 maxpacket: 8 [ 267.098395][ T9124] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 267.268938][ T9124] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.338312][ T9124] usb 1-1: Product: syz [ 267.357093][ T9124] usb 1-1: Manufacturer: syz [ 267.361715][ T9124] usb 1-1: SerialNumber: syz [ 267.448448][ T9390] md: couldn't update array info. -22 [ 267.463983][ T9390] md: could not open device unknown-block(1,1). [ 267.477262][ T9390] md: md_import_device returned -16 [ 267.488714][ T9390] md: could not open device unknown-block(1,2). [ 267.525957][ T9390] md: md_import_device returned -16 [ 267.532658][ T9392] loop5: detected capacity change from 0 to 64 [ 267.728563][ T9124] usb 1-1: MIDIStreaming interface descriptor not found [ 267.912321][ T9124] usb 1-1: USB disconnect, device number 8 [ 268.290764][ T9399] udevd[9399]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 268.883318][ T9402] loop0: detected capacity change from 0 to 32768 [ 268.908559][ T9402] (syz.0.1498,9402,0):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "obj_role=)F@#^t][\*dPMf kʉo>bc$9]bVf" or missing value [ 268.926424][ T9402] (syz.0.1498,9402,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 269.523139][ C1] net_ratelimit: 58 callbacks suppressed [ 269.769458][ T9412] tmpfs: Unknown parameter 'usrquota))9c>Pcqt9`' [ 269.905313][ T9413] hub 1-0:1.0: USB hub found [ 269.910646][ T9413] hub 1-0:1.0: 1 port detected [ 270.693452][ T9415] overlayfs: failed to resolve './file0': -2 [ 270.732434][ T9396] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1497'. [ 270.830904][ T9397] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1497'. [ 271.193502][ T9432] bridge0: port 3(syz_tun) entered blocking state [ 271.199142][ T9434] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1509'. [ 271.248732][ T9432] bridge0: port 3(syz_tun) entered disabled state [ 271.347527][ T9432] device syz_tun entered promiscuous mode [ 271.379382][ T9432] bridge0: port 3(syz_tun) entered blocking state [ 271.386496][ T9432] bridge0: port 3(syz_tun) entered forwarding state [ 272.042024][ T9459] loop2: detected capacity change from 0 to 64 [ 272.464577][ T9464] device syzkaller0 entered promiscuous mode [ 272.763411][ T9486] md: couldn't update array info. -22 [ 272.773639][ T9486] md: could not open device unknown-block(1,0). [ 272.786056][ T9486] md: md_import_device returned -16 [ 272.821481][ T9486] md: could not open device unknown-block(1,1). [ 272.844413][ T9486] md: md_import_device returned -16 [ 272.861557][ T9486] md: could not open device unknown-block(1,2). [ 272.883398][ T9486] md: md_import_device returned -16 [ 273.137092][ T9500] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1524'. [ 274.722531][ C0] net_ratelimit: 55 callbacks suppressed [ 275.072050][ T9514] loop6: detected capacity change from 0 to 1024 [ 275.133240][ T9514] EXT4-fs: Ignoring removed oldalloc option [ 275.139201][ T9514] EXT4-fs: Ignoring removed i_version option [ 275.167419][ T9514] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 275.261899][ T9514] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 275.270533][ T9519] loop0: detected capacity change from 0 to 64 [ 275.372979][ T9514] loop6: detected capacity change from 1024 to 0 [ 275.401615][ T9528] bio_check_eod: 12 callbacks suppressed [ 275.401631][ T9528] syz.6.1525: attempt to access beyond end of device [ 275.401631][ T9528] loop6: rw=12288, sector=32, nr_sectors = 2 limit=0 [ 275.505433][ T9528] EXT4-fs error (device loop6): __ext4_find_entry:1687: inode #2: comm syz.6.1525: reading directory lblock 0 [ 275.554290][ T9528] syz.6.1525: attempt to access beyond end of device [ 275.554290][ T9528] loop6: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 275.612923][ T9528] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 275.642505][ T9528] EXT4-fs (loop6): I/O error while writing superblock [ 275.748912][ T7800] syz-executor: attempt to access beyond end of device [ 275.748912][ T7800] loop6: rw=12288, sector=32, nr_sectors = 2 limit=0 [ 275.783043][ T7800] syz-executor: attempt to access beyond end of device [ 275.783043][ T7800] loop6: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 275.841955][ T7800] syz-executor: attempt to access beyond end of device [ 275.841955][ T7800] loop6: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 275.937667][ T7800] syz-executor: attempt to access beyond end of device [ 275.937667][ T7800] loop6: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 275.991726][ T7800] syz-executor: attempt to access beyond end of device [ 275.991726][ T7800] loop6: rw=524288, sector=18, nr_sectors = 2 limit=0 [ 276.036349][ T7800] syz-executor: attempt to access beyond end of device [ 276.036349][ T7800] loop6: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 276.079708][ T7800] syz-executor: attempt to access beyond end of device [ 276.079708][ T7800] loop6: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 276.149176][ T7800] syz-executor: attempt to access beyond end of device [ 276.149176][ T7800] loop6: rw=524288, sector=24, nr_sectors = 2 limit=0 [ 276.182614][ T7800] EXT4-fs error (device loop6): ext4_get_inode_loc:4658: inode #2: block 5: comm syz-executor: unable to read itable block [ 276.196008][ T9521] loop2: detected capacity change from 0 to 32768 [ 276.222571][ T7800] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 276.280890][ T7800] EXT4-fs (loop6): I/O error while writing superblock [ 276.313442][ T9521] JBD2: Ignoring recovery information on journal [ 276.346591][ T7800] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5952: IO failure [ 276.384932][ T7800] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 276.393508][ T7800] EXT4-fs (loop6): I/O error while writing superblock [ 276.400408][ T7800] EXT4-fs error (device loop6): ext4_dirty_inode:6166: inode #2: comm syz-executor: mark_inode_dirty error [ 276.412419][ T7800] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 276.420847][ T7800] EXT4-fs (loop6): I/O error while writing superblock [ 276.428986][ T9521] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 276.489232][ T9547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.508781][ T4716] EXT4-fs error (device loop6): __ext4_get_inode_loc_noinmem:4643: inode #2: block 5: comm kworker/u4:13: unable to read itable block [ 276.552941][ T9552] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1534'. [ 276.558864][ T4716] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 276.580893][ T4716] EXT4-fs (loop6): I/O error while writing superblock [ 276.613845][ T7800] EXT4-fs (loop6): unmounting filesystem. [ 276.676669][ T7800] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 276.718503][ T7800] EXT4-fs (loop6): I/O error while writing superblock [ 276.730032][ T9521] loop2: detected capacity change from 32768 to 64 [ 276.749681][ T9522] Buffer I/O error on dev loop6, logical block 64, lost sync page write [ 276.844835][ T9549] Aborting journal on device loop2-75. [ 276.851125][ T9549] Buffer I/O error on dev loop2, logical block 640, lost sync page write [ 276.937612][ T9549] JBD2: I/O error when updating journal superblock for loop2-75. [ 277.074605][ T4272] (syz-executor,4272,0):ocfs2_read_locked_inode:554 ERROR: status = -5 [ 277.114338][ T4272] (syz-executor,4272,0):ocfs2_read_locked_inode:554 ERROR: status = -5 [ 277.335606][ T4272] tipc: Resetting bearer [ 277.425554][ T4272] tipc: Disabling bearer [ 277.566896][ T4272] (syz-executor,4272,0):ocfs2_start_trans:381 ERROR: status = -30 [ 277.590252][ T52] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.610414][ T4272] OCFS2: abort (device loop2): handle_t *ocfs2_start_trans(struct ocfs2_super *, int): Detected aborted journal [ 277.652634][ T4272] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 277.675882][ T4272] OCFS2: File system is now read-only. [ 277.698121][ T4272] (syz-executor,4272,0):ocfs2_shutdown_local_alloc:418 ERROR: status = -30 [ 277.752940][ T4272] Buffer I/O error on dev loop2, logical block 17024, lost sync page write [ 277.791260][ T4272] (syz-executor,4272,0):ocfs2_write_block:78 ERROR: status = -5 [ 277.805399][ T52] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.830680][ T4272] (syz-executor,4272,0):ocfs2_update_disk_slot:199 ERROR: status = -5 [ 277.868645][ T9571] loop0: detected capacity change from 0 to 128 [ 277.903155][ T4272] (syz-executor,4272,0):ocfs2_put_slot:517 ERROR: status = -5 [ 277.911552][ T4272] (syz-executor,4272,0):ocfs2_journal_shutdown:1075 ERROR: status = -5 [ 277.955218][ T9571] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 278.000172][ T9571] ext4 filesystem being mounted at /331/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 278.031826][ T4272] ocfs2: Unmounting device (7,2) on (node local) [ 278.133380][ T9575] md: couldn't update array info. -22 [ 278.144269][ T52] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.183092][ T9575] md: could not open device unknown-block(1,0). [ 278.189442][ T9575] md: md_import_device returned -16 [ 278.247589][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 278.282889][ T9580] md: could not open device unknown-block(1,1). [ 278.302530][ T9580] md: md_import_device returned -16 [ 278.321250][ T52] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.359069][ T9575] md: could not open device unknown-block(1,2). [ 278.399468][ T9575] md: md_import_device returned -16 [ 278.449372][ T9583] loop0: detected capacity change from 0 to 1024 [ 278.529165][ T9583] EXT4-fs: Ignoring removed oldalloc option [ 278.566894][ T9583] EXT4-fs: Ignoring removed i_version option [ 278.619426][ T9583] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 278.759415][ T9583] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 278.962993][ T9583] loop0: detected capacity change from 1024 to 0 [ 278.974834][ T9596] md: couldn't update array info. -22 [ 278.990031][ T4289] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 279.001125][ T4289] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 279.010359][ T4289] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 279.025745][ T4289] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 279.035381][ T4289] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 279.043824][ T4276] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 279.084212][ T9596] md: could not open device unknown-block(1,0). [ 279.090557][ T9596] md: md_import_device returned -16 [ 279.159349][ T9598] md: could not open device unknown-block(1,1). [ 279.170894][ T9598] md: md_import_device returned -16 [ 279.182987][ T9596] md: could not open device unknown-block(1,2). [ 279.189282][ T9596] md: md_import_device returned -16 [ 279.222200][ T4271] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /332/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 279.329459][ T4271] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 279.360832][ T4271] EXT4-fs (loop0): I/O error while writing superblock [ 279.396698][ T4271] EXT4-fs error (device loop0): ext4_get_inode_loc:4658: inode #2: block 5: comm syz-executor: unable to read itable block [ 279.462656][ T4271] EXT4-fs (loop0): I/O error while writing superblock [ 279.471977][ T4271] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: IO failure [ 279.503089][ T4271] EXT4-fs (loop0): I/O error while writing superblock [ 279.512753][ T4271] EXT4-fs error (device loop0): ext4_dirty_inode:6166: inode #2: comm syz-executor: mark_inode_dirty error [ 279.572088][ T4271] EXT4-fs (loop0): I/O error while writing superblock [ 279.703530][ T36] EXT4-fs error (device loop0): __ext4_get_inode_loc_noinmem:4643: inode #2: block 5: comm kworker/u4:2: unable to read itable block [ 279.718440][ T4281] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 279.729307][ T4281] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 279.738517][ T4281] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 279.749371][ T4281] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 279.757771][ T4281] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 279.765753][ T4281] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 279.806142][ T36] EXT4-fs (loop0): I/O error while writing superblock [ 279.834335][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 279.843525][ T36] net_ratelimit: 56 callbacks suppressed [ 279.894183][ T4271] EXT4-fs (loop0): I/O error while writing superblock [ 280.113154][ T9609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.174794][ T9608] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1549'. [ 280.951885][ T9591] chnl_net:caif_netlink_parms(): no params data found [ 281.123049][ T4281] Bluetooth: hci1: command 0x0409 tx timeout [ 281.152720][ T126] general protection fault, probably for non-canonical address 0xdffffc0000000013: 0000 [#1] PREEMPT SMP KASAN [ 281.164479][ T126] KASAN: null-ptr-deref in range [0x0000000000000098-0x000000000000009f] [ 281.172905][ T126] CPU: 1 PID: 126 Comm: kworker/1:2 Not tainted syzkaller #0 [ 281.180283][ T126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 281.190352][ T126] Workqueue: kafsd afs_process_async_call [ 281.196086][ T126] RIP: 0010:__mutex_lock+0xe8/0xae0 [ 281.201283][ T126] Code: c0 40 b1 a3 97 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 56 09 00 00 83 3d 55 da 66 0d 00 75 21 48 8d 7b 60 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 6c cb 96 f7 48 39 5b 60 0f 85 d9 08 00 00 [ 281.220881][ T126] RSP: 0018:ffffc90002d97960 EFLAGS: 00010202 [ 281.226939][ T126] RAX: 0000000000000013 RBX: 0000000000000038 RCX: ffffffff97a3b103 [ 281.234903][ T126] RDX: ffff88801cfa223c RSI: ffffffff8a8c2b20 RDI: 0000000000000098 [ 281.242870][ T126] RBP: ffffc90002d97ac0 R08: ffffffff8966d706 R09: 000000000000000b [ 281.250827][ T126] R10: 00000000fffffffb R11: 0000000000000000 R12: dffffc0000000000 [ 281.258797][ T126] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 281.266757][ T126] FS: 0000000000000000(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 281.275691][ T126] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 281.282270][ T126] CR2: 00007f959786da90 CR3: 000000005efa5000 CR4: 00000000003506e0 [ 281.290238][ T126] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 281.298203][ T126] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 281.306164][ T126] Call Trace: [ 281.309431][ T126] [ 281.312379][ T126] ? afs_put_call+0x28b/0x480 [ 281.317072][ T126] ? rcu_is_watching+0x11/0xa0 [ 281.321832][ T126] ? afs_extract_data+0x33e/0x650 [ 281.326844][ T126] ? rxrpc_kernel_abort_call+0x26/0x70 [ 281.332305][ T126] ? mutex_lock_nested+0x10/0x10 [ 281.337242][ T126] ? afs_extract_data+0x33e/0x650 [ 281.342275][ T126] ? afs_send_simple_reply+0x300/0x300 [ 281.347724][ T126] ? iov_iter_kvec+0x4a/0x1f0 [ 281.352393][ T126] rxrpc_kernel_abort_call+0x26/0x70 [ 281.357687][ T126] afs_deliver_to_call+0x6ab/0x1200 [ 281.357991][ C0] virtqueue callback for ffff888019e59600 (ffffffff84767210) [ 281.362877][ T126] ? afs_wait_for_call_to_complete+0xc20/0xc20 [ 281.370271][ C0] virtqueue interrupt with no work for ffff888019e59400 [ 281.376365][ T126] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 281.383273][ C0] virtqueue interrupt with no work for ffff888019e59200 [ 281.389226][ T126] ? __lock_acquire+0x7ea0/0x7ea0 [ 281.401210][ T126] ? read_lock_is_recursive+0x10/0x10 [ 281.406600][ T126] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 281.412515][ T126] ? _raw_spin_unlock+0x40/0x40 [ 281.417369][ T126] afs_process_async_call+0x7e/0xe0 [ 281.422565][ T126] ? process_one_work+0x7b4/0x1160 [ 281.427673][ T126] process_one_work+0x8ab/0x1160 [ 281.432610][ T126] ? worker_detach_from_pool+0x240/0x240 [ 281.438244][ T126] ? _raw_spin_lock_irq+0xb7/0xf0 [ 281.443256][ T126] ? _raw_spin_lock_irqsave+0x100/0x100 [ 281.448789][ T126] ? wq_worker_running+0x97/0x190 [ 281.453799][ T126] worker_thread+0xaf5/0x12a0 [ 281.458475][ T126] kthread+0x29d/0x330 [ 281.462529][ T126] ? worker_clr_flags+0x1a0/0x1a0 [ 281.467545][ T126] ? kthread_blkcg+0xd0/0xd0 [ 281.472127][ T126] ret_from_fork+0x1f/0x30 [ 281.476557][ T126] [ 281.479577][ T126] Modules linked in: [ 281.483529][ C1] virtqueue callback for ffff888026533800 (ffffffff858ab7a0) [ 281.483719][ T9608] kcov: kcov_task_exit: t = ffff88807e2a1e00, kcov->t = ffff88807e2a1e00 [ 281.491017][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff8880732e46d8 is addr:fe80::ac14:140d for cmd:2 at entry:ffff88802a9cdc80 [ 281.502018][ T4716] ieee80211 phy14: mac80211_hwsim_config (freq=2472(2472 - 0)/noht idle=0 ps=0 smps=static) [ 281.513137][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff8880732e46d8 is addr:fe80::ac14:140c for cmd:2 at entry:ffff88802a9cd980 [ 281.523315][ T3653] Added buffer head 0 to ffff888019e59600 [ 281.537080][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff8880732e46d8 is addr:fe80::ac14:14aa for cmd:2 at entry:ffff88802a9cd800 [ 281.556671][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff8880732e46d8 is addr:fe80::ac14:140b for cmd:2 at entry:ffff88802a9cda00 [ 281.564008][ T9609] kcov: kcov_task_exit: t = ffff88802c5ada00, kcov->t = ffff88802c5ada00 [ 281.570547][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff8880732e46d8 is addr:fe80::ac14:140f for cmd:2 at entry:ffff88802a9cd680 [ 281.592766][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff8880732e46d8 is addr:fe80::ac14:140e for cmd:2 at entry:ffff88805502ee80 [ 281.606728][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff8880732e46d8 is addr:fe80::ac14:140a for cmd:2 at entry:ffff88802f837f00 [ 281.619955][ T4259] nf_conntrack: normal packet for ffff888077a04300 [ 281.620572][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff8880732e46d8 is addr:fe80::7f00:1 for cmd:2 at entry:ffff8880302e5d00 [ 281.632487][ T4259] tcp_conntracks: [ 281.640597][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff8880732e46d8 is addr:fe80::f for cmd:2 at entry:ffff8880302e5b80 [ 281.644341][ T4259] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 281.657434][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff8880732e46d8 is addr:172.20.20.15 for cmd:2 at entry:ffff888058d0fd00 [ 281.676373][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff8880732e46d8 is addr:fe80::e for cmd:2 at entry:ffff888030737e80 [ 281.689539][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff8880732e46d8 is addr:172.20.20.14 for cmd:2 at entry:ffff888030737e00 [ 281.702771][ T4592] ieee80211 phy14: mac80211_hwsim_config (freq=2484(2484 - 0)/noht idle=0 ps=0 smps=static) [ 281.703119][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff8880732e46d8 is addr:fe80::a02:11ff:fe00:1 for cmd:2 at entry:ffff88805730a700 [ 281.727810][ C1] No more buffers in queue [ 281.732254][ C1] Receiving skb proto 0x0800 len 108 type 0 [ 281.738218][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 281.744077][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 281.749904][ C1] Receiving skb proto 0x0800 len 108 type 0 [ 281.755840][ C1] No more buffers in queue [ 281.760302][ C1] tcp_conntracks: [ 281.760318][ C1] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 281.766661][ T9631] sock ffff8880747ad400 [ 281.769434][ C1] tcp_conntracks: [ 281.773616][ C1] syn=0 ack=1 fin=1 rst=0 old=3 new=4 [ 281.778271][ T4259] No more buffers in queue [ 281.782728][ C1] tcp_conntracks: [ 281.787131][ T4259] eth0: xmit ffff888076ef1770 42:01:0a:80:00:01 [ 281.787136][ C1] syn=0 ack=1 fin=1 rst=0 old=4 new=6 [ 281.790845][ T4259] Added buffer head 0 to ffff888026533600 [ 281.797073][ C1] virtqueue callback for ffff888026533800 (ffffffff858ab7a0) [ 281.797074][ C0] virtqueue callback for ffff888026533600 (ffffffff858ab890) [ 281.797104][ C1] tcp_conntracks: [ 281.802558][ C0] Sent skb ffff888076ef1770 [ 281.808166][ C1] syn=0 ack=1 fin=1 rst=0 old=6 new=6 [ 281.815543][ C0] No more buffers in queue [ 281.840969][ T126] ---[ end trace 0000000000000000 ]--- [ 281.843370][ C0] nf_conntrack: new packet for ffff88807ab8cd80 [ 281.846718][ C1] No more buffers in queue [ 281.852726][ C0] nf_conntrack: Confirming conntrack ffff88807ab8cd80 [ 281.857102][ C1] Receiving skb proto 0x0800 len 40 type 0 [ 281.863862][ C0] nf_nat: Already setup manip SRC for ct ffff88807ab8cd80 (status bits 0x188) [ 281.869611][ C1] No more buffers in queue [ 281.880907][ T4592] ieee80211 phy14: mac80211_hwsim_config (freq=5180(5180 - 0)/noht idle=0 ps=0 smps=static) [ 281.882901][ C1] tcp_conntracks: [ 281.892995][ C1] syn=0 ack=0 fin=0 rst=1 old=6 new=8 [ 281.893043][ T4281] Bluetooth: hci2: command 0x0409 tx timeout [ 281.908082][ T4281] hci2: err 0x6e [ 281.911678][ T4281] hci2 cmd_cnt 1 cmd queued 3 [ 281.911710][ T126] RIP: 0010:__mutex_lock+0xe8/0xae0 [ 281.916398][ T4281] hci2: skb ffff88802597b280 [ 281.926219][ T4281] hci2 type 1 len 5 [ 281.926835][ T9631] ffff888052c1c000 name hci0 bus 0 [ 281.930182][ C0] nf_nat: Already setup manip DST for ct ffff88807ab8cd80 (status bits 0x188) [ 281.944058][ C0] nf_nat: Already setup manip SRC for ct ffff88807ab8cd80 (status bits 0x188) [ 281.953003][ C0] nf_conntrack: new packet for ffff88807ab8cd80 [ 281.959267][ C0] nf_nat: Already setup manip DST for ct ffff88807ab8cd80 (status bits 0x188) [ 281.966114][ T9631] debugfs: creating file 'hci0' [ 281.968176][ C0] nf_conntrack: new packet for ffff88807ab8cd80 [ 281.973014][ T126] Code: c0 40 b1 a3 97 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 56 09 00 00 83 3d 55 da 66 0d 00 75 21 48 8d 7b 60 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 6c cb 96 f7 48 39 5b 60 0f 85 d9 08 00 00 [ 281.979192][ C0] nf_nat: Already setup manip DST for ct ffff88807ab8cd80 (status bits 0x188) [ 282.022262][ T9631] device: 'hci0': device_add [ 282.029503][ T9631] kobject: 'hci0' (ffff888052c1d7f8): kobject_add_internal: parent: 'bluetooth', set: 'devices' [ 282.046894][ T4259] nf_conntrack: normal packet for ffff888077a04300 [ 282.053455][ T4259] tcp_conntracks: [ 282.053469][ T4259] syn=0 ack=1 fin=0 rst=0 old=8 new=8 [ 282.062481][ T9631] bluetooth hci0: No ACPI support [ 282.062556][ T126] RSP: 0018:ffffc90002d97960 EFLAGS: 00010202 [ 282.067640][ T9631] PM: Adding info for No Bus:hci0 [ 282.073710][ T4259] No more buffers in queue [ 282.079003][ T9631] kobject: 'hci0' (ffff888052c1d7f8): kobject_uevent_env [ 282.083080][ T4259] eth0: xmit ffff88805d96bdc0 42:01:0a:80:00:01 [ 282.083099][ T4259] Added buffer head 14 to ffff888026533a00 [ 282.083128][ C1] virtqueue callback for ffff888026533a00 (ffffffff858ab890) [ 282.083241][ C1] virtqueue callback for ffff888026533800 (ffffffff858ab7a0) [ 282.083519][ C1] Sent skb ffff88805d96bdc0 [ 282.090819][ T3653] nf_conntrack: normal packet for ffff888078f57e00 [ 282.096536][ C1] No more buffers in queue [ 282.102836][ T9631] kobject: 'hci0' (ffff888052c1d7f8): fill_kobj_path: path = '/devices/virtual/bluetooth/hci0' [ 282.110464][ T4722] ieee80211 phy14: mac80211_hwsim_config (freq=5200(5200 - 0)/noht idle=0 ps=0 smps=static) [ 282.119963][ T9631] device: 'rfkill82': device_add [ 282.124513][ T126] RAX: 0000000000000013 RBX: 0000000000000038 RCX: ffffffff97a3b103 [ 282.128371][ T9631] kobject: 'rfkill82' (ffff888025630110): kobject_add_internal: parent: 'hci0', set: 'devices' [ 282.132865][ T4259] nf_conntrack: normal packet for ffff888077a04300 [ 282.143839][ T9631] rfkill rfkill82: No ACPI support [ 282.153156][ T126] RDX: ffff88801cfa223c RSI: ffffffff8a8c2b20 RDI: 0000000000000098 [ 282.158257][ T9631] PM: Adding info for No Bus:rfkill82 [ 282.166632][ T126] RBP: ffffc90002d97ac0 R08: ffffffff8966d706 R09: 000000000000000b [ 282.176466][ T9631] kobject: 'rfkill82' (ffff888025630110): kobject_uevent_env [ 282.183006][ T4259] tcp_conntracks: [ 282.188090][ T9631] kobject: 'rfkill82' (ffff888025630110): fill_kobj_path: path = '/devices/virtual/bluetooth/hci0/rfkill82' [ 282.195939][ T4259] syn=0 ack=1 fin=0 rst=0 old=8 new=8 [ 282.196141][ C1] No more buffers in queue [ 282.203777][ T3653] ffff888052c1c000 name hci0 blocked 0 [ 282.209470][ C1] Receiving skb proto 0x0800 len 40 type 0 [ 282.217049][ T9631] hdev hci0 event 1 [ 282.220499][ C1] No more buffers in queue [ 282.236273][ T9631] hdev 0000000000000000 len 8 [ 282.237374][ C1] tcp_conntracks: [ 282.241733][ T9631] hci0 orig refcnt 4 [ 282.247185][ C1] syn=0 ack=0 fin=0 rst=1 old=8 new=8 [ 282.248523][ T4259] No more buffers in queue [ 282.265945][ T9631] hci0: Register MSFT extension [ 282.269634][ T4259] eth0: xmit ffff88805d867500 42:01:0a:80:00:01 [ 282.273555][ T4281] hci0 [ 282.278881][ T4259] Added buffer head 14 to ffff888026533a00 [ 282.283283][ C1] virtqueue callback for ffff888026533800 (ffffffff858ab7a0) [ 282.283289][ T4281] hci0 ffff888052c1c000 [ 282.283302][ T4281] hci0: [ 282.283306][ C1] virtqueue callback for ffff888026533a00 (ffffffff858ab890) [ 282.283310][ T4281] hci0: Updating devcoredump state from 0 to 0. [ 282.283325][ T4281] hdev hci0 event 7 [ 282.290430][ T126] R10: 00000000fffffffb R11: 0000000000000000 R12: dffffc0000000000 [ 282.294560][ T4281] hci0: [ 282.297269][ T126] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 282.302886][ T4281] hci0: [ 282.310434][ T126] FS: 0000000000000000(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 282.314423][ T4281] hdev hci0 event 9 [ 282.317419][ T126] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 282.324616][ T4281] hci0: [ 282.324632][ T4281] hci0: Opcode 0x0c03 [ 282.331179][ T126] CR2: 00007f66b4ac7e9c CR3: 000000007e4df000 CR4: 00000000003506e0 [ 282.334766][ T4281] hci0: opcode 0x0c03 plen 0 [ 282.345074][ T126] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 282.345656][ T4281] hci0: skb len 3 [ 282.354410][ T4259] nf_conntrack: normal packet for ffff888077a04300 [ 282.356559][ T4281] hci0: length 1 [ 282.365481][ C0] virtqueue callback for ffff888019e59600 (ffffffff84767210) [ 282.365533][ C0] virtqueue interrupt with no work for ffff888019e59400 [ 282.365542][ C0] virtqueue interrupt with no work for ffff888019e59200 [ 282.365941][ C1] wireguard: wg1: Handshake for peer 27 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 17) [ 282.369717][ T3653] Added buffer head 0 to ffff888019e59600 [ 282.376379][ C1] Sent skb ffff88805d867500 [ 282.383122][ T4339] ieee80211 phy14: mac80211_hwsim_config (freq=5220(5220 - 0)/noht idle=0 ps=0 smps=static) [ 282.391064][ C1] No more buffers in queue [ 282.395867][ T9631] debugfs: creating file 'force_suspend' [ 282.403646][ C1] Receiving skb proto 0x0800 len 40 type 0 [ 282.403668][ C1] No more buffers in queue [ 282.403697][ C1] tcp_conntracks: [ 282.403704][ C1] syn=0 ack=0 fin=0 rst=1 old=8 new=8 [ 282.404440][ T4722] nf_conntrack: normal packet for ffff888077a05b00 [ 282.407496][ T9631] debugfs: creating file 'force_wakeup' [ 282.413992][ T4289] hci0 cmd_cnt 1 cmd queued 1 [ 282.418872][ T9631] debugfs: creating file 'msft_opcode' [ 282.424865][ T4289] hci0: skb ffff8880605af3c0 [ 282.435325][ T9631] cmd 400448c9 arg 0 [ 282.438757][ T4289] hci0 type 1 len 3 [ 282.450761][ T4259] tcp_conntracks: [ 282.456089][ T126] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 282.460551][ T4259] syn=0 ack=1 fin=0 rst=0 old=8 new=8 [ 282.470624][ T126] Kernel panic - not syncing: Fatal exception [ 282.475156][ T126] Kernel Offset: disabled [ 282.561872][ T126] Rebooting in 86400 seconds..